7th TMA PhD School on Traffic Monitoring and Analysis


Hamilton Institute Seminar room 317, 3rd Floor, Eolas Building, North Campus

Sponsored by ACM SIGCOMM and M-lab

PhD School Dates: June 19-20, 2017

About the PhD School

The 7th PhD school on Traffic Monitoring and Analysis (TMA) will continue the tradition of the six former editions covering topics in network monitoring and analysis going from theory to practice. This year’s School will have 3 tutorials, by 3 distinct lecturers, over a 2 day program. Lectures will focus on fundamental aspects of large-scale Internet measurements and analysis techniques that can be explored by students working on different topics. Each lecture is accompanied by a related practical lab session, where students have the opportunity to put in practice learned notions. The program will additionally include 1 keynote from a Senior lecturer,  who will provide a long term view on relevant network measurement research issues as well as on new emerging hot topics.


Lecture recording are now available on YouTube 


  • Ozgu Alay, Senior Research Scientist at Simula, Norway. Her lecture will deal with the basics of distributed active measurement and the related lab will leverage the MONROE mobile broadband measurement platform to provide students with hands-on experience with typical issues related to large scale measurements experiments.
  • Alberto Dainotti, Research Scientist at CAIDA, USA. His lecture will discuss fundamental aspects of continuous acquisition and processing of measurement data streams, with focus on BGP data. In the associated laboratory he will also illustrate BGPstream, a tool developed by his team, and he will show how students can profit from such measurements with practical exercises.
  • Emile Aben, System architect at the RIPE NCC, Netherlands. The lecture will provide an overview of the RIPE Atlas Internet data collection system along with a review of the addressed use-cases. In the related lab students will be asked to design and lunch experiments on the Atlas measurement platform, and to process the collected data to address some given problem.


The provisional schedule of the School is the following:

June 19th, 2017
09:00 – 10:30 MONROE: A Distributed Platform for Mobile Broadband Measurements  Ozgu Alay, SIMULA
10:30 – 11:00 Break with Posters Session
11:00 – 12:30 Lab: Measuring and Assessing the Performance of Mobile Networks with MONROE  Ozgu Alay, SIMULA
12:30 – 13:00 Break with Posters Session
13:00 – 14:00 Lunch
14:00 – 15:30 BGP measurement and live data analysis  Alberto Dainotti, CAIDA
15:30 – 16:00 Break with Posters Session
16:00 – 17:30

Lab: BGP Measurements with BGPstream


Alberto Dainotti, CAIDA

Alistair King, CAIDA, UC San Diego

18:00 – 19:00 Guided tour to of College Chapel
19:00 – 22:00 Dinner – Gate House Restaurant, Maynooth
June 20th, 2017
09:00 – 10:30 Using RIPE Atlas for Network Research  Emile Aben, RIPE Labs
10:30 – 11:00 Break with Posters Session
11:00 – 12:30 Lab: Using RIPE Atlas for Network Research 

Emile Aben, RIPE Labs

Quirin Scheitle, Technical University of Munich

12:30 – 13:00 Break with Posters Session
13:00 – 14:00 Lunch
14:00 – 15:30 Keynote: Digging into Ground Truth in Network Measurements  John Heidemann, Uni. Southern California
15:30 – 16:00 Break with Posters Session
16:00 – 17:30 Group brain storming session
Moderated by school organizers and lectures
17:30 – 17:45 School feedback and questions for the Speakers
18:00 – 20:00 TMA Conference Welcome reception

The PhD School program includes 6 poster sessions where students will present their own (ongoing) PhD work to other students and to the lecturers, and will receive individual feedback from them. The program features informal interactive sessions between students and the speakers, with the explicit goal of fostering vertical interaction between students and the speakers, and horizontal interaction between the students themselves.

Finally, the school program will include social activities on both days, where students, lecturers and attendees of the main TMA conference will have the opportunity to interact informally.

Lectures  and Keynote

Lecture: MONROE: A Distributed Platform for Mobile Broadband Measurements

Mobile broadband (MBB) networks underpin numerous vital operations of the society and are arguably becoming the most important piece of the communications infrastructure. Given the importance of MBB networks, there is a strong need for objective information about their performance, particularly, the quality experienced by the end user. In order to assess the quality experienced by end users, thorough systematic end-to-end measurements are required. In this tutorial, we introduce MONROE, a unique distributed platform for independent, repeatable, multi-homed, large-scale measurements and experiments in operational MBB networks. We first describe the platform and our design choices while building the platform. We then discuss the different measurements that MONROE enables in order to highlight the potential use cases of the platform. Finally, we demonstrate how such a platform can be used to design, schedule and collect measurements for MBB performance assessment.

Lab: Measuring and Assessing the Performance of Mobile Networks with MONROE

Following the tutorial, we provide a lab session where students can have hands-on experience with MONROE platform. For this lab session, the students will be given a certain assignment. To complete the assignment, the students will design an experiment and collect the measurement data using the MONROE platform. They will then analyse the collected data. At the end of the lab session, they will present their finding with a lightning presentation (1-slide). A jury will evaluate the presentations and the best presentation will get an award!

 Speaker: Ozgu Alay, Senior Research Scientist at Simula, Norway.


Dr. Ozgu Alay received the B.S. and M.S. degrees in Electrical and Electronic Engineering from Middle East Technical University, Turkey, and Ph.D. degree in Electrical and Computer Engineering at Tandon School of Engineering at New York University.

Currently, she is a senior research scientist at Simula Research Laboratory and Associate Professor at University of Oslo. Her research interests lie in the areas of mobile broadband networks, multi-path protocols and robust multimedia transmission over wireless networks. She is the coordinator of H2020 MONROE Project and involved in many different national and international projects.


Lecture and Lab: BGP measurement and live data analysis

The Border Gateway Protocol (BGP) is the glue that holds together the networks constituting the Internet. Research based on BGP measurement contributes to improving Internet performance, security, protocol engineering, etc. In this lecture and lab, we will discuss the current state of the art in BGP measurement, live monitoring, and data analysis.  We will then explore in detail, and through practical exercises, how tools and APIs of the BGPStream software framework (bgpstream.caida.org) enable and facilitate Internet research tasks, including combining BGP measurements with data-plane active measurements (e.g., from RIPE Atlas nodes).

  Speaker: Alberto Dainotti, Research Scientist at CAIDA, USA.


Alberto Dainotti is a Research Scientist at CAIDA (Center for Applied Internet Data Analysis), University of California San Diego, USA. In 2008 he received his Ph.D. in Computer Engineering and Systems from  University of Napoli “Federico II”, Italy.

His main research interests are in the fields of Internet measurement and Internet security, with a focus on the detection and analysis of large-scale Internet events, such as botnet activities, Internet blackouts, and BGP hijacking attacks. He co-authored several peer-reviewed papers published at conferences and in scientific journals and is regularly invited speaker at conferences, workshops, and operational meetings (DARPA, FCC, IETF, ISOC, RIPE, NANOG). In 2012 he was awarded the IRTF Applied Networking Research Prize.


Lecture: Large-scale active measurements with RIPE Atlas.

RIPE Atlas is a large scale active measurement platform. With over 9500 measurement vantage points (“probes”) all over the Internet at your fingertips, it is a powerful platform for network operations and research. We’ll introduce the platform, and cover topics like how to get information about probes and measurements already running, the measurement primitives available and how to run your own measurements.

Lab: Large-scale active measurements with RIPE Atlas.

We’ll practice using the RIPE Atlas system by focusing on a few interesting sources and/or destinations. We’ll try to answer questions like: Are there any measurements already in the RIPE Atlas system for these sources/destinations that we can use and analyse? Can we create new measurements for them that will reveal interesting new information?

  Speaker: Emile Aben, System architect at the RIPE NCC, Netherlands.


Emile Aben is a System Architect for the Research and Development department. Prior to that role, he worked in the RIPE NCC Science Group as a research engineer since 2009. In the 10 years before that he worked as a web developer, sysadmin, security consultant and researcher. He is interested in Internet measurement and technology changes like the transition to IPv6. He frequently posts on RIPE Labs. Emile has a MSc. degree in Chemistry from the University of Nijmegen, NL.


Keynote: Digging into Ground Truth in Network Measurements

New network measurements are great—you can learn about the whole world! But new network measurements are horrible—are you sure you learn about the world, and not about bugs in your code or approach? New scientific approaches must be tested and ultimately calibrated against ground truth. Yet ground truth about the Internet can be quite difficult—often network operators themselves do not know all the details of their network. This talk will explore the role of ground truth in network measurement: getting it when you can, alternatives when it’s imperfect, and what we learn when none is available.

  Speaker: John Heidemann, University of Southern California, Information Sciences Institute, USA.


John Heidemann is a senior project leader at the University of Southern California/Information Sciences Institute (USC/ISI) and a research professor at USC in Computer Science. At ISI he leads the ANT (Analysis of Network Traffic) Lab, studying how to observe and analyze Internet topology and traffic to improve network reliability, security, protocols, and critical services. He is a senior member of ACM and fellow of IEEE.



Poster sessions

Session 1 – June 19th, 2017 – 10:30 – 11:00

Database Query Monitoring for Insider Threat Detection  Gokhan Kul
Analyzing Inconsistency of RPKI Cache Servers and the Impact on BGP  Samir Al – Sheikh
Influence of traffic in stochastic behavior of latency  Esteban Carisimo
Quantifying and Enhancing QoE for nomad smartphone user  Alexandre De Masi
Uncovering and analyzing obfuscated web tracking  Hoan Le
 Feasibility of Floating Content in VANETs  Gaetano Manzo


Session 2 – June 19th, 2017 – 12:30 – 13:00

Predicting anycast catchments using unicast traceroutes  Wouter de Vries
Software-Defined Heterogeneous Vehicular Networking for Efficient Resource Management in Dense Moving Networks  Adnan Mahmood
Measurement and analysis of modern web traffic and network protocols  Jawad Manzoor
CLUE: Clustering for Web Mining  Andrea Morichetta
Analyzing web-browsing experience under varying LTE configurations using FLEX-MONROE testbed  Mah-Rukh Fida
HLOC: Hints-Based Geolocation Leveraging Multiple Measurement Frameworks  Patrick Sattler


Session 3 – June 19th, 2017 – 15:30 – 16:00

TreeNET: a subnet-based discovery tool   Jean-François Grailet
Traffic Classification of Mobile Apps through Multi-Classification   Antonio Montieri
Detection and Mitigation of DDoS Attacks at Internet Exchange Points   Marcin Nawrocki
Future Internet Metrology: New metrics and measurement techniques for Web Navigation Quality   Saverimoutou Antoine
Studying Internet Outages from Data and Control Plane   Anant Shah
A Big Data approach for Web Service traffic classification and management   Martino Trevisan


Session 4 – June 20th, 2017 – 10:30 – 11:00

Measuring the Adoption of BGP Route Origin Validation   Andreas Reuter
Monitoring and Analysis of Quality of Experience in Mobile Broadband Networks   Anika Schwind
A QoE-centered management system for Software-Defined Networks   José Suárez-Varela
Streaming Data Analysis Methods for TCP/IP Network Traffic   Daniel Ferreira
Correlating Cyber Incident Information to Establish Situational Awareness in Critical Infrastructures   Giuseppe Settanni
A traffic analysis use case for stateful SDN data plane   Daniele Moro

Session 5 – June 20th, 2017 – 12:30 – 13:00

Big Data Analytics for Network Traffic Monitoring and Analysis   Francesca Soro
Leveraging interdomain stability for squeezed and juicy BGP dynamics   Thomas Green
Recursives in the Wild: Engineering Authoritative DNS Servers   Moritz Mueller
Throughput Prediction in Cellular Networks   Darijo Raca
Fair Benchmarking and Root Cause Analysis in Mobile Networks   Vaclav Raida
Leveraging Machine Learning for Modeling Mobile Broadband Networks   Konstantinos Kousias

Session 6 – June 20th, 2017 – 15:30 – 16:00

Evaluation of DASH Rate Adaptation Algorithms in Operational Mobile Networks   Cise Midoglu
Virtual Machine Allocation in Cloud Data Center   Giuseppe Portaluri
Towards Sibling Validation Using TCP Timestamp Measurements   Minoo Rouhi
Internet Architecture and Security   Quirin Scheitle
Evaluating Network Security Using Internet-wide Measurements   Oliver Gasser
Detecting and characterizing Internet traffic Interception based on BGP hijacking   Danilo Cicalese

PhD Travel Grant

The purpose of this program is to encourage graduate student participation at the TMA PhD School by funding the travel costs (or part thereof) for students who otherwise would be unable to attend.

How to Apply

Students registering to the School may optionally apply for a travel grant. Registrations are open: apply at: https://hotcrp.info.ucl.ac.be/tmaphdschool/

Applications must include:

  • A résumé with complete contact information and correct email address.
  • A short personal statement (1 or 2 paragraphs, no more than 1 page) that includes information that the applicant feels is relevant to support his/her case, e.g., why the PhD School attendance is important to the applicant’s research and career development.
  • A letter from your advisor, which should: (i) confirm the applicant’s good standing in the institution; (ii) explain why the applicant would benefit from attending the TMA PhD School.
  • Students applying for the travel grant should additionally include:
    • The estimated expenses for attending the TMA PhD School (total, and breakdown by travel and lodging), and an indication of which cost items would need to be covered by the grant. If he/she will be unable to attend the School without a travel grant, he/she should explain why this is the case.
    • In this case the advisor letter should additionally explain the current funding status and why the applicant is in need of the travel grant. The advisor’s letter can be sent to this mail address, if the advisor prefers.

Important Dates

Application Deadline: April 15, 2017, 23:59:59 PST

Decision Notification: April 30, 2017

Late applications will not be considered. All the above documents must be submitted by the deadline.


Additional Instructions

Please pay attention to the following details about the student travel grant application and reimbursement process:

  • The School will admit a limited number of students.
  • Students enrolled in PhD study programs will receive preference both in the admission to the School and the travel grant awarding.
  • Students admitted to the school are encouraged to attend the TMA conference.
  • We expect a student travel grant will significantly offset registration, air fare and shared hotel accommodation. However, it may not fully cover these expenses, since our desire is to maximize participation by students. In order to obtain reimbursement, you must provide original receipts for air fare and hotel expenses, along with boarding passes (plane or train) for both outbound and inbound journeys.
  • All students participating in the School are required to present a poster describing his/her research and to actively engage with all activities. Failing to do so will lead to admission rejection.
  • Please provide complete contact information. You will be notified via email, so make sure your email address is correct on your application.
  • The reimbursement process can take some months. The decision on student travel grants is made by the PhD School Organizing Committee. All decisions are final.

Reimbursement Procedure

The detailed procedure to get reimbursed will be announced at a later time.