prof.dr.ir. A. Pras (Aiko)

Professor in Internet Security

About Me

Aiko Pras is full professor in the area of Network Operations and Management with a focus on Internet Security at the Faculty of Electrical Engineering, Mathematics and Computer Science of the University of Twente, the Netherlands. He is member of the Design and Analysis of Communication Systems Group (DACS). In 1995 he received a Ph.D. degree from the same university for his thesis titled "Network Management Architectures" and in 2013 he was appointed as full professor.

Aiko is interested in questions like Digital Independence and Internet security, with a research focus on DDoS attacks and DNS security. His approach is usually based on measurements.

Currently he is "Beirat" of the  CODE Cybersecurity research institute in München and member of the SURF Scientific Technical Council (WTR). He has chaired the IFIP Technical Committee on "Communications Systems" (IFIP-TC6, 2013-2017), as well as the EU Future Internet cluster (2012-2014). He has been coordinator of the European Network of Excellence on "Management of the Future Internet" (FLAMINGO, 2012-2017). 

He has participated in many European and Dutch research projects, as member, evaluator and as reviewer. He has contributed to research and standardization activities as a founding member of the Internet Research Task Force (IRTF) Network Management Research Group (NMRG) and as RFC author. He has been editor of the IEEE Communications Magazine series on "Network & Service Management", associate editor of the International Journal of Network Management (IJNM), and Editorial Advisory Board member for the Journal of Network and Systems Management (JNSM). He is Steering Committee member of the IFIP/IEEE NOMS and IM Symposia (NISC), CNSM, IFIP Networking as well as TMA.


Current PhD students

He is currently supervisor of the following Ph.D. students (see the page on Research for a list of past students)

  • Morteza Karimzadeh:  Mobility Management in the Future Mobile networks. 
    Start: 1/03/2013
  • Jessica Steinberger: Distributed DDoS Defense - A collaborative Approach at Internet Scale. 
    Start: 13/01/2014 (Joint with University of Applied Sciences Darmstadt)
  • Luuk Hendriks: Security of IPv6. 
    Start: 01/04/2014 
  • Christian Dietz: Early Botnet Detection. 
    Start: 01/07/2014 (Joint PhD with the Universität der Bundeswehr München)
  • Mathijs Jonker: DDoS Mitigation. 
    Start: 01/10/2014
  • Wouter de Vries: Using Anycast to mitigate DDoS attacks. 
    Start: 01/07/2015
  • Moritz Muller: 
    Start: 01/04/2017 (External from SIDN)
  • Olivier van der Toorn: Threat Identification Using Active DNS Measurements
    Start: 15/09/2017
  • Nils Rodday: 
    Start: 01/11/2017 (Joint PhD with the Universität der Bundeswehr München)


Intrusion Detection
Network Management
Quality Of Service

Ancillary Activities

  • Universität der Bundeswehr, München
    Beirat CODE Cyber Security Research Institute (München)


Aiko Pras' research focuses on the detection and mitigation of DDoS attacks, DNS security and, more general, Internet security. Topics that his Ph.D. students are working on include amongst others booters, IPv6 security, anycast techniques as well as DNS data analyses (for details, see below).  The approach taken is often measurement-based, including flow (IPFIX) measurement. My earlier research focussed on network management technologies.


Recent Articles
Kuhnert, B., Steinberger, J., Baier, H., Sperotto, A., & Pras, A. (2017). Booters and Certificates: An Overview of TLS in the DDoS-as-a-Service Landscape. In P. Lorenz, & J. Trienekens (Eds.), ACCSE 2017: The Second International Conference on Advances in Computation, Communications and Services (pp. 37). IARIA/Thinkmind.
Karimzadeh Motallebi Azar, M., Valtulina, L., Pras, A., Liebsch, M., & Taleb, T. (2017). Double-NAT Based Mobility Management for Future LTE Networks. In IEEE Wireless Communications and Networking Conference (WCNC 2017) IEEE. DOI: 10.1109/WCNC.2017.7925948
Zhao, Z., Karimzadeh Motallebi Azar, M., Braun, T., Pras, A., & van den Berg, H. L. (2017). Cloudified Mobility and Bandwidth Prediction in Virtualized LTE Networks. In IFIP/IEEE International Symposium on Integrated Network Management (IM 2017) IEEE. DOI: 10.23919/INM.2017.7987321
van Rijswijk, R. M., Hageman, K., Sperotto, A., & Pras, A. (2017). The Performance Impact of Elliptic Curve Cryptography on DNSSEC Validation. IEEE/ACM transactions on networking, online pre-publication, 1-13. DOI: 10.1109/TNET.2016.2605767
Barbosa, R. R. R., Sadre, R., & Pras, A. (2016). Exploiting traffic periodicity in industrial control networks. International journal of critical infrastructure protection, 13, 52-62. DOI: 10.1016/j.ijcip.2016.02.004
Raniery Paula dos Santos, C., Famaey, J., Schönwälder, J., Zambenedetti Granville, L., Pras, A., & De Turck, F. (2016). Taxonomy for the Network and Service Management Research Field. Journal of network and systems management, 24(3), 764-787. DOI: 10.1007/s10922-015-9363-7
Hendriks, L., de Oliveira Schmidt, R., Sadre, R., Bezerra, J., & Pras, A. (2016). Assessing the quality of flow measurements from OpenFlow devices. 1-8. Paper presented at 8th International Workshop on Traffic Monitoring and Analysis, TMA 2016, .
Dietz, C., Sperotto, A., Pras, A., & Dreo, G. (2016). Proactive Botnet Detection and Defense at Internet scale. Poster session presented at 6th PhD School on Traffic Monitoring and Analysis, TMA 2016, .
Steinberger, J. (Ed.), Kuhnert, B., Alavi, S., Cardoso de Santanna, J. J., Sperotto, A., Baier, H., & Pras, A. (2016). Whom do we trust - Booters and SSL/TLS certificates. 14-14. Abstract from 11th SPRING graduate workshop of the special interest group Security - Intrusion Detection and Response (SIDAR) of the German Informatics Society (GI) (SPRING 2016), .
Hoogesteger, M., de Oliveira Schmidt, R., & Pras, A. (2016). ITSA: Internet Traffic Statistics Archive. In IEEE/IFIP Network Operations and Management Symposium (IEEE NOMS 2016) (pp. 995-996). USA: IEEE Communications Society. DOI: 10.1109/NOMS.2016.7502940
Jonker, M., Sperotto, A., van Rijswijk, R. M., Sadre, R., & Pras, A. (2016). Measuring the Adoption of DDoS Protection Services. In Proceedings of the 2016 ACM Internet Measurement Conference, IMC 2016 (pp. 279-285). New York, NY, USA: ACM. DOI: 10.1145/2987443.2987487
Dietz, C., Sperotto, A., Dreo, G., & Pras, A. (2016). How to Achieve Early Botnet Detection at the Provider Level? In Proceedings of the 10th IFIP WG 6.6 International Conference on Management and Security in the Age of Hyperconnectivity, AIMS 2016 (pp. 142-146). (Lecture Notes in Computer Science; Vol. 9701). London: Springer Verlag. DOI: 10.1007/978-3-319-39814-3_15
Steinberger, J., Kuhnert, B., Sperotto, A., Baier, H., & Pras, A. (2016). Collaborative DDoS Defense using Flow-based Security Event Information. In Proceedings of the IEEE/IFIP Network Operations and Management Symposium, IEEE NOMS 2016 (pp. 516-552). USA: IEEE Communications Society. DOI: 10.1109/NOMS.2016.7502852
Other Contributions

Past PhD students

Other PhD students (external supervision and committee)

  • Nikolay Melnikov, Jacobs University Bremen (planned: 2013)
  • Robert Koch, UniBW, Munchen, 25-11-2011
  • Lien Deboosere, Ghent University, 14-9-2011
  • Eduardo Silva, University of Twente, 11-5-2011
  • Piotr Zuraniewski, University of Amstedrdam, 11-3-2011
  • Emmanuele Zambon, University of Twente, 20-1-2011
  • Christian Morariu, University of Zurich, 07-2010
  • Radu State, Universite Henri Poincare, Nancy, 7-12-2009 (Habilitation)
  • Bruno Van Den Bossche, Universiteit Gent, 11-9-2009
  • Assed Jehangir, University of Twente, 9-4-2009
  • Peter Racz, University of Zurich, 29-2-2008
  • Abdelkader Lahmadi, Universite Nancy, 11-12-2007

UT Research Information System

Google Scholar Link


My teaching activities are focused on the  Cyber Security specialization of the Computer Science master programme, a cooperation of the Dutch 4TU Federation and the master programme of Internet Science and Technology (former Telematics master). 

Affiliated Study Programmes





Dutch (and also international) media consult Aiko Pras on a regular basis concerning internet security, DDos attacks and other related topics.

In the press

A selection of news items:

News on utwente.nl

Contact Details

Visiting Address

University of Twente
Faculty of Electrical Engineering, Mathematics & Computer Science
Zilverling (building no. 11), room 5061
Hallenweg 19
7522NH  Enschede
The Netherlands

Navigate to location

Mailing Address

University of Twente
Faculty of Electrical Engineering, Mathematics & Computer Science
Zilverling  5061
P.O. Box 217
7500 AE Enschede
The Netherlands

Social Media