Open DNS resolvers, from bad to worse
Guest Post: 80% of DDoS attacks can be reduced by patching 20% of open DNS resolvers.
Tag: security
The future (and history) of IPSec
Guest Post: IPSec has had issues; is it ready to be deployed to a large-scale multi-vendor network?
ditto prevents traffic-analysis attacks in WANs
Guest Post: New system makes observed traffic metadata independent of the real traffic in Wide Area Networks.
How NAT traversal works — Concerning CGNATs
Guest Post: How to traverse Carrier-Grade NAT.
Tracing the DDoS attack ecosystem from the Internet core
Guest Post: New method observes DDoS intensity by measuring infrastructure involved in attacks using IXPs.
How effective is HTTPS/TLS usage in the consumer IoT ecosystem?
Guest Post: Study shows that most consumer IoT devices rely on TLS 1.2; few have upgraded to TLS 1.3.
How NAT traversal works — NAT notes for nerds
Guest Post: Is 100% NAT traversal success rate achievable?
The Hijackers Guide to the Galaxy: Off-path taking over Internet resources
Guest Post: Are current practices of managing IP addresses, domains, certificates, and virtual platforms insecure?
How NAT traversal works — The nature of NATs
Guest Post: How to navigate a NATty network.
Zero trust applied to 5G cloud infrastructure
Guest Post: Investigating NSA guidance for securing 5G cloud infrastructures.