Author details
Author's Published Works
Scheduled Maintenance on Monday 1/13/2025
Single article sales and account management will be unavailable from 5:00 AM - 7:00 PM ET (09:00 - 23:00 UTC). We apologize for the inconvenience.
Author details
Showing 1-10 of 10 results
- Sort
Filter Results
Show
Sort By
Results
TuDoor Attack: Systematically Exploring and Exploiting Logic Vulnerabilities in DNS Response Pre-processing with Malformed Packets
Xiang Li;Wei Xu;Baojun Liu;Mingming Zhang;Zhou Li;Jia Zhang;Deliang Chang;Xiaofeng Zheng;Chuhan Wang;Jianjun Chen;Haixin Duan;Qi Li
2024 IEEE Symposium on Security and Privacy (SP)
Year: 2024 | Conference Paper |
Cited by: Papers (2)
DNS can be compared to a game of chess in that its rules are simple, yet the possibilities it presents are endless. While the fundamental rules of DNS are straightforward, DNS implementations can be extremely complex. In this study, we intend to explore the complexities and vulnerabilities in DNS response pre-processing by systematically analyzing DNS RFCs and DNS software implementations. We pres...Show More
Investigating Deployment Issues of DNS Root Server Instances From a China-Wide View
Fenglu Zhang;Baojun Liu;Chaoyi Lu;Yunpeng Xing;Haixin Duan;Ying Liu;Liyuan Chang
DNS root servers are the starting point of most DNS queries. To ensure their security and stability, multiple anycast instances are operated worldwide, and new root instances have been rapidly deployed in recent years. Apart from authorized instances managed by Root Server System, some networks equip unauthorized instances to hijack queries from clients. Despite various root instances handling que...Show More
Trampoline Over the Air: Breaking in IoT Devices Through MQTT Brokers
Huikai Xu;Miao Yu;Yanhao Wang;Yue Liu;Qinsheng Hou;Zhenbang Ma;Haixin Duan;Jianwei Zhuge;Baojun Liu
2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P)
Year: 2022 | Conference Paper |
Cited by: Papers (4)
MQTT is widely adopted by IoT devices because it allows for the most efficient data transfer over a variety of communication lines. The security of MQTT has received increasing attention in recent years, and several studies have demonstrated the configurations of many MQTT brokers are insecure. Adversaries are allowed to exploit vulnerable brokers and publish malicious messages to subscribers. How...Show More
DNS (Domain Name System) is one fundamental Internet infrastructure related to most network activities. As a feasible tool to govern the Internet, DNS’s stability and interoperability will be impacted by the countries’ policies or actions along the path. Especially now that many countries have stricter control over the Internet and even sometimes “unplug” it. But there was no study to quantify the...Show More
Fast IPv6 Network Periphery Discovery and Security Implications
Xiang Li;Baojun Liu;Xiaofeng Zheng;Haixin Duan;Qi Li;Youjun Huang
2021 51st Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Year: 2021 | Conference Paper |
Cited by: Papers (14)
Numerous measurement researches have been performed to discover the IPv4 network security issues by leveraging the fast Internet-wide scanning techniques. However, IPv6 brings the 128-bit address space and renders brute-force network scanning impractical. Although significant efforts have been dedicated to enumerating active IPv6 hosts, limited by technique efficiency and probing accuracy, large-s...Show More
CDN Backfired: Amplification Attacks Based on HTTP Range Requests
Weizhong Li;Kaiwen Shen;Run Guo;Baojun Liu;Jia Zhang;Haixin Duan;Shuang Hao;Xiarun Chen;Yao Wang
2020 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Year: 2020 | Conference Paper |
Cited by: Papers (6)
Content Delivery Networks (CDNs) aim to improve network performance and protect against web attack traffic for their hosting websites. And the HTTP range request mechanism is majorly designed to reduce unnecessary network transmission. However, we find the specifications failed to consider the security risks introduced when CDNs meet range requests. In this study, we present a novel class of HTTP ...Show More
Resident Evil: Understanding Residential IP Proxy as a Dark Service
Xianghang Mi;Xuan Feng;Xiaojing Liao;Baojun Liu;XiaoFeng Wang;Feng Qian;Zhou Li;Sumayah Alrwais;Limin Sun;Ying Liu
2019 IEEE Symposium on Security and Privacy (SP)
Year: 2019 | Conference Paper |
Cited by: Papers (31)
An emerging Internet business is residential proxy (RESIP) as a service, in which a provider utilizes the hosts within residential networks (in contrast to those running in a datacenter) to relay their customers' traffic, in an attempt to avoid server- side blocking and detection. With the prominent roles the services could play in the underground business world, little has been done to understand...Show More
TraffickStop: Detecting and Measuring Illicit Traffic Monetization Through Large-Scale DNS Analysis
Baojun Liu;Zhou Li;Peiyuan Zong;Chaoyi Lu;Haixin Duan;Ying Liu;Sumayah Alrwais;Xiaofeng Wang;Shuang Hao;Yaoqi Jia;Yiming Zhang;Kai Chen;Zaifeng Zhang
2019 IEEE European Symposium on Security and Privacy (EuroS&P)
Year: 2019 | Conference Paper |
Illicit traffic monetization is a type of Internet fraud that hijacks users' web requests and reroutes them to a traffic network (e.g., advertising network), in order to unethically gain monetary rewards. Despite its popularity among Internet fraudsters, our understanding of the problem is still limited. Since the behavior is highly dynamic (can happen at any place including client-side, transport...Show More
Abusing CDNs for Fun and Profit: Security Issues in CDNs' Origin Validation
Run Guo;Jianjun Chen;Baojun Liu;Jia Zhang;Chao Zhang;Haixin Duan;Tao Wan;Jian Jiang;Shuang Hao;Yaoqi Jia
2018 IEEE 37th Symposium on Reliable Distributed Systems (SRDS)
Year: 2018 | Conference Paper |
Cited by: Papers (11)
Content Delivery Networks (CDNs) are critical Internet infrastructure. Besides high availability and high performance, CDNs also provide security services such as anti-DoS and Web Application Firewalls to CDN-powered websites. However, the massive resources of CDNs may also be leveraged by attackers exploiting their architectural, implementation, or operational weaknesses. In this paper, we show t...Show More
A Reexamination of Internationalized Domain Names: The Good, the Bad and the Ugly
Baojun Liu;Chaoyi Lu;Zhou Li;Ying Liu;Haixin Duan;Shuang Hao;Zaifeng Zhang
2018 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Year: 2018 | Conference Paper |
Cited by: Papers (33)
Internationalized Domain Names (IDNs) are domain names containing non-ASCII characters. Despite its installation in DNS for more than 15 years, little has been done to understand how this initiative was developed and its security implications. In this work, we aim to fill this gap by studying the IDN ecosystem and cyber-attacks abusing IDN. In particular, we performed by far the most comprehensive...Show More
IEEE Account
Purchase Details
Profile Information
Need Help?
- US & Canada: +1 800 678 4333
- Worldwide: +1 732 981 0060
- Contact & Support
- About IEEE Xplore
- Contact Us
- Help
- Accessibility
- Terms of Use
- Nondiscrimination Policy
- Sitemap
- Privacy & Opting Out of Cookies
A not-for-profit organization, IEEE is the world's largest technical professional organization dedicated to advancing technology for the benefit of humanity.
© Copyright 2025 IEEE - All rights reserved. Use of this web site signifies your agreement to the terms and conditions.