I am a Full Professor at the University of Münster, and I also work part-time in the Design and Analysis of Communication Systems Group at the University of Twente.

Until 2019, I was a Lecturer in Networks and Security at the University of Sydney (that’s Asst. Prof. in other systems), Australia. Before that, I was a Researcher at NICTA (later CSIRO's Data61), also in Sydney, where I worked on network security and was part of the Security Business Team.

I hold a PhD from Technical University of Munich. I did both my post-grad and under-grad studies at Eberhard Karls University, Tuebingen, one of Germany’s classic universities.

Organisations

My research interests revolve around understanding and improving the Internet for everyone, with a particular focus on security aspects. Most recently, I have been working on

  • Global-scale measurement of Internet service deployments and their security
  • Data-driven security mechanisms
  • Analysis of emerging technology and its implications

I view my work through the lens of real-world implications. The tech is not always what matters—it’s the embedding in our world that makes it meaningful. Hence, I work with other disciplines and industry alike to make the Internet a safer, more secure, and altogether more interesting and useful place.

Publications

2026

Longitudinal Analysis of DMARC across country code Top-Level Domains (2026)[Contribution to conference › Paper] IEEE/IFIP Network Operations and Management Symposium, NOMS 2026. Luvizotto Cesar, G., Holz, R. & Jonker, M.Detecting and Characterizing DDoS Scrubbing from Global BGP Routing: Insights from Five Leading Scrubbers (2026)In Passive and Active Measurement: 27th International Conference, PAM 2026, Virtual Event, March 23-25, 2026, Proceedings (pp. 17-43) (Lecture Notes in Computer Science; Vol. 16477). Springer. Khadka, S. K., Bayhan, S., Holz, R. & Hesselman, C.https://doi.org/10.1007/978-3-032-18268-5_2Through a Smaller Lens: Revisiting Opportunistic Analysis Using Network Telescopes (2026)In Passive and Active Measurement: 27th International Conference, PAM 2026, Virtual Event, March 23-25, 2026, Proceedings (pp. 294-318) (Lecture Notes in Computer Science; Vol. 16477 LNCS). Springer. Degen, B., Kempen, N., Claffy, K. C., Mok, R. K. P., Holz, R., van Rijswijk-Deij, R., Sommese, R. & Jonker, M.https://doi.org/10.1007/978-3-032-18268-5_14

2025

A First Look at the Adoption of BGP-based DDoS Scrubbing Services: A 5-year Longitudinal Analysis (2025)In 2025 21st International Conference on Network and Service Management (CNSM). Khadka, S. K., Bayhan, S., Holz, R., Shokoohi, S., Barcellos, M. & Hesselman, C. E. W.https://doi.org/10.23919/CNSM67658.2025.11297552Double-Edged Sword: An Empirical Study on the Contribution of Cloud Providers in Malicious Infrastructure (2025)In 21st International Conference on Network and Service Management (CNSM). IEEE. Tarahomi Yousofi Sherbaf, S., Sommese, R., Linssen, J. M., Holz, R. & Sperotto, A.https://doi.org/10.23919/CNSM67658.2025.11297506Characterizing Hosting and Security Practices for Public-Facing LDAP Servers (2025)In 2025 21st International Conference on Network and Service Management (CNSM) (Accepted/In press). Luvizotto Cesar, G., Öndarö, G., Kaspereit, J., Ising, F., Schinzel, S., Jonker, M. & Holz, R.Investigating Middlebox Deployment and Characteristics in Dutch Autonomous Systems (2025)In 2025 21st International Conference on Network and Service Management (CNSM). IEEE. Ulukapi, B., Sperotto, A. & Holz, R.Characterizing Hosting and Security Practices for Public-Facing LDAP Servers (2025)[Dataset Types › Dataset]. Zenodo. Luvizotto Cesar, G., Öndarö, G., Kaspereit, J., Ising, F., Schinzel, S., Jonker, M. & Holz, R.https://doi.org/10.5281/zenodo.17019739Towards Understanding Middlebox Deployments in Dutch ASes: Impact of IP Sampling Size (2025)In ANRW '25: Proceedings of the 2025 Applied Networking Research Workshop (pp. 174-176). Association for Computing Machinery (ACM). Ulukapi, B., Sperotto, A. & Holz, R.https://doi.org/10.1145/3744200.3744765Web Crawl Refusals: Insights From Common Crawl (2025)In Passive and Active Measurement: 26th International Conference, PAM 2025, Virtual Event, March 10–12, 2025, Proceedings (pp. 197–214) (Lecture Notes in Computer Science; Vol. 15567). Springer. Ansar, M., Sperotto, A. & Holz, R.https://doi.org/10.1007/978-3-031-85960-1_9

Research profiles

I currently teach:

  • Empirical Security Analysis & Engineering (202100073)

I am a Fellow of the UK's Higher Education Academy.

Affiliated study programs

Courses academic year 2026/2027

Courses in the current academic year are added at the moment they are finalised in the Osiris system. Therefore it is possible that the list is not yet complete for the whole academic year.

Courses academic year 2025/2026

Courses academic year 2024/2025

Address

University of Twente

Zilverling (building no. 11)
Hallenweg 19
7522 NH Enschede
Netherlands

Navigate to location

Organisations

Scan the QR code or
Download vCard