Demo Data from SIGIR 2026 / reviewers in the wild / expert
Stefan Stegmueller
dblp:326/4842
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2022
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Computer networks · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Network security · 100% | |
| Computer networks
1 paper |
Network measurement and analytics · 100% |
Topics — the 5 heaviest of 5, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Network measurement and analytics › traffic characterization
attack traffic characterization |
0.6 | 1 | 2022 | IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022 |
Network measurement and analytics
traffic analysis |
0.6 | 1 | 2022 | IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022 |
Network security › attack resilience › attack mitigation › denial-of-service defense
DDoS defense |
0.6 | 1 | 2022 | IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022 |
Network security › intrusion detection and prevention › intrusion detection › malicious traffic detection
DDoS detection |
0.6 | 1 | 2022 | IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022 |
Network security › attack strategy
denial-of-service attack |
0.6 | 1 | 2022 | IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scale · SIGCOMM 2022 |
Methods — techniques the papers use, named apart from their topics
packet sampling · 1.1machine learning · 1.1BGP blackholing · 1.1
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2022 | IXP scrubber: learning from blackholing traffic for ML-driven DDoS detection at scaleabstractDistributed Denial of Service (DDoS) attacks are among the most critical cybersecurity threats, jeopardizing the stability of even the largest networks and services. The existing range of mitigation services predominantly filters at the edge of the Internet, thus creating unnecessary burden for network infrastructures. Consequently, we present IXP Scrubber, a Machine Learning (ML) based system for detecting and filtering DDoS traffic at the core of the Internet at Internet Exchange Points (IXPs) which see large volumes and varieties of DDoS. IXP Scrubber continuously learns DDoS traffic properties from neighboring Autonomous Systems (ASes). It utilizes BGP signals to drop traffic for certain routes (blackholing) to sample DDoS and can thus learn new attack vectors without the operator's intervention and on unprecedented amounts of training data. We present three major contributions: i) a method to semi-automatically generate arbitrarily large amounts of labeled DDoS training data from IXPs' sampled packet traces, ii) the novel, controllable, locally explainable and highly precise two-step IXP Scrubber ML model, and iii) an evaluation of the IXP Scrubber ML model, including its temporal and geographical drift, based on data from 5 IXPs covering a time span of up to two years. Matthias Wichtlhuber, Eric Strehle, Daniel Kopp, Lars Prepens, Stefan Stegmueller, Alina Rubina, Christoph Dietzel, Oliver Hohlfeld |
SIGCOMM | 5 |