CS4558 Network Traffic Analysis (Spring AY2014)

CS4558 students -- Please note:

  1. Lecture numbers (L1, L2, etc.) are linked to corresponding lecture notes. Generally, these will appear on this page soon after the lecture. Not all notes are in flowing text; usually they are in bullet form and highlight things we consider important about the area being discussed.
  2. For all lectures, you MUST try and read the assigned papers and/or textbook section BEFORE lecture. You're likely to get the most out of each lecture if you read the material beforehand.
  3. Pay attention to the due dates for homeworks, labs, and other deadlines. All deadlines are hard.
Last updated: Wed Jun 11 18:06:11 2014
Class#DateTopicHandouts,
Assignments
Notes
1 Mon 03/31 Class overview: logistics, goals, the "why", course outline - L0
L1 Tue 04/01 No Lab - -
2 Wed 04/02 Project/Lab review
Sound network measurement, data pitfalls, stats review
Project Logistics,
[P04]
L2
3 Mon 04/07 Distributed systems: CDNs [SCHKB06] L3
L2 Tue 04/08 Intro/tutorial. Begin libpcap analysis Lab 1 Tutorial Code
4 Wed 04/09 Distributed systems: malicious CDNs, fast-flux DNS [HKS11]
Project proposals due
L4
5 Mon 04/14 Hardware: Netflow [SRZ10] L5
L3 Tue 04/15 Libpcap analysis (cont) - -
6 Wed 04/16 Hardware: Fine-grained latencies [KLSV09] L6
7 Mon 04/21 Broadband: View from the gateway [SDFTCP11] L7
L4 Tue 04/22 Project Meetings Sign-Up -
8 Wed 04/23 Outages: Pingin in the Rain [SS11] L8
9 Mon 04/28 Reverse-Engineering the NSA
IPv6: Intro
- L9a
L9b
L5 Tue 04/29 NetFlow analysis Lab 2
Lab 1 Due
Lab 1 Soln
10 Wed 04/30 IPv6: Measuring adoption [DLHCEA12] L10
11 Mon 05/05 IPv6: Security and attacks [BCK06] L11
L6 Tue 05/06 NetFlow analysis (cont) - -
12 Wed 05/07 Topology: Intro, traceroute pitfalls, load-balancing [ACOVFLMT06] L12
13 Mon 05/12 Topology: alias resolution [K10] L13
L7 Tue 05/13 Project Meetings Sign-Up -
14 Wed 05/14 Transport: Data center traffic (DCTCP) [AGMPPPSS10] L14
15 Mon 05/19 Transport: Darknets, Censorship [DSACCRP11] L15
L8 Tue 05/20 Topology inference Lab 3
Lab 2 Due
-
16 Wed 05/21 Transport: Tunnels, Mixnets, Onion Routing [MBGKS08] -
- Mon 05/26 Memorial Day - -
L9 Tue 05/27 Topology inference (cont) - -
17 Wed 05/28 Transport: TCP-HICCUPS [CBA14] L17
18 Mon 06/02 Transport: Watermarks, timing attacks [LH12] L18
L10 Tue 06/03 No Lab - -
19 Wed 06/04 Geo: Fine-grained Geolocation [WBFKH11] L19
20 Mon 06/09 Fingerprinting: Website Fingerprinting [GBKS12] -
L11 Tue 06/10 No Lab Lab 3 Due -
21 Wed 06/11 New: Prefix Hijack Detection [SXWYW12] L20

All notes are Copyright ©2010-2014 Robert Beverly & Justin Rohrer

Permission to make digital or hard copies of part or all of this work for personal use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that the copyright notice appears on the first page. Permission to make digital or hard copies of part or all of this work for classroom use requires prior specific permission and should include the copyright notice on the first page. To copy otherwise, to republish, to post on servers, or to redistribute to lists, requires prior specific permission and/or a fee.