Bro: a system for detecting network intruders in real-time
Computer Networks: The International Journal of Computer and Telecommunications Networking
On network-aware clustering of Web clients
Proceedings of the conference on Applications, Technologies, Architectures, and Protocols for Computer Communication
A Precise and Efficient Evaluation of the Proximity Between Web Clients and Their Local DNS Servers
ATEC '02 Proceedings of the General Track of the annual conference on USENIX Annual Technical Conference
Queue - DNS
Geographic locality of IP prefixes
IMC '05 Proceedings of the 5th ACM SIGCOMM conference on Internet Measurement
Answering what-if deployment and configuration questions with wise
Proceedings of the ACM SIGCOMM 2008 conference on Data communication
Unconstrained endpoint profiling (googling the internet)
Proceedings of the ACM SIGCOMM 2008 conference on Data communication
Measuring and evaluating large-scale CDNs Paper withdrawn at Mirosoft's request
Proceedings of the 8th ACM SIGCOMM conference on Internet measurement
Communications of the ACM - Finding the Fun in Computer Science Education
Moving beyond end-to-end path information to optimize CDN performance
Proceedings of the 9th ACM SIGCOMM conference on Internet measurement conference
The Akamai network: a platform for high-performance internet applications
ACM SIGOPS Operating Systems Review
Proceedings of the ACM SIGCOMM 2010 conference
Comparing DNS resolvers in the wild
IMC '10 Proceedings of the 10th ACM SIGCOMM conference on Internet measurement
Improving content delivery using provider-aided distance information
IMC '10 Proceedings of the 10th ACM SIGCOMM conference on Internet measurement
Evaluating IPv6 adoption in the internet
PAM'10 Proceedings of the 11th international conference on Passive and active measurement
Measuring a commercial content delivery network
Proceedings of the 20th international conference on World wide web
IP geolocation databases: unreliable?
ACM SIGCOMM Computer Communication Review
Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference
Twelve years in the evolution of the internet ecosystem
IEEE/ACM Transactions on Networking (TON)
Proceedings of the 2012 ACM conference on Internet measurement conference
Dasu: pushing experiments to the internet's edge
nsdi'13 Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation
Reducing web latency: the virtue of gentle aggression
Proceedings of the ACM SIGCOMM 2013 conference on SIGCOMM
On the benefits of using a large IXP as an internet vantage point
Proceedings of the 2013 conference on Internet measurement conference
Mapping the expansion of Google's serving infrastructure
Proceedings of the 2013 conference on Internet measurement conference
On the benefits of using a large IXP as an internet vantage point
Proceedings of the 2013 conference on Internet measurement conference
Mapping the expansion of Google's serving infrastructure
Proceedings of the 2013 conference on Internet measurement conference
There is more to IXPs than meets the eye
ACM SIGCOMM Computer Communication Review
Hi-index | 0.00 |
The recently proposed DNS extension, EDNS-Client-Subnet (ECS), has been quickly adopted by major Internet companies such as Google to better assign user requests to their servers and improve end-user experience. In this paper, we show that the adoption of ECS also offers unique, but likely unintended, opportunities to uncover details about these companies' operational practices at almost no cost. A key observation is that ECS allows to resolve domain names of ECS adopters on behalf of any arbitrary IP/prefix in the Internet. In fact, by utilizing only a single residential vantage point and relying solely on publicly available information, we are able to (i) uncover the global footprint of ECS adopters with very little effort, (ii) infer the DNS response cacheability and end-user clustering of ECS adopters for an arbitrary network in the Internet, and (iii) capture snapshots of user to server mappings as practiced by major ECS adopters. While pointing out such new measurement opportunities, our work is also intended to make current and future ECS adopters aware of which operational information gets exposed when utilizing this recent DNS extension.