Pushing Alias Resolution to the Limit

Taha Albakour; Oliver Gasser; Georgios Smaragdakis

doi:10.1145/3618257.3624840

Pushing Alias Resolution to the Limit

Taha Albakour, Oliver Gasser, Georgios Smaragdakis

Cyber Security

Research output: Chapter in Book/Conference proceedings/Edited volume › Conference contribution › Scientific › peer-review

23 Downloads (Pure)

Abstract

In this paper, we show that utilizing multiple protocols offers a unique opportunity to improve IP alias resolution and dual-stack inference substantially. Our key observation is that prevalent protocols, e.g., SSH and BGP, reply to unsolicited requests with a set of values that can be combined to form a unique device identifier. More importantly, this is possible by just completing the TCP hand-shake. Our empirical study shows that utilizing readily available scans and our active measurements can double the discovered IPv4 alias sets and more than 30× the dual-stack sets compared to the state-of-the-art techniques. We provide insights into our method's accuracy and performance compared to popular techniques.

Original language	English
Title of host publication	Proceedings of the 2023 ACM on Internet Measurement Conference
Pages	584–590
Number of pages	7
DOIs	https://doi.org/10.1145/3618257.3624840
Publication status	Published - 2023
Event	2023 ACM on Internet Measurement Conference - Montreal , Canada Duration: 17 Oct 2023 → 26 Oct 2023

Conference

Conference	2023 ACM on Internet Measurement Conference
Abbreviated title	IMC 2023
Country/Territory	Canada
City	Montreal
Period	17/10/23 → 26/10/23

Access to Document

10.1145/3618257.3624840

3618257.3624840Final published version, 945 KBLicence: CC BY

Cite this

@inproceedings{cdbfc08547d1410caf8372050823b7ae,

title = "Pushing Alias Resolution to the Limit",

abstract = "In this paper, we show that utilizing multiple protocols offers a unique opportunity to improve IP alias resolution and dual-stack inference substantially. Our key observation is that prevalent protocols, e.g., SSH and BGP, reply to unsolicited requests with a set of values that can be combined to form a unique device identifier. More importantly, this is possible by just completing the TCP hand-shake. Our empirical study shows that utilizing readily available scans and our active measurements can double the discovered IPv4 alias sets and more than 30× the dual-stack sets compared to the state-of-the-art techniques. We provide insights into our method's accuracy and performance compared to popular techniques.",

author = "Taha Albakour and Oliver Gasser and Georgios Smaragdakis",

year = "2023",

doi = "10.1145/3618257.3624840",

language = "English",

pages = " 584–590",

booktitle = "Proceedings of the 2023 ACM on Internet Measurement Conference",

note = " 2023 ACM on Internet Measurement Conference, IMC 2023 ; Conference date: 17-10-2023 Through 26-10-2023",

}

TY - GEN

T1 - Pushing Alias Resolution to the Limit

AU - Albakour, Taha

AU - Gasser, Oliver

AU - Smaragdakis, Georgios

PY - 2023

Y1 - 2023

N2 - In this paper, we show that utilizing multiple protocols offers a unique opportunity to improve IP alias resolution and dual-stack inference substantially. Our key observation is that prevalent protocols, e.g., SSH and BGP, reply to unsolicited requests with a set of values that can be combined to form a unique device identifier. More importantly, this is possible by just completing the TCP hand-shake. Our empirical study shows that utilizing readily available scans and our active measurements can double the discovered IPv4 alias sets and more than 30× the dual-stack sets compared to the state-of-the-art techniques. We provide insights into our method's accuracy and performance compared to popular techniques.

AB - In this paper, we show that utilizing multiple protocols offers a unique opportunity to improve IP alias resolution and dual-stack inference substantially. Our key observation is that prevalent protocols, e.g., SSH and BGP, reply to unsolicited requests with a set of values that can be combined to form a unique device identifier. More importantly, this is possible by just completing the TCP hand-shake. Our empirical study shows that utilizing readily available scans and our active measurements can double the discovered IPv4 alias sets and more than 30× the dual-stack sets compared to the state-of-the-art techniques. We provide insights into our method's accuracy and performance compared to popular techniques.

UR - http://www.scopus.com/inward/record.url?scp=85177620315&partnerID=8YFLogxK

U2 - 10.1145/3618257.3624840

DO - 10.1145/3618257.3624840

M3 - Conference contribution

SP - 584

EP - 590

BT - Proceedings of the 2023 ACM on Internet Measurement Conference

T2 - 2023 ACM on Internet Measurement Conference

Y2 - 17 October 2023 through 26 October 2023

ER -

Pushing Alias Resolution to the Limit

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this