We introduce the area of remote physical device fingerprinting, or fingerprinting a physical
device, as opposed to an operating system or class of devices, remotely, and without the …

Launching a denial of service (DoS) attack is trivial, but detection and response is a painfully
slow and often a manual process. Automatic classification of attacks as single-or multi …

Both the operational and academic security communities have used dynamic analysis
sandboxes to execute malware samples for roughly a decade. Network information derived …

Attackers often use URLs to advertise scams or propagate malware. Because the reputation
of a domain can be used to identify malicious behavior, miscreants often register these …

The Internet is one of the largest and most complex communication and information
exchange networks ever created. Therefore, its dynamics and traffic unsurprisingly take on a …

Network traffic modeling is a fundamental problem in communication. A traffic model should
be able to capture and reproduce various properties of a real trace. Despite the widespread …

This paper analyzes the DNS lookup patterns from a large authoritative top-level domain
server and characterizes how the lookup patterns for unscrupulous domains may differ from …

Denial of Service attacks have become a weapon for extortion and vandalism causing
damages in the millions of dollars to commercial and government sites. Legal prosecution is …

Large complex networks have become an inseparable part of modern society. However,
very little has been done to develop tools to manage and ensure the security of such …

Motivated by our ongoing work exploring an alternative Internet architecture, we wish to
make use of naming services in order to support functionality such as: host and network …