DeepAI

AI Chat AI Image Generator AI Video AI Music Generator

The Impact of DNS Insecurity on Time

10/19/2020

∙

by Philipp Jeitner, et al.

∙

∙

We demonstrate the first practical off-path time shifting attacks against NTP as well as against Man-in-the-Middle (MitM) secure Chronos-enhanced NTP. Our attacks exploit the insecurity of DNS allowing us to redirect the NTP clients to attacker controlled servers. We perform large scale measurements of the attack surface in NTP clients and demonstrate the threats to NTP due to vulnerable DNS.

Philipp Jeitner
8 publications
Haya Shulman
13 publications
Michael Waidner
10 publications

page 1

page 2

page 3

page 4

research

∙ 04/16/2019

Re: What's Up Johnny? -- Covert Content Attacks on Email End-to-End Encryption

We show practical attacks against OpenPGP and S/MIME encryption and digi...

0 Jens Müller, et al. ∙

research

∙ 07/06/2022

You have been warned: Abusing 5G's Warning and Emergency Systems

The Public Warning System (PWS) is an essential part of cellular network...

0 Evangelos Bitsikas, et al. ∙

research

∙ 01/13/2023

Threat Models over Space and Time: A Case Study of E2EE Messaging Applications

Threat modelling is foundational to secure systems engineering and shoul...

0 Partha Das Chowdhury, et al. ∙

research

∙ 06/02/2020

Time-Dilation Attacks on the Lightning Network

Lightning Network (LN) is a widely-used network of payment channels enab...

0 Antoine Riard, et al. ∙

research

∙ 11/17/2020

Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks

As a fundamental communicative service, email is playing an important ro...

0 Kaiwen Shen, et al. ∙

research

∙ 10/16/2020

Pitfalls of Provably Secure Systems in Internet The Case of Chronos-NTP

The critical role that Network Time Protocol (NTP) plays in the Internet...

0 Philipp Jeitner, et al. ∙

research

∙ 02/20/2023

Poisoning Web-Scale Training Datasets is Practical

Deep learning models are often trained on distributed, webscale datasets...

0 Nicholas Carlini, et al. ∙