1

XXXXXXX
Under Review
Xuewei Feng, Ziqiang Wang, Yuxiang Yang, Yunlong Xing, Ganqiu Du, Ziqian Liu, Ke Xu
Cite
Invisible Adversaries: A Systematic Study of Session Manipulation Attacks on VPNs
Virtual Private Networks (VPNs) are widely used for censorship evasion and traffic protection. VPN users expect to be provided with …
Yuxiang Yang, Ao Wang, Xuewei Feng, Qi Li, Ke Xu
PDF Cite Code
PacketScope: Bridging eBPF and LLMs for In-Stack Defense Against Subtle TCP/IP Exploits
The TCP/IP protocol suite underpins today’s Internet infrastructure, yet emerging attacks increasingly exploit subtle semantic …
Xuewei Feng, Qixun Tang, Min Li, Yuxiang Yang, Zhaoxi Li, Xingxiang Zhan, Yi He, Chi Chen, Qi Li, Ke Xu
PDF Cite Code
Off-Path TCP Hijacking in Wi-Fi Networks: A Packet-Size Side Channel Attack
In this paper, we unveil a fundamental side channel in Wi-Fi networks, specifically the observable frame size, which can be exploited …
Ziqiang Wang, Xuewei Feng, Qi Li, Kun Sun, Yuxiang Yang, Mengyuan Li, Ke Xu, Jianping Wu
PDF Cite Code
Off-Path TCP Hijacking in Wi-Fi Networks: A Packet-Size Side Channel Attack
ReDAN: An Empirical Study on Remote DoS Attacks against NAT Networks
In this paper, we conduct an empirical study on remote DoS attacks targeting NAT networks (ReDAN, short for Remote DoS Attacks …
Xuewei Feng, Yuxiang Yang, Qi Li, Xingxiang Zhan, Kun Sun, Ziqiang Wang, Ao Wang, Ganqiu Du, Ke Xu
PDF Cite Code
A Horizontal Study on the Mixed IPID Assignment Vulnerability in the Linux Ecosystem
The off-path TCP hijacking attack poses a significant threat to Internet security, allowing attackers to manipulate various upper-layer …
Ao Wang, Xuewei Feng, Qi Li, Yuxiang Yang, Ke Xu
PDF Cite
A Horizontal Study on the Mixed IPID Assignment Vulnerability in the Linux Ecosystem
Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks

In this paper, we uncover a new side-channel vulnerability in the widely-used NAT port preservation strategy and an insufficient …
Yuxiang Yang, Xuewei Feng, Qi Li, Kun Sun, Ziqiang Wang, Ke Xu
PDF Cite Code Video
Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks
Traffic Hijacking in Wi-Fi Networks via ICMP Redirects
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis posuere tellus ac convallis placerat. Proin tincidunt magna sed ex sollicitudin condimentum.
Xuewei Feng, Qi Li, Kun Sun, Yuxiang Yang, Ke Xu
PDF Cite
Traffic Hijacking in Wi-Fi Networks via ICMP Redirects
Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects
Modern Wi-Fi networks are commonly protected by the security mechanisms, e.g., WPA, WPA2 or WPA3, and thus it is difficult for an …
Xuewei Feng, Qi Li, Kun Sun, Yuxiang Yang, Ke Xu
PDF Cite Video Source Document
Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects