% 
% This file was created by the TYPO3 extension
% bib
% --- Timezone: CEST
% Creation date: 2024-04-23
% Creation time: 22-22-18
% --- Number of references
% 10
% 

@Inproceedings { 2024-kunze-spintrap,
   title = {SpinTrap: Catching Speeding QUIC Flows},
   year = {2024},
   month = {5},
   day = {7},
   publisher = {IEEE/IFIP},
   booktitle = {Proceedings of the 2024 IEEE/IFIP Network Operations and Management Symposium (NOMS '24)},
   event_name = {2024 IEEE/IFIP Network Operations and Management Symposium},
   state = {accepted},
   reviewed = {1},
   author = {Kunze, Ike and Sander, Constantin and Tissen, Lars and Bode, Benedikt and Wehrle, Klaus}
}

@Inproceedings { 2023-kunze-spin-bit-in-the-wild,
   title = {Does It Spin? On the Adoption and Use of QUIC’s Spin Bit},
   year = {2023},
   month = {10},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2023/2023-kunze-spin-bit-in-the-wild.pdf},
   publisher = {ACM},
   booktitle = {Proceedings of the Internet Measurement Conference (IMC '23)},
   event_name = {Internet Measurement Conference 2023},
   DOI = {10.1145/3618257.3624844},
   reviewed = {1},
   author = {Kunze, Ike and Sander, Constantin and Wehrle, Klaus}
}

@Inproceedings { 2023-sander-quic-ecn,
   title = {ECN with QUIC: Challenges in the Wild},
   year = {2023},
   month = {10},
   tags = {legato},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2023/2023-sander-quic-ecn.pdf},
   web_url = {https://arxiv.org/abs/2309.14273},
   publisher = {ACM},
   booktitle = {Proceedings of the Internet Measurement Conference (IMC '23)},
   event_name = {Internet Measurement Conference 2023},
   ISBN = {979-8-4007-0382-9/23/10},
   DOI = {10.1145/3618257.3624821},
   reviewed = {1},
   author = {Sander, Constantin and Kunze, Ike and Bl{\"o}cher, Leo and Kosek, Mike and Wehrle, Klaus}
}

@Inproceedings { 2023-dahlmanns-docker,
   title = {Secrets Revealed in Container Images: An Internet-wide Study on Occurrence and Impact},
   year = {2023},
   month = {7},
   day = {10},
   pages = {797-811},
   abstract = {Containerization allows bundling applications and their dependencies into a single image. The containerization framework Docker eases the use of this concept and enables sharing images publicly, gaining high momentum. However, it can lead to users creating and sharing images that include private keys or API secrets—either by mistake or out of negligence. This leakage impairs the creator's security and that of everyone using the image. Yet, the extent of this practice and how to counteract it remains unclear.

In this paper, we analyze 337,171 images from Docker Hub and 8,076 other private registries unveiling that 8.5\% of images indeed include secrets. Specifically, we find 52,107 private keys and 3,158 leaked API secrets, both opening a large attack surface, i.e., putting authentication and confidentiality of privacy-sensitive data at stake and even allow active attacks. We further document that those leaked keys are used in the wild: While we discovered 1,060 certificates relying on compromised keys being issued by public certificate authorities, based on further active Internet measurements, we find 275,269 TLS and SSH hosts using leaked private keys for authentication. To counteract this issue, we discuss how our methodology can be used to prevent secret leakage and reuse.},
   keywords = {network security; security configuration; secret leakage; container},
   tags = {ven2us, internet-of-production,},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2023/2023-dahlmanns-asiaccs.pdf},
   publisher = {ACM},
   booktitle = {Proceedings of the 2023 ACM Asia Conference on Computer and Communications Security (ASIACCS '23), July 10-14, 2023, Melbourne, VIC, Australia},
   event_place = {Melbourne, VIC, Australia},
   event_name = {ASIA CCS '23},
   event_date = {July 10-14, 2023},
   ISBN = {979-8-4007-0098-9/23/07},
   DOI = {10.1145/3579856.3590329},
   reviewed = {1},
   author = {Dahlmanns, Markus and Sander, Constantin and Decker, Robin and Wehrle, Klaus}
}

@Inproceedings { 2023-grote-mvca-fairness,
   title = {Instant Messaging Meets Video Conferencing: Studying the Performance of IM Video Calls},
   year = {2023},
   month = {6},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2023/2023-grote-mvca-fairness.pdf},
   publisher = {IFIP/IEEE},
   booktitle = {Proceedings of the Network Traffic Measurement and Analysis Conference (TMA '23)},
   ISBN = {978-3-903176-58-4},
   DOI = {10.23919/TMA58422.2023.10199019},
   reviewed = {1},
   author = {Grote, Laurenz and Kunze, Ike and Sander, Constantin and Wehrle, Klaus}
}

@Inproceedings { 2022-sander-h3-prio-hol,
   title = {Analyzing the Influence of Resource Prioritization on HTTP/3 HOL Blocking and Performance},
   year = {2022},
   month = {6},
   day = {27},
   tags = {legato},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2022/2022-sander-h3-prio-hol.pdf},
   web_url2 = {https://tma.ifip.org/2022/wp-content/uploads/sites/11/2022/06/tma2022-paper28.pdf},
   publisher = {IFIP},
   booktitle = {Proceedings of the Network Traffic Measurement and Analysis Conference (TMA '22)},
   event_place = {Enschede},
   event_name = {Network Traffic Measurement and Analysis Conference},
   event_date = {27.06.22-30.06.22},
   ISBN = {978-3-903176-47-8},
   reviewed = {1},
   author = {Sander, Constantin and Kunze, Ike and Wehrle, Klaus}
}

@Inproceedings { 2021-kunze-spin-tracker,
   title = {Tracking the QUIC Spin Bit on Tofino},
   year = {2021},
   month = {12},
   day = {7},
   pages = {15–21},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2021/2021-kunze-spin-tracker.pdf},
   publisher = {ACM},
   booktitle = {Proceedings of the 2021 Workshop on Evolution, Performance and Interoperability of QUIC (EPIQ '21)},
   ISBN = {9781450391351},
   DOI = {10.1145/3488660.3493804},
   reviewed = {1},
   author = {Kunze, Ike and Sander, Constantin and Wehrle, Klaus and R{\"u}th, Jan}
}

@Inproceedings { 2021-sander-shardingrevisited,
   title = {Sharding and HTTP/2 Connection Reuse Revisited: Why Are There Still Redundant Connections?},
   year = {2021},
   month = {11},
   day = {2},
   tags = {legato},
   url = {/fileadmin/papers/2021/2021-sander-sharding-revisited.pdf},
   web_url = {https://arxiv.org/abs/2110.14239},
   publisher = {ACM},
   booktitle = {Proceedings of the Internet Measurement Conference (IMC '21)},
   event_name = {Internet Measurement Conference 2021},
   event_date = {02.11.21 - 04.11.21},
   ISBN = {978-1-4503-9129-0/21/11},
   DOI = {10.1145/3487552.3487832},
   reviewed = {1},
   author = {Sander, Constantin and Bl{\"o}cher, Leo and Wehrle, Klaus and R{\"u}th, Jan}
}

@Inproceedings { 2021-sander-zoom-cc,
   title = {Video Conferencing and Flow-Rate Fairness: A First Look at Zoom and the Impact of Flow-Queuing AQM},
   year = {2021},
   month = {3},
   tags = {internet-of-production},
   url = {/fileadmin/papers/2021/2021-sander-zoom-fairness-aqm.pdf},
   web_url = {https://arxiv.org/abs/2107.00904},
   publisher = {Springer},
   booktitle = {Proceedings of the Passive and Active Measurement Conference (PAM '21)},
   event_name = {Passive and Active Measurement Conference (PAM 2021)},
   DOI = {10.1007/978-3-030-72582-2_1},
   reviewed = {1},
   author = {Sander, Constantin and Kunze, Ike and Wehrle, Klaus and R{\"u}th, Jan}
}

@Inproceedings { 2019-sander-depcci,
   title = {DeePCCI: Deep Learning-based Passive Congestion Control Identification},
   year = {2019},
   month = {8},
   day = {18},
   tags = {maki},
   url = {https://www.comsys.rwth-aachen.de/fileadmin/papers/2019/2019-sander-deepcci.pdf},
   web_url2 = {https://arxiv.org/abs/1907.02323},
   publisher = {ACM},
   booktitle = {In Proceedings of the ACM SIGCOMM Workshop on Network Meets AI \& ML (NetAI '19)},
   event_place = {Beijing, China},
   event_name = {Workshop on Network Meets AI \& ML},
   event_date = {18.08.2019},
   DOI = {10.1145/3341216.3342211},
   reviewed = {1},
   author = {Sander, Constantin and R{\"u}th, Jan and Hohlfeld, Oliver and Wehrle, Klaus}
}