Internet Measurements and Forensics
Internet-Messungen und Forensik
6 LPSoSeEN
Voraussetzungen
Empfohlen, im Wortlaut
Knowledge about foundational aspects of computer networks (e.g., basic protocols such as IP, TCP, HTTP) as thought in introductory courses on computer networks is expected.
Inhalte
• Analyzing Internet naming: The domain name system and its security • Internet traffic characteristics and measurement approaches (e.g., sampling, aggregation) • Internet control plane analysis and robustness • Internet-wide probing for liveness / security • Strategies for sound measurements • Internet application security measurement strategies • Internet security infrastructures and network forensics How does Internet traffic look like? Are there some characteristic properties? How and where is it possible to improve the Internet, and how can those improvements be tested? How can the previous questions be addressed, and what technical challenges does one face while monitoring? How can data privacy be ensured? Is there something to bear in mind when analyzing such measurements in a statistical manner? Is it possible to generate realistic traffic based on statistical characteristics?
Lernziele
This course will give a detailed introduction on how to empirically measure large communication systems on the example of the Internet as the largest communication network. The focus in on the explanation of methods for conducting such large-scale assessments to i) understand complex systems and ii) assesses their security properties. The course aims at familiarizing students with key aspects of Internet traffic, Internet protocol use and security, and methods to conduct large-scale studies for security. It will also discuss how to use measurement data for network forensics.
Prüfungsleistung
Prerequisite: • Successful completion of exercise sheets Final module examination: • Written examination, 90 min. OR • Oral examination, 30-45 min. (with small number of participants) In the first lecture it will be announced, if the examination will be offered in written or oral form.
Literatur (2)
- Kurose, J. F.; Ross, K. W.: Computer Networking: A Top Down Approach
- Crovella, M; Krishnamurthy, B; Internet Measurement: Infrastructure, Traffic and Applications
Bemerkungen
• Study programme Informatik M.Sc.: Compulsory elective module in complex „Angewandte und technische Informatik“ (level 400) • Study programme Cyber Security M.Sc.: Compulsory elective module in complex „Computer Science“ and in complex „Cyber Security Methods“ • Study programme Künstliche Intelligenz Technologie M.Sc.: Compulsory elective module in complex „Hardware-basierte Systeme: Elektrotechnik, Informationstechnik und Sensorik“ • Study programme Physics M.Sc.: Compulsory elective module in complex „Minor Subject“
Quelle: Modulbeschreibung der BTU · abgerufen 28.09.2026Original