6th PhD School on Traffic Monitoring and Analysis

The 6th PhD School on Traffic Monitoring and Analysis (TMA) will continue the tradition of the former editions covering topics in network monitoring and analysis going from theory to practice. This year's School will have five classes, poster sessions where students will have the opportunity to discuss their work, and an interactive session in which students will discuss research topics with specialists.

Speakers & Schedule

Matthew Roughan (University of Adelaide)How I Learned to Stop Worrying and Love Traffic Matrices

Olivier Bonaventure (Université catholique de Louvain)Multipath TCP

Jeremy Blackburn & Matteo Varvello (Telefonica I+D)Is the Web HTTP/2 yet?

Fabián E. Bustamante (Northwestern University)Internet-Scale Experimentation

The PhD school takes place in the Carnoy building, room Jean-Baptiste Carnoy (b.059), Place Croix du Sud 4-5, 1348 Louvain-la-Neuve.

Here is a map showing the location of the Carnoy building, the Ibis hotel, and the train station.

April 5th, 2016

09:00 - 10:30 Lecture # 1 (Matthew Roughan, speaking from Adelaide) - Slides

10:30 - 11:00 Posters - Session 1

11:00 - 12:30 Lecture # 1 (Matthew Roughan, speaking from Adelaide) - Slides

12:30 - 13:00 Posters - Session 2

13:00 - 14:00 Lunch

14:00 - 15:30 Lecture # 2 (Olivier Bonaventure) - Slides

15:30 - 16:00 Posters - Session 3

16:00 - 17:30 Lecture # 2 (Olivier Bonaventure) - Slides

17:30 - 18:00 Posters - Session 4

19:30 - 22:00 Social Event

Il Doge

Agora 22, 1348 Louvain-la-Neuve (Map)

April 6th, 2016

09:00 - 11:00 Lecture # 3 (Jeremy Blackburn & Matteo Varvello, speaking from Barcelona) - Slides

11:00 - 11:30 Posters - Session 5

11:30 - 13:00 Interactive Session 1 (Fabio Ricciato & Olivier Bonaventure)

13:00 - 14:30 Lunch

University restaurant Le Sablon

Rue du Sablon, 1348 Louvain-la-Neuve (Map)

14:30 - 15:00 Toy Exercise in Measurement Data Analysis (Fabio Ricciato) - Assignment Description - Solution

15:00 - 16:30 Lecture # 4 (Fabián E. Bustamante) - Slides

16:30 - 17:00 Break

17:00 - 18:30 Lecture # 4 (Fabián E. Bustamante) - Slides

18:30 - 18:45 Best Poster Award & Closing

19:00 - 22:00 TMA Workshop Reception

La Fleur de Sel (university restaurant)

Grand rue 30, 1348 Louvain-la-Neuve (Map)

Lectures

How I Learned to Stop Worrying and Love Traffic Matrices (by Matthew Roughan)

Abstract

There are a large class of network optimisation papers that begin (in subtext) with "And God gives you a traffic matrix". These matrices form the basic input to the optimisation, but they are not at all easy to obtain. Today, it's possible to measure your Internet traffic with tools such as Netflow, but the traffic matrix requires more than just traffic data; it requires a synthesis of traffic + routing + topology, so its still uncommon to see real instances. This talk will describe the history of exploration of these complex beasts in the Internet, their measurement, inference, and application. And we'll talk about our most recent work on modelling these using Maximum Entropy methods, to provide techniques for the research community to use to generate synthetic traffic matrices.

Download Slides

Bio

Prof. Matthew Roughan is a Professor in the School of Mathematical Sciences at the University of Adelaide, in South Australia and a Chief Investigator in the ARC Centre of Excellence for Mathematical & Statistical Frontiers (ACEMS). His research interests range from stochastic modelling to measurement and management of networks like the Internet. He has worked with network operators such as AT&T in the United States, and equipment vendors such as Ericsson.

Multipath TCP (by Olivier Bonaventure)

Abstract

The Transmission Control Protocol (TCP) is used by the vast majority of applications to transport their data reliably across the Internet and in the cloud. TCP was designed in the 1970s and has slowly evolved since then. Today's networks are multipath: mobile devices have multiple wireless interfaces, datacenters have many redundant paths between servers, and multihoming has become the norm for big server farms. Meanwhile, TCP is essentially a single-path protocol: when a TCP connection is established, the connection is bound to the IP addresses of the two communicating hosts and these cannot change. Multipath TCP (MPTCP) is a major modification to TCP that allows multiple paths to be used simultaneously by a single transport connection. Multipath TCP circumvents the issues mentioned above and several others that affect TCP. The IETF published the Multipath TCP RFC in January 2013 and an implementation in the Linux kernel is available today from http://www.multipath-tcp.org

This tutorial will present in details the design of Multipath TCP. We will start with a presentation of the current Internet landscape and explain how various types of middleboxes have influenced the design of Multipath TCP. Second we will describe the key design choices for the connection establishment and release procedures as well as the data transfer mechanisms. We will then discuss several use cases for the deployment of Multipath TCP including improving the performance of datacenters, mobile WiFi offloading on smartphones and IPv4/IPv6 coexistence.

Download Slides

Bio

Olivier Bonaventure is Professor at Université catholique de Louvain where he leads the IP Networking Lab (http://inl.info.ucl.ac.be). His research interests include Internet protocols, traffic engineering, routing Internet measurements and network management. He is interested in both fundamental and applied research. His PhD students have developed several open-source software packages including the C-BGP simulator, OpenLISP and the shim6, Multipath TCP and IPv6 Segment Routing implementations in the Linux kernel. He has published more than eighty papers in various scientific journals and conferences and has directed ten PhD thesis. He also contributes to the IETF and has been granted several patents. Olivier Bonaventure received several awards as a researcher (Alcatel-Bell prize, INFOCOM 2007 best paper award, USENIX NSDI 2012 community award) and teacher (Wernaers prize for the development of online courses, Saylor.org prize for the open textbook Computer Networking : Principles, Protocols and Practice). He currently serves as editor for SIGCOMM Computer Communication Review.

Is the Web HTTP/2 yet? (by Jeremy Blackburn & Matteo Varvello)

Abstract

Version 2 of the Hypertext Transfer Protocol (HTTP/2) was finalized in May 2015 as RFC 7540. It addresses well-known problems with HTTP/1.1 (e.g., head of line blocking and redundant headers) and introduces new features (e.g., server push and content priority). Though HTTP/2 is designed to be the future of the web, it remains unclear whether the web will (or should) hop on board. To shed light on this question, we built a measurement platform that monitors HTTP/2 adoption and performance across the Alexa top 1 million websites on a daily basis. Our system is live and up-to-date results can be viewed at http://isthewebhttp2yet.com. In this lecture, I will first introduce H2 and the results obtained via our measurement infrastructure. Next, I will discuss the lessons learned along with a set of challenges common across network measurements.

Download Slides

Bio

Jeremy Blackburn is an associate researcher Telefonica Research in Barcelona, Spain. In 2014, he received the PhD in Computer Science and Engineering from the University of South Florida in Tampa, Florida USA. At Telefonica, Jeremy has worked on analysis of the social forces at play in usage of mobile data services, privacy preserving systems, big data systems for graph processing, and technology to offload computational tasks from mobile devices to the cloud. In the past, Jeremy has been involved in building P2P social network systems, systems to build, collect, and analyze longitudinal social network data, and analysis and prediction of unethical behavior in online video games. Prior to his career in research, Jeremy was a principal developer and systems architect, working on digital rights management and content delivery systems. Jeremy's recent research focuses include security and privacy on the web, mobile systems, and cyberbullying and toxic behavior in the online world.

Matteo Varvello is a researcher at Telefonica Research and Development (Barcelona, Spain) since September 2014. Prior to this, he spent 4.5 years at Bell Labs in Holmdel (New Jersey, USA) as a Member of Technical Staff, from January 2010 until July 2014. From March 2006 until December 2009, he was a member of the research group of Technicolor (Paris, France). He holds a doctoral degree from the Computer Science Department of ParisTech, (France, December 2009). His doctoral thesis investigates the design and deployment of a peer-to-peer architecture for network virtual environments. In 2006, he received the MS. in Networking Engineering from Polytechnic of Turin (Turin, Italy) and the Eurecom Institute (Sophia Antipolis, France). His master thesis was awarded the Hitachi price for best thesis in communication (November, 2006). He has participated to the technical program committee of several international conferences, authored more than 40 peer reviewed papers, and hold 16 patents. His current research interests include network measurements, privacy, lawful interception, and software-defined networking.

Internet-Scale Experimentation (by Fabián E. Bustamante)

Abstract

Internet-scale Experimentation is a seminar exploring the challenges of large-scale networked system experimentation and measurements. Over the last few decades, networked systems have become an integrated part of everyday life and a critical piece of our economic, educational, health and defense systems. This fact is normally brought up as evidence of the success and broader impact of our field of work.

The other, typically avoided, side of the story is the complications that this translates into for experimentalists. Today it is virtually impossible to run a randomized controlled experiment at even fractions of the scale of many of our systems. Despite this, as we explore new ideas in these uncharted territories we are reasonably asked to provide better evidence of the effects of interventions. In this course we will discuss recent and ongoing on networked systems experimentation and their applications that address some of the key challenges.

Download Slides

Bio

Fabián E. Bustamante is a Professor of Computer Science in the Department of Electrical Engineering and Computer Science at Northwestern University. Fabián completed his M.Sc. and Ph.D. in Computer Science from the Georgia Institute of Technology in 1997 and 2001, respectively, working under the direction of Dr. Karsten Schwan. Before going to Georgia Tech, he studied and taught at the Universidad Nacional de La Patagonia San Juan Bosco (Argentina), from which he received both a 3-year and a 5-year-and-project degrees in computer science. His research interests span several areas of experimental systems, with a focus on large-scale distributed computing in wide-area and mobile networks. Fabián is a senior ACM member, a member of USENIX and the IEEE. Fabián is a recipient of the National Science Foundation CAREER award and the Science Foundation of Ireland E.T.S. Walton Visitor Award.

Poster Sessions

Session 1 - April 5th, 2016 - 10:30 - 11:00

Aleks Huc (University of Ljubljana) Real-time Tracking and Prediction of User Movement in Computer Networks

Antonio Montieri (NM2 srl/University of Napoli Federico II) A Platform for Monitoring Public-Cloud Networks

Fernando Morales (University of Chile) Internet Robustness Metrics

Wouter de Vries (University of Twente) Anycast and Its Potential for DDoS Mitigation

Esteban Carisimo (Universidad de Buenos Aires) Revisiting RTT Models

Sarah Wassermann (Universite de Liege) On the Analysis of Internet Paths with DisNETPerf, a Distributed Paths Performance Analyzer

Viet Hoang Tran (UCL) Multipath TCP in Action: A View From Server-Side

Xiao Chen (UCL) -

Session 2 - April 5th, 2016 - 12:30 - 13:00

Jose Rafael Suarez-Varela Macia (UPC) Early Classification of Network Traffic for Software-Defined Network Management

Luuk Hendriks (University of Twente) What You See != What You Get: Measurements on IPv6

Oliver Gasser (Technical University of Munich) Internet Security Evaluation using Active and Passive Network Measurements

Diego Neves da Hora (Technicolor) A Method for Measurement and Diagnosis of Home Wi-Fi Network Performance

David Lebrun (UCL) -

Steven Gay (UCL) -

Session 3 - April 5th, 2016 - 15:30 - 16:00

Quirin Scheitle (Technische Universitat Munchen) Internet Architecture and its Security Implications

Daniel Martin Weibel (Politecnico di Milano) Millimetre Waves for 5G (And Beyond) Mobile Networks

Enrico Bocchi (Telecom Paristech) Web Quality of Experience -- Beyond DOM and onLoad

Balu Deokate (University of Ljubljana) Secure Distributed Architecture for Crowd-Sourced Mobile Network

David Muelas (Universidad Autonoma de Madrid) Extracting Knowledge from Traffic Monitoring and Analysis in the Scope of the Future Internet

Quentin De Coninck (UCL) A First Analysis of Multipath TCP on Smartphone

Bushra AlAhmadi (University of Oxford) Malware Detection through Dialog Correlation in Software Defined Networks (SDN)

Jawad Manzoor (UCL) Independent and Scalable Monitoring of Complex Cloud-Based Services

Session 4 - April 5th, 2016 - 17:30 - 18:00

Olivier Tilmas (UCL) Centralizing Control of Distributed Networks

Gabriel Fernando Davila Revelo (Universidad de Buenos Aires) Towards an Improved Internet Topology Model

Martino Trevisan (Politecnico di Torino) Web Service Classification Using Addresses and DNS

Alexandre De Masi (University of Geneva) MIQModel: Predictive Model for Mobile Internet

Jessica Steinberger (University of Applied Sciences Darmstadt) Real-time DDoS Defense: A collaborative Approach at Internet Scale

Simon Lienardy (Universite de Liege) -

Session 5 - April 6th, 2016 - 11:00 - 11:30

Christian Dietz (Universitat der Bundeswehr Munchen) Proactive Botnet Detection and Defense at Internet Scale: A Collaborative Approach

Danilo Cicalese (Telecom Paristech) Anycast Detection and Geolocation

Luca Vassio (Politecnico di Torino) Find and Study User Actions from HTTP Traces

Giulia De Santis (Inria - Nancy Grand Est) Modeling and Analysis of Advanced Persistent Threats

Moritz Muller (SIDN) Detecting Malicious Domain Names from a Top-Level-Domain Perspective

Lionel Metongnon (UCL) Detection and Mitigation of Intrusion in the Internet of Things

Zahaib Akhtar (University of Southern California) Actionable Measurements for Systems Design

Jean-Francois Grailet (Montefiore Institute) -

Benjamin Hesmans (UCL) -

Best Poster Award - April 8th, 2016 - 12:25

The purpose of this program is to encourage graduate student participation at the TMA PhD School by funding the travel costs (or part thereof) for students who otherwise would be unable to attend.

How to Apply

Please submit your application by clicking here. Applications must include:

• A résumé with complete contact information and correct email address.

• A short personal statement (1 or 2 paragraphs, no more than 1 page) that includes information that the applicant feels is relevant to support his/her case, e.g., why the PhD School attendance is important to the applicant's research and career development. It must include the estimated expenses for attending the TMA PhD School (total, and breakdown by travel and lodging) and an indication of which cost items would need to be covered by the grant. If you will be unable to attend the School without a travel grant, please explain why this is the case.

• A letter from your adviser, which should: (i) confirm the applicant's good standing in the institution; (ii) explain why the applicant would benefit from attending the TMA PhD School; and (iii) explain the current funding status and why the applicant is in need of the travel grant. This adviser's letter can be sent to idilio.drago@polito.it if your adviser prefers.

Important Dates

Application Deadline: February 15, 2016, 23:59 CET

Decision Notification: February 22, 2016

Late applications will not be considered. All the above documents must be submitted by the deadline.

Additional Instructions

Please pay attention to the following details about the student travel grant application and reimbursement process:

• You must be a PhD student at the time of attending the TMA PhD School to qualify for a travel grant.

• We expect a student travel grant will significantly offset registration, air fare and shared hotel accommodation. It may not fully cover these expenses, however, since our desire is to maximize participation by students. In order to obtain reimbursement, you must provide original receipts for air fare and hotel expenses, along with boarding passes (plane or train) for both outbound and inbound journeys.

• All students participating in the School are required to present a poster describing his/her research and to actively engage with all activities. Failing to do so will lead to grant cancellation.

• Please provide complete contact information. You will be notified via email, so make sure your email address is correct on your application.

• The reimbursement process can take some months. The decision on student travel grants is made by the PhD School Organizing Committee. All decisions are final.

Reimbursement Procedure

Only students that are awarded a grant should follow these instructions. The contact persons for the reimbursement of travel costs are: Ramin Sadre (ramin.sadre [a t] uclouvain.be) and Idilio Drago (idilio.drago@polito.it)

Procedure to get reimbursed:

1. Keep all invoices of travel ticket purchases and hotel reservations.
2. Keep the boarding passes (plane or train), both outbound and inbound.
3. Request to your bank the details (SWIFT/IBAN codes) of the account where you want to receive the reimbursement.
4. Make a photocopy of your ID or Passport.
5. Fill in and sign the reimbursement form (click here to download it).
6. AFTER the TMA conference, put everything (items 1, 2, 3, 4 and 5) in an envelope, and send it to the following postal address before May 15th:

    Universite Catholique de Louvain
    A l'attention de Mme Renard Sophie

    Pole d'ingenierie Informatique
    Department of computing science and engineering
    Batiment REAUMUR
    Place Sainte Barbe 2 bte L5.02.01
    B-1348 LOUVAIN-LA-NEUVE, Belgium

Do not forget to put the sender postal address in the envelope!

Organizers

Fabio RicciatoUniversity of Ljubljana, Slovenia

Idilio DragoPolitecnico di Torino, Italy

Ramin SadreUniversite Catholique de Louvain, Belgium

Contact

tma2016-chairs@googlegroups.com