{"id":"https://openalex.org/W7116774693","doi":"https://doi.org/10.23919/cnsm67658.2025.11297480","title":"Exploiting Congestion Control Parameter Manipulation in QUIC for Security Implications","display_name":"Exploiting Congestion Control Parameter Manipulation in QUIC for Security Implications","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7116774693","doi":"https://doi.org/10.23919/cnsm67658.2025.11297480"},"language":"en","primary_location":{"id":"doi:10.23919/cnsm67658.2025.11297480","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297480","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-05484241","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121015509","display_name":"Y A Joarder","orcid":null},"institutions":[{"id":"https://openalex.org/I161856759","display_name":"Concordia University","ror":"https://ror.org/01qxhf360","country_code":"US","type":"education","lineage":["https://openalex.org/I161856759"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Y A Joarder","raw_affiliation_strings":["CIISE Concordia University Montreal,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CIISE Concordia University Montreal,Canada","institution_ids":["https://openalex.org/I161856759","https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121018666","display_name":"Surajit Sinha","orcid":null},"institutions":[{"id":"https://openalex.org/I161856759","display_name":"Concordia University","ror":"https://ror.org/01qxhf360","country_code":"US","type":"education","lineage":["https://openalex.org/I161856759"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Surajit Sinha","raw_affiliation_strings":["CIISE Concordia University Montreal,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CIISE Concordia University Montreal,Canada","institution_ids":["https://openalex.org/I161856759","https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024604995","display_name":"Guillaume Doyen","orcid":"https://orcid.org/0000-0002-9996-0145"},"institutions":[{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Guillaume Doyen","raw_affiliation_strings":["IRISA IMT Atlantique Rennes,France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IRISA IMT Atlantique Rennes,France","institution_ids":["https://openalex.org/I2802519937","https://openalex.org/I4210127572"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001203568","display_name":"Carol Fung","orcid":"https://orcid.org/0000-0001-5726-4371"},"institutions":[{"id":"https://openalex.org/I161856759","display_name":"Concordia University","ror":"https://ror.org/01qxhf360","country_code":"US","type":"education","lineage":["https://openalex.org/I161856759"]},{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA","US"],"is_corresponding":false,"raw_author_name":"Carol Fung","raw_affiliation_strings":["CIISE Concordia University Montreal,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CIISE Concordia University Montreal,Canada","institution_ids":["https://openalex.org/I161856759","https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5529,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.86547118,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.39640000462532043,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.39640000462532043,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.27399998903274536,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.12700000405311584,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-congestion","display_name":"Network congestion","score":0.6132000088691711},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.38690000772476196},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.3580999970436096},{"id":"https://openalex.org/keywords/idle","display_name":"Idle","score":0.35690000653266907},{"id":"https://openalex.org/keywords/bandwidth","display_name":"Bandwidth (computing)","score":0.34779998660087585},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.3375000059604645},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.2669999897480011}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6628000140190125},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6290000081062317},{"id":"https://openalex.org/C195563490","wikidata":"https://www.wikidata.org/wiki/Q180368","display_name":"Network congestion","level":3,"score":0.6132000088691711},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3991999924182892},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.38690000772476196},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3580999970436096},{"id":"https://openalex.org/C16320812","wikidata":"https://www.wikidata.org/wiki/Q1812200","display_name":"Idle","level":2,"score":0.35690000653266907},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.34779998660087585},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3375000059604645},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2809000015258789},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.26350000500679016},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.2583000063896179},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.25380000472068787},{"id":"https://openalex.org/C83849155","wikidata":"https://www.wikidata.org/wiki/Q1472399","display_name":"Internet access","level":3,"score":0.25209999084472656},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2517000138759613}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.23919/cnsm67658.2025.11297480","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm67658.2025.11297480","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21st International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-05484241v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05484241","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CNSM 2025: 21st International Conference on Network and Service Management, Oct 2025, Bologna, Italy. pp.1-9, ⟨10.23919/CNSM67658.2025.11297480⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-05484241v1","is_oa":true,"landing_page_url":"https://hal.science/hal-05484241","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CNSM 2025: 21st International Conference on Network and Service Management, Oct 2025, Bologna, Italy. pp.1-9, ⟨10.23919/CNSM67658.2025.11297480⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6497842669487}],"awards":[{"id":"https://openalex.org/G7819117201","display_name":"SuperViz","funder_award_id":"ANR-22-PECY-0008","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2022844530","https://openalex.org/W2105841891","https://openalex.org/W2130125194","https://openalex.org/W2141795676","https://openalex.org/W2158359711","https://openalex.org/W2745034467","https://openalex.org/W3089237931","https://openalex.org/W3137096128","https://openalex.org/W3138562521","https://openalex.org/W3202091878","https://openalex.org/W4225114785","https://openalex.org/W4307020342","https://openalex.org/W4310172306","https://openalex.org/W4313307167","https://openalex.org/W4319317865","https://openalex.org/W4387880498","https://openalex.org/W4389077484","https://openalex.org/W4393186290","https://openalex.org/W4399119637","https://openalex.org/W4400689546","https://openalex.org/W4401176236","https://openalex.org/W4402436629","https://openalex.org/W4403981047"],"related_works":[],"abstract_inverted_index":{"QUIC":[0,19,79],"has":[1],"emerged":[2],"as":[3,13],"a":[4,54,72,112],"fundamental":[5],"transport":[6,46,67],"protocol":[7],"for":[8,16,58],"modern":[9],"Internet":[10],"infrastructure,":[11],"serving":[12],"the":[14,87],"foundation":[15],"HTTP/3.":[17],"Although":[18],"implements":[20],"congestion":[21,82],"control":[22,83],"algorithms":[23,102],"($C":[24],"C":[25],"A$)":[26],"to":[27],"ensure":[28],"fair":[29],"network":[30,60],"resource":[31],"allocation,":[32],"its":[33],"user-space":[34],"implementation":[35],"architecture":[36],"creates":[37],"significant":[38],"security":[39,56],"vulnerabilities":[40,52],"through":[41,80],"accessible":[42],"parameter":[43,84,95],"manipulation.":[44],"As":[45],"layers":[47],"become":[48],"increasingly":[49],"programmable,":[50],"these":[51],"represent":[53],"broader":[55],"challenge":[57],"future":[59],"infrastructures":[61],"where":[62],"applications":[63],"may":[64],"deploy":[65],"custom":[66],"implementations.":[68],"This":[69],"paper":[70],"presents":[71],"systematic":[73],"analysis":[74],"of":[75],"selfish":[76],"behaviors":[77],"in":[78,97],"deliberate":[81],"(CCPM).":[85],"Using":[86],"aioquic":[88],"implementation,":[89],"we":[90],"experimentally":[91],"demonstrate":[92],"how":[93],"strategic":[94],"manipulation":[96],"both":[98],"NewReno":[99,110],"and":[100,120,141],"CUBIC":[101,128],"provides":[103],"substantial":[104],"unfair":[105],"bandwidth":[106],"($\\boldsymbol{B}":[107],"\\boldsymbol{W}$)":[108],"advantages.":[109],"exhibits":[111],"major":[113],"vulnerability":[114],"with":[115,135],"Loss":[116],"Reduction":[117],"Factor":[118],"(LRF)":[119],"Congestion":[121],"Avoidance":[122],"Growth":[123],"Rate":[124],"(CAGR)":[125],"manipulation,":[126],"while":[127],"demonstrates":[129],"better":[130],"resilience,":[131],"but":[132],"remains":[133],"exploitable,":[134],"combined":[136],"LRF":[137],"($\\beta_{\\text":[138],"{cubic":[139],"}}$)":[140],"Maximum":[142],"Idle":[143],"Time":[144],"(MIT)":[145],"manipulations.":[146]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-12-22T00:00:00"}