TL;DR
This paper studies one of the most important Bloom-filter based ICN forwarding mechanisms and proposes some enhancements to this mechanism, which aim at increasing its resistance to brute-force attacks.
A new cache-aware routing scheme for ICN that takes into account the information about the locations of caches in the network and constructs delivery paths for efficient content dissemination and is agnostic of the cached contents.
An experimental evaluation of ALTQ/CBQ demonstrating its sensitivity to a wide range of parameters and link layer driver design issues is attempted and suggestions for effective deployment in real networks are made.
Providing secure and reliable end-to-end connectivity for distributed applications in wide area networks remains a major challenge. However, the support for reliability mechanisms in common virtual private network (VPN) solutions is limited. In our work, we investigate retransmissions, forward error correction (FEC), multipath connections, and overlay networks to improve VPN reliability. In this context, we showcase the specific potentials and limitations of these mechanisms. Our MASQUE-based VPN prototype, implements these reliability measures. We conduct a measurement campaign to assess the behavior of various configurations under different path impairments. As a baseline comparison, we include the common VPN solutions WireGuard and OpenVPN and evaluate throughput, end-to-end loss, and one-way delay. MASQUE uses congestion control also in the unreliable mode, which can lead to problems when the available bandwidth is misjudged. Retransmissions eliminate end-to-end loss but introduce significant long-tail delay. With FEC-based recovery, the long-tail delay is decreased. Multipath VPNs improve resilience in deteriorated network conditions. Further, we nest multipath MASQUE connections and form overlay networks. They increase path diversity, and, hence, circumvent unreliable path segments.
Mix networks are an important tool to implement anonymous communication, which protects not just the content but also the metadata of messages. Over time, various packet formats for mix networks have been proposed, usually with single, specific goals in mind. These formats are incompatible with each other, requiring separate software and infrastructure to be set up. In this paper, we propose a new format, OmniSphinx, which solves this issue. In OmniSphinx, senders embed code in their packets that determines how they must be processed. The resulting active mix network can emulate any other mix format within a single deployment. Our empirical evaluation shows that emulation in OmniSphinx incurs reasonable overhead compared to native execution for typical mix network use cases: For Sphinx, the most compact format, computation time increases by around 90{\mu}s, while headers increase by 33% in size.
In this paper, we present methodologies based on two Internet Control Message Protocol (ICMP) message types to measure subnet deployments on the Internet. First, we exploit a peculiar behavior in certain router implementations, together with variations in the interpretation of protocol specifications, to infer prefix boundaries and thus prefix lengths through remotely probing the Internet with specially crafted ICMP Echo requests. Second, we evaluate the extent to which hosts continue to respond to the deprecated ICMP Address Mask request. We assess the applicability of these methods across devices from different network vendors and discuss protocol quirks that arise from lenient interpretations of the specifications. By combining both methods, we evaluate the consistency of our approach and present a dataset comprising 3.8M subnets. This dataset covers 15% of BGP announced prefixes across more than 20k autonomous systems. Using this dataset, we examine the uniformity of host responsiveness within autonomous systems and across subnet sizes, finding that smaller subnets tend to exhibit greater uniformity. Ultimately, our work demonstrates the feasibility of subnet inference, at a reasonable Internet scale.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
