26 citations · 78 across the 11 of their papers we have counts for
5 papers · 1 filter
Unilateral Antidotes to DNS Cache Poisoning
Amir Herzberg, Haya Shulman
We investigate defenses against DNS cache poisoning focusing on mechanisms that can be readily deployed unilaterally by the resolving organisation, preferably in a single gateway o…
TCP Injections for Fun and Clogging
Yossi Gilad, Amir Herzberg
We present a new type of clogging DoS attacks, with the highest amplification factors achieved by off-path attackers, using only puppets, i.e., sandboxed malware on victim machines…
Security of Patched DNS
Amir Herzberg, Haya Shulman
In spite of the availability of DNSSEC, which protects against cache poisoning even by MitM attackers, many caching DNS resolvers still rely for their security against poisoning on…
Fragmentation Considered Poisonous
Amir Herzberg, Haya Shulman
We present practical poisoning and name-server block- ing attacks on standard DNS resolvers, by off-path, spoofing adversaries. Our attacks exploit large DNS responses that cause I…
Off-Path Attacking the Web
Yossi Gilad, Amir Herzberg
We show how an off-path (spoofing-only) attacker can perform cross-site scripting (XSS), cross-site request forgery (CSRF) and site spoofing/defacement attacks, without requiring v…