activity
20172022
most citedPadding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS

24 citations · 61 across the 5 of their papers we have counts for

collaborators
Showing cs.CRShow all

7 papers · 1 filter

cs.CR20225 cited

Microarchitectural Leakage Templates and Their Application to Cache-Based Side Channels

Ahmad Ibrahim, Hamed Nemati, Till Schlüter +2

The complexity of modern processor architectures has given rise to sophisticated interactions among their components. Such interactions may result in potential attack vectors in te…

cs.CR202116 cited

Osiris: Automated Discovery of Microarchitectural Side Channels

Daniel Weber, Ahmad Ibrahim, Hamed Nemati +2

In the last years, a series of side channels have been discovered on CPUs. These side channels have been used in powerful attacks, e.g., on cryptographic implementations, or as bui…

cs.CR2021

BGPeek-a-Boo: Active BGP-based Traceback for Amplification DDoS Attacks

Johannes Krupp, Christian Rossow

Amplification DDoS attacks inherently rely on IP spoofing to steer attack traffic to the victim. At the same time, IP spoofing undermines prosecution, as the originating attack inf…

cs.CR201924 cited

Padding Ain't Enough: Assessing the Privacy Guarantees of Encrypted DNS

Jonas Bushart, Christian Rossow

DNS over TLS (DoT) and DNS over HTTPS (DoH) encrypt DNS to guard user privacy by hiding DNS resolutions from passive adversaries. Yet, past attacks have shown that encrypted DNS is…

cs.CR2018

ret2spec: Speculative Execution Using Return Stack Buffers

Giorgi Maisuradze, Christian Rossow

Speculative execution is an optimization technique that has been part of CPUs for over a decade. It predicts the outcome and target of branch instructions to avoid stalling the exe…

cs.CR201812 cited

Speculose: Analyzing the Security Implications of Speculative Execution in CPUs

Giorgi Maisuradze, Christian Rossow

Whenever modern CPUs encounter a conditional branch for which the condition cannot be evaluated yet, they predict the likely branch target and speculatively execute code. Such pipe…