Passive and Active Network Measurement Conference最新文献

筛选
英文 中文
WHOIS Right? An Analysis of WHOIS and RDAP Consistency WHOIS 正确吗?WHOIS 和 RDAP 一致性分析
Passive and Active Network Measurement Conference Pub Date : 2024-06-04 DOI: 10.1007/978-3-031-56249-5_9
Simon Fernandez, Olivier Hureau, Andrzej Duda, Maciej Korczyński
{"title":"WHOIS Right? An Analysis of WHOIS and RDAP Consistency","authors":"Simon Fernandez, Olivier Hureau, Andrzej Duda, Maciej Korczyński","doi":"10.1007/978-3-031-56249-5_9","DOIUrl":"https://doi.org/10.1007/978-3-031-56249-5_9","url":null,"abstract":"","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"8 6","pages":"206-231"},"PeriodicalIF":0.0,"publicationDate":"2024-06-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141267681","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
SunBlock: Cloudless Protection for IoT Systems SunBlock:为物联网系统提供无云保护
Passive and Active Network Measurement Conference Pub Date : 2024-01-25 DOI: 10.48550/arXiv.2401.14332
Vadim Safronov, A. Mandalari, Daniel J. Dubois, D. Choffnes, Hamed Haddadi
{"title":"SunBlock: Cloudless Protection for IoT Systems","authors":"Vadim Safronov, A. Mandalari, Daniel J. Dubois, D. Choffnes, Hamed Haddadi","doi":"10.48550/arXiv.2401.14332","DOIUrl":"https://doi.org/10.48550/arXiv.2401.14332","url":null,"abstract":"With an increasing number of Internet of Things (IoT) devices present in homes, there is a rise in the number of potential information leakage channels and their associated security threats and privacy risks. Despite a long history of attacks on IoT devices in unprotected home networks, the problem of accurate, rapid detection and prevention of such attacks remains open. Many existing IoT protection solutions are cloud-based, sometimes ineffective, and might share consumer data with unknown third parties. This paper investigates the potential for effective IoT threat detection locally, on a home router, using AI tools combined with classic rule-based traffic-filtering algorithms. Our results show that with a slight rise of router hardware resources caused by machine learning and traffic filtering logic, a typical home router instrumented with our solution is able to effectively detect risks and protect a typical home IoT network, equaling or outperforming existing popular solutions, without any effects on benign IoT functionality, and without relying on cloud services and third parties.","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"10 1","pages":"322-338"},"PeriodicalIF":0.0,"publicationDate":"2024-01-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140495891","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Data Augmentation for Traffic Classification 用于交通分类的数据增强
Passive and Active Network Measurement Conference Pub Date : 2024-01-19 DOI: 10.48550/arXiv.2401.10754
Chao Wang, A. Finamore, Pietro Michiardi, Massimo Gallo, Dario Rossi
{"title":"Data Augmentation for Traffic Classification","authors":"Chao Wang, A. Finamore, Pietro Michiardi, Massimo Gallo, Dario Rossi","doi":"10.48550/arXiv.2401.10754","DOIUrl":"https://doi.org/10.48550/arXiv.2401.10754","url":null,"abstract":"Data Augmentation (DA) -- enriching training data by adding synthetic samples -- is a technique widely adopted in Computer Vision (CV) and Natural Language Processing (NLP) tasks to improve models performance. Yet, DA has struggled to gain traction in networking contexts, particularly in Traffic Classification (TC) tasks. In this work, we fulfill this gap by benchmarking 18 augmentation functions applied to 3 TC datasets using packet time series as input representation and considering a variety of training conditions. Our results show that (i) DA can reap benefits previously unexplored, (ii) augmentations acting on time series sequence order and masking are better suited for TC than amplitude augmentations and (iii) basic models latent space analysis can help understanding the positive/negative effects of augmentations on classification performance.","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"393 4-6","pages":"159-186"},"PeriodicalIF":0.0,"publicationDate":"2024-01-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140502394","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
How Ready Is DNS for an IPv6-Only World? ipv6世界的DNS准备好了吗?
Passive and Active Network Measurement Conference Pub Date : 2023-02-22 DOI: 10.48550/arXiv.2302.11393
Florian Streibelt, Patrick Sattler, F. Lichtblau, Carlos H. Gan'an, A. Feldmann, Oliver Gasser, T. Fiebig
{"title":"How Ready Is DNS for an IPv6-Only World?","authors":"Florian Streibelt, Patrick Sattler, F. Lichtblau, Carlos H. Gan'an, A. Feldmann, Oliver Gasser, T. Fiebig","doi":"10.48550/arXiv.2302.11393","DOIUrl":"https://doi.org/10.48550/arXiv.2302.11393","url":null,"abstract":"DNS is one of the core building blocks of the Internet. In this paper, we investigate DNS resolution in a strict IPv6-only scenario and find that a substantial fraction of zones cannot be resolved. We point out, that the presence of an AAAA resource record for a zone's nameserver does not necessarily imply that it is resolvable in an IPv6-only environment since the full DNS delegation chain must resolve via IPv6 as well. Hence, in an IPv6-only setting zones may experience an effect similar to what is commonly referred to as lame delegation. Our longitudinal study shows that the continuing centralization of the Internet has a large impact on IPv6 readiness, i.e., a small number of large DNS providers has, and still can, influence IPv6 readiness for a large number of zones. A single operator that enabled IPv6 DNS resolution -- by adding IPv6 glue records -- was responsible for around 20.3% of all zones in our dataset not resolving over IPv6 until January 2017. Even today, 10% of DNS operators are responsible for more than 97.5% of all zones that do not resolve using IPv6.","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"2008 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127312939","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Characterizing the VPN Ecosystem in the Wild 野外VPN生态系统的特征
Passive and Active Network Measurement Conference Pub Date : 2023-02-13 DOI: 10.48550/arXiv.2302.06566
Aniss Maghsoudlou, Lukas Vermeulen, Ingmar Poese, Oliver Gasser
{"title":"Characterizing the VPN Ecosystem in the Wild","authors":"Aniss Maghsoudlou, Lukas Vermeulen, Ingmar Poese, Oliver Gasser","doi":"10.48550/arXiv.2302.06566","DOIUrl":"https://doi.org/10.48550/arXiv.2302.06566","url":null,"abstract":"With the shift to working remotely after the COVID-19 pandemic, the use of Virtual Private Networks (VPNs) around the world has nearly doubled. Therefore, measuring the traffic and security aspects of the VPN ecosystem is more important now than ever. It is, however, challenging to detect and characterize VPN traffic since some VPN protocols use the same port number as web traffic and port-based traffic classification will not help. VPN users are also concerned about the vulnerabilities of their VPN connections due to privacy issues. In this paper, we aim at detecting and characterizing VPN servers in the wild, which facilitates detecting the VPN traffic. To this end, we perform Internet-wide active measurements to find VPN servers in the wild, and characterize them based on their vulnerabilities, certificates, locations, and fingerprinting. We find 9.8M VPN servers distributed around the world using OpenVPN, SSTP, PPTP, and IPsec, and analyze their vulnerability. We find SSTP to be the most vulnerable protocol with more than 90% of detected servers being vulnerable to TLS downgrade attacks. Of all the servers that respond to our VPN probes, 2% also respond to HTTP probes and therefore are classified as Web servers. We apply our list of VPN servers to the traffic from a large European ISP and observe that 2.6% of all traffic is related to these VPN servers.","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128168598","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Exploring the Cookieverse: A Multi-Perspective Analysis of Web Cookies 探索cookie世界:对Web cookie的多角度分析
Passive and Active Network Measurement Conference Pub Date : 2023-02-10 DOI: 10.48550/arXiv.2302.05353
Ali Rasaii, Shivani Singh, D. Gosain, Oliver Gasser
{"title":"Exploring the Cookieverse: A Multi-Perspective Analysis of Web Cookies","authors":"Ali Rasaii, Shivani Singh, D. Gosain, Oliver Gasser","doi":"10.48550/arXiv.2302.05353","DOIUrl":"https://doi.org/10.48550/arXiv.2302.05353","url":null,"abstract":"Web cookies have been the subject of many research studies over the last few years. However, most existing research does not consider multiple crucial perspectives that can influence the cookie landscape, such as the client's location, the impact of cookie banner interaction, and from which operating system a website is being visited. In this paper, we conduct a comprehensive measurement study to analyze the cookie landscape for Tranco top-10k websites from different geographic locations and analyze multiple different perspectives. One important factor which influences cookies is the use of cookie banners. We develop a tool, BannerClick, to automatically detect, accept, and reject cookie banners with an accuracy of 99%, 97%, and 87%, respectively. We find banners to be 56% more prevalent when visiting websites from within the EU region. Moreover, we analyze the effect of banner interaction on different types of cookies (i.e., first-party, third-party, and tracking). For instance, we observe that websites send, on average, 5.5x more third-party cookies after clicking ``accept'', underlining that it is critical to interact with banners when performing Web measurements. Additionally, we analyze statistical consistency, evaluate the widespread deployment of consent management platforms, compare landing to inner pages, and assess the impact of visiting a website on a desktop compared to a mobile phone. Our study highlights that all of these factors substantially impact the cookie landscape, and thus a multi-perspective approach should be taken when performing Web measurement studies.","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"133 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133579916","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 6
Quantifying User Password Exposure to Third-Party CDNs 量化用户密码对第三方cdn的暴露
Passive and Active Network Measurement Conference Pub Date : 2023-01-09 DOI: 10.48550/arXiv.2301.03690
Rui Xin, Shih-Yi Lin, Xiaowei Yang
{"title":"Quantifying User Password Exposure to Third-Party CDNs","authors":"Rui Xin, Shih-Yi Lin, Xiaowei Yang","doi":"10.48550/arXiv.2301.03690","DOIUrl":"https://doi.org/10.48550/arXiv.2301.03690","url":null,"abstract":"Web services commonly employ Content Distribution Networks (CDNs) for performance and security. As web traffic is becoming 100% HTTPS, more and more websites allow CDNs to terminate their HTTPS connections. This practice may expose a website's user sensitive information such as a user's login password to a third-party CDN. In this paper, we measure and quantify the extent of user password exposure to third-party CDNs. We find that among Alexa top 50K websites, at least 12,451 of them use CDNs and contain user login entrances. Among those websites, 33% of them expose users' passwords to the CDNs, and a popular CDN may observe passwords from more than 40% of its customers. This result suggests that if a CDN infrastructure has a vulnerability or an insider attack, many users' accounts will be at risk. If we assume the attacker is a passive eavesdropper, a website can avoid this vulnerability by encrypting users' passwords in HTTPS connections. Our measurement shows that less than 17% of the websites adopt this countermeasure.","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-01-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128459952","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Back-to-the-Future Whois: An IP Address Attribution Service for Working with Historic Datasets 回到未来的Whois:用于处理历史数据集的IP地址归属服务
Passive and Active Network Measurement Conference Pub Date : 2022-11-12 DOI: 10.1007/978-3-031-28486-1_10
Florian Streibelt, Martina Lindorfer, Seda F. Gürses, Carlos H. Gan'an, T. Fiebig
{"title":"Back-to-the-Future Whois: An IP Address Attribution Service for Working with Historic Datasets","authors":"Florian Streibelt, Martina Lindorfer, Seda F. Gürses, Carlos H. Gan'an, T. Fiebig","doi":"10.1007/978-3-031-28486-1_10","DOIUrl":"https://doi.org/10.1007/978-3-031-28486-1_10","url":null,"abstract":"","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"47 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133857895","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 4
Early Detection of Spam Domains with Passive DNS and SPF 基于被动DNS和SPF的垃圾域名早期检测
Passive and Active Network Measurement Conference Pub Date : 2022-05-04 DOI: 10.1007/978-3-030-98785-5_2
Simon Fernandez, Maciej Korczyński, A. Duda
{"title":"Early Detection of Spam Domains with Passive DNS and SPF","authors":"Simon Fernandez, Maciej Korczyński, A. Duda","doi":"10.1007/978-3-030-98785-5_2","DOIUrl":"https://doi.org/10.1007/978-3-030-98785-5_2","url":null,"abstract":"","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"102 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-05-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124086812","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
One to Rule them All? A First Look at DNS over QUIC 一人统治众民?通过QUIC了解DNS
Passive and Active Network Measurement Conference Pub Date : 2022-02-07 DOI: 10.1007/978-3030-98785-5_24
Mike Kosek, T. Doan, Malte Granderath, Vaibhav Bajpai
{"title":"One to Rule them All? A First Look at DNS over QUIC","authors":"Mike Kosek, T. Doan, Malte Granderath, Vaibhav Bajpai","doi":"10.1007/978-3030-98785-5_24","DOIUrl":"https://doi.org/10.1007/978-3030-98785-5_24","url":null,"abstract":"","PeriodicalId":103587,"journal":{"name":"Passive and Active Network Measurement Conference","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-02-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127293025","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 15
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信