3 papers
cs.CR2025
LAPRAD: LLM-Assisted PRotocol Attack Discovery
R. Can Aygun, Yehuda Afek, Anat Bremler-Barr +1
With the goal of improving the security of Internet protocols, we seek faster, semi-automatic methods to discover new vulnerabilities in protocols such as DNS, BGP, and others. To…
cs.CR2025
POPS: From History to Mitigation of DNS Cache Poisoning Attacks
Yehuda Afek, Harel Berger, Anat Bremler-Barr
We present a novel yet simple and comprehensive DNS cache POisoning Prevention System (POPS), designed to integrate as a module in Intrusion Prevention Systems (IPS). POPS addresse…
cs.NI2024
Decoupling DNS Update Timing from TTL Values
Yehuda Afek, Ariel Litmanovich
A relatively simple safety-belt mechanism for improving DNS system availability and efficiency is proposed here. While it may seem ambitious, a careful examination shows it is both…