Network measurement methods for locating and examining censorship devices
Advances in networking and firewall technology have led to the emergence of network
censorship devices that can perform large-scale, highly-performant content blocking. While …
censorship devices that can perform large-scale, highly-performant content blocking. While …
TSPU: Russia's decentralized censorship system
D Xue, B Mixon-Baca, ValdikSS, A Ablove… - Proceedings of the …, 2022 - dl.acm.org
Russia's Sovereign RuNet was designed to build a Russian national firewall. Previous
anecdotes and isolated events in the past two years reflected centrally coordinated …
anecdotes and isolated events in the past two years reflected centrally coordinated …
Investigating package related security threats in software registries
Package registries host reusable code assets, allowing developers to share and reuse
packages easily, thus accelerating the software development process. Current software …
packages easily, thus accelerating the software development process. Current software …
Measuring and evading turkmenistan's internet censorship: A case study in large-scale measurements of a low-penetration country
Since 2006, Turkmenistan has been listed as one of the few Internet enemies by Reporters
without Borders due to its extensively censored Internet and strictly regulated information …
without Borders due to its extensively censored Internet and strictly regulated information …
{DeResistor}: Toward {Detection-Resistant} Probing for Evasion of Internet Censorship
The arms race between Internet freedom advocates and censors has catalyzed the
emergence of sophisticated blocking techniques and directed significant research emphasis …
emergence of sophisticated blocking techniques and directed significant research emphasis …
Domain name encryption is not enough: Privacy leakage via IP-based website fingerprinting
Although the security benefits of domain name encryption technologies such as DNS over
TLS (DoT), DNS over HTTPS (DoH), and Encrypted Client Hello (ECH) are clear, their …
TLS (DoT), DNS over HTTPS (DoH), and Encrypted Client Hello (ECH) are clear, their …
Target acquired? Evaluating target generation algorithms for IPv6
Internet measurements are a crucial foundation of IPv6-related research. Due to the
infeasibility of full address space scans for IPv6 however, those measurements rely on …
infeasibility of full address space scans for IPv6 however, those measurements rely on …
Metis: understanding and enhancing in-network regular expressions
Regular expressions (REs) offer one-shot solutions for many networking tasks, eg, network
intrusion detection. However, REs purely rely on expert knowledge and cannot utilize …
intrusion detection. However, REs purely rely on expert knowledge and cannot utilize …
Measuring the accessibility of domain name encryption and its impact on internet filtering
Most online communications rely on DNS to map domain names to their hosting IP address
(es). Previous work has shown that DNS-based network interference is widespread due to …
(es). Previous work has shown that DNS-based network interference is widespread due to …
Certainty: Detecting dns manipulation at scale using tls certificates
DNS manipulation is an increasingly common technique used by censors and other network
adversaries to prevent users from accessing restricted Internet resources and hijack their …
adversaries to prevent users from accessing restricted Internet resources and hijack their …