Cover Image

QUIC-Exfil: Exploiting QUIC's Server Preferred Address Feature to Perform Data Exfiltration Attacks

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Grübl, Thomas, Niu, Weijie, von der Assen, Jan, Stiller, Burkhard
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

PACCOR4ESP: Embedded Device Security Attestation using Platform Attribute Certificates
by: Grübl, Thomas, et al.
Published: (2024)

The Danger Within: Insider Threat Modeling Using Business Process Models
by: von der Assen, Jan, et al.
Published: (2024)

QUIC-Fuzz: An Effective Greybox Fuzzer For The QUIC Protocol
by: Ang, Kian Kai, et al.
Published: (2025)

QuantTM: Business-Centric Threat Quantification for Risk Management and Cyber Resilience
by: von der Assen, Jan, et al.
Published: (2024)

An Automated Blackbox Noncompliance Checker for QUIC Server Implementations
by: Ang, Kian Kai, et al.
Published: (2025)

Performance Analysis of Decentralized Physical Infrastructure Networks and Centralized Clouds
by: von der Assen, Jan, et al.
Published: (2024)

How Resilient is QUIC to Security and Privacy Attacks?
by: Sengupta, Jayasree, et al.
Published: (2024)

QFAM: Mitigating QUIC Handshake Flooding Attacks Through Crypto Challenges
by: Jabbari, Abdollah, et al.
Published: (2024)

ODoQ: Oblivious DNS-over-QUIC
by: Kulkarni, Aditya, et al.
Published: (2025)

Leveraging MTD to Mitigate Poisoning Attacks in Decentralized FL with Non-IID Data
by: Feng, Chao, et al.
Published: (2024)

RCVaR: an Economic Approach to Estimate Cyberattacks Costs using Data from Industry Reports
by: Franco, Muriel Figueredo, et al.
Published: (2023)

GuardFS: a File System for Integrated Detection and Mitigation of Linux-based Ransomware
by: von der Assen, Jan, et al.
Published: (2024)

Asset-centric Threat Modeling for AI-based Systems
by: von der Assen, Jan, et al.
Published: (2024)

RL and Fingerprinting to Select Moving Target Defense Mechanisms for Zero-day Attacks in IoT
by: Celdrán, Alberto Huertas, et al.
Published: (2022)

Bridging Technical Capability and User Accessibility: Off-grid Civilian Emergency Communication
by: Khamaisi, Karim, et al.
Published: (2025)

A Quantum of QUIC: Dissecting Cryptography with Post-Quantum Insights
by: Kempf, Marcel, et al.
Published: (2024)

QUICstep: Evaluating connection migration based QUIC censorship circumvention
by: Lee, Seungju, et al.
Published: (2023)

Data Exfiltration by Compression Attack: Definition and Evaluation on Medical Image Data
by: Li, Huiyu, et al.
Published: (2025)

CyberForce: A Federated Reinforcement Learning Framework for Malware Mitigation
by: Feng, Chao, et al.
Published: (2023)

Trivial Trojans: How Minimal MCP Servers Enable Cross-Tool Exfiltration of Sensitive Data
by: Croce, Nicola, et al.
Published: (2025)

On Cross-Layer Interactions of QUIC, Encrypted DNS and HTTP/3: Design, Evaluation and Dataset
by: Sengupta, Jayasree, et al.
Published: (2023)

A Simple Data Exfiltration Game
by: Caulfield, Tristan
Published: (2025)

Jupyter Notebook Attacks Taxonomy: Ransomware, Data Exfiltration, and Security Misconfiguration
by: Cao, Phuong
Published: (2024)

Are We There Yet? A Study of Decentralized Identity Applications
by: Schumm, Daria, et al.
Published: (2025)

FLARE: Fault Attack Leveraging Address Reconfiguration Exploits in Multi-Tenant FPGAs
by: Chaudhuri, Jayeeta, et al.
Published: (2025)

EMPalm: Exfiltrating Palm Biometric Data via Electromagnetic Side-Channel
by: Xu, Haowen, et al.
Published: (2025)

Malicious GenAI Chrome Extensions: Unpacking Data Exfiltration and Malicious Behaviours
by: Seetharam, Shresta B., et al.
Published: (2025)

Trojan Hippo: Weaponizing Agent Memory for Data Exfiltration
by: Das, Debeshee, et al.
Published: (2026)

SoK: Decentralized Finance (DeFi) -- Fundamentals, Taxonomy and Risks
by: Gogol, Krzysztof, et al.
Published: (2024)

ExtendAttack: Attacking Servers of LRMs via Extending Reasoning
by: Zhu, Zhenhao, et al.
Published: (2025)

Towards Threat Modelling of IoT Context-Sharing Platforms
by: Goudarzi, Mohammad, et al.
Published: (2024)

Misrouter: Exploiting Routing Mechanisms for Input-Only Attacks on Mixture-of-Experts LLMs
by: Fei, Zekun, et al.
Published: (2026)

The MESA Security Model 2.0: A Dynamic Framework for Mitigating Stealth Data Exfiltration
by: Singh, Sanjeev Pratap, et al.
Published: (2024)

Voyager: MTD-Based Aggregation Protocol for Mitigating Poisoning Attacks on DFL
by: Feng, Chao, et al.
Published: (2023)

VIPER-MCP: Detecting and Exploiting Taint-Style Vulnerabilities in Model Context Protocol Servers
by: Sun, Pengyu, et al.
Published: (2026)

Fine-tuning Large Language Models for DGA and DNS Exfiltration Detection
by: Sayed, Md Abu, et al.
Published: (2024)

Exploiting Web Search Tools of AI Agents for Data Exfiltration
by: Rall, Dennis, et al.
Published: (2025)

Exploiting Leakage in Password Managers via Injection Attacks
by: Fábrega, Andrés, et al.
Published: (2024)

Empirical and Theoretical Analysis of Liquid Staking Protocols
by: Gogol, Krzysztof, et al.
Published: (2024)

WHITE PAPER: A Brief Exploration of Data Exfiltration using GCG Suffixes
by: Valbuena, Victor
Published: (2024)