Oliver Gasser, M.Sc.

Research Associate
Image 06610eb3

Postal address

  • Institut für Informatik der
  • Technischen Universität München
  • Lehrstuhl I8
  • Boltzmannstr. 3
  • 85748 Garching bei München - Germany

Contact

  • Tel: +49 89 289 - 18005
  • Fax: +49 89 289 - 18033
  • e-Mail: gasserAtnet.in.tum.de
    (GPG: 79A3 FB45 1F03 930C 9B5F 2192 2967 A665 11A8 FADB)
  • Building/Room: MI Building, 03.05.059

Consultation hours

By arrangement

Research

  • Internet-wide scanning of hosts and networks
  • Analysis and measurements in the Internet
  • Security of network protocols and their deployment
  • Analysis of network flow data
  • DNS deployment

projects

  • AutoMon: Automatisiertes Performance-Monitoring (2016 – 2019)
  • X-Check: Detection of Security Incidents at IXPs (2016 – 2019)
  • Peeroskop: Peering Monitor and Microscopic Analysis of the Internet (2012 – 2015)

Teaching

Supervised Theses

Open

Title Type Advisors Links
CAA Records – Can You Trick the CAs? BA, MA, GR Quirin Scheitle, Oliver Gasser, Ralph Holz, Johannes Naab Pdf
Traceable Measurement Result Publication in Append-only Ledgers MA, IDP, Hiwi Oliver Gasser, Quirin Scheitle Pdf
Continuous Development of Open Source C++ Flow Toolkit HiWi Oliver Gasser Pdf
Comparing IPv4 and IPv6 Paths in the Internet MA Quirin Scheitle, Oliver Gasser, Minoo Rouhi Vejdani Pdf
Advanced Flow Functions for Traffic Anomaly Detection IDP, MA Oliver Gasser, Johannes Naab Pdf
Collecting Flow Data at High Rates MA, IDP Oliver Gasser Pdf
Leveraging extended flow data for botnet detection MA, IDP Oliver Gasser, Johannes Naab Pdf

In progress

Student Title Type Advisors Links
Samy Deib Detecting IPv6-IPv4 Sibling Pairs Based on few Data Points BA Quirin Scheitle, Oliver Gasser, Minoo Rouhi Pdf
Florens Werner Finding Active IPv6 Addresses BA Quirin Scheitle, Oliver Gasser Pdf
Michael Brunner Multi-protocol Path Topology Evaluation BA Minoo Rouhi, Dominik Scholz, Oliver Gasser Pdf
Maximilian Pudelko Payload Extraction for Flows with Anomalous TTL Behaviour IDP Quirin Scheitle, Oliver Gasser, Paul Emmerich Pdf
Florens Werner Finding Active IPv6 Addresses BA Quirin Scheitle, Oliver Gasser Pdf
Fabian Raab Influence of BGP Community Attributes on Routing and Internet Traffic IDP Oliver Gasser, Quirin Scheitle, Christoph Dietzel Pdf
Markus Sosnowski Internet-Wide Assessment of TCP Options BA Quirin Scheitle, Oliver Gasser, Minoo Rouhi, Paul Emmerich, Dominik Scholz Pdf
Karol Babioch TLS Man-in-the-Middle Detection by Means of Passive Monitoring MA Oliver Gasser, Minoo Rouhi, Quirin Scheitle
Hendrik Eichner Revisiting SSH Security in the Internet BA Oliver Gasser, Minoo Rouhi Pdf
Max Helm Evaluating TLS Certificate Transparency Logs using Active Scans IDP Oliver Gasser, Benjamin Hof Pdf
Jan-Philipp Lauinger Evaluating Client Discrimination in Anonymization Networks Using Active Network Scans Forschungspraxis Oliver Gasser, Sree Harsha Totakura Pdf
Patrick Sattler Parsing geographical locations from DNS names IDP Quirin Scheitle, Oliver Gasser
Michael Köpferl Evaluation of amplification attacks in large-scale networks to improve detection performance IDP Oliver Gasser, Stefan Metzger

Finished

Author Title Type Advisors Links
Alexander Schulz Identification of IPv6-IPv4 Sibling Pairs from Passive Observations BA Quirin Scheitle, Oliver Gasser, Minoo Rouhi Pdf
Nadja Schricker Active Security Evaluation with Network Scans BA Oliver Gasser, Quirin Scheitle
Johannes Fischer Browser-based Internet connection testing MA Florian Wohlfart, Oliver Gasser Pdf
Jonas Heintzenberg Browser-based Internet connection testing BA Florian Wohlfart, Oliver Gasser Pdf
Paulin Tchonin TTL Analysis for DDoS Defense MA Quirin Scheitle, Oliver Gasser, Paul Emmerich
Pirmin Blanz IPv6 TLS Security Scanning MA Oliver Gasser, Quirin Scheitle
Patrick Sattler Parsing geographical locations from DNS names GR Quirin Scheitle, Oliver Gasser
Frank Schmidt Large Scale DNS Scanner in Go MA Johannes Naab, Oliver Gasser Pdf
Christian Sturm Detection of malicious packets through inbound Time to Live headers BA Quirin Scheitle, Oliver Gasser, Felix von Eye Pdf
Patrick Sattler Parsing geographical locations from DNS names BA Quirin Scheitle, Oliver Gasser, Johannes Naab Pdf
Michael Domke DNS in a Box – Testing for Reproducible Network Scans BA Johannes Naab, Oliver Gasser Pdf
Katharina Rudert Botnet Detection using Machine Learning on Flow Data MA Johannes Naab, Oliver Gasser Pdf
Andreas Loibl Measurement Proxy for distributed Network Measurements BA Johannes Naab, Oliver Gasser
Arno Hilke Advancing malicious packet detection through inbound Time to Live headers BA Quirin Scheitle, Oliver Gasser, Paul Emmerich, Felix von Eye Pdf
Victor Sosa Large-scale Flow Collection IDP Oliver Gasser Pdf
Albert Khakimullin Real-time Amplification Attack Detection IDP Oliver Gasser, Felix von Eye Pdf
Dmitry Chokovski Comparing IPv4 and IPv6 Latency on the Internet BA Paul Emmerich, Quirin Scheitle, Oliver Gasser Pdf
Fabian Raab Modeling and Analysis of BGP Community Attributes BA Oliver Gasser, Johann Schlamp
Till Wickenheiser Correlating inbound Time to Live header data to network characteristics BA Quirin Scheitle, Oliver Gasser, Paul Emmerich, Felix von Eye Pdf
Minoo Rouhi Vejdani Comparing IPv4 and IPv6 hosts and paths in the Internet MA Quirin Scheitle, Oliver Gasser, Paul Emmerich Pdf
Zhechko Zhechev Asymmetric Route Detection using Return TTLs BA Oliver Gasser, Quirin Scheitle Pdf
Sebastian Gebhard IPv6 Scanning - Smart Address Selection and Comparison to Legacy IP MA Oliver Gasser, Quirin Scheitle Pdf
Felix Emmert Messung und Evalution der Verbreitung von IPMI-Geräten mit aktiven Scans BA Oliver Gasser
Michael Köpferl Effective Visualization of Amplification Attacks in Amplifier Networks BA Oliver Gasser, Felix von Eye
Timm Böttger Amplification Attack Detection MA Oliver Gasser, Lothar Braun, Felix von Eye Pdf
Matthias Jaros Deployment and orchestration of network measurements using the PlanetLab testbed BA Ralph Holz, Oliver Gasser
Nils Mäurer Efficient scans of large research networks BA Ralph Holz, Oliver Gasser
Johannes Naab Scannning and Evaluating DNS Deployments in the Internet MA Oliver Gasser, Ralph Holz, Johann Schlamp

Publications

2017.11 Johanna Amann, Oliver Gasser, Quirin Scheitle, Lexi Brent, Georg Carle, Ralph Holz, “Mission Accomplished? HTTPS Security after DigiNotar,” in Proceedings of the Internet Measurement Conference (IMC 2017), London, UK, Nov. 2017. [Bib]
2017.08 Quirin Scheitle, Matthias Wählisch, Oliver Gasser, Thomas C. Schmidt, Georg Carle, “Towards an Ecosystem for Reproducible Research in Computer Networking,” in ACM SIGCOMM Reproducibility Workshop, Los Angeles, USA, Aug. 2017. [Pdf] [Bib]
2017.06 Quirin Scheitle, Oliver Gasser, Minoo Rouhi, Georg Carle, “Large-Scale Classification of IPv6-IPv4 Siblings with Variable Clock Skew,” in Network Traffic Measurement and Analysis Conference (TMA), Jun. 2017. [Pdf] [Slides] [Rawdata] [Recording] [Arxiv] [Bib]
2017.06 Quirin Scheitle, Oliver Gasser, Patrick Sattler, Georg Carle, “HLOC: Hints-Based Geolocation Leveraging Multiple Measurement Frameworks,” in Network Traffic Measurement and Analysis Conference (TMA), Best Dataset Award, Dublin, Ireland, Jun. 2017. [Pdf] [Slides] [Rawdata] [Arxiv] [Bib]
2017.05 Oliver Gasser, Quirin Scheitle, Carl Denis, Nadja Schricker, Georg Carle, “Security Implications of Publicly Reachable Building Automation Systems,” in Proc. 2nd Int. Workshop on Traffic Measurements for Cybersecurity, San Jose, CA, USA, May 2017. [Pdf] [Bib]
2017.02 Oliver Gasser, Quirin Scheitle, Carl Denis, Nadja Schricker, Georg Carle, “Öffentlich erreichbare Gebäudeautomatisierung: Amplification-Anfälligkeit von BACnet und Deployment-Analyse im Internet und DFN,” in 24. DFN-Konferenz Sicherheit in vernetzten Systemen, Hamburg, Germany, Feb. 2017. [Pdf] [Bib]
2016.04 Oliver Gasser, Quirin Scheitle, Sebastian Gebhard, Georg Carle, “Scanning the IPv6 Internet: Towards a Comprehensive Hitlist,” in Proc. 8th Int. Workshop on Traffic Monitoring and Analysis, Louvain-la-Neuve, Belgium, Apr. 2016. [Url] [Pdf] [Slides] [Bib]
2016.04 Oliver Gasser, Felix Emmert, Georg Carle, “Digging for Dark IPMI Devices: Advancing BMC Detection and Evaluating Operational Security,” in Proc. 8th Int. Workshop on Traffic Monitoring and Analysis, Louvain-la-Neuve, Belgium, Apr. 2016. [Pdf] [Bib]
2015.04 Timm Böttger, Lothar Braun, Oliver Gasser, Felix von Eye, Helmut Reiser, Georg Carle, “DoS Amplification Attacks – Protocol-Agnostic Detection of Service Abuse in Amplifier Networks,” in Proc. 7th Int. Workshop on Traffic Monitoring and Analysis, Barcelona, Spain, Apr. 2015. [Pdf] [Bib]
2015.04 Johann Schlamp, Ralph Holz, Oliver Gasser, Andreas Korsten, Quentin Jacquemart, Georg Carle, Ernst W. Biersack, “Investigating the Nature of Routing Anomalies: Closing in on Subprefix Hijacking Attacks,” in Proc. 7th Int. Workshop on Traffic Monitoring and Analysis, Barcelona, Spain, Apr. 2015. [Pdf] [Bib]
2015.02 Felix von Eye, Timm Böttger, Helmut Reiser, Lothar Braun, Oliver Gasser, Georg Carle, “Detektion und Prävention von Denial-of-Service Amplification Attacken – Schutz des Netzes aus Sicht eines Amplifiers,” in Sicherheit in vernetzten Systemen: 22. DFN-Konferenz, Norderstedt, Deutschland, Feb. 2015, 1. Aufl., pp. H-1–H-13. [Bib]
2014.05 Oliver Gasser, Ralph Holz, Georg Carle, “A deeper understanding of SSH: results from Internet-wide scans,” in Proc. 14th Network Operations and Management Symposium (NOMS), Krakow, Poland, May 2014. [Pdf] [Bib]