Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Lars Prepens

dblp:326/4786 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2022
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Computer networks · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Network security · 100%
Computer networks
1 paper
Network measurement and analytics · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Network measurement and analytics › traffic characterization
attack traffic characterization
0.612022
IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022
Network measurement and analytics
traffic analysis
0.612022
IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022
Network security › attack resilience › attack mitigation › denial-of-service defense
DDoS defense
0.612022
IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022
Network security › intrusion detection and prevention › intrusion detection › malicious traffic detection
DDoS detection
0.612022
IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022
Network security › attack strategy
denial-of-service attack
0.612022
IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022

Methods — techniques the papers use, named apart from their topics

packet sampling · 1.1machine learning · 1.1BGP blackholing · 1.1
YearPublicationVenuePosition
2022 IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale
abstract
Distributed Denial of Service (DDoS) attacks are among the most critical cybersecurity threats, jeopardizing the stability of even the largest networks and services. The existing range of mitigation services predominantly filters at the edge of the Internet, thus creating unnecessary burden for network infrastructures. Consequently, we present IXP Scrubber, a Machine Learning (ML) based system for detecting and filtering DDoS traffic at the core of the Internet at Internet Exchange Points (IXPs) which see large volumes and varieties of DDoS. IXP Scrubber continuously learns DDoS traffic properties from neighboring Autonomous Systems (ASes). It utilizes BGP signals to drop traffic for certain routes (blackholing) to sample DDoS and can thus learn new attack vectors without the operator's intervention and on unprecedented amounts of training data. We present three major contributions: i) a method to semi-automatically generate arbitrarily large amounts of labeled DDoS training data from IXPs' sampled packet traces, ii) the novel, controllable, locally explainable and highly precise two-step IXP Scrubber ML model, and iii) an evaluation of the IXP Scrubber ML model, including its temporal and geographical drift, based on data from 5 IXPs covering a time span of up to two years.
Matthias Wichtlhuber, Eric Strehle, Daniel Kopp, Lars Prepens, Stefan Stegmueller, Alina Rubina, Christoph Dietzel, Oliver Hohlfeld
SIGCOMM4