Project Description
Attack Analyses
Publications

Student Theses

Cluster "Scylla"

Contact

The DDoSVax research team is always open for thesis suggestions by students. Many of the theses listed below were created in cooperation with students. You find a lot of information on how to write a successful thesis at TIK in our student thesis wiki.

Open Student Theses

• Attack and Worm Outbreak Analysis and/or Detection in the Internet Backbone [open]
• Detection of Passive FTP Transfers in an Internet Backbone [open]
• Visibility of World of Warcraft and Half-Life 2 traffic in NetFlow data [open]

Ongoing and Past Student Theses

Summer Term 2005:

• DA: Analysis and Detection of Denial of Service Attacks (DA report as PDF) [Daniel Reichle]
• SA: Kostenanalyse von präventiven IT-Sicherheitsmassnahmen (SA report as PDF) [Markus Häcki]

Winter Term 2004/2005:

• External MA: Scan Detection Based Identification of Worm-Infected Hosts (MA report as PDF),
  Gewinner des Fritz Kutter-Preises 2005
  Artikel "Erfolg in der Früherkennung von Würmern" in Netzguide, June 22, 2005
  Artikel "Wenn der Wurm rein will" in ETHlife, Dec 5th, 2005
  [Roman Hiestand, Christoph Göldi; Supervisor at Open Systems: Roel Vandewall, Stefan Lampart]
• DA: Near Real-Time Detection of Traffic Usage Rhythm Anomalies in the Backbone (DA report as PDF) [René Gallati]
• SA: P2P File-Sharing Traffic Identification Method Validation and Verification (SA report as PDF) [Roger Kaspar]

Summer Term 2004:

• SA: Analysis of Sobig.F and Blaster Worm Characteristics (SA report as PDF) [Theus Hossmann]
• SA: Visualisation of Internet Host Client/Server Behaviour (SA report as PDF) [Bernhard Tellenbach]
• SA: Detecting Bots in Internet Relay Chat Systems (SA report as PDF) [Jonas Bolliger, Thomas Kaufmann]
• MA: P2P Filesharing Population Tracking (MA report as PDF) [Lukas Haemmerle]
• SA: Kostenmodell zu präventiven IT-Sicherheitsmassnahmen (SA report as PDF) [Bodo Hechelmann]

Winter Term 2003/2004:

• MA: Analysis of Internet Relay Chat Usage by DDoS Zombies (MA report as PDF) [Stéphane Racine]
• BA: P2P Filesharing Systems: Real World NetFlow Traffic Characterization (BA report as PDF) [Philipp Jardas]
• SA: A Lightweight Packet Capturer for High-Speed Links (SA report as PDF) [Gerry Zaugg]
• SA: Plug-ins for DDoS Attack Detection in Realtime (SA report as PDF) [Andrea Weisskopf]

Summer Term 2003:

• DA: Realtime UDP Netflow Data Processing Framework (DA report as PDF) [Caspar Schlegel]
• SA: Simulation-Based Analysis of Internet Worm Characteristics (SA report as PDF) [Roman Hiestand]
• SA: Wirtschaftlicher Schaden von DDoS Attacken auf Backbone-Provider (SA report as PDF) (Pressemitteilung der ETH)[Jürg Schmid, Peter Weigel]
• SA: DDoS Attack Detection Based on Netflow Logs (SA report as PDF) [Emil Haraldsson]