activity
20202023
most citedFrom IP to transport and beyond: cross-layer attacks against applications

15 citations · 60 across the 8 of their papers we have counts for

collaborators

9 papers

cs.NI2023★ 4 cited

Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet

Tomas Hlavacek, Haya Shulman, Niklas Vogel +1

IP prefix hijacks allow adversaries to redirect and intercept traffic, posing a threat to the stability and security of the Internet. To prevent prefix hijacks, networks should dep…

cs.CR2022★ 4 cited

XDRI Attacks - and - How to Enhance Resilience of Residential Routers

Philipp Jeitner, Haya Shulman, Lucas Teichmann +1

We explore the security of residential routers and find a range of critical vulnerabilities. Our evaluations show that 10 out of 36 popular routers are vulnerable to injections of…

cs.CR2022★ 15 cited

From IP to transport and beyond: cross-layer attacks against applications

Tianxiang Dai, Philipp Jeitner, Haya Shulman +1

We perform the first analysis of methodologies for launching DNS cache poisoning: manipulation at the IP layer, hijack of the inter-domain routing and probing open ports via side c…

cs.CR2022★ 7 cited

The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet Resources

Tianxiang Dai, Philipp Jeitner, Haya Shulman +1

Internet resources form the basic fabric of the digital society. They provide the fundamental platform for digital services and assets, e.g., for critical infrastructures, financia…

cs.CR2022★ 6 cited

Poster: The Unintended Consequences of Algorithm Agility in DNSSEC

Elias Heftrig, Haya Shulman, Michael Waidner

Cryptographic algorithm agility is an important property for DNSSEC: it allows easy deployment of new algorithms if the existing ones are no longer secure. In this work we show tha…

cs.CR2021

The Master and Parasite Attack

Lukas Baumann, Elias Heftrig, Haya Shulman +1

We explore a new type of malicious script attacks: the persistent parasite attack. Persistent parasites are stealthy scripts, which persist for a long time in the browser's cache.…