128 citations · 300 across the 14 of their papers we have counts for
15 papers
Scanning the IPv6 Internet Using Subnet-Router Anycast Probing
Maynard Koch, Raphael Hiesgen, Marcin Nawrocki +2
Identifying active IPv6 addresses is challenging. Various methods emerged to master the measurement challenge in this huge address space, including hitlists, new probing techniques…
ReACKed QUICer: Measuring the Performance of Instant Acknowledgments in QUIC Handshakes
Jonas Mücke, Marcin Nawrocki, Raphael Hiesgen +2
In this paper, we present a detailed performance analysis of QUIC instant ACK, a standard-compliant approach to reduce waiting times during the QUIC connection setup in common CDN…
The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments
Raphael Hiesgen, Marcin Nawrocki, Marinho Barcellos +14
Motivated by the impressive but diffuse scope of DDoS research and reporting, we undertake a multistakeholder (joint industry-academic) analysis to seek convergence across the best…
Pool Inference Attacks on Local Differential Privacy: Quantifying the Privacy Guarantees of Apple's Count Mean Sketch in Practice
Andrea Gadotti, Florimond Houssiau, Meenatchi Sundaram Muthu Selva Annamalai +1
Behavioral data generated by users' devices, ranging from emoji use to pages visited, are collected at scale to improve apps and services. These data, however, contain fine-grained…
SoK: A Data-driven View on Methods to Detect Reflective Amplification DDoS Attacks Using Honeypots
Marcin Nawrocki, John Kristoff, Raphael Hiesgen +3
In this paper, we revisit the use of honeypots for detecting reflective amplification attacks. These measurement tools require careful design of both data collection and data analy…
On the Interplay between TLS Certificates and QUIC Performance
Marcin Nawrocki, Pouyan Fotouhi Tehrani, Raphael Hiesgen +3
In this paper, we revisit the performance of the QUIC connection setup and relate the design choices for fast and secure connections to common Web deployments. We analyze over 1M W…
Waiting for QUIC: Passive Measurements to Understand QUIC Deployments
Jonas Mücke, Marcin Nawrocki, Raphael Hiesgen +6
QUIC experiences a rapid adoption since its standardization in 2021, and hypergiants configure their infrastructure to optimize for QUIC performance. In this paper, we introduce a…
Securing name resolution in the IoT: DNS over CoAP
Martine S. Lenders, Christian Amsüss, Cenk Gündogan +3
In this paper, we present the design, implementation, and analysis of DNS over CoAP (DoC), a new proposal for secure and privacy-friendly name resolution of constrained IoT devices…
The Race to the Vulnerable: Measuring the Log4j Shell Incident
Raphael Hiesgen, Marcin Nawrocki, Thomas C. Schmidt +1
The critical remote-code-execution (RCE) Log4Shell is a severe vulnerability that was disclosed to the public on December 10, 2021. It exploits a bug in the wide-spread Log4j libra…
Transparent Forwarders: An Unnoticed Component of the Open DNS Infrastructure
Marcin Nawrocki, Maynard Koch, Thomas C. Schmidt +1
In this paper, we revisit the open DNS (ODNS) infrastructure and, for the first time, systematically measure and analyze transparent forwarders, DNS components that transparently r…
Spoki: Unveiling a New Wave of Scanners through a Reactive Network Telescope
Raphael Hiesgen, Marcin Nawrocki, Alistair King +3
Large-scale Internet scans are a common method to identify victims of a specific attack. Stateless scanning like in ZMap has been established as an efficient approach to probing at…
The Far Side of DNS Amplification: Tracing the DDoS Attack Ecosystem from the Internet Core
Marcin Nawrocki, Mattijs Jonker, Thomas C. Schmidt +1
In this paper, we shed new light on the DNS amplification ecosystem, by studying complementary data sources, bolstered by orthogonal methodologies. First, we introduce a passive at…
QUICsand: Quantifying QUIC Reconnaissance Scans and DoS Flooding Events
Marcin Nawrocki, Raphael Hiesgen, Thomas C. Schmidt +1
In this paper, we present first measurements of Internet background radiation originating from the emerging transport protocol QUIC. Our analysis is based on the UCSD network teles…
Uncovering Vulnerable Industrial Control Systems from the Internet Core
Marcin Nawrocki, Thomas C. Schmidt, Matthias Wählisch
Industrial control systems (ICS) are managed remotely with the help of dedicated protocols that were originally designed to work in walled gardens. Many of these protocols have bee…
A Survey on Honeypot Software and Data Analysis
Marcin Nawrocki, Matthias Wählisch, Thomas C. Schmidt +2
In this survey, we give an extensive overview on honeypots. This includes not only honeypot software but also methodologies to analyse honeypot data.