Dipl.-Ing. Gerhard Münz

Research Staff

postal address

Institut für Informatik der
Technischen Universität München
Lehrstuhl I8
Boltzmannstr. 3

85748 Garching bei München - Germany

contact

Phone: +49 89 289 - 18008
Fax: +49 89 289 - 18033
Email: muenz

net.in.tum.de

visiting address

MI Building
Room: 03.05.053

personal webpage

http://www.net.in.tum.de/de/mitarbeiter/muenz/

Teaching:

Übungen "Grundlagen: Rechnernetze und Verteilte Systeme"

Research Topics:

Traffic measurement and analysis
Attack and anomaly detection

Research Projects:

Running projects: DFG LUPUS. History Project, COST TMA
Finished projects: FP6 DIADEM Firewall

Supervised Theses:

Open:

Bearbeiter/Student	Thema/Topic	Art/Type	Betreuer/Supervisor	Links
offen	Messung von erweiterten Flow-Eigenschaften	DA/BA/MA/SEP	Gerhard Münz, Lothar Braun
offen	Erkennung und Identifizierung gängiger Angriffstypen anhand von Flow-Daten	SEP/DA/BA/MA	Gerhard Münz
offen	Classification of Traffic Flows using DPI	BA	Gerhard Münz, Lothar Braun

Running:

Bearbeiter/Student	Thema/Topic	Art/Type	Betreuer/Supervisor	Links
Alexander Didebulidze	Optimierung eines Netzwerkmonitors fuer 10GE-Netzwerke	Diplomarbeit	Lothar Braun, Gerhard Münz
Daniel Mentz	Sichere und effiziente Übertragung von Verkehrsmessdaten	Diplomarbeit	Lothar Braun, Gerhard Münz
Yukun Huang	Verkehrsklassifizierung mit ML-Methoden	Diplomarbeit	Lothar Braun, Gerhard Münz
Kameliya Terzieva	Export von Netzstatusinformationen aus WLAN-Routern	BA	Andreas Müller, Gerhard Münz

Finished:

Bearbeiter/Student	Thema/Topic	Art/Type	Betreuer/Supervisor	Links
Hui Dai	Verkehrscharakterisierung anhand von Flow-Eigenschaften	Diplomarbeit, 2009	Lothar Braun, Gerhard Münz
Benjamin Wiesmüller	Untersuchung von TCP-Eigenschaften zur Rekonstruktion von Nachrichtenlängen	BA, 2009	Lothar Braun, Gerhard Münz

Publications:

(click here to get a list of BibTex references)

[1]	Lothar Braun, Gerhard Münz, and Georg Carle. Packet sampling for worm and botnet detection in TCP connections. In Proceedings of IEEE/IFIP Network Operations and Management Symposium (NOMS2010), Osaka, Japan, April 2010.
[2]	Gerhard Münz, Hui Dai, Lothar Braun, and Georg Carle. TCP traffic classification using Markov models. In Proceedings of Traffic Monitoring and Analysis Workshop (TMA) 2010, Zurich, Switzerland, April 2010.
[3]	Thomas Dietz, Atsushi Kobayashi, Benoit Claise, and Gerhard Münz. Definitions of managed objects for IP flow information export. Internet-Draft (work in progress), draft-ietf-ipfix-mib-10, January 2010. [ http ]
[4]	Benoit Claise, Paul Aitken, Andrew Johnson, and Gerhard Münz. IPFIX export per SCTP stream. Internet-Draft (work in progress), draft-ietf-ipfix-export-per-sctp-stream-04, October 2009. [ http ]
[5]	Gerhard Münz, Benoit Claise, and Paul Aitken. Configuration data model for IPFIX and PSAMP. Internet-Draft (work in progress), draft-ietf-ipfix-configuration-model-04, October 2009. [ http ]
[6]	Hui Dai, Gerhard Münz, Lothar Braun, and Georg Carle. TCP-Verkehrsklassifizierung mit Markov-Modellen. In Proceedings of Leistungs-, Zuverlässigkeits- und Verlässlichkeitsbewertung von Kommunikationsnetzen und Verteilten Systemen, 5. GI/ITG-Workshop MMBnet 2009, Hamburg, Germany, September 2009.
[7]	Stephan Heckmüller, Gerhard Münz, Lothar Braun, Aaron Kunde, Bernd E. Wolfinger, and Georg Carle. Lasttransformation durch Rekonstruktion von Auftragslängen anhand von Paketdaten. In Proceedings of Leistungs-, Zuverlässigkeits- und Verlässlichkeitsbewertung von Kommunikationsnetzen und Verteilten Systemen, 5. GI/ITG-Workshop MMBnet 2009, Hamburg, Germany, September 2009.
[8]	Daniel Mentz, Gerhard Münz, and Lothar Braun. Recommendations for implementing IPFIX over DTLS. Internet-Draft (work in progress), draft-mentz-ipfix-dtls-recommendations-00, July 2009. [ .txt ]
[9]	Gerhard Münz and Georg Carle. Application of forecasting techniques and control charts for traffic anomaly detection. In Proceedings of the 19th ITC Specialist Seminar on Network Usage and Traffic, Berlin, Germany, October 2008. [ .pdf ]
[10]	Gerhard Münz and Lothar Braun. Lossless compression for IP flow information export (IPFIX). Internet-Draft (work in progress), draft-muenz-ipfix-compression-00, July 2008. [ .txt ]
[11]	Christoph Sommer, Falko Dressler, and Gerhard Münz. Rich template set extension to the IPFIX protocol. Internet-Draft (work in progress),draft-sommer-ipfix-richtemplate-00, July 2008. [ .txt ]
[12]	Gerhard Münz and Georg Carle. Distributed network analysis using TOPAS and Wireshark. In Proceedings of IEEE Workshop on End-to-End Monitoring Techniques and Services (E2EMon 2008), Salvador-Bahia, Brazil, April 2008. [ .pdf ]
[13]	Falko Dressler, Christoph Sommer, and Gerhard Münz. IPFIX flow aggregation. Internet-Draft (work in progress), draft-dressler-ipfix-aggregation-04, November 2007. [ .txt ]
[14]	Gerhard Münz, Nico Weber, and Georg Carle. Signature detection in sampled packets. In Proceedings of Workshop on Monitoring, Attack Detection and Mitigation (MonAM 2007), Toulouse, France, November 2007. [ .pdf ]
[15]	Christoph Sommer, Falko Dressler, and Gerhard Münz. Mediator-specific extensions to IPFIX protocol and information model. Internet-Draft (work in progress), draft-sommer-ipfix-mediator-ext-00, November 2007. [ .txt ]
[16]	Gerhard Münz, Sa Li, and Georg Carle. Traffic anomaly detection using k-means clustering. In Proceedings of Leistungs-, Zuverlässigkeits- und Verlässlichkeitsbewertung von Kommunikationsnetzen und Verteilten Systemen, 4. GI/ITG-Workshop MMBnet 2007, Hamburg, Germany, September 2007. [ .pdf ]
[17]	Gerhard Münz and Georg Carle. Real-time analysis of flow data for network attack detection. In Proceedings of IFIP/IEEE Symposium on Integrated Management 2007 (IM2007), Munich, Germany, May 2007. [ .pdf ]
[18]	Falko Dressler and Gerhard Münz. Flexible flow aggregation for adaptive network monitoring. In Proceedings of IEEE LCN Workshop on Network Measurements2006, Tampa, Florida, USA, November 2006. [ .pdf ]
[19]	Ronny T. Lampert, Christoph Sommer, Gerhard Münz, and Falko Dressler. Vermont - A Versatile Monitoring Toolkit for IPFIX and PSAMP. In Proceedings of Workshop on Monitoring, Attack Detection and Mitigation (MonAM 2006), Tuebingen, Germany, September 2006. [ .pdf ]
[20]	Lothar Braun and Gerhard Münz. Netzbasierte Angriffs- und Anomalieerkennung mit TOPAS. In GI FG SIDAR Graduierten-Workshop über Reaktive Sicherheit (SPRING), SIDAR-Report SR-2006-01, Editor: Ulrich Flegel, Berlin, Germany, July 2006. [ .pdf ]
[21]	Gerhard Münz, Albert Antony, Falko Dressler, and Georg Carle. Using Netconf for configuring monitoring probes. In Proceedings of IEEE/IFIP Network Operations and Management Symposium 2006 (NOMS2006), Poster Session, Vancouver, Canada, April 2006. [ .pdf \| .pdf ]
[22]	Gerhard Münz, Ali Fessi, Georg Carle, Olivier Paul, Dusan Gabrijelcic, Yannick Carlinet, Sherif Yusuf, Morris Sloman, Vrizlynn Thing, Jan van Lunteren, Patricia Sagmeister, and Gero Dittmann. DIADEM firewall: Web server overload attack detection and response. In Proceedings of Broadband Europe (BBEurope) 2005, Bordeaux, France, December 2005. [ .pdf ]
[23]	Falko Dressler, Gerhard Münz, and Georg Carle. CATS - Cooperating Autonomous Detection Systems. In Proceedings of 1st IFIP International Workshop on Autonomic Communication (WAC 2004), Poster Session, Berlin, Germany, October 2004. [ .pdf \| .pdf ]
[24]	Gerhard Münz, Stefan Pfletschinger, and Joachim Speidel. An efficient waterfilling algorithm for multiple access OFDM. In Proceedings of IEEE International Conference on Global Communications (Globecom'02), Taipei, Taiwan, November 2002. [ .pdf ]
[25]	Stefan Pfletschinger, Gerhard Münz, and Joachim Speidel. Efficient subcarrier allocation for multiple access in OFDM systems. In Proceedings of 7th International OFDM-Workshop 2002 (InOWo'02), Hamburg, Germany, pages 21-25, 10-11, September 2002. [ .pdf ]

More Things That Might Be of Interest:

Diploma thesis on "Design and Implementation of a Demonstration Platform for QoS Provisioning", 2003.
Modified version of Trpr (TRace Plot Real-time) 1.9b9 that traces DiffServ flows.
Student's project on "OSPF Link-State Database in GNU Zebra", 2002. Patch download.