I am a Full Professor at the University of Münster, and I also hold a part-time appointment in the Design and Analysis of Communication Systems Group at the University of Twente.

Until 2019, I was aĀ Lecturer in Networks and Security at the University of Sydney (that’s Asst. Prof. in other systems), Australia. Before that, I was aĀ Researcher at NICTA (later CSIRO's Data61), also in Sydney, where I worked on network security and was part of the Security Business Team.

I hold a PhD fromĀ Technical University of Munich. I did both my post-grad and under-grad studies atĀ Eberhard Karls University, Tuebingen, one of Germany’s classic universities.

Organisations

Ancillary activities

  • WWU MünsterFull Professor at WWU Münster

My research interests revolve around understanding and improving the Internet for everyone, with a particular focus on security aspects. Most recently, I have been working on

  • Global-scale measurement of Internet service deployments and their security
  • Data-driven security mechanisms
  • Analysis of emerging technology and its implications

I view my work through the lens of real-world implications. The tech is not always what matters—it’s the embedding in our world that makes it meaningful. Hence, I work with other disciplines and industry alike to make the Internet a safer, more secure, and altogether more interesting and useful place.

Publications

2026

A First Look at Deployment Strategies of Services Provisioned using Anycast (2026)[Dataset Types › Dataset]. Zenodo. Luvizotto Cesar, G., Hendriks, R., Angelov, M., Jonker, M., van Rijswijk - Deij, R. M., Zirngibl, J. & Holz, R.https://doi.org/10.5281/zenodo.20374517A First Look at Deployment Strategies of Services Provisioned using Anycast (2026)[Contribution to conference › Paper] 10th Network Traffic Measurement and Analysis Conference, TMA 2026 (Accepted/In press). Luvizotto Cesar, G., Hendriks, R., Angelov, M., Jonker, M., van Rijswijk - Deij, R. M., Zirngibl, J. & Holz, R.Longitudinal Analysis of DMARC across country code Top-Level Domains (2026)[Contribution to conference › Paper] IEEE/IFIP Network Operations and Management Symposium, NOMS 2026. Luvizotto Cesar, G., Holz, R. & Jonker, M.Detecting and Characterizing Exposed BGP Routers (2026)In Proceedings of TMA Conference 2026 (Accepted/In press). Khadka, S. K., Bayhan, S., Holz, R. & Hesselman, C.Detecting and Characterizing DDoS Scrubbing from Global BGP Routing: Insights from Five Leading Scrubbers (2026)In Passive and Active Measurement: 27th International Conference, PAM 2026, Virtual Event, March 23-25, 2026, Proceedings (pp. 17-43) (Lecture Notes in Computer Science; Vol. 16477). Springer. Khadka, S. K., Bayhan, S., Holz, R. & Hesselman, C.https://doi.org/10.1007/978-3-032-18268-5_2Through aĀ Smaller Lens: Revisiting Opportunistic Analysis Using Network Telescopes (2026)In Passive and Active Measurement: 27th International Conference, PAM 2026, Virtual Event, March 23-25, 2026, Proceedings (pp. 294-318) (Lecture Notes in Computer Science; Vol. 16477 LNCS). Springer. Degen, B., Kempen, N., Claffy, K. C., Mok, R. K. P., Holz, R., van Rijswijk-Deij, R., Sommese, R. & Jonker, M.https://doi.org/10.1007/978-3-032-18268-5_14

2025

A First Look at the Adoption of BGP-based DDoS Scrubbing Services: A 5-year Longitudinal Analysis (2025)In 2025 21st International Conference on Network and Service Management (CNSM). Khadka, S. K., Bayhan, S., Holz, R., Shokoohi, S., Barcellos, M. & Hesselman, C. E. W.https://doi.org/10.23919/CNSM67658.2025.11297552Double-Edged Sword: An Empirical Study on the Contribution of Cloud Providers in Malicious Infrastructure (2025)In 21st International Conference on Network and Service Management (CNSM). IEEE. Tarahomi Yousofi Sherbaf, S., Sommese, R., Linssen, J. M., Holz, R. & Sperotto, A.https://doi.org/10.23919/CNSM67658.2025.11297506Longitudinal Analysis of DMARC across country code Top-Level Domains (2025)[Dataset Types › Dataset]. Zenodo. Luvizotto Cesar, G., Holz, R. & Jonker, M.https://doi.org/10.5281/zenodo.17607886Characterizing Hosting and Security Practices for Public-Facing LDAP Servers (2025)In 2025 21st International Conference on Network and Service Management (CNSM) (Accepted/In press). Luvizotto Cesar, G., Öndarö, G., Kaspereit, J., Ising, F., Schinzel, S., Jonker, M. & Holz, R.

Research profiles

I currently teach:

  • Empirical Security Analysis & EngineeringĀ (202100073)

I am a Fellow of the UK's Higher Education Academy.

Affiliated study programs

Courses academic year 2026/2027

Courses in the current academic year are added at the moment they are finalised in the Osiris system. Therefore it is possible that the list is not yet complete for the whole academic year.

Courses academic year 2025/2026

Courses academic year 2024/2025

Address

University of Twente

Zilverling (building no. 11)
Hallenweg 19
7522 NH Enschede
Netherlands

Navigate to location

Organisations

QR codeScan the QR code or
Download vCard