12979 - Internet Measurements and Forensics Modulübersicht

Module Number: 12979
Module Title:Internet Measurements and Forensics
  Internet-Messungen und Forensik
Department: Faculty 1 - Mathematics, Computer Science, Physics, Electrical Engineering and Information Technology
Responsible Staff Member:
  • Prof. Dr. rer. nat. Hohlfeld, Oliver
Language of Teaching / Examination:English
Duration:1 semester
Frequency of Offer: Every summer semester
Credits: 6
Learning Outcome:This course will give a detailed introduction on how to empirically measure large communication systems on the example of the Internet as the largest communication network. The focus in on the explanation of methods for conducting such large-scale assessments to i) understand complex systems and ii) assesses their security properties. The course aims at familiarizing students with key aspects of Internet traffic, Internet protocol use and security, and methods to conduct large-scale studies for security. It will also discuss how to use measurement data for network forensics.
  • Analyzing Internet naming: The domain name system and its security
  • Internet traffic characteristics and measurement approaches (e.g., sampling, aggregation)
  • Internet control plane analysis and robustness
  • Internet-wide probing for liveness / security
  • Strategies for sound measurements
  • Internet application security measurement strategies
  • Internet security infrastructures and network forensics

How does Internet traffic look like? Are there some characteristic properties? How and where is it possible to improve the Internet, and how can those improvements be tested? How can the previous questions be addressed, and what technical challenges does one face while monitoring? How can data privacy be ensured? Is there something to bear in mind when analyzing such measurements in a statistical manner? Is it possible to generate realistic traffic based on statistical characteristics?
Recommended Prerequisites:Knowledge about foundational aspects of computer networks (e.g., basic protocols such as IP, TCP, HTTP) as thought in introductory courses on computer networks is expected.
Mandatory Prerequisites:None
Forms of Teaching and Proportion:
  • Lecture / 2 Hours per Week per Semester
  • Exercise / 1 Hours per Week per Semester
  • Self organised studies / 135 Hours
Teaching Materials and Literature:
  • Kurose, J. F.; Ross, K. W.: Computer Networking: A Top Down Approach
  • Crovella, M; Krishnamurthy, B; Internet Measurement: Infrastructure, Traffic and Applications
Module Examination:Prerequisite + Final Module Examination (MAP)
Assessment Mode for Module Examination:Prerequisite:
  • Successful completion of exercise sheets
Final module examination:
  • Written examination, 90 min. OR
  • Oral examination, 30-45 min. (with small number of participants)
In the first lecture it will be announced, if the examination will be offered in written or oral form.
Evaluation of Module Examination:Performance Verification – graded
Limited Number of Participants:None
Part of the Study Programme:
  • Abschluss im Ausland / Cyber Security / keine PO
  • Master (research-oriented) / Cyber Security / PO 2017
  • Master (research-oriented) / Informatik / PO 2008
  • Master (research-oriented) / Informations- und Medientechnik / PO 2017
  • Master (research-oriented) / Künstliche Intelligenz Technologie / PO 2022
  • Master (research-oriented) / Physics / PO 2021
  • Study programme Informatik M.Sc.: Compulsory elective module in complex „Angewandte und technische Informatik“ (level 400)
  • Study programme Cyber Security M.Sc.: Compulsory elective module in complex „Computer Science“ and  in complex „Cyber Security Methods“
  • Study programme Künstliche Intelligenz Technologie M.Sc.: Compulsory elective module in complex „Hardware-basierte Systeme: Elektrotechnik, Informationstechnik und Sensorik“
  • Study programme Physics M.Sc.: Compulsory elective module in complex „Minor Subject“
Module Components:
  • Lecture: Internet Measurements and Forensics
  • Accompanying exercise
  • Related examination
Components to be offered in the Current Semester:
  • no assignment