Academic Papers

Here is some interesting papers I’ve read this year. Weaponizing Middleboxes for TCP Reflected Amplification https://www.usenix.org/system/files/sec21-bock.pdf This paper uses the fact that some middleboxes are non-compliant TCP stacks. In particular, middleboxes sometimes see only one side of a connection and as a result, it’s possible that they answer spoofed packets. After an initial training (with a genetic algorithm) on a subset of known censoring networks to optimize amplification factors, the authors present the results of applying this to the whole IPv4 internet....

Evaluation of tail call costs in eBPF, with existing and custom benchmarking tools

“The Rise of eBPF for Non-Intrusive Performance Monitoring”