21 citations · 88 across the 10 of their papers we have counts for
10 papers
From IP to transport and beyond: cross-layer attacks against applications
Tianxiang Dai, Philipp Jeitner, Haya Shulman +1
We perform the first analysis of methodologies for launching DNS cache poisoning: manipulation at the IP layer, hijack of the inter-domain routing and probing open ports via side c…
The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet Resources
Tianxiang Dai, Philipp Jeitner, Haya Shulman +1
Internet resources form the basic fabric of the digital society. They provide the fundamental platform for digital services and assets, e.g., for critical infrastructures, financia…
Poster: The Unintended Consequences of Algorithm Agility in DNSSEC
Elias Heftrig, Haya Shulman, Michael Waidner
Cryptographic algorithm agility is an important property for DNSSEC: it allows easy deployment of new algorithms if the existing ones are no longer secure. In this work we show tha…
Secure Consensus Generation with Distributed DoH
Philipp Jeitner, Haya Shulman, Michael Waidner
Many applications and protocols depend on the ability to generate a pool of servers to conduct majority-based consensus mechanisms and often this is done by doing plain DNS queries…
Pitfalls of Provably Secure Systems in Internet The Case of Chronos-NTP
Philipp Jeitner, Haya Shulman, Michael Waidner
The critical role that Network Time Protocol (NTP) plays in the Internet led to multiple efforts to secure it against time-shifting attacks. A recent proposal for enhancing the sec…
SMap: Internet-wide Scanning for Spoofing
Tianxiang Dai, Haya Shulman
To protect themselves from attacks, networks need to enforce ingress filtering, i.e., block inbound packets sent from spoofed IP addresses. Although this is a widely known best pra…
Ethical Considerations when Employing Fake Identities in OSN for Research
Yuval Elovici, Michael Fire, Amir Herzberg +1
Online Social Networks (OSNs) have rapidly become a prominent and widely used service, offering a wealth of personal and sensitive information with significant security and privacy…
Unilateral Antidotes to DNS Cache Poisoning
Amir Herzberg, Haya Shulman
We investigate defenses against DNS cache poisoning focusing on mechanisms that can be readily deployed unilaterally by the resolving organisation, preferably in a single gateway o…
Fragmentation Considered Poisonous
Amir Herzberg, Haya Shulman
We present practical poisoning and name-server block- ing attacks on standard DNS resolvers, by off-path, spoofing adversaries. Our attacks exploit large DNS responses that cause I…
Stealth-MITM DoS Attacks on Secure Channels
Amir Herzberg, Haya Shulman
We define stealth Man-in-the-Middle adversaries, and analyse their ability to launch denial and degradation of service (DoS) attacks on secure channels. We show realistic attacks,…