A comprehensive survey of recent internet measurement techniques for cyber security

MS Pour, C Nader, K Friday, E Bou-Harb - Computers & Security, 2023 - Elsevier
As the Internet has transformed into a critical infrastructure, society has become more
vulnerable to its security flaws. Despite substantial efforts to address many of these …

A review of amplification-based distributed denial of service attacks and their mitigation

S Ismail, HR Hassen, M Just, H Zantout - Computers & Security, 2021 - Elsevier
Abstract The rise of Distributed Denial of Service (DDoS) attacks have been steady in terms
of the frequency and the impact of the attack. Traditionally, the attackers required control of a …

ADAM: an adaptive DDoS attack mitigation scheme in software-defined cyber-physical system

T Cai, T Jia, S Adepu, Y Li… - IEEE Transactions on …, 2023 - ieeexplore.ieee.org
With the widespread innovation of the Internet of Things, software-defined networking
(SDN), and cloud computing, cyber-physical systems (CPSs) have been developed and …

TsuKing: Coordinating DNS Resolvers and Queries into Potent DoS Amplifiers

W Xu, X Li, C Lu, B Liu, H Duan, J Zhang… - Proceedings of the …, 2023 - dl.acm.org
In this paper, we present a new DNS amplification attack, named TsuKing. Instead of
exploiting individual DNS resolvers independently to achieve an amplification effect …

{AddrMiner}: A Comprehensive Global Active {IPv6} Address Discovery System

G Song, J Yang, L He, Z Wang, G Li, C Duan… - 2022 USENIX Annual …, 2022 - usenix.org
Fast Internet-wide scanning is essential for network situational awareness and asset
evaluation. However, the vast IPv6 address space makes brute-force scanning infeasible …

The far side of DNS amplification: tracing the DDoS attack ecosystem from the internet core

M Nawrocki, M Jonker, TC Schmidt… - Proceedings of the 21st …, 2021 - dl.acm.org
In this paper, we shed new light on the DNS amplification ecosystem, by studying
complementary data sources, bolstered by orthogonal methodologies. First, we introduce a …

Your router is my prober: Measuring ipv6 networks via icmp rate limiting side channels

L Pan, J Yang, L He, Z Wang, L Nie, G Song… - arxiv preprint arxiv …, 2022 - arxiv.org
Active Internet measurements face challenges when some measurements require many
remote vantage points. In this paper, we propose a novel technique for measuring remote …

Ten years of zmap

Z Durumeric, D Adrian, P Stephens, E Wustrow… - Proceedings of the …, 2024 - dl.acm.org
Since ZMap's debut in 2013, networking and security researchers have used the open-
source scanner to write hundreds of research papers that study Internet behavior. In …

{ResolverFuzz}: Automated Discovery of {DNS} Resolver Vulnerabilities with {Query-Response} Fuzzing

Q Zhang, X Bai, X Li, H Duan, Q Li, Z Li - 33rd USENIX Security …, 2024 - usenix.org
Domain Name System (DNS) is a critical component of the Internet. DNS resolvers, which
act as the cache between DNS clients and DNS nameservers, are the central piece of the …

{AmpFuzz}: Fuzzing for amplification {DDoS} vulnerabilities

J Krupp, I Grishchenko, C Rossow - 31st USENIX Security Symposium …, 2022 - usenix.org
Amplification DDoS attacks remain a prevalent and serious threat to the Internet, with recent
attacks reaching the Tbps range. However, all amplification attack vectors known to date …