Welcome...

prof.dr.ir. A. Pras (Aiko)

Professor in Internet Security

About Me

Aiko Pras is full professor in the area of Network Operations and Management with a focus on Internet Security at the Faculty of Electrical Engineering, Mathematics and Computer Science of the University of Twente, the Netherlands. He is member of the Design and Analysis of Communication Systems Group (DACS). In 1995 he received a Ph.D. degree from the same university for his thesis titled "Network Management Architectures" and in 2013 he was appointed as full professor.

Aiko is interested in questions like Digital Independence and Internet security, with a research focus on DDoS attacks and DNS security. His approach is usually based on measurements.

Currently he is "Beirat" of the  CODE Cybersecurity research institute in München, member of the SURF Scientific Technical Council (WTR) and board member of the Dutch chapter of the Internet Society (isoc.nl). He has chaired the IFIP Technical Committee on "Communications Systems" (IFIP-TC6, 2013-2017), as well as the EU Future Internet cluster (2012-2014). He has been coordinator of the European Network of Excellence on "Management of the Future Internet" (FLAMINGO, 2012-2017). 

He has participated in many European and Dutch research projects, as member, evaluator and as reviewer. He has contributed to research and standardization activities as a founding member of the Internet Research Task Force (IRTF) Network Management Research Group (NMRG) and as RFC author. He has been editor of the IEEE Communications Magazine series on "Network & Service Management", associate editor of the International Journal of Network Management (IJNM), and Editorial Advisory Board member for the Journal of Network and Systems Management (JNSM). He is Steering Committee member of the IFIP/IEEE NOMS and IM Symposia (NISC), CNSM, IFIP Networking as well as TMA.

 

Current PhD students

He is currently supervisor of the following Ph.D. students (see the page on Research for a list of past students)

  • Morteza Karimzadeh:  Mobility Management in the Future Mobile networks. 
    Start: 1/03/2013
  • Jessica Steinberger: Distributed DDoS Defense - A collaborative Approach at Internet Scale. 
    Start: 13/01/2014 (Joint with University of Applied Sciences Darmstadt)
  • Luuk Hendriks: Security of IPv6. 
    Start: 01/04/2014 
  • Christian Dietz: Early Botnet Detection. 
    Start: 01/07/2014 (Joint PhD with the Universität der Bundeswehr München)
  • Mathijs Jonker: DDoS Mitigation. 
    Start: 01/10/2014
  • Wouter de Vries: Using Anycast to mitigate DDoS attacks. 
    Start: 01/07/2015
  • Moritz Muller: 
    Start: 01/04/2017 (External from SIDN)
  • Olivier van der Toorn: Threat Identification Using Active DNS Measurements
    Start: 15/09/2017
  • Nils Rodday: 
    Start: 01/11/2017 (Joint PhD with the Universität der Bundeswehr München)

Expertise

Internet
Monitoring
Intrusion Detection
Network Management
Servers
Quality Of Service
Bandwidth
Industry

Ancillary Activities

  • Universität der Bundeswehr, München
    Beirat CODE Cyber Security Research Institute (München)

Research

Aiko Pras' research focuses on the detection and mitigation of DDoS attacks, DNS security and, more general, Internet security. Topics that his Ph.D. students are working on include amongst others booters, IPv6 security, anycast techniques as well as DNS data analyses (for details, see below).  The approach taken is often measurement-based, including flow (IPFIX) measurement. My earlier research focussed on network management technologies.

Publications

Recent
Steinberger, J., Kuhnert, B., Dietz, C., Ball, L., Sperotto, A., Baier, H., ... Dreo Rodosek, G. (2018). DDoS Defense using MTD and SDN. Paper presented at 16th IEEE/IFIP Network Operations and Management Symposium 2018, Taipei, Taiwan, Province of China.
Hofstede, R., Pras, A., Sperotto, A., & Dreo Rodosek, G. (2018). Flow-Based Compromise Detection: Lessons Learned. IEEE security & privacy, 16(1), 82-89. DOI: 10.1109/MSP.2018.1331021
Hendriks, L., de Boer, P-T., & Pras, A. (2017). IPv6-specific misconfigurations in the DNS. In 2017 13th International Conference on Network and Service Management (CNSM) (International Conference on Network and Service Management Proceedings). IEEE. DOI: 10.23919/CNSM.2017.8256036
Hendriks, L., Velan, P., de O. Schmidt, R., de Boer, P-T., & Pras, A. (2017). Flow-based detection of IPv6-specific network layer attacks. In D. Tuncer, R. Koch, R. Badonne, & B. Stiller (Eds.), Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Proceedings (pp. 137-142). (Lecture Notes in Computer Science; Vol. 10356), (Lecture Notes in Computer Communication Networks and Telecommunications). Cham: Springer. DOI: 10.1007/978-3-319-60774-0_11
Hendriks, L., Velan, P., de Oliveira Schmidt, R., De Boer, P. T., & Pras, A. (2017). Threats and surprises behind IPv6 extension headers. In Network Traffic Measurement and Analysis Conference (TMA), 2017 Institute of Electrical and Electronics Engineers Inc.. DOI: 10.23919/TMA.2017.8002912
Hendriks, L., de Oliveira Schmidt, R., van Rijswijk-Deij, R., & Pras, A. (2017). On the potential of IPv6 open resolvers for DDoS attacks. In M. A. Kaafar, S. Uhlig, & J. Amann (Eds.), Passive and Active Measurement: 18th International Conference, PAM 2017, Sydney, NSW, Australia, March 30-31, 2017, Proceedings (pp. 17-29). (Lecture Notes in Computer Science; Vol. 10176), (Lecture Notes in Computer Communication Networks and Telecommunications). Cham: Springer. DOI: 10.1007/978-3-319-54328-4_2
De Vries, W. B., de Oliveira Schmidt, R., Hardaker, W., Heidemann, J., de Boer, P-T., & Pras, A. (2017). Broad and load-aware anycast mapping with Verfploeter. In IMC '17: Proceedings of the 2017 Internet Measurement Conference (pp. 477-488). Association for Computing Machinery. DOI: 10.1145/3131365.3131371
Kuhnert, B., Steinberger, J., Baier, H., Sperotto, A., & Pras, A. (2017). Booters and Certificates: An Overview of TLS in the DDoS-as-a-Service Landscape. In P. Lorenz, & J. Trienekens (Eds.), ACCSE 2017: The Second International Conference on Advances in Computation, Communications and Services (pp. 37). IARIA/Thinkmind.
Karimzadeh Motallebi Azar, M., Valtulina, L., Pras, A., Liebsch, M., & Taleb, T. (2017). Double-NAT Based Mobility Management for Future LTE Networks. In IEEE Wireless Communications and Networking Conference (WCNC 2017) IEEE. DOI: 10.1109/WCNC.2017.7925948
Zhao, Z., Karimzadeh Motallebi Azar, M., Braun, T., Pras, A., & van den Berg, H. L. (2017). Cloudified Mobility and Bandwidth Prediction in Virtualized LTE Networks. In IFIP/IEEE International Symposium on Integrated Network Management (IM 2017) IEEE. DOI: 10.23919/INM.2017.7987321
Barbosa, R. R. R., Sadre, R., & Pras, A. (2016). Exploiting traffic periodicity in industrial control networks. International journal of critical infrastructure protection, 13, 52-62. DOI: 10.1016/j.ijcip.2016.02.004
Other Contributions

Past PhD students

Other PhD students (external supervision and committee)

  • Nikolay Melnikov, Jacobs University Bremen (planned: 2013)
  • Robert Koch, UniBW, Munchen, 25-11-2011
  • Lien Deboosere, Ghent University, 14-9-2011
  • Eduardo Silva, University of Twente, 11-5-2011
  • Piotr Zuraniewski, University of Amstedrdam, 11-3-2011
  • Emmanuele Zambon, University of Twente, 20-1-2011
  • Christian Morariu, University of Zurich, 07-2010
  • Radu State, Universite Henri Poincare, Nancy, 7-12-2009 (Habilitation)
  • Bruno Van Den Bossche, Universiteit Gent, 11-9-2009
  • Assed Jehangir, University of Twente, 9-4-2009
  • Peter Racz, University of Zurich, 29-2-2008
  • Abdelkader Lahmadi, Universite Nancy, 11-12-2007

UT Research Information System

Google Scholar Link

Education

My teaching activities are focused on the  Cyber Security specialization of the Computer Science master programme, a cooperation of the Dutch 4TU Federation and the master programme of Internet Science and Technology (former Telematics master). 

Affiliated Study Programmes

Bachelor

Master

Courses

Media

Dutch (and also international) media consult Aiko Pras on a regular basis concerning internet security, DDos attacks and other related topics.

In the press

A selection of news items:

News on utwente.nl

Contact Details

Visiting Address

University of Twente
Faculty of Electrical Engineering, Mathematics & Computer Science
Zilverling (building no. 11), room 5061
Hallenweg 19
7522NH  Enschede
The Netherlands

Navigate to location

Mailing Address

University of Twente
Faculty of Electrical Engineering, Mathematics & Computer Science
Zilverling  5061
P.O. Box 217
7500 AE Enschede
The Netherlands

Social Media