Projects / Projekte

The Internet is rapidly overtaking the phone network, both in terms of traffic volume as well as importance. In the Internet the intelligence is in the end-systems. Because of the diversity of these systems, their applications, and the communication protocols the Internet is a complex system (or should I say beast). Existing analysis is hardly scratching the surface in providing abstractions and understanding that are taken for granted in other contexts. This includes understanding how user behave, how traffic matrices change, and how to provide performance guarantees. Because of this lack of understanding traffic engineering and network operations are in its infancies. Over the last years I have been involved in building and maintaining an measurement infrastructure for collecting data about data networks. Most of my research has focused on the science of understanding, describing, and modeling this data and then drawing conclusions based on this understanding.

Our current work focuses on the following topics. If you are interested in learning more about any of them please stop by, send us email, or give us a call.

Data traffic characteristics

Since the network is designed and operated by humans it is at least theoretically possible to instrument the network at all levels. We collect measurements at different locations and at different levels of the protocol hierarchy. We then analyze the data and look for invariants and most attempt to correlate various datasets with each other. More detail to come.

Network simulation

Since the network are designed by humans it is at least theoretically (if one new all the bugs and features) possible to simulate the network at all levels. Network simulators allow us "what if" studies to better understand the interactions of the various network components, the scale, and the variability of the network. More detail to come.

Internet test-bed

Another aspect of improving our understanding of networking as a whole is an improved testing strategy for network components. Ideally each component should be tested for its correctness and evaluated for its effectiveness in a test environment before it is deployed in a network. Unfortunately the ability to test many features is limited by the simplicity of current test setups. Typical test-beds consist of a small number of devices and test-traffic generators all suffering a severe shortcoming: the traffic they generate is not necessarily consistent with the traffic in the network, e.g., in the Internet. More detail to come.

Intrusion detection

Unfortunately not all use of the network is legitimate. Identifying and separating abusive from normal behavior is a non-trivial part of network traffic analysis, network operations and network management. More detail to come.
Also have a look at www.bro-ids.org and the TimeMachine.

Wireless Networks

Wireless access is a key feature of today's Internet. The BOWL Project is our key project for research in the wireless area.