28 citations · 70 across the 16 of their papers we have counts for
16 papers
Locating and Enumerating Anycast: a Comparison of Two Approaches
Remi Hendriks, Tim Betzer, Ben Du +3
Anycast allows for providing services from multiple, geographically distant Points of Presence (PoPs), using a single IP address, to, e.g., improve resilience. Due to its opaquenes…
Spoofer or Spoofers? Estimating a Lower Bound on the Number of DRDoS Sources Using Anycast Honeypots
Bernhard Degen, Bas Palinckx, Mattijs Jonker +2
DDoS attacks remain a significant threat, with distributed reflection denial-of-service (DRDoS) attacks being particularly difficult to trace back to their sources. To better under…
Zombies in Alternate Realities: The Afterlife of Domain Names in DNS Integrations
Sulyab Thottungal Valapu, John Heidemann, Mattijs Jonker +1
DNS integrations leverage the discovery, trust, and uniqueness of the global Domain Name System with a linkage to another naming ecosystem, so the DNS name can help identify resour…
LACeS: An Open, Fast, Responsible, and Efficient Longitudinal Anycast Census System
Remi Hendriks, Matthew Luckie, Mattijs Jonker +2
IP anycast replicates an address at multiple locations to reduce latency and enhance resilience. Due to anycast's crucial role in the modern Internet, earlier research introduced t…
Load-Balancing versus Anycast: A First Look at Operational Challenges
Remi Hendriks, Mattijs Jonker, Roland van Rijswijk-Deij +1
Load Balancing (LB) is a routing strategy that increases performance by distributing traffic over multiple outgoing paths. In this work, we introduce a novel methodology to detect…
ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning
Patrick Sattler, Johannes Zirngibl, Fahad Hilal +4
DNS is one of the cornerstones of the Internet. Nowadays, a substantial fraction of DNS queries are handled by public resolvers (e.g., Google Public DNS and Cisco's OpenDNS) rather…
The Age of DDoScovery: An Empirical Comparison of Industry and Academic DDoS Assessments
Raphael Hiesgen, Marcin Nawrocki, Marinho Barcellos +14
Motivated by the impressive but diffuse scope of DDoS research and reporting, we undertake a multistakeholder (joint industry-academic) analysis to seek convergence across the best…
DarkDNS: Revisiting the Value of Rapid Zone Update
Raffaele Sommese, Gautam Akiwate, Antonia Affinito +3
Malicious actors exploit the DNS namespace to launch spam campaigns, phishing attacks, malware, and other harmful activities. Combating these threats requires visibility into domai…
Packed to the Brim: Investigating the Impact of Highly Responsive Prefixes on Internet-wide Measurement Campaigns
Patrick Sattler, Johannes Zirngibl, Mattijs Jonker +3
Internet-wide scans are an important tool to evaluate the deployment of services. To enable large-scale application layer scans, a fast, stateless port scan (e.g., using ZMap) is o…
This Is a Local Domain: On Amassing Country-Code Top-Level Domains from Public Data
Raffaele Sommese, Roland van Rijswijk-Deij, Mattijs Jonker
Domain lists are a key ingredient for representative censuses of the Web. Unfortunately, such censuses typically lack a view on domains under country-code top-level domains (ccTLDs…
Assessing Network Operator Actions to Enhance Digital Sovereignty and Strengthen Network Resilience: A Longitudinal Analysis during the Russia-Ukraine Conflict
Muhammad Yasir Muzayan Haq, Abhishta Abhishta, Raffaele Sommese +2
We conduct longitudinal and temporal analyses on active DNS measurement data to investigate how the Russia-Ukraine conflict impacted the network infrastructures supporting domain n…
Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy
Enze Liu, Gautam Akiwate, Mattijs Jonker +4
The critical role played by email has led to a range of extension protocols (e.g., SPF, DKIM, DMARC) designed to protect against the spoofing of email sender domains. These protoco…
No Time for Downtime: Understanding Post-Attack Behaviors by Customers of Managed DNS Providers
Muhammad Yasir Muzayan Haq, Mattijs Jonker, Roland van Rijswijk-Deij +3
We leverage large-scale DNS measurement data on authoritative name servers to study the reactions of domain owners affected by the 2016 DDoS attack on Dyn. We use industry sources…
Saving Brian's Privacy: the Perils of Privacy Exposure through Reverse DNS
Olivier van der Toorn, Raffaele Sommese, Anna Sperotto +2
Given the importance of privacy, many Internet protocols are nowadays designed with privacy in mind (e.g., using TLS for confidentiality). Foreseeing all privacy issues at the time…
The Far Side of DNS Amplification: Tracing the DDoS Attack Ecosystem from the Internet Core
Marcin Nawrocki, Mattijs Jonker, Thomas C. Schmidt +1
In this paper, we shed new light on the DNS amplification ecosystem, by studying complementary data sources, bolstered by orthogonal methodologies. First, we introduce a passive at…
Hosting Industry Centralization and Consolidation
Luciano Zembruzki, Raffaele Sommese, Lisandro Zambenedetti Granville +3
There have been growing concerns about the concentration and centralization of Internet infrastructure. In this work, we scrutinize the hosting industry on the Internet by using ac…