ir. B.E. Khan (Etienne)

I’m a PhD candidate at the Design and Analysis of Communication Systems (DACS) group at the Faculty of Electrical Engineering, Maths and Computer Science (EEMCS) at the University of Twente. 

I have a background in Computer Science, more specifically Cyber Security. This makes me a good fit for our IMS research group within DACS: Internet Measurement & Security.

Expertise

• Computer Science

  • Detection Mechanism
  • End User Device
  • Malware
  • Network Provider
  • Network Traffic
  • Online Dating
  • Virtual Private Network

• Social Sciences

  • Video on Demand

Organisations

My research focuses on investigating residential proxies. I use an empirical approach by performing global Internet-scale passive and active measurements.

One part of my workflow consists of capturing and analyzing network traffic. To keep the data I work with manageable, I rely on network flows that I generate with Tranalyzer, after which I dive deeper into the analysis. 

Another core part of my workflow involves reverse engineering the client software of residential proxy networks. I analyze binaries written in a variety of languages to recover C2 infrastructure, communication protocols, and configuration formats. This produces actionable indicators of compromise (IoCs) that I validate against real-world network data.

My work sits at the intersection of network measurement and security analysis: I combine passive NetFlow measurements from ISP-level vantage points with active probing of proxy C2 endpoints to characterize the operational infrastructure of residential proxy networks from an ISP and network operator perspective.

Publications

Research profiles

I currently teach Security Services for the IoT and have some minor involvement in Network Systems. I also supervise bachelor and master theses, if you're looking for a topic feel free to contact me or drop by my office.

Affiliated study programs

Organisations