Fahad Hilal

Fahad Hilal

Address
Max-Planck-Institut für Informatik
Saarland Informatics Campus
Campus E1 4
66123 Saarbrücken
Location
E1 4 - 504
Phone
+49 681 9325 3524
Fax
+49 681 9325 5719

Personal Information

I am a PhD student at the Internet Architecture group at the Max-Planck-Institute for Informatics.

Publications

2024
Hilal, F., Sattler, P., Vermeulen, K., & Gasser, O. (2024). A First Look At IPv6 Hypergiant Infrastructure. Proceedings of the ACM on Networking (Proc. CoNEXT 2024), 2(CoNEXT2). doi:10.1145/3656300
Export
BibTeX
@article{HilalCoNEXT24, TITLE = {A First Look At {IPv6} Hypergiant Infrastructure}, AUTHOR = {Hilal, Fahad and Sattler, Patrick and Vermeulen, Kevin and Gasser, Oliver}, LANGUAGE = {eng}, ISSN = {2834-5509}, DOI = {10.1145/3656300}, PUBLISHER = {ACM}, ADDRESS = {New York, NY}, YEAR = {2024}, MARGINALMARK = {$\bullet$}, DATE = {2024}, JOURNAL = {Proceedings of the ACM on Networking (Proc. CoNEXT)}, VOLUME = {2}, NUMBER = {CoNEXT2}, PAGES = {1--25}, EID = {11}, BOOKTITLE = {The 20th International Conference on emerging Networking EXperiments and Technologies (CoNEXT 2024)}, }
Endnote
%0 Journal Article %A Hilal, Fahad %A Sattler, Patrick %A Vermeulen, Kevin %A Gasser, Oliver %+ Internet Architecture, MPI for Informatics, Max Planck Society External Organizations External Organizations External Organizations %T A First Look At IPv6 Hypergiant Infrastructure : %G eng %U http://hdl.handle.net/21.11116/0000-0010-BFCE-0 %R 10.1145/3656300 %7 2024-06-13 %D 2024 %J Proceedings of the ACM on Networking %O PACMNET %V 2 %N CoNEXT2 %& 1 %P 1 - 25 %Z sequence number: 11 %I ACM %C New York, NY %@ false %B The 20th International Conference on emerging Networking EXperiments and Technologies %O CoNEXT 2024 Los Angeles, California, USA ; December 9-12, 2024
Sattler, P., Zirngibl, J., Hilal, F., Gasser, O., Vermeulen, K., Carle, G., & Jonker, M. (2024). ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning. Retrieved from https://arxiv.org/abs/2412.08478
(arXiv: 2412.08478)
Abstract
DNS is one of the cornerstones of the Internet. Nowadays, a substantial<br>fraction of DNS queries are handled by public resolvers (e.g., Google Public<br>DNS and Cisco's OpenDNS) rather than ISP nameservers. This behavior makes it<br>difficult for authoritative nameservers to provide answers based on the<br>requesting resolver. The impact is especially important for entities that make<br>client origin inferences to perform DNS-based load balancing (e.g., CDNS). The<br>EDNS0 Client Subnet (ECS) option adds the client's IP prefix to DNS queries,<br>which allows authoritative nameservers to provide prefix-based responses. In<br>this study, we introduce a new method for conducting ECS scans, which provides<br>insights into ECS behavior and significantly reduces the required number of<br>queries by up to 97% compared to state-of-the-art techniques. Our approach is<br>also the first to facilitate ECS scans for IPv6. We conduct a comprehensive<br>evaluation of the ECS landscape, examining the usage and implementation of ECS<br>across various services. Overall, 53% of all nameservers support prefix-based<br>responses. Furthermore, we find that Google nameservers do not comply with the<br>Google Public DNS guidelines. Lastly, we plan to make our tool, and data<br>publicly available to foster further research in the area.<br>
Export
BibTeX
@online{Sattler_2412.08478, TITLE = {{{ECS}eptional} {DNS} Data: Evaluating Nameserver {ECS} Deployments with Response-Aware Scanning}, AUTHOR = {Sattler, Patrick and Zirngibl, Johannes and Hilal, Fahad and Gasser, Oliver and Vermeulen, Kevin and Carle, Georg and Jonker, Mattijs}, LANGUAGE = {eng}, URL = {https://arxiv.org/abs/2412.08478}, EPRINT = {2412.08478}, EPRINTTYPE = {arXiv}, YEAR = {2024}, MARGINALMARK = {$\bullet$}, ABSTRACT = {DNS is one of the cornerstones of the Internet. Nowadays, a substantial<br>fraction of DNS queries are handled by public resolvers (e.g., Google Public<br>DNS and Cisco's OpenDNS) rather than ISP nameservers. This behavior makes it<br>difficult for authoritative nameservers to provide answers based on the<br>requesting resolver. The impact is especially important for entities that make<br>client origin inferences to perform DNS-based load balancing (e.g., CDNS). The<br>EDNS0 Client Subnet (ECS) option adds the client's IP prefix to DNS queries,<br>which allows authoritative nameservers to provide prefix-based responses. In<br>this study, we introduce a new method for conducting ECS scans, which provides<br>insights into ECS behavior and significantly reduces the required number of<br>queries by up to 97% compared to state-of-the-art techniques. Our approach is<br>also the first to facilitate ECS scans for IPv6. We conduct a comprehensive<br>evaluation of the ECS landscape, examining the usage and implementation of ECS<br>across various services. Overall, 53% of all nameservers support prefix-based<br>responses. Furthermore, we find that Google nameservers do not comply with the<br>Google Public DNS guidelines. Lastly, we plan to make our tool, and data<br>publicly available to foster further research in the area.<br>}, }
Endnote
%0 Report %A Sattler, Patrick %A Zirngibl, Johannes %A Hilal, Fahad %A Gasser, Oliver %A Vermeulen, Kevin %A Carle, Georg %A Jonker, Mattijs %+ External Organizations Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society External Organizations External Organizations External Organizations External Organizations %T ECSeptional DNS Data: Evaluating Nameserver ECS Deployments with Response-Aware Scanning : %G eng %U http://hdl.handle.net/21.11116/0000-0011-117E-D %U https://arxiv.org/abs/2412.08478 %D 2024 %X DNS is one of the cornerstones of the Internet. Nowadays, a substantial<br>fraction of DNS queries are handled by public resolvers (e.g., Google Public<br>DNS and Cisco's OpenDNS) rather than ISP nameservers. This behavior makes it<br>difficult for authoritative nameservers to provide answers based on the<br>requesting resolver. The impact is especially important for entities that make<br>client origin inferences to perform DNS-based load balancing (e.g., CDNS). The<br>EDNS0 Client Subnet (ECS) option adds the client's IP prefix to DNS queries,<br>which allows authoritative nameservers to provide prefix-based responses. In<br>this study, we introduce a new method for conducting ECS scans, which provides<br>insights into ECS behavior and significantly reduces the required number of<br>queries by up to 97% compared to state-of-the-art techniques. Our approach is<br>also the first to facilitate ECS scans for IPv6. We conduct a comprehensive<br>evaluation of the ECS landscape, examining the usage and implementation of ECS<br>across various services. Overall, 53% of all nameservers support prefix-based<br>responses. Furthermore, we find that Google nameservers do not comply with the<br>Google Public DNS guidelines. Lastly, we plan to make our tool, and data<br>publicly available to foster further research in the area.<br> %K Computer Science, Networking and Internet Architecture, cs.NI
2023
Hilal, F., & Gasser, O. (2023). Yarrpbox: Detecting Middleboxes at Internet-Scale. Proceedings of the ACM on Networking (Proc. CoNEXT 2023), 1(CoNEXT1). doi:10.1145/3595290
Export
BibTeX
@article{HilalCoNEXT23, TITLE = {Yarrpbox: {D}etecting Middleboxes at Internet-Scale}, AUTHOR = {Hilal, Fahad and Gasser, Oliver}, LANGUAGE = {eng}, ISSN = {2834-5509}, DOI = {10.1145/3595290}, PUBLISHER = {ACM}, ADDRESS = {New York, NY}, YEAR = {2023}, MARGINALMARK = {$\bullet$}, DATE = {2023}, JOURNAL = {Proceedings of the ACM on Networking (Proc. CoNEXT)}, VOLUME = {1}, NUMBER = {CoNEXT1}, PAGES = {1--2523}, EID = {4}, BOOKTITLE = {The 19th International Conference on emerging Networking EXperiments and Technologies (CoNEXT 2023)}, }
Endnote
%0 Journal Article %A Hilal, Fahad %A Gasser, Oliver %+ Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society %T Yarrpbox: Detecting Middleboxes at Internet-Scale : %G eng %U http://hdl.handle.net/21.11116/0000-0010-BFDD-F %R 10.1145/3595290 %7 2023-07-05 %D 2023 %J Proceedings of the ACM on Networking %O PACMNET %V 1 %N CoNEXT1 %& 1 %P 1 - 2523 %Z sequence number: 4 %I ACM %C New York, NY %@ false %B The 19th International Conference on emerging Networking EXperiments and Technologies %O CoNEXT 2023 Paris, France ; December 5-8, 2023
2022
Hilal, F. (2022). Large-scale, Stateless, Load Distributive Middlebox Detection in the Internet. Universität des Saarlandes, Saarbrücken.
Export
BibTeX
@mastersthesis{HilalMSc22, TITLE = {Large-scale, Stateless, Load Distributive Middlebox Detection in the~Internet}, AUTHOR = {Hilal, Fahad}, LANGUAGE = {eng}, SCHOOL = {Universit{\"a}t des Saarlandes}, ADDRESS = {Saarbr{\"u}cken}, YEAR = {2022}, DATE = {2022}, }
Endnote
%0 Thesis %A Hilal, Fahad %Y Gasser, Oliver %+ Internet Architecture, MPI for Informatics, Max Planck Society Internet Architecture, MPI for Informatics, Max Planck Society %T Large-scale, Stateless, Load Distributive Middlebox Detection in the&#160;Internet : %G eng %U http://hdl.handle.net/21.11116/0000-000C-DE01-9 %I Universit&#228;t des Saarlandes %C Saarbr&#252;cken %D 2022 %V master %9 master

Research Interests

  • Internet Measurements
  • Network Security

Recent Positions

June 2022 - now
PhD student at Max-Planck-Institute for Informatics

Education

April 2019 - April 2022
Master of Science in Computer Science, Saarland University, Saarland


August 2014 - June 2018
Bachelor of Technology in Computer Science, National Institute of Technology, Srinagar