Project Description
Attack Analyses
Publications
Student Theses
Cluster "Scylla"
Contact
Papers
2006- Arno Wagner, Thomas Dübendorfer,
Lukas Hämmerle, Bernhard Plattner
Flow-Based Identification of P2P Heavy-Hitters
International Conference on Internet Surveillance and Protection (ICISP) 2006,
August 26 - 29, 2006 Cap Esterel, Côte d'Azur, France
Best Paper award
Paper as PDF Talk as PDF - Arno Wagner
Entropy Based Worm and Anomaly Detection in Fast IP Networks
SIG SIDAR Graduierten-Workshop über Reaktive Sicherheit (SPRING) 2006
Berlin, Germany, July 12, 2006
Talk as PDF - Arno Wagner, Thomas Dübendorfer, Roman Hiestand,
Christoph Göldi, Bernhard Plattner
A Fast Worm Scan Detection Tool for VPN Congestion Avoidance
SIG SIDAR Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA) 2006
Berlin, Germany, July 13-14, 2006
Proceedings of DIMVA 2006, Springer's Lecture Notes in Computer Science (LNCS) 4064
Paper as PDF, Talk as PDF
-
Thomas Dübendorfer
Impact Analysis, Early Detection and Mitigation of Large-Scale Internet Attacks
Ph.D. thesis, Diss. ETH No. 16308, ISBN 3-8322-4739-4, Dec. 2005
This book published by Shaker Verlag is available at amazon.de and as PDF in ETH E-Collection. - Thomas Dübendorfer, Arno Wagner, Bernhard Plattner
A Framework for Real-Time Worm Attack Detection and Backbone Monitoring
Proceedings of First IEEE International Workshop on Critical Infrastructure Protection (IWCIP 2005)
Darmstadt, Germany, 3-4 November, 2005
PDF - Matthias Bossardt, Thomas Dübendorfer, Bernhard Plattner
Enhanced Internet Security by a Distributed Traffic Control Service Based on Traffic Ownership
Elsevier Journal of Network and Computer Applications (JNCA):
Special Issue on DDoS and Intrusion Detection, 2005
PDF - Thomas Dübendorfer, Arno Wagner, Theus Hossmann, Bernhard Plattner
Flow-level Traffic Analysis of the Blaster and Sobig Worm Outbreaks in an Internet Backbone
GI SIG SIDAR Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA 2005);
Vienna, Austria, July 7-8, 2005
Proceedings of DIMVA 2005, Springer's Lecture Notes in Computer Science (LNCS)
Paper as PDF, Talk as PDF - Arno Wagner, Bernhard Plattner
Entropy Based Worm and Anomaly Detection in Fast IP Networks
14th IEEE International Workshops on Enabling Technologies:
Infrastructures for Collaborative Enterprises (WET ICE 2005);
STCA security workshop, Linköping, Sweden, June, 2005
PDF [best paper award] - Thomas Dübendorfer, Bernhard Plattner
Host Behaviour Based Early Detection of Worm Outbreaks in Internet Backbones
14th IEEE International Workshops on Enabling Technologies:
Infrastructures for Collaborative Enterprises (WET ICE 2005);
STCA security workshop, Linköping, Sweden, June, 2005
PDF [best paper award] - Thomas Dübendorfer, Matthias Bossardt, Bernhard Plattner
Adaptive Distributed Traffic Control Service for DDoS Attack Mitigation
1st International Workshop on Security in Systems and Networks (SSN 2005)
hold in conjunction with IEEE IPDPS 2005 Conference,
19th International Parallel & Distributed Processing Symposium,
April 4-8, 2005 in Denver, Colorado
PDF
- Thomas Dübendorfer, Arno Wagner, Bernhard Plattner
An Economic Damage Model for Large-Scale Internet Attacks
13th IEEE International Workshops on Enabling Technologies:
Infrastructures for Collaborative Enterprises (WET ICE 2004);
Workshop on Enterprise Security, Modena, Italy
PDF [best paper award]
- Arno Wagner, Thomas Dübendorfer, Bernhard Plattner, Roman
Hiestand
Experiences with Worm Propagation Simulations
ACM Workshop on Rapid Malcode (WORM) 2003
PostScript, PDF
- Arno Wagner, Bernhard Plattner
Peer-to-Peer Systems as Attack Platform for Distributed Denial-of-Service
ACM SACT Workshop 2002, Washington D.C., 2002
PostScript, PDF
Talks
- Arno Wagner: Panel contribution at ICISP 2006:
Some Notes on the Present and Future of Internet Monitoring
Talk as PDF - Thomas Dübendorfer: Invited Talk for the Consortium "Risk Management and Modelling for Distributed Systems" organized by ETH's Lab of Safety Analysis about " An Economic Damage Model for Large-Scale Internet Attacks", 9.2004
- Arno Wagner: Two panel contributions at
FloCon 2004:
Architecture panel (PDF),
Analysis panel (PDF)
- Arno Wagner: Panel discussion at
RAID 2003,
Slides (PDF, 100kB) of my contribution "Some Thoughts on Malicious Mobile Code".
Publicity and Media
TV Interviews |
RealVideo streams of TV interviews (in German) with Thomas Dübendorfer related to DDoSVax research: |