4 papers
Cleaning the NTP Pool: Detecting and Mitigating NTP-Sourced IPv6 Scanning
Erik Rye, Robert Beverly
The ephemeral and random nature of IPv6 client addresses presents a practical challenge to attacks that depend on Internet-wide scanning or reconnaissance -- the adversary must fir…
On Borrowed Time: Measurement-Informed Understanding of the NTP Pool's Robustness to Monopoly Attacks
Robert Beverly, Erik Rye
Internet services and applications depend critically on the availability and acc uracy of network time. The Network Time Protocol (NTP) is one of the oldest core network protocols…
Where Have All the Firewalls Gone? Security Consequences of Residential IPv6 Transition
Erik Rye, Dave Levin, Robert Beverly
IPv4 NAT has limited the spread of IoT botnets considerably by default-denying bots' incoming connection requests to in-home devices unless the owner has explicitly allowed them. A…
Buy it Now, Track Me Later: Attacking User Privacy via Wi-Fi AP Online Auctions
Steven Su, Erik Rye, Dave Levin +1
Static and hard-coded layer-two network identifiers are well known to present security vulnerabilities and endanger user privacy. In this work, we introduce a new privacy attack ag…