• DOI:10.1109/EuroSP.2019.00032
Corpus ID: 201620208

Tell Me You Fixed It: Evaluating Vulnerability Notifications via Quarantine Networks

@article{etin2019TellMY,
  title={Tell Me You Fixed It: Evaluating Vulnerability Notifications via Quarantine Networks},
  author={Orçun Çetin and Carlos Ga{\~n}{\'a}n and L. Altena and Samaneh Tajalizadehkhoob and M. Eeten},
  journal={2019 IEEE European Symposium on Security and Privacy (EuroS&P)},
  year={2019},
  pages={326-339}
}

• Orçun Çetin, Carlos Gañán, +2 authors M. Eeten
• Published 2019
• Computer Science
• 2019 IEEE European Symposium on Security and Privacy (EuroS&P)

Mechanisms for large-scale vulnerability notifications have been confronted with disappointing remediation rates. It has proven difficult to reach the relevant party and, once reached, to incentivize them to act. We present the first empirical study of a potentially more effective mechanism: quarantining the vulnerable resource until it is remediated. We have measured the remediation rates achieved by a medium-sized ISP for 1, 688 retail customers running open DNS resolvers or Multicast DNS… Expand

View on IEEE

ieeexplore.ieee.org

Save to Library

Create Alert

Cite

Launch Research Feed