Publications

XXXXX
Under Review
Yuxiang Yang, Ao Wang, Xuewei Feng, Qi Li, Ke Xu
Cite
XXXXXXX
Under Review
Xuewei Feng, Ziqiang Wang, Yuxiang Yang, Yunlong Xing, Ganqiu Du, Ziqian Liu, Ke Xu
Cite
Uncovering Gaps Between RFC Updates and TCP/IP Implementations: LLM-Facilitated Differential Checks on Intermediate Representations
As the core of the Internet infrastructure, the TCP/IP protocol stack undertakes the task of network data transmission. However, due to …
Yifan Wu, Xuewei Feng, Yuxiang Yang, Ke Xu
PDF Cite
Uncovering Gaps Between RFC Updates and TCP/IP Implementations: LLM-Facilitated Differential Checks on Intermediate Representations
Off-Path TCP Hijacking in NAT-Enabled Wi-Fi Networks
Yuxiang Yang, Xuewei Feng, Qi Li, Kun Sun, Ziqiang Wang, Ao Wang, Ke Xu
Cite
ReDAN: An Empirical Study on Remote DoS Attacks against NAT Networks
In this paper, we conduct an empirical study on remote DoS attacks targeting NAT networks (ReDAN, short for Remote DoS Attacks …
Xuewei Feng, Yuxiang Yang, Qi Li, Xingxiang Zhan, Kun Sun, Ziqiang Wang, Ao Wang, Ganqiu Du, Ke Xu
PDF Cite Code
Off-Path TCP Hijacking in Wi-Fi Networks: A Packet-Size Side Channel Attack
In this paper, we unveil a fundamental side channel in Wi-Fi networks, specifically the observable frame size, which can be exploited …
Ziqiang Wang, Xuewei Feng, Qi Li, Kun Sun, Yuxiang Yang, Mengyuan Li, Ke Xu, Jianping Wu
PDF Cite Code
Off-Path TCP Hijacking in Wi-Fi Networks: A Packet-Size Side Channel Attack
A Horizontal Study on the Mixed IPID Assignment Vulnerability in the Linux Ecosystem
The off-path TCP hijacking attack poses a significant threat to Internet security, allowing attackers to manipulate various upper-layer …
Ao Wang, Xuewei Feng, Qi Li, Yuxiang Yang, Ke Xu
PDF Cite
A Horizontal Study on the Mixed IPID Assignment Vulnerability in the Linux Ecosystem
Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks

In this paper, we uncover a new side-channel vulnerability in the widely-used NAT port preservation strategy and an insufficient …
Yuxiang Yang, Xuewei Feng, Qi Li, Kun Sun, Ziqiang Wang, Ke Xu
PDF Cite Code Video
Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks
Traffic Hijacking in Wi-Fi Networks via ICMP Redirects
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis posuere tellus ac convallis placerat. Proin tincidunt magna sed ex sollicitudin condimentum.
Xuewei Feng, Qi Li, Kun Sun, Yuxiang Yang, Ke Xu
PDF Cite
Traffic Hijacking in Wi-Fi Networks via ICMP Redirects
Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects
Modern Wi-Fi networks are commonly protected by the security mechanisms, e.g., WPA, WPA2 or WPA3, and thus it is difficult for an …
Xuewei Feng, Qi Li, Kun Sun, Yuxiang Yang, Ke Xu
PDF Cite Video Source Document
Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects
A Method for Enhancing Network Security of the Transport Layer by Leveraging the Lightweight Chain Verification
The transport layer is a key component in network protocol stack, which is responsible for providing end-to-end services for …
Xuewei Feng, Ke Xu, Qi Li, Yuxiang Yang, Min Zhu, Songtao Fu
PDF Cite
A Method for Enhancing Network Security of the Transport Layer by Leveraging the Lightweight Chain Verification