Search

During the past decade, state-of-the-art planet-finder instruments like SPHERE@VLT, coupling coronagraphic devices and extreme adaptive optics systems, unveiled, thanks to large surveys, around 20 planetary mass companions at semi-major axis greater than 10 astronomical units. Direct imaging being the only detection technique to be able to probe this outer region of planetary systems, the SPHERE infrared survey for exoplanets (SHINE) was designed and conducted from 2015 to 2021 to study the demographics of such young gas giant planets around 400 young nearby solar-type stars. In this paper, we present the observing strategy, the data quality, and the point sources analysis of the full SHINE statistical sample as well as snapSHINE. Both surveys used the SPHERE@VLT instrument with the IRDIS dual band imager in conjunction with the integral field spectrograph IFS and the angular differential imaging observing technique. All SHINE data (650 datasets), corresponding to 400 stars, including the targets of the F150 survey, are processed in a uniform manner with an advanced post-processing algorithm called PACO ASDI. An emphasis is put on the classification and identification of the most promising candidate companions. Compared to the previous early analysis SHINE F150, the use of advanced post-processing techniques significantly improved by one or 2 magnitudes (x3-x6) the contrast detection limits, which will allow us to put even tighter constraints on the radial distribution of young gas giants. This increased sensitivity directly places SHINE as the largest and deepest direct imaging survey ever conducted. We detected and classified more than 3500 physical sources. One additional substellar companion has been confirmed during the second phase of the survey (HIP 74865 B), and several new promising candidate companions are awaiting second epoch confirmations., Comment: Accepted for publication in A&A. 19 pages, 19 figures. Abstract shortened to comply with ArxiV standards. Data ingestion at the CDS is ongoing

DNS is one of the cornerstones of the Internet. Nowadays, a substantial fraction of DNS queries are handled by public resolvers (e.g., Google Public DNS and Cisco's OpenDNS) rather than ISP nameservers. This behavior makes it difficult for authoritative nameservers to provide answers based on the requesting resolver. The impact is especially important for entities that make client origin inferences to perform DNS-based load balancing (e.g., CDNS). The EDNS0 Client Subnet (ECS) option adds the client's IP prefix to DNS queries, which allows authoritative nameservers to provide prefix-based responses. In this study, we introduce a new method for conducting ECS scans, which provides insights into ECS behavior and significantly reduces the required number of queries by up to 97% compared to state-of-the-art techniques. Our approach is also the first to facilitate ECS scans for IPv6. We conduct a comprehensive evaluation of the ECS landscape, examining the usage and implementation of ECS across various services. Overall, 53% of all nameservers support prefix-based responses. Furthermore, we find that Google nameservers do not comply with the Google Public DNS guidelines. Lastly, we plan to make our tool, and data publicly available to foster further research in the area.

Happy Eyeballs (HE) started out by describing a mechanism that prefers IPv6 connections while ensuring a fast fallback to IPv4 when IPv6 fails. The IETF is currently working on the third version of HE. While the standards include recommendations for HE parameters choices, it is up to the client and OS to implement HE. In this paper we investigate the state of HE in various clients, particularly web browsers and recursive resolvers. We introduce a framework to analyze and measure client's HE implementations and parameter choices. According to our evaluation, only Safari supports all HE features. Safari is also the only client implementation in our study that uses a dynamic IPv4 connection attempt delay, a resolution delay, and interlaces addresses. We further show that problems with the DNS A record lookup can even delay and interrupt the network connectivity despite a fully functional IPv6 setup with Chrome and Firefox. We publish our testbed measurement framework and a web-based tool to test HE properties on arbitrary browsers., Comment: submitted to ACM IMC'25

Maternal investment directly shapes early developmental conditions and therefore has longterm fitness consequences for the offspring. In oviparous species prenatal maternal investment is fixed at the time of laying. To ensure the best survival chances for most of their offspring, females must equip their eggs with the resources required to perform well under various circumstances, yet the actual mechanisms remain unknown. Here we describe the blue tit egg albumen and yolk proteomes and evaluate their potential to mediate maternal effects. We show that variation in egg composition (proteins, lipids, carotenoids) primarily depends on laying order and female age. Egg proteomic profiles are mainly driven by laying order, and investment in the egg proteome is functionally biased among eggs. Our results suggest that maternal effects on egg composition result from both passive and active (partly compensatory) mechanisms, and that variation in egg composition creates diverse biochemical environments for embryonic development.

The Near-Infrared Spectrometer and Photometer (NISP) on board the Euclid satellite provides multiband photometry and R>=450 slitless grism spectroscopy in the 950-2020nm wavelength range. In this reference article we illuminate the background of NISP's functional and calibration requirements, describe the instrument's integral components, and provide all its key properties. We also sketch the processes needed to understand how NISP operates and is calibrated, and its technical potentials and limitations. Links to articles providing more details and technical background are included. NISP's 16 HAWAII-2RG (H2RG) detectors with a plate scale of 0.3" pix^-1 deliver a field-of-view of 0.57deg^2. In photo mode, NISP reaches a limiting magnitude of ~24.5AB mag in three photometric exposures of about 100s exposure time, for point sources and with a signal-to-noise ratio (SNR) of 5. For spectroscopy, NISP's point-source sensitivity is a SNR = 3.5 detection of an emission line with flux ~2x10^-16erg/s/cm^2 integrated over two resolution elements of 13.4A, in 3x560s grism exposures at 1.6 mu (redshifted Ha). Our calibration includes on-ground and in-flight characterisation and monitoring of detector baseline, dark current, non-linearity, and sensitivity, to guarantee a relative photometric accuracy of better than 1.5%, and relative spectrophotometry to better than 0.7%. The wavelength calibration must be better than 5A. NISP is the state-of-the-art instrument in the NIR for all science beyond small areas available from HST and JWST - and an enormous advance due to its combination of field size and high throughput of telescope and instrument. During Euclid's 6-year survey covering 14000 deg^2 of extragalactic sky, NISP will be the backbone for determining distances of more than a billion galaxies. Its NIR data will become a rich reference imaging and spectroscopy data set for the coming decades., Comment: Paper submitted as part of the A&A special issue 'Euclid on Sky', which contains Euclid key reference papers and first results from the Euclid Early Release Observations

The current standard model of cosmology successfully describes a variety of measurements, but the nature of its main ingredients, dark matter and dark energy, remains unknown. Euclid is a medium-class mission in the Cosmic Vision 2015-2025 programme of the European Space Agency (ESA) that will provide high-resolution optical imaging, as well as near-infrared imaging and spectroscopy, over about 14,000 deg^2 of extragalactic sky. In addition to accurate weak lensing and clustering measurements that probe structure formation over half of the age of the Universe, its primary probes for cosmology, these exquisite data will enable a wide range of science. This paper provides a high-level overview of the mission, summarising the survey characteristics, the various data-processing steps, and data products. We also highlight the main science objectives and expected performance., Comment: Accepted for publication in the A&A special issue`Euclid on Sky'

QUIC is a new network protocol standardized in 2021. It was designed to replace the TCP/TLS stack and is based on UDP. The most current web standard HTTP/3 is specifically designed to use QUIC as transport protocol. QUIC claims to provide secure and fast transport with low-latency connection establishment, flow and congestion control, reliable delivery, and stream multiplexing. To achieve the security goals, QUIC enforces the usage of TLS 1.3. It uses authenticated encryption with additional data (AEAD) algorithms to not only protect the payload but also parts of the header. The handshake relies on asymmetric cryptography, which will be broken with the introduction of powerful quantum computers, making the use of post-quantum cryptography inevitable. This paper presents a detailed evaluation of the impact of cryptography on QUIC performance. The high-performance QUIC implementations LSQUIC, quiche, and MsQuic are evaluated under different aspects. We break symmetric cryptography down to the different security features. To be able to isolate the impact of cryptography, we implemented a NOOP AEAD algorithm which leaves plaintext unaltered. We show that QUIC performance increases by 10 to 20% when removing packet protection. The header protection has negligible impact on performance, especially for AES ciphers. We integrate post-quantum cryptographic algorithms into QUIC, demonstrating its feasibility without major changes to the QUIC libraries by using a TLS library that implements post-quantum algorithms. Kyber, Dilithium, and FALCON are promising candidates for post-quantum secure QUIC, as they have a low impact on the handshake duration. Algorithms like SPHINCS+ with larger key sizes or more complex calculations significantly impact the handshake duration and cause additional issues in our measurements., Comment: Presented at the 2024 IFIP Networking Conference (IFIP Networking)

Stability and precision of atomic devices are closely tied to the quality and stability of the internal atmosphere of the atomic vapor cells on which they rely. Such atmosphere can be stabilized by building the cell with low permeation materials such as sapphire, or aluminosilicate glass in microfabricated devices. Recently, we showed that permeation barriers made of Al$_{2}$O$_{3}$ thin-film coatings deposited on standard borosilicate glass could be an alternative for buffer gas pressure stabilization. In this study, we hence investigate how helium permeation is influenced by the thickness, ranging from 5 to 40 nm, of such Al$_{2}$O$_{3}$ thin-films coated by atomic layer deposition. Permeation rates are derived from long-term measurements of the pressure-shifted transition frequency of a coherent population trapping (CPT) atomic clock. From thicknesses of 20 nm onward, a significant enhancement of the cell hermeticity is experienced, corresponding to two orders of magnitude lower helium permeation rate. In addition, we test cesium vapor cells filled with neon as a buffer gas and whose windows are coated with 20 nm of Al$_{2}$O$_{3}$. As for helium, the permeation rate of neon is significantly reduced thanks to alumina coatings, leading to a fractional frequency stability of 4x10$^{-12}$ at 1 day when the cell is used in a CPT clock. These features outperform the typical performances of uncoated Cs-Ne borosilicate cells and highlight the significance of Al$_{2}$O$_{3}$ coatings for buffer gas pressure stabilization., Comment: 6 pages, 4 figures

Network slicing is a key technique in 5G and beyond for efficiently supporting diverse services. Many network slicing solutions rely on deep learning to manage complex and high-dimensional resource allocation problems. However, deep learning models suffer limited generalization and adaptability to dynamic slicing configurations. In this paper, we propose a novel framework that integrates constrained optimization methods and deep learning models, resulting in strong generalization and superior approximation capability. Based on the proposed framework, we design a new neural-assisted algorithm to allocate radio resources to slices to maximize the network utility under inter-slice resource constraints. The algorithm exhibits high scalability, accommodating varying numbers of slices and slice configurations with ease. We implement the proposed solution in a system-level network simulator and evaluate its performance extensively by comparing it to state-of-the-art solutions including deep reinforcement learning approaches. The numerical results show that our solution obtains near-optimal quality-of-service satisfaction and promising generalization performance under different network slicing scenarios., Comment: 6 pages, 5 figures, IEEE Global Communications Conference 2023

ESA's mission Euclid, while undertaking its final integration stage, is fully qualified. Euclid will perform an extragalactic survey ($0

OPC UA is an industry-standard machine-to-machine communication protocol in the Industrial Internet of Things. It relies on time-sensitive networking to meet the real-time requirements of various applications. Time-sensitive networking is implemented through various queueing disciplines (qdiscs), including Time Aware Priority, Multiqueue Priority, Earliest TxTime First, and Credit-Based Shaper. Despite their significance, prior studies on these qdiscs have been limited to a few. They have often been confined to point-to-point network topologies using proprietary software or specialized hardware. This study builds upon existing research by evaluating all these qdiscs in point-to-point and bridged topologies using open-source software on commercial off-the-shelf hardware. We first identify the optimal configuration for each qdisc and then compare their jitter, latency, and reliability through experiments. Our results show that open-source OPC UA on commercial off-the-shelf hardware can effectively meet the stringent real-time requirements of many industrial applications and provide a foundation for future research and practical deployments.

Internet-wide scans are an important tool to evaluate the deployment of services. To enable large-scale application layer scans, a fast, stateless port scan (e.g., using ZMap) is often performed ahead of time to collect responsive targets. It is a common expectation that port scans on the entire IPv4 address space provide a relatively unbiased view as they cover the complete address space. Previous work, however, has found prefixes where all addresses share particular properties. In IPv6, aliased prefixes and fully responsive prefixes, i.e., prefixes where all addresses are responsive, are a well-known phenomenon. However, there is no such in-depth analysis for prefixes with these responsiveness patterns in IPv4. This paper delves into the underlying factors of this phenomenon in the context of IPv4 and evaluates port scans on a total of 161 ports (142 TCP & 19 UDP ports) from three different vantage points. To account for packet loss and other scanning artifacts, we propose the notion of a new category of prefixes, which we call highly responsive prefixes (HRPs). Our findings show that the share of HRPs can make up 70 % of responsive addresses on selected ports. Regarding specific ports, we observe that CDNs contribute to the largest fraction of HRPs on TCP/80 and TCP/443, while TCP proxies emerge as the primary cause of HRPs on other ports. Our analysis also reveals that application layer handshakes to targets outside HRPs are, depending on the chosen service, up to three times more likely to be successful compared to handshakes with targets located in HRPs. To improve future scanning campaigns conducted by the research community, we make our study's data publicly available and provide a tool for detecting HRPs. Furthermore, we propose an approach for a more efficient, ethical, and sustainable application layer target selection.

The recent developments and research in distributed ledger technologies and blockchain have contributed to the increasing adoption of distributed systems. To collect relevant insights into systems' behavior, we observe many evaluation frameworks focusing mainly on the system under test throughput. However, these frameworks often need more comprehensiveness and generality, particularly in adopting a distributed applications' cross-layer approach. This work analyses in detail the requirements for distributed systems assessment. We summarize these findings into a structured methodology and experimentation framework called METHODA. Our approach emphasizes setting up and assessing a broader spectrum of distributed systems and addresses a notable research gap. We showcase the effectiveness of the framework by evaluating four distinct systems and their interaction, leveraging a diverse set of eight carefully selected metrics and 12 essential parameters. Through experimentation and analysis we demonstrate the framework's capabilities to provide valuable insights across various use cases. For instance, we identify that a combination of Trusted Execution Environments with threshold signature scheme FROST introduces minimal overhead on the performance with average latency around \SI{40}{\ms}. We showcase an emulation of realistic systems behavior, e.g., Maximal Extractable Value is possible and could be used to further model such dynamics. The METHODA framework enables a deeper understanding of distributed systems and is a powerful tool for researchers and practitioners navigating the complex landscape of modern computing infrastructures.

QUIC is a new protocol standardized in 2021 designed to improve on the widely used TCP / TLS stack. The main goal is to speed up web traffic via HTTP, but it is also used in other areas like tunneling. Based on UDP it offers features like reliable in-order delivery, flow and congestion control, streambased multiplexing, and always-on encryption using TLS 1.3. Other than with TCP, QUIC implements all these features in user space, only requiring kernel interaction for UDP. While running in user space provides more flexibility, it profits less from efficiency and optimization within the kernel. Multiple implementations exist, differing in programming language, architecture, and design choices. This paper presents an extension to the QUIC Interop Runner, a framework for testing interoperability of QUIC implementations. Our contribution enables reproducible QUIC benchmarks on dedicated hardware. We provide baseline results on 10G links, including multiple implementations, evaluate how OS features like buffer sizes and NIC offloading impact QUIC performance, and show which data rates can be achieved with QUIC compared to TCP. Our results show that QUIC performance varies widely between client and server implementations from 90 Mbit/s to 4900 Mbit/s. We show that the OS generally sets the default buffer size too small, which should be increased by at least an order of magnitude based on our findings. Furthermore, QUIC benefits less from NIC offloading and AES NI hardware acceleration while both features improve the goodput of TCP to around 8000 Mbit/s. Our framework can be applied to evaluate the effects of future improvements to the protocol or the OS., Comment: Presented at the 2023 IFIP Networking Conference (IFIP Networking)

While current research and development of autonomous driving primarily focuses on developing new features and algorithms, the transfer from isolated software components into an entire software stack has been covered sparsely. Besides that, due to the complexity of autonomous software stacks and public road traffic, the optimal validation of entire stacks is an open research problem. Our paper targets these two aspects. We present our autonomous research vehicle EDGAR and its digital twin, a detailed virtual duplication of the vehicle. While the vehicle's setup is closely related to the state of the art, its virtual duplication is a valuable contribution as it is crucial for a consistent validation process from simulation to real-world tests. In addition, different development teams can work with the same model, making integration and testing of the software stacks much easier, significantly accelerating the development process. The real and virtual vehicles are embedded in a comprehensive development environment, which is also introduced. All parameters of the digital twin are provided open-source at https://github.com/TUMFTM/edgar_digital_twin.

The Internet Engineering Task Force is standardizing new DNS resource records, namely SVCB and HTTPS. Both records inform clients about endpoint and service properties such as supported application layer protocols, IP address hints or Encrypted Client Hello (ECH) information. Therefore, they allow clients to reduce required DNS queries and potential retries during connection establishment and thus help to improve the quality of experience and privacy of the client. The latter is achieved by reducing visible meta-data, which is further improved with encrypted DNS and ECH. The standardization is in its final stages and companies announced support, e.g., Cloudflare and Apple. Therefore, we provide the first large-scale overview of actual record deployment by analyzing more than 400 M domains. We find 3.96 k SVCB and 10.5 M HTTPS records. As of March 2023, Cloudflare hosts and serves most domains, and most records only contain Application-Layer Protocol Negotiation (ALPN) and IP address hints. Besides Cloudflare, we see adoption by a variety of authoritative name servers and hosting providers indicating increased adoption in the near future. Lastly, we can verify the correctness of records for more than 93 % of domains based on three application layer scans., Comment: Presented at the 8th International Workshop on Traffic Measurements for Cybersecurity (WTMC 2023)

To keep up with increasing demands on quality of experience, assessing and understanding the performance of network connections is crucial for web service providers. While different measures, like TCP options, alternative transport layer protocols like QUIC, or the hosting of services in CDNs, are expected to improve connection performance, no studies are quantifying such impacts on connections on the Internet. This paper introduces an active Internet measurement approach to assess the impacts of mentioned measures on connection performance. We conduct downloads from public web servers considering different vantage points, extract performance indicators like throughput, RTT, and retransmission rate, and survey speed-ups due to TCP option usage. Further, we compare the performance of QUIC-based downloads to TCP-based downloads considering different option configurations. Next to significant throughput improvements due to TCP option usage, in particular TCP window scaling, and QUIC, our study shows significantly increased performance for connections to domains hosted by different giant CDNs., Comment: Presented at the ACM/IRTF Applied Networking Research Workshop 2023 (ANRW23)

Integrating native AI support into the network architecture is an essential objective of 6G. Federated Learning (FL) emerges as a potential paradigm, facilitating decentralized AI model training across a diverse range of devices under the coordination of a central server. However, several challenges hinder its wide application in the 6G context, such as malicious attacks and privacy snooping on local model updates, and centralization pitfalls. This work proposes a trusted architecture for supporting FL, which utilizes Distributed Ledger Technology (DLT) and Graph Neural Network (GNN), including three key features. First, a pre-processing layer employing homomorphic encryption is incorporated to securely aggregate local models, preserving the privacy of individual models. Second, given the distributed nature and graph structure between clients and nodes in the pre-processing layer, GNN is leveraged to identify abnormal local models, enhancing system security. Third, DLT is utilized to decentralize the system by selecting one of the candidates to perform the central server's functions. Additionally, DLT ensures reliable data management by recording data exchanges in an immutable and transparent ledger. The feasibility of the novel architecture is validated through simulations, demonstrating improved performance in anomalous model detection and global model accuracy compared to relevant baselines., Comment: Accepted by IEEE Global Communications Conference (GLOBECOM) 2023

The diversity of QUIC implementations poses challenges for Internet measurements and the analysis of the QUIC ecosystem. While all implementations follow the same specification and there is general interoperability, differences in performance, functionality, but also security (e.g., due to bugs) can be expected. Therefore, knowledge about the implementation of an endpoint on the Internet can help researchers, operators, and users to better analyze connections, performance, and security. In this work, we improved the detection rate of QUIC scans to find more deployments and provide an approach to effectively identify QUIC server libraries based on CONNECTION CLOSE frames and transport parameter orders. We performed Internet-wide scans and identified at least one deployment for 18 QUIC libraries. In total, we can identify the libraries with 8.0 M IPv4 and 2.5 M IPv6 addresses. We provide a comprehensive view of the landscape of competing QUIC libraries., Comment: preprint

Internet measurements are a crucial foundation of IPv6-related research. Due to the infeasibility of full address space scans for IPv6 however, those measurements rely on collections of reliably responsive, unbiased addresses, as provided e.g., by the IPv6 Hitlist service. Although used for various use cases, the hitlist provides an unfiltered list of responsive addresses, the hosts behind which can come from a range of different networks and devices, such as web servers, customer-premises equipment (CPE) devices, and Internet infrastructure. In this paper, we demonstrate the importance of tailoring hitlists in accordance with the research goal in question. By using PeeringDB we classify hitlist addresses into six different network categories, uncovering that 42% of hitlist addresses are in ISP networks. Moreover, we show the different behavior of those addresses depending on their respective category, e.g., ISP addresses exhibiting a relatively low lifetime. Furthermore, we analyze different Target Generation Algorithms (TGAs), which are used to increase the coverage of IPv6 measurements by generating new responsive targets for scans. We evaluate their performance under various conditions and find generated addresses to show vastly differing responsiveness levels for different TGAs., Comment: Proceedings of the Network Traffic Measurement and Analysis Conference (TMA)

Network slicing enables operators to efficiently support diverse applications on a common physical infrastructure. The ever-increasing densification of network deployment leads to complex and non-trivial inter-cell interference, which requires more than inaccurate analytic models to dynamically optimize resource management for network slices. In this paper, we develop a DIRP algorithm with multiple deep reinforcement learning (DRL) agents to cooperatively optimize resource partition in individual cells to fulfill the requirements of each slice, based on two alternative reward functions. Nevertheless, existing DRL approaches usually tie the pretrained model parameters to specific network environments with poor transferability, which raises practical deployment concerns in large-scale mobile networks. Hence, we design a novel transfer learning-aided DIRP (TL-DIRP) algorithm to ease the transfer of DIRP agents across different network environments in terms of sample efficiency, model reproducibility, and algorithm scalability. The TL-DIRP algorithm first centrally trains a generalized model and then transfers the "generalist" to each local agent as "specialist" with distributed finetuning and execution. TL-DIRP consists of two steps: 1) centralized training of a generalized distributed model, 2) transferring the "generalist" to each "specialist" with distributed finetuning and execution. The numerical results show that not only DIRP outperforms existing baseline approaches in terms of faster convergence and higher reward, but more importantly, TL-DIRP significantly improves the service performance, with reduced exploration cost, accelerated convergence rate, and enhanced model reproducibility. As compared to a traffic-aware baseline, TL-DIRP provides about 15% less violation ratio of the quality of service (QoS) for the worst slice service and 8.8% less violation on the average service QoS., Comment: 14 pages, 14 figures, IEEE Open Journal of the Communications Society

The stability and accuracy of atomic devices can be degraded by the evolution of their cell inner atmosphere. Hence, the undesired entrance or leakage of background or buffer gas, respectively, that can permeate through the cell walls, should be slowed down. In this work, we investigate helium permeation in microfabricated alkali vapor cells filled with He and whose windows are made of borosilicate glass (BSG) or aluminosilicate glass (ASG). The permeation is then derived from routine measurements of the pressure-shifted hyperfine transition frequency of an atomic clock. We first confirm that ASG reduces He permeation rate by more than two orders of magnitude, in comparison with BSG. In addition, we demonstrate that Al$_2$O$_3$ thin-film coatings, known to avoid alkali consumption in vapor cells, can also significantly reduce He permeation. The permeation through BSG is thereby reduced by a factor 110 whereas the one through ASG is decreased by a factor up to 5.8 compared to uncoated substrates. These results may contribute to the development of miniaturized atomic clocks and sensors with improved long-term stability or sensitivity., Comment: 7 pages, 5 figures

Deep reinforcement learning (DRL) has been increasingly employed to handle the dynamic and complex resource management in network slicing. The deployment of DRL policies in real networks, however, is complicated by heterogeneous cell conditions. In this paper, we propose a novel transfer learning (TL) aided multi-agent deep reinforcement learning (MADRL) approach with inter-agent similarity analysis for inter-cell inter-slice resource partitioning. First, we design a coordinated MADRL method with information sharing to intelligently partition resource to slices and manage inter-cell interference. Second, we propose an integrated TL method to transfer the learned DRL policies among different local agents for accelerating the policy deployment. The method is composed of a new domain and task similarity measurement approach and a new knowledge transfer approach, which resolves the problem of from whom to transfer and how to transfer. We evaluated the proposed solution with extensive simulations in a system-level simulator and show that our approach outperforms the state-of-the-art solutions in terms of performance, convergence speed and sample efficiency. Moreover, by applying TL, we achieve an additional gain over 27% higher than the coordinate MADRL approach without TL., Comment: 6 pages, 8 figures, IEEE Global Communications Conference 2022

The lunar poles are unique environments of both great scientific and, increasingly, commercial interest. Consequently, a tension exists between the twin objectives of (a) Exploring the lunar poles for both scientific and commercial purposes and ultimately supporting a lunar economy; and (b) Minimising the environmental impacts on the lunar polar regions so as to preserve them for future scientific investigations. We suggest that the best compromise between these equally valuable objectives would be to restrict scientific and commercial activities to the lunar South Pole, while placing a moratorium on activities at the North Pole until the full consequences of human activities at the South Pole are fully understood and mitigation protocols established. Depending on the pace at which lunar exploration proceeds, such a moratorium might last for several decades in order to properly assess the effects of exploration and commercial activities in regions surrounding the South Pole. A longer term possibility might be to consider designating the lunar North Polar region as a (possibly temporary) Planetary Park. Similar protected status might also be desirable for other unique lunar environments, and, by extension, other scientifically important localities elsewhere in the Solar System., Comment: Accepted for publication in Space Research Today; 7 pages, 1 figure

General Fusion is building the Fusion Demonstration Plant to demonstrate a magnetized target fusion scheme in which a deuterium plasma is heated from 200 eV to 10 keV by piston-driven compression of a liquid-lithium liner. The multilayer coaxial time-of-flight (MCTOF) neutron emission spectrometer is designed to measure the ion temperature near peak compression at which time the neutron yield will approach $10^{18}$ neutrons/s. The neutron energy distribution is expected to be Gaussian since the machine uses no neutral beam or radiofrequency heating. In this case, analysis shows that as few as 500 coincidence events should be sufficient to accurately measure the ion temperature. This enables a fast time resolution of 10 $\mu s$, which is required to track the rapid change in temperature approaching peak compression. We overcome the challenges of neutron pileup and event ambiguity with a compact design having two layers of segmented scintillators. The error in the ion temperature measurement is computed as a function of the neutron spectrometer's geometric parameters and used to optimize the design for the case of reaching 10 keV at peak compression., Comment: The following article has been accepted by Review of Scientific Instruments. After it is published, it will be found at https://aip.scitation.org/toc/rsi/HTPD2022/1. High Temperature Plasma Diagnostics 2022 conference. 5 pages, 9 figures

The NISP (Near Infrared Spectrometer and Photometer) is one of the two Euclid instruments. It operates in the near-IR spectral region (950-2020nm) as a photometer and spectrometer. The instrument is composed of: a cold (135 K) optomechanical subsystem consisting of a Silicon carbide structure, an optical assembly, a filter wheel mechanism, a grism wheel mechanism, a calibration unit, and a thermal control system, a detection system based on a mosaic of 16 H2RG with their front-end readout electronic, and a warm electronic system (290 K) composed of a data processing / detector control unit and of an instrument control unit that interfaces with the spacecraft via a 1553 bus for command and control and via Spacewire links for science data. This paper presents: the final architecture of the flight model instrument and subsystems, and the performance and the ground calibration measurement done at NISP level and at Euclid Payload Module level at operational cold temperature., Comment: 18 pages, to appear in Proceedings of the SPIE

The space mission MICROSCOPE dedicated to the test of the Equivalence Principle (EP) operated from April 25, 2016 until the deactivation of the satellite on October 16, 2018. In this analysis we compare the free-fall accelerations ($a_{\rm A}$ and $a_{\rm B}$) of two test masses in terms of the E\"otv\"os parameter $\eta({\rm{A, B}}) = 2 \frac{a_{\rm A}- a_{\rm B}}{a_{\rm A}+ a_{\rm B}}$. No EP violation has been detected for two test masses, made from platinum and titanium alloys, in a sequence of 19 segments lasting from 13 to 198 hours down to the limit of the statistical error which is smaller than $10^{-14}$ for $ \eta({\rm{Ti, Pt}})$. Accumulating data from all segments leads to $\eta({\rm{Ti, Pt}}) =[-1.5\pm{}2.3{\rm (stat)}\pm{}1.5{\rm (syst)}] \times{}10^{-15}$ showing no EP violation at the level of $2.7\times{}10^{-15}$ if we combine stochastic and systematic errors quadratically. This represents an improvement of almost two orders of magnitude with respect to the previous best such test performed by the E\"ot-Wash group. The reliability of this limit has been verified by comparing the free falls of two test masses of the same composition (platinum) leading to a null E\"otv\"os parameter with a statistical uncertainty of $1.1\times{}10^{-15}$., Comment: Class. Quantum Grav. 39 204009

The MICROSCOPE mission was designed to test the Weak Equivalence Principle (WEP), stating the equality between the inertial and the gravitational masses, with a precision of $10^{-15}$ in terms of the E\"otv\"os ratio $\eta$. Its experimental test consisted of comparing the accelerations undergone by two collocated test masses of different compositions as they orbited the Earth, by measuring the electrostatic forces required to keep them in equilibrium. This was done with ultra-sensitive differential electrostatic accelerometers onboard a drag-free satellite. The mission lasted two and a half years, cumulating five-months-worth of science free-fall data, two thirds with a pair of test masses of different compositions -- Titanium and Platinum alloys -- and the last third with a reference pair of test masses of the same composition -- Platinum. We summarize the data analysis, with an emphasis on the characterization of the systematic uncertainties due to thermal instabilities and on the correction of short-lived events which could mimic a WEP violation signal. We found no violation of the WEP, with the E\"otv\"os parameter of the Titanium and Platinum pair constrained to $\eta({\rm Ti, Pt})~=~ [-1.5 \pm 2.3~{\rm (stat)} \pm 1.5~{\rm (syst)}]~\times 10^{-15}$ at $1\sigma$ in statistical errors., Comment: Phys. Rev. Lett. 129, 121102

The long-running IPv6 Hitlist service is an important foundation for IPv6 measurement studies. It helps to overcome infeasible, complete address space scans by collecting valuable, unbiased IPv6 address candidates and regularly testing their responsiveness. However, the Internet itself is a quickly changing ecosystem that can affect longrunning services, potentially inducing biases and obscurities into ongoing data collection means. Frequent analyses but also updates are necessary to enable a valuable service to the community. In this paper, we show that the existing hitlist is highly impacted by the Great Firewall of China, and we offer a cleaned view on the development of responsive addresses. While the accumulated input shows an increasing bias towards some networks, the cleaned set of responsive addresses is well distributed and shows a steady increase. Although it is a best practice to remove aliased prefixes from IPv6 hitlists, we show that this also removes major content delivery networks. More than 98% of all IPv6 addresses announced by Fastly were labeled as aliased and Cloudflare prefixes hosting more than 10M domains were excluded. Depending on the hitlist usage, e.g., higher layer protocol scans, inclusion of addresses from these providers can be valuable. Lastly, we evaluate different new address candidate sources, including target generation algorithms to improve the coverage of the current IPv6 Hitlist. We show that a combination of different methodologies is able to identify 5.6M new, responsive addresses. This accounts for an increase by 174% and combined with the current IPv6 Hitlist, we identify 8.8M responsive addresses.

In this paper, we study the potentials of passive measurements to gain advanced knowledge about QUIC deployments. By analyzing one month backscatter traffic of the /9 CAIDA network telescope, we are able to make the following observations. First, we can identify different off-net deployments of hypergiants, using packet features such as QUIC source connection IDs (SCID), packet coalescence, and packet lengths. Second, Facebook and Google configure significantly different retransmission timeouts and maximum number of retransmissions. Third, SCIDs allow further insights into load balancer deployments such as number of servers per load balancer. We bolster our results by active measurements., Comment: preprint

Worst-Case Execution Time (WCET) is a key component for the verification of critical real-time applications. Yet, even the simplest microprocessors implement pipelines with concurrently-accessed resources, such as the memory bus shared by fetch and memory stages. Although their in-order pipelines are, by nature, very deterministic, the bus can cause out-of-order accesses to the memory and, therefore, timing anomalies: local timing effects that can have global effects but that cannot be easily composed to estimate the global WCET. To cope with this situation, WCET analyses have to generate important over-estimations in order to preserve safety of the computed times or have to explicitly track all possible executions. In the latter case, the presence of out-of-order behavior leads to a combinatorial blowup of the number of pipeline states for which efficient state abstractions are difficult to design. This paper proposes instead a compact and exact representation of the timings in the pipeline, using eXecution Decision Diagram (XDD) [1]. We show how XDD can be used to model pipeline states all along the execution paths by leveraging the algebraic properties of XDD. This computational model allows to compute the exact temporal behavior at control flow graph level and is amenable to efficiently and precisely support WCET calculation in presence of out-of-order bus accesses. This model is finally experimented on the TACLe benchmark suite and we observe good performance making this approach appropriate for industrial applications.

Apple recently published its first Beta of the iCloud Private Relay, a privacy protection service with promises resembling the ones of VPNs. The architecture consists of two layers (ingress and egress), operated by disjoint providers. The service is directly integrated into Apple's operating systems and therefore provides a low entry level barrier for a large user base. It seems to be set up for major adoption with its relatively moderate entry-level price. This paper analyzes the iCloud Private Relay from a network perspective and its effect on the Internet and future measurement-based research. We perform EDNS0 Client Subnet DNS queries to collect ingress relay addresses and find 1586 IPv4 addresses. Supplementary RIPE Atlas DNS measurements reveal 1575 IPv6 addresses. Knowledge about these addresses helps to passively detect clients communicating through the relay network. According to our scans, from January through April, ingress addresses grew by 20%. The analysis of our scans through the relay network verifies Apple's claim of rotating egress addresses. Nevertheless, it reveals that ingress and egress relays can be located in the same autonomous system, thus sharing similar routes, potentially allowing traffic correlation.

Active measurements can be used to collect server characteristics on a large scale. This kind of metadata can help discovering hidden relations and commonalities among server deployments offering new possibilities to cluster and classify them. As an example, identifying a previously-unknown cybercriminal infrastructures can be a valuable source for cyber-threat intelligence. We propose herein an active measurement-based methodology for acquiring Transport Layer Security (TLS) metadata from servers and leverage it for their fingerprinting. Our fingerprints capture the characteristic behavior of the TLS stack primarily caused by the implementation, configuration, and hardware support of the underlying server. Using an empirical optimization strategy that maximizes information gain from every handshake to minimize measurement costs, we generated 10 general-purpose Client Hellos used as scanning probes to create a large database of TLS configurations used for classifying servers. We fingerprinted 28 million servers from the Alexa and Majestic toplists and two Command and Control (C2) blocklists over a period of 30 weeks with weekly snapshots as foundation for two long-term case studies: classification of Content Delivery Network and C2 servers. The proposed methodology shows a precision of more than 99 % and enables a stable identification of new servers over time. This study describes a new opportunity for active measurements to provide valuable insights into the Internet that can be used in security-relevant use cases., Comment: Original: https://dl.ifip.org/db/conf/tma/tma2022/tma2022-paper35.pdf Additional Material: https://active-tls-fingerprinting.github.io/

In this work, we present novel protocols over rings for semi-honest secure three-party computation (3PC) and malicious four-party computation (4PC) with one corruption. While most existing works focus on improving total communication complexity, challenges such as network heterogeneity and computational complexity, which impact MPC performance in practice, remain underexplored. Our protocols address these issues by tolerating multiple arbitrarily weak network links between parties without any substantial decrease in performance. Additionally, they significantly reduce computational complexity by requiring up to half the number of basic instructions per gate compared to related work. These improvements lead to up to twice the throughput of state-of-the-art protocols in homogeneous network settings and up to eight times higher throughput in real-world heterogeneous settings. These advantages come at no additional cost: Our protocols maintain the best-known total communication complexity per multiplication, requiring 3 elements for 3PC and 5 elements for 4PC. We implemented our protocols alongside several state-of-the-art protocols (Replicated 3PC, ASTRA, Fantastic Four, Tetrad) in a novel open-source C++ framework optimized for high throughput. Five out of six implemented 3PC and 4PC protocols achieve more than one billion 32-bit multiplications or over 32 billion AND gates per second using our implementation in a 25 Gbit/s LAN environment. This represents the highest throughput achieved in 3PC and 4PC so far, outperforming existing frameworks like MP-SPDZ, ABY3, MPyC, and MOTION by two to three orders of magnitude., Comment: This is the public version of the paper to be published at the 25th Privacy Enhancing Technologies Symposium (PETS 2025)

Atomic devices such as atomic clocks and optically-pumped magnetometers rely on the interrogation of atoms contained in a cell whose inner content has to meet high standards of purity and accuracy. Glass-blowing techniques and craftsmanship have evolved over many decades to achieve such standards in macroscopic vapor cells. With the emergence of chip-scale atomic devices, the need for miniaturization and mass fabrication has led to the adoption of microfabrication techniques to make millimeter-scale vapor cells. However, many shortcomings remain and no process has been able to match the quality and versatility of glass-blown cells. Here, we introduce a novel approach to structure, fill and seal microfabricated vapor cells inspired from the century-old approach of glass-blowing. In particular we demonstrate opening and closing single-use zero-leak microfabricated valves, actuated exclusively by laser, and operating in the same way as the "make-seals" and "break-seals" found in the filling apparatus of traditional cells. Such structures are employed to fill cesium vapor cells at the wafer-level. The make-seal structure consists of a glass membrane that can be locally heated and deflected to seal a microchannel. The break-seal is obtained by breaching a silicon wall between cavities. This new approach allows adapting processes previously restricted to glass-blown cells. It can also be extended to vacuum microelectronics and vacuum-packaging of micro-electro-mechanical systems (MEMS) devices., Comment: 13 pages, 6 figures

In this work, we introduce two schemes to construct reusable garbled circuits (RGCs) in the semi-honest setting. Our completely reusable garbled circuit (CRGC) scheme allows the generator (party A) to construct and send an obfuscated boolean circuit along with an encoded input to the evaluator (party B). In contrast to Yao's Garbled Circuit protocol, B can securely evaluate the same CRGC with an arbitrary number of inputs. As a tradeoff, CRGCs predictably leak some input bits of A to B. We also propose a partially reusable garbled circuit (PRGC) scheme that divides a circuit into reusable and non-reusable sections. PRGCs do not leak input bits of A. We benchmark our CRGC implementation against the state-of-the-art garbled circuit libraries EMP SH2PC and TinyGarble2. Using our framework, evaluating a CRGC is up to twenty times faster, albeit with weaker privacy guarantees, than evaluating an equivalent garbled circuit constructed by the two existing libraries. Our open-source library can convert any C++ function to a CRGC at approx. 80 million gates per second and repeatedly evaluate a CRGC at approx. 350 million gates per second. Additionally, a compressed CRGC is approx. 75% smaller in file size than the unobfuscated boolean circuit., Comment: 13 pages, 7 figures