N-Tube: Formally verified secure bandwidth reservation in path-aware internet architectures

T Weghorn, S Liu, C Sprenger… - 2022 IEEE 35th …, 2022 - ieeexplore.ieee.org
We present N-Tube, a novel, provably secure, inter-domain bandwidth reservation algorithm
that runs on a network architecture supporting path-based forwarding. N-Tube reserves …

DoCile: Taming Denial-of-Capability Attacks in Inter-Domain Communications

M Wyss, G Giuliari, M Legner… - 2022 IEEE/ACM 30th …, 2022 - ieeexplore.ieee.org
In recent years, much progress has been made in the field of Internet bandwidth reservation
systems. While early designs were neither secure nor scalable, newer proposals promise …

Protecting critical inter-domain communication through flyover reservations

M Wyss, G Giuliari, J Mohler, A Perrig - Proceedings of the 2022 ACM …, 2022 - dl.acm.org
To protect against naturally occurring or adversely induced congestion in the Internet, we
propose the concept of flyover reservations, a fundamentally new approach for addressing …

Hummingbird: A Flexible and Lightweight Inter-Domain Bandwidth-Reservation System

G Giuliari, M Legner, A Perrig, JP Smith… - arXiv preprint arXiv …, 2023 - arxiv.org
The current Internet lacks a bandwidth-reservation infrastructure that enables fine-grained
inter-domain reservations for end hosts. This is hindering the provisioning of quality-of …

Colibri: a cooperative lightweight inter-domain bandwidth-reservation infrastructure

G Giuliari, D Roos, M Wyss, JA García-Pardo… - Proceedings of the 17th …, 2021 - dl.acm.org
Guarantees for traffic traversing the public Internet are hard to come by, as service-level
agreements are typically only available for traffic within a single autonomous system or …

[PDF][PDF] Qualitative and Quantitative Guarantees for Access Control

T Weghorn - 2019 - research-collection.ethz.ch
Since life began spreading on Earth, the distribution of vital resources and their subsequent
safekeeping have led to constant survival conflicts. Even more so in today's technologically …

Zero-setup Intermediate-rate Communication Guarantees in a Global Internet

M Wyss, A Perrig - 33rd USENIX Security Symposium (USENIX Security …, 2024 - usenix.org
Network-targeting volumetric DDoS attacks remain a major threat to Internet communication.
Unfortunately, existing solutions fall short of providing forwarding guarantees to the …

SIBRA: Scalable internet bandwidth reservation architecture

C Basescu, RM Reischuk, P Szalachowski… - arXiv preprint arXiv …, 2015 - arxiv.org
This paper proposes a Scalable Internet Bandwidth Reservation Architecture (SIBRA) as a
new approach against DDoS attacks, which, until now, continue to be a menace on today's …

STRIDE: sanctuary trail--refuge from internet DDoS entrapment

HC Hsiao, THJ Kim, S Yoo, X Zhang, SB Lee… - Proceedings of the 8th …, 2013 - dl.acm.org
We propose STRIDE, a new DDoS-resilient Internet architecture that isolates attack traffic
through viable bandwidth allocation, preventing a botnet from crowding out legitimate flows …

Security, anonymity, privacy, and trust

S Scherrer, A Perrig - … Networks, Services and Management: Underlay and …, 2021 - Springer
In order to guarantee secure operation of Network 2030s inter-domain infrastructure, we
pursue a systematic design approach in this chapter. This systematic approach starts with …