Skip to Content
[CAIDA - Center for Applied Internet Data Analysis logo]
Center for Applied Internet Data Analysis
Alberto Dainotti
photo

Research Scientist
office: San Diego Supercomputer Center, room 331
phone: 858-534-9249
email: alberto AT caida DOT org
address: San Diego Supercomputer Center
              University of California San Diego
              9500 Gilman Drive, MC 0505
              La Jolla, CA 92093-0505


My Google Scholar page

Curriculum Vitae

Updates

new [Jul 2016] I have been awarded a research grant from Cisco Systems for our work on BGPStream and to collaborate with them to add native support to OpenBMP.

new [Jul 2016] Our paper on BGPStream will appear at IMC 2016.

new [Jul 2016] Read about the CAIDA BGP Hackathon 2016 on ACM SIGCOMM CCR.

[Feb 2016] I'm organizing the 1st CAIDA BGP Hackathon together with USC, RIPE NCC, Route Views, FORTH, UFMG.

[Nov 2015] Check out my invited talk at IETF 94 Measuring and Monitoring BGP

[Nov 2015] We just released BGPStream v1.0

[Sep 2015] Check out our latest paper at IMC 2015 on Leveraging Internet Background Radiation for Opportunistic Network Analysis

[Apr 2015] We published a follow-up analysis of the sipscan at TMA 2015: How Dangerous Is Internet Scanning? A Measurement Study of the Aftermath of an Internet-Wide Scan

[Dec 2014] North Korea got disconnected from the Internet a few times in the last days of 2014. We published a live graph of its BGP reachability status as a preview of our work on detecting and characterizing Internet outages

[Oct 2014] We published a technical report on our Internet census

[Aug 2014] Check our blog post about the recent Time Warner Cable outage

[Aug 2014] Submit your paper to the special issue on the International Journal of Network Management on ``Measure, Detect and Mitigate: Challenges and Trends in Network Security'' (Deadline 1st of December)

[Aug 2014] Our paper on discovering network tarpits in collaboration with Lance and Rob @ CMAND @ NPS was accepted at the Annual Computer Security Applications Conference (ACSAC), 2014.

[Jan 2014] New estimates of IPv4 address space usage in our paper accepted at ACM SIGCOMM CCR: ``Estimating Internet address space usage through passive measurements''

[May 2013] Check out our blog post about the scans from the Carna botnet. Cited also by WIRED (link)

[Dec 2012/Mar 2013] USENIX published the video of my invited talk at USENIX LISA '12 and also a report of it in USENIX Login magazine

[Dec 2012] Check out our blog post on observing the Syrian Internet blackout from the UCSD Network Telescope

[Sep 2012] Our research activity on Internet outages has been covered in September issue of Communications of the ACM Magazine (link)
..more press coverage also at Heise Online (if you can read Deutsch)

[Jul 2012] Our paper ``Analysis of a "/0" Stealth Scan from a Botnet'' has been accepted at IMC 2012

[Jun 2012] Our work on exploiting malware traffic pollution for detecting and analyzing Internet outages has been awarded as one of the three best papers in ACM SIGCOMM Computer Communication Review of the past 12 months. I will present it in a special session at SIGCOMM 2012

[Jun 2012] I've been awarded the IRTF Applied Networking Research Prize 2012 (link)

[Mar 2012] We've been "press-released" :) And covered by the WSJ blog, among others

[Jan 2012] Our work on exploiting malware traffic pollution for detecting and analyzing Internet outages has been published on ACM SIGCOMM Computer Communication Review, January 2012

[Jan 2012] Our paper entitled "Issues and Future Directions in Traffic Classification" has been published on IEEE Network, January 2012

[Nov 2011] Our work on the Internet "kill switch" in Libya and Egypt has been presented at IMC 2011, Berlin, November 2012

Short Bio

Alberto Dainotti is a Research Scientist at CAIDA (Center for Applied Internet Data Analysis), University of California San Diego, USA. In 2008 he received his Ph.D. in Computer Engineering and Systems at the Department of Computer Engineering and Systems of University of Napoli "Federico II", Italy. His main research interests are in the field of Internet measurement and network security, with a focus on the analysis of large-scale Internet events. He co-authored several peer-reviewed papers published at conferences and in scientific journals and is regularly invited speaker at conferences, workshops, and operational meetings (DARPA, FCC, IETF, ISOC, RIPE). In 2012 he was awarded the IRTF Applied Networking Research Prize. He regularly serves for the European Commission and the US National Science Foundation as an independent reviewer of projects of project proposals.

Research Interests

Internet Measurement, Traffic Analysis, Traffic Classification, Network Security

Publications

Journals

Lost in Space: Improving Inference of IPv4 Address Space Utilization
A. Dainotti, K. Benson, A. King, B. Huffaker, E. Glatz, X. Dimitropoulos, P. Richter, A. Finamore, A. Snoeren
IEEE Journal on Selected Areas in Communications (J-SAC), in press, 2016

Estimating Internet address space usage through passive measurements
A. Dainotti, K. Benson, A. King, K. C. Claffy, M. Kallitsis, E. Glatz, X. Dimitropoulos
ACM SIGCOMM Computer Communication Review -- Volume 44 Issue 1, January 2014. Pages 42-49

Analysis of a "/0" Stealth Scan from a Botnet
A. Dainotti, A. King, K. C. Claffy, F. Papale, A. Pescapè
IEEE/ACM Transactions on Networking - vol.23, no.2, pp.341,354, April 2015

Analysis of Country-wide Internet Outages Caused by Censorship
A. Dainotti, C. Squarcella, E. Aben, K. C. Claffy, M. Chiesa, M. Russo, A. Pescapè,
IEEE/ACM Transactions on Networking - vol.22, no.6, pp.1964,1977, Dec. 2014.

Traffic Identification Engine (TIE): an Open Platform for Traffic Classification
W. de Donato, A. Dainotti, A. Pescapè,
IEEE Network - vol.28, no.2, pp.56, 64, March-April 2014

A Coordinated View of the Temporal Evolution of Large-scale Internet Events
A. King. B. Huffaker, A. Dainotti, K. C. Claffy
Computing (Springer), January 2013

A tool for the generation of realistic network workload for emerging networking scenarios
A. Botta, A. Dainotti, A. Pescapè
Computer Networks (Elsevier), Volume 56, Issue 15, October 2012

Extracting Benefit from Harm: Using Malware Pollution to Analyze the Impact of Political and Geophysical Events on the Internet (pdf)
A. Dainotti, R. Amman, E. Aben, K. C. Claffy
ACM SIGCOMM Computer Communication Review, January 2012
Awarded as one of top-three papers in ACM SIGCOMM Computer Communication Review in 2012 and presented at SIGCOMM 2012

Issues and Future Directions in Traffic Classification (pdf)
A. Dainotti, A. Pescapè, K. C. Claffy,
IEEE Network, Vol. 26, Issue 1, pp. 35-40, January-February 2012

Do You Trust Your Software-based Traffic Generator?
A. Botta, A. Dainotti, A. Pescapè,
IEEE Communications Magazine, September 2010, pp. 158-165

Traffic Analysis of Peer-to-Peer IPTV Communities
T. Silverston, O. Fourmaux, A. Botta, A. Dainotti, A. Pescapé, G. Ventre, K. Salamatian,
Computer Networks (Elsevier). Volume 53, Issue 4, 18 March 2009, Pages 470-484.
in the top25 of most cited articles published in Computer Networks since 2009

Internet traffic modeling by means of Hidden Markov Models
A. Dainotti, A. Pescapé, P. Salvo Rossi, F. Palmieri, G. Ventre
Computer Networks (Elsevier). Volume 52, Issue 14, 9 October 2008, Pages 2645-2662

A Cascade Architecture for DoS Attacks Detection Based on the Wavelet Transform
A. Dainotti, A. Pescapè, G. Ventre
Journal of Computer Security, Vol. 17, Issue 6, pp. 945-968

SCTP performance evaluation over Heterogeneous Networks
A. Dainotti, S. Loreto, A. Pescapè, G. Ventre
Concurrency and Computation: Practice and Experience (Wiley) , Vol 19, Issue 8 (June 2007), Special Issue on Performance Analysis and Enhancements of Wireless Networks. pp. 1207 - 1218.

Conferences/Workshops/Book chapters

BGPStream: a framework for live and historical BGP data analysis
C. Orsini, A. King, V. Giotsas, D. Giordano, A. Dainotti
ACM SIGCOMM Internet Measurement Conference IMC 2016

Leveraging Internet Background Radiation for Opportunistic Network Analysis
K. Benson, A. Dainotti, k. claffy, A. Snoeren, and M. Kallitsis
ACM SIGCOMM Internet Measurement Conference IMC 2015

How Dangerous Is Internet Scanning? A Measurement Study of the Aftermath of an Internet-Wide Scan
E. Raftopoulos, E. Glatz, X. Dimitropoulos, and A. Dainotti
Traffic Monitoring and Analysis Workshop (TMA), Apr 2015, Barcelona, Spain.

Uncovering network tarpits with degreaser
L. Alt, R. Beverly, A. Dainotti
In Proceedings of the 30th Annual Computer Security Applications Conference (ACSAC), 2014.

Gaining Insight into AS-level Outages through Analysis of Internet Background Radiation
K. Benson, A. Dainotti, K. C. Claffy, E. Aben
International Workshop on Traffic Monitoring and Analysis (TMA'13, co-located with INFOCOM 2013) - April 2013, Turin (Italy)

A Coordinated View of the Temporal Evolution of Large-scale Internet Events
A. King. B. Huffaker, A. Dainotti, K. C. Claffy
First IMC Workshop on Internet Visualization (WIV 2012) - colocated with ACM IMC 2012

Analysis of a "/0" Stealth Scan from a Botnet
A. Dainotti, A. King, K. C. Claffy, F. Papale, A. Pescapè
ACM SIGCOMM Internet Measurement Conference IMC 2012

Analysis of Internet-wide Probing using Darknets
A. Dainotti, A. King, K. C. Claffy
ACM 2012 Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS'12) - colocated with ACM CCS 2012

Analysis of Country-wide Internet Outages Caused by Censorship (pdf)
A. Dainotti, C. Squarcella, E. Aben, K. C. Claffy, M. Chiesa, M. Russo, A. Pescapè,
ACM SIGCOMM Internet Measurement Conference IMC 2011 - November 2011, Berlin (Germany)
Awarded the IRTF Applied Networking Research Prize 2012

Traffic Classification through Joint Distributions of Packet-level Statistics
A. Dainotti, A. Pescapè, H. Kim
IEEE GLOBECOM 2011 - December 2011, Houston (TX, USA)

Using a Behaviour Knowledge Space Approach for Detecting Unknown IP Traffic Flows, 10th International Workshop on Multiple Classifier Systems
A. Dainotti, A. Pescapè, C. Sansone, A. Quintavalle
MCS 2011 - June 2011, Napoli (Italy)

Early Classification of Network Traffic through Multi-Classification
A. Dainotti, A. Pescapè, C. Sansone
International Workshop on Traffic Monitoring and Analysis (TMA'11) - April 2011, Vienna (Austria)

PortLoad: taking the best of two worlds in traffic classification
G. Aceto, A. Dainotti, W. de Donato, A. Pescapè
IEEE INFOCOM 2010 - WIP Track - March 2010, San Diego (CA, USA)

K-dimensional trees for continuous traffic classification
V. Carela-Espanol, P. Barlet-Ros, M. Solé-Simò, A. Dainotti, W. de Donato, A. Pescapè
International Workshop on Traffic Monitoring and Analysis (TMA'10) @ PAM 2010 - April 2010, Zurich (Switzerland)

Identification of traffic flows hiding behind TCP port 80
A. Dainotti, F. Gargiulo, L. Kuncheva, A. Pescapè, C. Sansone
IEEE ICC 2010 - May 2010, Capetown (South Africa)

Combining Multiple Traffic Classification Techniques within a Single Platform
G. Aceto, A. Dainotti, W. de Donato, F. Gargiulo, A. Pescapè C. Sansone
Book chapter in RECIPE Robust and Efficient traffic Classification in IP nEtworks, Fridericiana Editrice Universitaria, pp.1-16, ISBN:978-88-833-8081-5, Napoli, Italy, 2009

TIE: a Community-Oriented Traffic Classification Platform
A. Dainotti, W. de Donato, A. Pescapè
International Workshop on Traffic Monitoring and Analysis (TMA'09) @ IFIP Networking 2009 - May 2009, Aachen (Germany)

Classification of Network Traffic via Packet-Level Hidden Markov Models
A. Dainotti, W. de Donato, A. Pescapè, P. Salvo Rossi
IEEE GLOBECOM 2008 - Dec 2008, New Orleans (LA, USA)

Do You Know What You Are Generating?
A. Dainotti, A. Botta, A. Pescapè
Poster at ACM Co-Next 2007 Student Workshop. 2-pages abstract published in Co-Next '07 Proceedings

Multi-protocol and multi-platform traffic generation and measurement
A. Botta, A. Dainotti, A. Pescapè
Demo at INFOCOM 2007 DEMO Session, May 2007, Anchorage (Alaska, USA)

Worm Traffic Analysis and Characterization
A. Dainotti, A. Pescapè, G. Ventre
IEEE ICC 2007 - Jun 2007, Glasgow (Scotland)

Reducing Network Traffic Data Sets
A. Botta, A. Dainotti, A. Pescapè, G. Ventre
IEEE ICC 2007 - Jun 2007, Glasgow (Scotland)

Searching for Invariants in Network Games Traffic
A. Dainotti, A. Botta, A. Pescapè, G. Ventre
Poster at ACM Co-Next 2006 Student Workshop. 2-pages abstract published in Co-Next '06 Proceedings

Wavelet-based Detection of DoS Attacks
A. Dainotti, A. Pescapè, G. Ventre,
2006 IEEE GLOBECOM - Nov 2006, San Francisco (CA, USA)

An HMM Approach to Internet Traffic Modeling
A. Dainotti, A. Pescapè, P. Salvo Rossi, G. Iannello, F. Palmieri, G. Ventre
2006 IEEE GLOBECOM - Nov 2006, San Francisco (CA, USA)

A Packet-level Characterization of Network Traffic
A. Dainotti, A. Pescapè, G. Ventre,
11th IEEE International Workshop on Computer-Aided Modeling, Analysis and Design of Communication Links and Networks (CAMAD 2006) - Trento (Italy), June 2006

A packet-level model of Starcraft traffic
A. Dainotti, A. Pescapè, G. Ventre,
IEEE Second International Workshop on Hot Topics in Peer-to-Peer Systems 2005 (co-located with IEEE Mobiquitous 2005) pp. 244-253, 0-7695-2417-6/05 - July 2005, San Diego (CA, USA)

Other Professional Activities

  • Independent reviewer of projects and evaluator of project proposals for the European Commission (Horizon 2020, FP7 ICT)
  • Area Editor for ACM SIGCOMM Computer Communication Review
  • Guest editor for: International Journal of Network Management (Wiley)
  • TPC chair for: TMA 2014
    Steering Committee member for TMA
  • TPC member for: PAM 2015, 2014, IEEE ICC 2014, ACM IMC 2013, IEEE WNM 2013, IEEE ICNC 2013, IEEE Globecom 2012, TMA 2013 2012, IEEE ICC 2007
  • Reviewer for: ACM SIGCOMM Computer Communication Review, IEEE/ACM Transactions on Networking, IEEE Communications Letters, IEEE Communications Magazine, Computer Networks (Elsevier), Computer Communications (Elsevier), ...
  Last Modified: Mon Dec-26-2011 7:10:39 PDT
  Page URL: http://www.caida.org/~alberto/homepage.xml