15 citations · 60 across the 8 of their papers we have counts for
9 papers
Keep Your Friends Close, but Your Routeservers Closer: Insights into RPKI Validation in the Internet
Tomas Hlavacek, Haya Shulman, Niklas Vogel +1
IP prefix hijacks allow adversaries to redirect and intercept traffic, posing a threat to the stability and security of the Internet. To prevent prefix hijacks, networks should dep…
XDRI Attacks - and - How to Enhance Resilience of Residential Routers
Philipp Jeitner, Haya Shulman, Lucas Teichmann +1
We explore the security of residential routers and find a range of critical vulnerabilities. Our evaluations show that 10 out of 36 popular routers are vulnerable to injections of…
From IP to transport and beyond: cross-layer attacks against applications
Tianxiang Dai, Philipp Jeitner, Haya Shulman +1
We perform the first analysis of methodologies for launching DNS cache poisoning: manipulation at the IP layer, hijack of the inter-domain routing and probing open ports via side c…
The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet Resources
Tianxiang Dai, Philipp Jeitner, Haya Shulman +1
Internet resources form the basic fabric of the digital society. They provide the fundamental platform for digital services and assets, e.g., for critical infrastructures, financia…
Poster: The Unintended Consequences of Algorithm Agility in DNSSEC
Elias Heftrig, Haya Shulman, Michael Waidner
Cryptographic algorithm agility is an important property for DNSSEC: it allows easy deployment of new algorithms if the existing ones are no longer secure. In this work we show tha…
The Master and Parasite Attack
Lukas Baumann, Elias Heftrig, Haya Shulman +1
We explore a new type of malicious script attacks: the persistent parasite attack. Persistent parasites are stealthy scripts, which persist for a long time in the browser's cache.…
The Impact of DNS Insecurity on Time
Philipp Jeitner, Haya Shulman, Michael Waidner
We demonstrate the first practical off-path time shifting attacks against NTP as well as against Man-in-the-Middle (MitM) secure Chronos-enhanced NTP. Our attacks exploit the insec…
Secure Consensus Generation with Distributed DoH
Philipp Jeitner, Haya Shulman, Michael Waidner
Many applications and protocols depend on the ability to generate a pool of servers to conduct majority-based consensus mechanisms and often this is done by doing plain DNS queries…
Pitfalls of Provably Secure Systems in Internet The Case of Chronos-NTP
Philipp Jeitner, Haya Shulman, Michael Waidner
The critical role that Network Time Protocol (NTP) plays in the Internet led to multiple efforts to secure it against time-shifting attacks. A recent proposal for enhancing the sec…