activity
20212026
most citedThe Far Side of DNS Amplification: Tracing the DDoS Attack Ecosystem from the Internet Core

28 citations · 38 across the 6 of their papers we have counts for

collaborators
Showing cs.NIShow all

8 papers · 1 filter

cs.NI2026

Spoofer or Spoofers? Estimating a Lower Bound on the Number of DRDoS Sources Using Anycast Honeypots

Bernhard Degen, Bas Palinckx, Mattijs Jonker +2

DDoS attacks remain a significant threat, with distributed reflection denial-of-service (DRDoS) attacks being particularly difficult to trace back to their sources. To better under…

cs.NI2025

LACeS: An Open, Fast, Responsible, and Efficient Longitudinal Anycast Census System

Remi Hendriks, Matthew Luckie, Mattijs Jonker +2

IP anycast replicates an address at multiple locations to reduce latency and enhance resilience. Due to anycast's crucial role in the modern Internet, earlier research introduced t…

cs.NI2025

Load-Balancing versus Anycast: A First Look at Operational Challenges

Remi Hendriks, Mattijs Jonker, Roland van Rijswijk-Deij +1

Load Balancing (LB) is a routing strategy that increases performance by distributing traffic over multiple outgoing paths. In this work, we introduce a novel methodology to detect…

cs.NI2024

ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning

Patrick Sattler, Johannes Zirngibl, Fahad Hilal +4

DNS is one of the cornerstones of the Internet. Nowadays, a substantial fraction of DNS queries are handled by public resolvers (e.g., Google Public DNS and Cisco's OpenDNS) rather…

cs.NI2024

DarkDNS: Revisiting the Value of Rapid Zone Update

Raffaele Sommese, Gautam Akiwate, Antonia Affinito +3

Malicious actors exploit the DNS namespace to launch spam campaigns, phishing attacks, malware, and other harmful activities. Combating these threats requires visibility into domai…

cs.NI202310 cited

Packed to the Brim: Investigating the Impact of Highly Responsive Prefixes on Internet-wide Measurement Campaigns

Patrick Sattler, Johannes Zirngibl, Mattijs Jonker +3

Internet-wide scans are an important tool to evaluate the deployment of services. To enable large-scale application layer scans, a fast, stateless port scan (e.g., using ZMap) is o…