5 citations · 13 across the 11 of their papers we have counts for
4 papers · 1 filter
LAPRAD: LLM-Assisted PRotocol Attack Discovery
R. Can Aygun, Yehuda Afek, Anat Bremler-Barr +1
With the goal of improving the security of Internet protocols, we seek faster, semi-automatic methods to discover new vulnerabilities in protocols such as DNS, BGP, and others. To…
POPS: From History to Mitigation of DNS Cache Poisoning Attacks
Yehuda Afek, Harel Berger, Anat Bremler-Barr
We present a novel yet simple and comprehensive DNS cache POisoning Prevention System (POPS), designed to integrate as a module in Intrusion Prevention Systems (IPS). POPS addresse…
NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities
Yehuda Afek, Anat Bremler-Barr, Lior Shafir
This paper exposes a new vulnerability and introduces a corresponding attack, the NoneXistent Name Server Attack (NXNSAttack), that disrupts and may paralyze the DNS system, making…
Eradicating Attacks on the Internal Network with Internal Network Policy
Yehuda Afek, Anat Bremler-Barr, Alon Noy
In this paper we present three attacks on private internal networks behind a NAT and a corresponding new protection mechanism, Internal Network Policy, to mitigate a wide range of…