This paper identifies and characterizes NTP Pool servers that harvest IPv6 client addresses and uses them for reconnaissance, port scanning, and service enumeration.

The paper details a novel, practical cryptanalytic attack exploiting a race-condition vulnerability in the XNU kernel's IPv6 Fragment ID PRNG, allowing attackers to predict and spoof fragment IDs.

This paper provides the first comprehensive analysis and empirical case studies demonstrating how the overlap between DNS names and filenames can be exploited for security confusion.

The paper proposes HSTS-Enforced, a new web security model that flips the default connection from HTTP to HTTPS, eliminating TLS stripping attacks while allowing sites to opt out if they genuinely req…

This study analyzed I2P's routing topology and found no significant evidence that peer selection is influenced by geographic location, suggesting highly random global mixing.

This paper proposes a host-driven method for flowlet balancing using Segment Routing over IPv6 (SRv6), reducing tail latency by 15% and 33% compared to random flowlet balancing and ECMP, respectively.

This paper analyzes the security vulnerabilities of emerging pay-for-use Wi-Fi hotspots in rural areas, demonstrating practical attacks like connection hijacking and rogue hotspots.

This paper provides a comprehensive review of the security vulnerabilities and privacy challenges inherent in the Open Radio Access Network (O-RAN) architecture for the 6G era, systematically categori…

This paper presents a comprehensive survey of security and privacy in AI-native 6G networks from a cross-layer perspective, developing a threat taxonomy, analyzing representative threats, and identify…

This techreport evaluates a Tor-based protocol, Tor push, demonstrating that it can significantly enhance the location privacy of Ethereum validators by unlinking their identities from their IP addres…

This paper adapts the Single Packet Header Binary Image (SPHBI) intrusion detection method from IoT to Modbus TCP, achieving high binary accuracy (98.1%) and strong multiclass classification performan…

This paper analyzes RPKI specifications, demonstrating that vague or conflicting requirements in dozens of RFCs cause systemic vulnerabilities in real-world implementations, leading to 61 undocumented…

This paper proposes an architecture for privacy-preserving intent fulfilment and assurance in 6G networks using a coordinator and aggregate PM counters.

This paper experimentally demonstrates the high detection performance of machine learning-based intrusion detection systems for identifying cyberattacks targeting OPC UA applications running over priv…

This paper demonstrates that a specific routing-layer defense mechanism in OLSR-based MANETs can be inferred from passively observable routing and control-plane behavior, even when the defense operate…

This paper introduces Path Consistency Scoring (PCS), a framework that evaluates router geolocation as a path-level consistency problem and produces a path consistency score based on a Hidden Markov M…

This paper analyzes darknet traffic to characterize advanced, AI-assisted bot reconnaissance, finding that modern evasion techniques allow most bot traffic to bypass standard IDS thresholds.

The paper identifies and demonstrates the existence of a covert sublayer, called the Exclusive Network, within the I2P anonymous network, which allows nodes to host services without being discoverable…

The paper introduces R$^2$A, an adversarial attack that uses suffix optimization to mislead black-box LLM routers into consistently selecting expensive, high-capability models.

The paper proposes a declarative, autonomous, self-protecting framework for securing complex 5G/6G networks by leveraging a standardized security ontology and automated graph reasoning to neutralize l…