Short Bio

I received my Diplom in Computer Science in 2002, from TUM. I then joined the Ph.D. program at the University of Cambridge Computer Laboratory. There, I was one of the brains juggled by Jon Crowcroft, my supervisor and pub coach. In 2006, I moved on to ICIR, where I am a staff member. I'm German, though they say I have a sense of humor.

Research Interests

My research focuses on topics in network architecture, distributed systems, and network security. In the past few years, my work has covered behavioural fingerprinting, prevention and mitigation of network abuse, the duality of identifying the malicious vs. the benign, and generally the hunt for the evil bit.

Conferences & Workshops

• DIMVA 2007, PC member.
• DIMVA 2008, PC member.

Recent Publications

More here.

• Spamalytics: An Empirical Analysis of Spam Marketing Conversion to appear

  C. Kanich, C. Kreibich, K. Levchenko, B. Enright, G. Voelker, V. Paxson, and S. Savage. 15th ACM Conference on Computer and Communications Security (CCS), 27-31 October 2008, Alexandria, VA.

• Principles for Developing Comprehensive Network Visibility to appear

  M. Allman, C. Kreibich, V. Paxson, R. Sommer, N. Weaver. 3rd USENIX Workshop on Hot Topics in Security (HotSec '08), 29 July 2008, San Jose, USA.

• On the Spam Campaign Trail pdf html

  C. Kreibich, C. Kanich, K. Levchenko, B. Enright, G. Voelker, V. Paxson, and S. Savage. First USENIX Workshop on Large-scale Exploits and Emergent Threats (LEET '08), 2008, San Francisco, USA.

Projects

Bro » ultra-flexible traffic analysis

CCIED » fighting Internet epidemics

Honeycomb » automatic signature generation

Miscellaneous

Adsense's JavaScript dissected

Software

Broccoli » let Bro talk to anything

Netdude » pluggable trace manipulation

libstree » generic suffix trees

cache.h » an STL-style cache (painful!)

Rich Stevens' sock program