Research

IP address reuse in public clouds

Cloud providers reassign IP addresses between tenants. Configuration that still points at a released address sends the old tenant's traffic to the next holder.

Cloud telescopes

DScope collects scanning traffic from short-lived cloud addresses instead of unused address space, and observes attacks aimed at cloud services.

Vulnerability lifecycles

We date real-world exploitation of 63 vulnerabilities from two years of scanning traffic and use the dates to evaluate coordinated disclosure.

Measurement ethics

Internet measurement processes data from people who could not consent to its collection. We study the norms that justify it and apply them to our own collection.