In this paper, we present a new DNS amplification attack, named TsuKing. Instead of
exploiting individual DNS resolvers independently to achieve an amplification effect …

DNS can be compared to a game of chess in that its rules are simple, yet the possibilities it
presents are endless. While the fundamental rules of DNS are straightforward, DNS …

With the transition to IPv6, addressing constraints that necessitated a common security
architecture under network address translation (NAT) are no longer present. Instead …

Efficient Internet-wide scanning plays a vital role in network measurement and cybersecurity
analysis. While Internet-wide IPv4 scanning is a solved problem, Internet-wide scanning for …

In this paper, we propose PHOENIX DOMAIN, a general and novel attack that allows
adversaries to maintain the revoked malicious domain continuously resolvable at scale …

Internet measurements are a crucial foundation of IPv6-related research. Due to the
infeasibility of full address space scans for IPv6 however, those measurements rely on …

DNS employs a variety of mechanisms to guarantee availability, protect security, and
enhance reliability. In this paper, however, we reveal that these inherent beneficial …

IPv6 is being more and more adopted, in part to facilitate the millions of smart devices that
have already been installed at home. Unfortunately, we find that the privacy of a substantial …

Internet-wide scanning is a critical tool for security researchers and practitioners alike. By
exhaustively exploring the entire IPv4 address space, Internet scanning has driven the …

In this paper, we report MaginotDNS, a powerful cache poisoning attack against DNS
servers that simultaneously act as forwarder and recursive resolver (termed as CDNS). The …