activity
20112025
most citedEfficient Distinct Heavy Hitters for DNS DDoS Attack Detection

7 citations · 29 across the 20 of their papers we have counts for

collaborators

23 papers

cs.CR2025

LAPRAD: LLM-Assisted PRotocol Attack Discovery

R. Can Aygun, Yehuda Afek, Anat Bremler-Barr +1

With the goal of improving the security of Internet protocols, we seek faster, semi-automatic methods to discover new vulnerabilities in protocols such as DNS, BGP, and others. To…

cs.CR2025

POPS: From History to Mitigation of DNS Cache Poisoning Attacks

Yehuda Afek, Harel Berger, Anat Bremler-Barr

We present a novel yet simple and comprehensive DNS cache POisoning Prevention System (POPS), designed to integrate as a module in Intrusion Prevention Systems (IPS). POPS addresse…

cs.NI2024

Decoupling DNS Update Timing from TTL Values

Yehuda Afek, Ariel Litmanovich

A relatively simple safety-belt mechanism for improving DNS system availability and efficiency is proposed here. While it may seem ambitious, a careful examination shows it is both…

cs.DC2021★ 1 cited

Distributed Computing With the Cloud

Yehuda Afek, Gal Giladi, Boaz Patt-Shamir

We investigate the effect of omnipresent cloud storage on distributed computing. We specify a network model with links of prescribed bandwidth that connect standard processing node…

cs.DC2020★ 3 cited

Holdout SGD: Byzantine Tolerant Federated Learning

Shahar Azulay, Lior Raz, Amir Globerson +2

This work presents a new distributed Byzantine tolerant federated learning algorithm, HoldOut SGD, for Stochastic Gradient Descent (SGD) optimization. HoldOut SGD uses the well kno…

cs.CR2020★ 5 cited

NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities

Yehuda Afek, Anat Bremler-Barr, Lior Shafir

This paper exposes a new vulnerability and introduces a corresponding attack, the NoneXistent Name Server Attack (NXNSAttack), that disrupts and may paralyze the DNS system, making…