Position innerhalb des Seitenbaumes

TIK-Site
Das TIK
Team
Sebastian Kiesel

Sebastian Kiesel

Herr Dr.-Ing.

Stellvertretender Direktor, Leiter NKS
Technische Informations- und Kommunikationsdienste

Kontakt

+49 711 685 62503
+49 711 685 52503
E-Mail

Allmandring 30A
70569 Stuttgart
Deutschland

Fachgebiet

Dienste- und Infrastrukturbetrieb

Leitung der Abteilung Netze und Kommunikationssysteme
Leitung VoIPUS - IP-Telefonie für die Universität Stuttgart

Infrastrukturprojekte

Leitung bzw. Mitglied in diversen Projekt-Teams, z.B. Campus Management System (Teilprojekt Identity Management), elektronisches Schließsystem, Hörsaal-Medientechnik, Alarmserver, netzwerkfähige Multifunktions-Kopiergeräte, elektronischer Studierendenausweis, Computer Aided Facility Management usw.

Forschung

Themen: Netzsicherheit und -management, insbes. Firewall-Architekturen
Wissenschaftliche und technische Leitung im Projekt DynFire, bwIPv6@Academia, bwCampusnetz, bwIDM2
Definition und Beantragung von Forschungsprojekten

Lehre

Vorlesung Network Security (für MSc. Elektrotechnik und Informationstechnik, MSc. Infotech u.a.)
Betreuung von Studien-, Diplom, BSc.- und MSc.-Arbeiten

Sonstige Aktivitäten

Beiträge zur Standardisierung von Internet-Protokollen: Internet Engineering Task Force

Publikationen

Publikationen von Dr. Sebastian Kiesel:

S. Kiesel and K. Krause, “eduroam vs. OpenRoaming vs. offenes WLAN.” Berlin, Germany, Oct. 2023. [Online]. Available: https://www.dfn.de/wp-content/uploads/2023/03/BT79_MobileIT_eduroam-openroaming.pdf
- BibTeX
- Link
BibTeX
@misc{ki-2023-0020, abstract = {Sicherer WLAN-Zugang, föderiertes Identity Management und wie das zukünftig zusammenpassen könnte}, address = {Berlin, Germany}, author = {Kiesel, Sebastian and Krause, Kilian}, howpublished = {79. Betriebstagung des Vereins zur F\"{o}rderung eines Deutschen Forschungsnetzes (DFN)}, month = {10}, title = {{eduroam vs. OpenRoaming vs. offenes WLAN}}, url = {https://www.dfn.de/wp-content/uploads/2023/03/BT79_MobileIT_eduroam-openroaming.pdf}, year = 2023 }
Link
https://www.dfn.de/wp-content/uploads/2023/03/BT79_MobileIT_eduroam-openroaming.pdf
S. Kiesel, “Erfahrungen mit einem offenen WLAN für Gäste.” Stuttgart, Germany, Jan. 2023. [Online]. Available: https://gitlab.bwnetops.de/belwue/tech-day/-/blob/main/2023/slides/Erfahrungen%20mit%20offenem%20WLAN/20230124-offenes-wlan.pdf
- BibTeX
- Link
BibTeX
@misc{ki-2023-0010, abstract = {WLAN-basierter Internet-Zugang f\"{u}r G\"{a}ste der Universit\"{a}t Stuttgart mit einem Captive Portal - juristische Randbedingungen und technische Implementierung}, address = {Stuttgart, Germany}, author = {Kiesel, Sebastian}, howpublished = {BelW\"{u} Tech Day}, month = {01}, title = {{Erfahrungen mit einem offenen WLAN f\"{u}r G\"{a}ste}}, url = {https://gitlab.bwnetops.de/belwue/tech-day/-/blob/main/2023/slides/Erfahrungen%20mit%20offenem%20WLAN/20230124-offenes-wlan.pdf}, year = 2023 }
Link
https://gitlab.bwnetops.de/belwue/tech-day/-/blob/main/2023/slides/Erfahrungen%20mit%20offenem%20WLAN/20230124-offenes-wlan.pdf
S. Kiesel and M. Stiemerling, “Application-Layer Traffic Optimization (ALTO) Cross-Domain Server Discovery,” RFC Editor, RFC 8686, Feb. 2020. doi: 10.17487/RFC8686.
- BibTeX
- Link
BibTeX
@techreport{rfc8686, abstract = {The goal of Application-Layer Traffic Optimization (ALTO) is to provide guidance to applications that have to select one or several hosts from a set of candidates capable of providing a desired resource. ALTO is realized by a client-server protocol. Before an ALTO client can ask for guidance, it needs to discover one or more ALTO servers that can provide suitable guidance. In some deployment scenarios, in particular if the information about the network topology is partitioned and distributed over several ALTO servers, it may be necessary to discover an ALTO server outside of the ALTO client's own network domain, in order to get appropriate guidance. This document details applicable scenarios, itemizes requirements, and specifies a procedure for ALTO cross-domain server discovery. Technically, the procedure specified in this document takes one IP address or prefix and a U-NAPTR Service Parameter (typically, ``ALTO:https'') as parameters. It performs DNS lookups (for NAPTR resource records in the ``in-addr.arpa.'' or ``ip6.arpa.'' trees) and returns one or more URIs of information resources related to that IP address or prefix.}, annote = {Current status: proposed standard.}, author = {Kiesel, Sebastian and Stiemerling, Martin}, doi = {10.17487/RFC8686}, howpublished = {Internet Requests for Comments}, institution = {{RFC Editor}}, issn = {2070-1721}, key = {RFC8686}, month = {02}, number = 8686, pages = {1-44}, pdf = {https://www.rfc-editor.org/rfc/rfc8686.pdf}, publisher = {{RFC Editor}}, title = {{Application-Layer Traffic Optimization (ALTO) Cross-Domain Server Discovery}}, txt = {https://www.rfc-editor.org/rfc/rfc8686.txt}, type = {{RFC}}, url = {https://www.rfc-editor.org/info/rfc8686}, year = 2020 }
Link
https://www.rfc-editor.org/info/rfc8686
S. Kiesel and R. Heidenreich, “Einführung von Microsoft Exchange an der Universität Stuttgart.” Berlin, Germany, Mar. 2018.
- BibTeX
BibTeX
@misc{ki-2018-0010, address = {Berlin, Germany}, author = {Kiesel, Sebastian and Heidenreich, Ren\'{e}}, howpublished = {68. Betriebstagung des Vereins zur F\"{o}rderung eines Deutschen Forschungsnetzes (DFN)}, month = {03}, pdf = {https://www.dfn.de/fileadmin/3Beratung/Betriebstagungen/bt68/BT68_Mail_MicrosoftExchange_Heidenreich_Kiesel.pdf}, title = {{Einf\"{u}hrung von Microsoft Exchange an der Universit\"{a}t Stuttgart}}, year = 2018 }
M. Stiemerling, S. Kiesel, M. Scharf, H. Seidel, and S. Previdi, “Application-Layer Traffic Optimization (ALTO) Deployment Considerations,” RFC Editor, RFC 7971, Oct. 2016. doi: 10.17487/RFC7971.
- BibTeX
- Link
BibTeX
@techreport{ki-2016-0020, abstract = {Many Internet applications are used to access resources such as pieces of information or server processes that are available in several equivalent replicas on different hosts. This includes, but is not limited to, peer-to-peer file sharing applications. The goal of Application-Layer Traffic Optimization (ALTO) is to provide guidance to applications that have to select one or several hosts from a set of candidates capable of providing a desired resource. This memo discusses deployment-related issues of ALTO. It addresses different use cases of ALTO such as peer-to-peer file sharing and Content Delivery Networks (CDNs) and presents corresponding examples. The document also includes recommendations for network administrators and application designers planning to deploy ALTO, such as recommendations on how to generate ALTO map information.}, annote = {Current status: informational.}, author = {Stiemerling, Martin and Kiesel, Sebastian and Scharf, Michael and Seidel, Hans and Previdi, Stefano}, doi = {10.17487/RFC7971}, howpublished = {Internet Requests for Comments}, institution = {{RFC Editor}}, issn = {2070-1721}, key = {RFC7971}, month = {10}, number = 7971, pages = {1-77}, publisher = {{RFC Editor}}, title = {{Application-Layer Traffic Optimization (ALTO) Deployment Considerations}}, txt = {https://www.rfc-editor.org/rfc/rfc7971.txt}, type = {{RFC}}, url = {https://www.rfc-editor.org/info/rfc7971}, year = 2016 }
Link
https://www.rfc-editor.org/info/rfc7971
S. Kiesel and R. Penno, “Port Control Protocol (PCP) Anycast Addresses,” RFC Editor, RFC 7723, Jan. 2016. doi: 10.17487/RFC7723.
- BibTeX
- Link
BibTeX
@techreport{ki-2016-0010, abstract = {The Port Control Protocol (PCP) anycast addresses enable PCP clients to transmit signaling messages to their closest PCP-aware on-path NAT, firewall, or other middlebox without having to learn the IP address of that middlebox via some external channel. This document establishes one well-known IPv4 address and one well-known IPv6 address to be used as PCP anycast addresses.}, annote = {Current status: proposed standard.}, author = {Kiesel, Sebastian and Penno, Reinaldo}, doi = {10.17487/RFC7723}, howpublished = {Internet Requests for Comments}, institution = {{RFC Editor}}, issn = {2070-1721}, key = {RFC7723}, month = {01}, number = 7723, pages = {1-9}, publisher = {{RFC Editor}}, title = {{Port Control Protocol (PCP) Anycast Addresses}}, txt = {https://www.rfc-editor.org/rfc/rfc7723.txt}, type = {{RFC}}, url = {https://www.rfc-editor.org/info/rfc7723}, year = 2016 }
Link
https://www.rfc-editor.org/info/rfc7723
S. Kiesel, M. Stiemerling, N. Schwan, M. Scharf, and H. Song, “Application-Layer Traffic Optimization (ALTO) Server Discovery,” RFC Editor, RFC 7286, Nov. 2014. doi: 10.17487/RFC7286.
- BibTeX
- Link
BibTeX
@techreport{ki-2014-0020, abstract = {The goal of Application-Layer Traffic Optimization (ALTO) is to provide guidance to applications that have to select one or several hosts from a set of candidates capable of providing a desired resource. ALTO is realized by a client-server protocol. Before an ALTO client can ask for guidance, it needs to discover one or more ALTO servers. This document specifies a procedure for resource-consumer-initiated ALTO server discovery, which can be used if the ALTO client is embedded in the resource consumer.}, annote = {Current status: proposed standard.}, author = {Kiesel, Sebastian and Stiemerling, Martin and Schwan, Nico and Scharf, Michael and Song, Haibin}, doi = {10.17487/RFC7286}, howpublished = {Internet Requests for Comments}, institution = {{RFC Editor}}, issn = {2070-1721}, key = {RFC7286}, month = {11}, number = 7286, pages = {1-15}, publisher = {{RFC Editor}}, title = {{Application-Layer Traffic Optimization (ALTO) Server Discovery}}, txt = {https://www.rfc-editor.org/rfc/rfc7286.txt}, type = {{RFC}}, url = {https://www.rfc-editor.org/info/rfc7286}, year = 2014 }
Link
https://www.rfc-editor.org/info/rfc7286
R. (. Alimi et al., “Application-Layer Traffic Optimization (ALTO) Protocol,” RFC Editor, RFC 7285, Sep. 2014. doi: 10.17487/RFC7285.
- BibTeX
- Link
BibTeX
@techreport{ki-2014-0010, abstract = {Applications using the Internet already have access to some topology information of Internet Service Provider (ISP) networks. For example, views to Internet routing tables at Looking Glass servers are available and can be practically downloaded to many network application clients. What is missing is knowledge of the underlying network topologies from the point of view of ISPs. In other words, what an ISP prefers in terms of traffic optimization -- and a way to distribute it. The Application-Layer Traffic Optimization (ALTO) services defined in this document provide network information (e.g., basic network location structure and preferences of network paths) with the goal of modifying network resource consumption patterns while maintaining or improving application performance. The basic information of ALTO is based on abstract maps of a network. These maps provide a simplified view, yet enough information about a network for applications to effectively utilize them. Additional services are built on top of the maps. This document describes a protocol implementing the ALTO services. Although the ALTO services would primarily be provided by ISPs, other entities, such as content service providers, could also provide ALTO services. Applications that could use the ALTO services are those that have a choice to which end points to connect. Examples of such applications are peer-to-peer (P2P) and content delivery networks.}, annote = {Current status: proposed standard.}, author = {Alimi, Richard (Editor) and Penno, Reinaldo (Editor) and Yang, Y. Richard (Editor) and Kiesel, Sebastian and Previdi, Stefano and Roome, Wendy and Shalunov, Stanislav and Woundy, Richard}, doi = {10.17487/RFC7285}, howpublished = {Internet Requests for Comments}, institution = {{RFC Editor}}, issn = {2070-1721}, key = {RFC7285}, month = {09}, number = 7285, pages = {1-91}, publisher = {{RFC Editor}}, title = {{Application-Layer Traffic Optimization (ALTO) Protocol}}, txt = {https://www.rfc-editor.org/rfc/rfc7285.txt}, type = {{RFC}}, url = {https://www.rfc-editor.org/info/rfc7285}, year = 2014 }
Link
https://www.rfc-editor.org/info/rfc7285
S. Berger, A. Vensmer, and S. Kiesel, “An ABAC-based Policy Framework for Dynamic Firewalling,” in Proceedings of the The Seventh International Conference on Systems and Networks Communications (ICSNC 2012), Lisbon, Portugal, Nov. 2012, pp. 118–123. [Online]. Available: http://www.thinkmind.org/index.php?view=article&articleid=icsnc_2012_5_40_20202
- BibTeX
- Link
BibTeX
@inproceedings{ki-2012-0090, abstract = {This paper presents the Policy Framework of DynFire, a novel approach for attribute-based, dynamic control of network firewalls. DynFire allows an individually controlled, secure access to IT resources of a large organization, with particular focus on mobile users and users with restricted rights, such as subcontractors. The basic assumption behind DynFire is that, within a secured network domain separated from the Internet, a temporary binding between an IP address and a single user ID can be established. Users with different attributes can authenticate to the network and get individual access to network resources. To administrate such a large amount of users and different access rights within a secured network domain of an organization, which includes distributed organisational zones, a policy framework is needed. The following paper presents a policy framework for dynamic and distributed firewalls which is able to grant access control on a per-user basis, with multitenancy capabilities and administrative delegation.}, address = {Lisbon, Portugal}, author = {Berger, S\"{o}ren and Vensmer, Alexander and Kiesel, Sebastian}, booktitle = {Proceedings of the The Seventh International Conference on Systems and Networks Communications (ICSNC 2012)}, isbn = {978-1-61208-231-8}, month = {11}, pages = {118--123}, pdf = {http://www.thinkmind.org/download.php?articleid=icsnc_2012_5_40_20202}, title = {{An ABAC-based Policy Framework for Dynamic Firewalling}}, url = {http://www.thinkmind.org/index.php?view=article&articleid=icsnc_2012_5_40_20202}, year = 2012 }
Link
http://www.thinkmind.org/index.php?view=article&articleid=icsnc_2012_5_40_20202
R. Marx and S. Kiesel, “Dynamic firewalling for femto-cell communication.” Chicago, USA, Sep. 2012.
- BibTeX
BibTeX
@misc{ki-2012-0060, abstract = {Application scenarios for femto cells (aka Home (e)Node Bs) constantly grew since their first specification in 3GPP Release 8. However, the deployment of femto cells is challenging for network operators as femto cells get direct access to the core network via a VPN tunnel. Moreover, the femto cells' integrity cannot be guaranteed because they are operated outside of the operator's domain. Thus, it enormously increases security if the access within the core network is limited by setting user-dependent firewalling rules to allowed services. Configuration effort can be eased by employing a dynamic firewalling approach, which supports setting firewall rules on-demand on a per-user basis. This talk will present the dynamic firewalling apporach developed in the DynFire project. DynFire allows an individually controlled, secure access to the IT resources of a large organization, with particular focus on mobile users and users with restricted rights.}, address = {Chicago, USA}, author = {Marx, Ronald and Kiesel, Sebastian}, howpublished = {IIT Real-Time Communications Conference \& Expo}, month = {09}, title = {{Dynamic firewalling for femto-cell communication}}, year = 2012 }
S. (. Kiesel, S. Previdi, M. Stiemerling, R. Woundy, and Y. R. Yang, “Application-Layer Traffic Optimization (ALTO) Requirements,” RFC Editor, RFC 6708, Sep. 2012. doi: 10.17487/RFC6708.
- BibTeX
- Link
BibTeX
@techreport{ki-2012-0080, abstract = {Many Internet applications are used to access resources, such as pieces of information or server processes that are available in several equivalent replicas on different hosts. This includes, but is not limited to, peer-to-peer file sharing applications. The goal of Application-Layer Traffic Optimization (ALTO) is to provide guidance to applications that have to select one or several hosts from a set of candidates capable of providing a desired resource. This guidance shall be based on parameters that affect performance and efficiency of the data transmission between the hosts, e.g., the topological distance. The ultimate goal is to improve performance or Quality of Experience in the application while reducing the utilization of the underlying network infrastructure. This document enumerates requirements for specifying, assessing, or comparing protocols and implementations.}, annote = {Current status: informational.}, author = {Kiesel, Sebastian (Editor) and Previdi, Stefano and Stiemerling, Martin and Woundy, Richard and Yang, Y. Richard}, doi = {10.17487/RFC6708}, howpublished = {Internet Requests for Comments}, institution = {{RFC Editor}}, issn = {2070-1721}, key = {RFC6708}, month = {09}, number = 6708, pages = {1-20}, publisher = {{RFC Editor}}, title = {{Application-Layer Traffic Optimization (ALTO) Requirements}}, txt = {https://www.rfc-editor.org/rfc/rfc6708.txt}, type = {{RFC}}, url = {https://www.rfc-editor.org/info/rfc6708}, year = 2012 }
Link
https://www.rfc-editor.org/info/rfc6708
A. Vensmer and S. Kiesel, “DynFire: Dynamic Firewalling in Heterogeneous Environments,” in Proceedings of the World Congress on Internet Security (WorldCIS-2012), Guleph, Canada, Jun. 2012. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?40147
- BibTeX
- Link
BibTeX
@inproceedings{ki-2012-0030, abstract = {This paper presents ``DynFire,'' a novel approach for the role-based, dynamic control of network firewalls. DynFire allows an individually controlled, secure access to the IT resources of a large organization, with particular focus on mobile users and users with restricted rights, such as subcontractors. The basic assumption behind DynFire is that, within a secured network domain separated from the Internet, we can establish a temporary binding between an IP address and a single user ID. Whenever a user connects to or disconnects from this secure network domain, firewalls are configured accordingly, using a centralized ``Firewall Manager'' and standardized signaling protocols.}, address = {Guleph, Canada}, author = {Vensmer, Alexander and Kiesel, Sebastian}, booktitle = {{Proceedings of the World Congress on Internet Security (WorldCIS-2012)}}, month = {06}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ve_WCIS2012_40147.pdf}, title = {{DynFire: Dynamic Firewalling in Heterogeneous Environments}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?40147}, year = 2012 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?40147
S. Kiesel, “VoIPUS: IP-Telefonie für die Universität Stuttgart.” Berlin, Germany, Mar. 2012.
- BibTeX
BibTeX
@misc{ki-2012-0020, address = {Berlin, Germany}, author = {Kiesel, Sebastian}, howpublished = {56. Betriebstagung des Vereins zur F\"{o}rderung eines Deutschen Forschungsnetzes (DFN)}, month = {03}, pdf = {http://www.dfn.de/fileadmin/3Beratung/Betriebstagungen/bt56/forum-voip-final.pdf}, title = {{VoIPUS: IP-Telefonie f\"{u}r die Universit\"{a}t Stuttgart}}, year = 2012 }
S. Kiesel, H.-J. Kolbe, R. Winter, and N. E. Ltd, “METHOD AND SYSTEM FOR SUPPORTING THE SELECTION OF COMMUNICATION PEERS IN AN OVERLAY NETWORK.” May 2011. [Online]. Available: http://patentscope.wipo.int/search/en/WO2011050966
- BibTeX
- Link
BibTeX
@misc{ki-2011-0020, abstract = {A method for supporting the selection of communication peers in an overlay network, wherein a multitude of communication peers participate in said overlay network by providing certain pieces of information, and wherein at least one peer- to-peer server - tracker - is provided that maintains a database of said participating communication peers and the information possessed by them, wherein said tracker, upon receiving a query regarding a specific piece of information from a communication peer - requesting client -, answers said query by providing said requesting client a list that includes a subset of all communication peers possessing said requested piece of information, is characterized in that a network entity is provided being located such that it receives messages directed from said requesting client to said tracker, wherein said network entity stamps topological location information of said requesting client into any of said messages directed from said requesting client to said tracker. Furthermore, a corresponding system is disclosed.}, author = {Kiesel, Sebastian and Kolbe, Hans-Joerg and Winter, Rolf and Ltd, NEC Europe}, howpublished = {Patent Application}, month = {05}, note = {WO/2011/050966}, title = {{METHOD AND SYSTEM FOR SUPPORTING THE SELECTION OF COMMUNICATION PEERS IN AN OVERLAY NETWORK}}, url = {http://patentscope.wipo.int/search/en/WO2011050966}, year = 2011 }
Link
http://patentscope.wipo.int/search/en/WO2011050966
M. Stiemerling and S. Kiesel, “Cooperative P2P Video Streaming for Mobile Peers,” in Proceedings of the 19th International Conference on Computer Communications and Networks (ICCCN 2010), Zurich, Switzerland, Aug. 2010, pp. 1–7. doi: 10.1109/ICCCN.2010.5560112.
- BibTeX
BibTeX
@inproceedings{ki-2010-0020, abstract = {Near-live P2P video streaming is already popular among consumers, but typically this type of application is bound to fixed Internet access, as streaming requires a sustained bitrate over time and is less tolerant to environments with volatile throughput rates. For users moving at speeds larger than walking speed, P2P video streaming is hardly possible, as the achievable throughput for a single peer is insufficient to obtain the video. When multiple peers are interested in the same video stream and they are moving along the same path, they could cooperatively retrieve chunks, instead of acting independently. The participating peers will need to bundle their achievable throughput and coordinate the chunk retrieval. We present such a cooperative P2P video streaming system, introducing a new scheduler and develop a light-weight throughput estimator. 3G cellular link measurements and a simulation study demonstrate the feasibility of our approach for a train scenario.}, address = {Zurich, Switzerland}, author = {Stiemerling, Martin and Kiesel, Sebastian}, booktitle = {Proceedings of the 19th International Conference on Computer Communications and Networks (ICCCN 2010)}, doi = {10.1109/ICCCN.2010.5560112}, issn = {1095-2055}, month = {08}, pages = {1--7}, pdf = {http://www.net.informatik.uni-goettingen.de/publications/1695/MobileP2P-ICCCN10.pdf}, title = {{Cooperative P2P Video Streaming for Mobile Peers}}, year = 2010 }
M. Stiemerling and S. Kiesel, “A System for Peer-to-Peer Video Streaming in Resource Constrained Mobile Environments,” in Proceedings of the 1st ACM workshop on User-provided networking, co-located with the ACM CoNext 2009 (U-NET ’09), Rome, Italy, Dec. 2009, pp. 25–30. doi: 10.1145/1659029.1659037.
- BibTeX
BibTeX
@inproceedings{ki-2009-0030, abstract = {Peer-to-Peer based near-live video streaming is becoming more and more popular with users of fixed-line broadband network access, but it is mostly unavailable to mobile users, as cellular networks, such as GPRS/UMTS, cannot meet the bitrate requirements, while other wireless technologies, such as WLAN, may be fast enough but cover only very limited areas. However, there is a small but important set of scenarios, where several mobile users in close physical proximity are interested in retrieving the same content. We propose a P2P-TV system that enables them to retrieve video chunks in a cooperative way. The coordinated and Environmentscient usage of all wireless resources available to a group of mobile hosts is the key to enable P2P-TV in mobile environments. This paper introduces our general concept. Simulation based studies are presented to assess dirent resource allocation strategies and to demonstrate the feasibility of our approach for delivering near-live TV in resource constrained mobile environments.}, address = {Rome, Italy}, author = {Stiemerling, Martin and Kiesel, Sebastian}, booktitle = {Proceedings of the 1st ACM workshop on User-provided networking, co-located with the ACM CoNext 2009 (U-NET '09)}, doi = {10.1145/1659029.1659037}, isbn = {978-1-60558-750-9}, month = {12}, pages = {25--30}, pdf = {http://www.net.informatik.uni-goettingen.de/publications/1657/unet5141-stiemerling-paper.pdf}, title = {{A System for Peer-to-Peer Video Streaming in Resource Constrained Mobile Environments}}, year = 2009 }
J. Seedorf, S. Kiesel, and M. Stiemerling, “Traffic localization for P2P-applications: The ALTO approach,” in Proceedings of the IEEE Ninth International Conference on Peer-to-Peer Computing, 2009. (P2P ’09.), Seattle, USA, Sep. 2009, pp. 171–177. doi: 10.1109/P2P.2009.5284511.
- BibTeX
BibTeX
@inproceedings{ki-2009-0020, abstract = {Today, most P2P applications do not consider locality on the underlying network topology when choosing their neighbors on the P2P routing layer. As a result, participating peers may experience long delays and peers' ISPs suffer from a large amount of (costly) inter-ISP traffic. One potential solution to mitigate these problems is to have ISPs or third parties convey information regarding the underlying network topology to P2P-clients through a dedicated service. Following this approach, the IETF has recently formed an application layer traffic optimization (ALTO) working group for standardizing a protocol to enable P2P applications to obtain information regarding network layer topology. This paper comprises the problem space for such an ALTO approach, taking into account recent developments in the IETF ALTO Working Group. In particular, we will describe requirements for an ALTO protocol identified in the IETF, concrete protocols which have been proposed so far, and the overall challenges. In addition, we will discuss related issues such as privacy considerations, the relationship of an ALTO service with existing caching solutions, discovery mechanisms for an ALTO service, and security considerations.}, address = {Seattle, USA}, author = {Seedorf, Jan and Kiesel, Sebastian and Stiemerling, Martin}, booktitle = {Proceedings of the IEEE Ninth International Conference on Peer-to-Peer Computing, 2009. (P2P '09.)}, doi = {10.1109/P2P.2009.5284511}, month = {09}, pages = {171--177}, pdf = {http://www.net.informatik.uni-goettingen.de/publications/1633/P2P_2009_industry_session_ALTO_final.pdf}, title = {{Traffic localization for P2P-applications: The ALTO approach}}, year = 2009 }
M. Stiemerling, M. Brunner, S. Kiesel, and X. Fu, “TORI: User Provided Future Networking Testbeds,” in Proceedings of the IEEE International Workshop on the Network of the Future, in conjunction with IEEE International Conference onCommunications (ICC 2009), Dresden, Germany, Jun. 2009. doi: 10.1109/ICCW.2009.5207969.
- BibTeX
BibTeX
@inproceedings{ki-2009-0010, abstract = {The usage of testbeds is considered a key tool for exploring the development of new protocols and network architectures in the area of network research. Testbeds, together with simulations, are the basic tool set of network researchers to drive research, but often it is impossible to get feedback from real deployments and their respective data traffic. Today's major testbed facilities, e.g., VINI and PlanetLab, aim at emulating the behavior of large-scale networks, but they are still several orders of magnitude smaller than the deployed operational network infrastructure. We argue that it is time to extend network research beyond theoretical and testbed approaches towards a dynamic, peer-to-peer based testbed environment, similar to the approach taken by seti@home and BOINC. We aim at expanding the total number of participating nodes in an experiment and at experimenting on existing operational infrastructure with its entirely uncontrollable environment. Our vision presented in this paper, the Testbed on Real Infrastructure (TORI), includes regular end hosts (peers) in an experiment by deploying and executing the experimental software on these peers and to form an overlay network upon them. The main difference of our TORI approach compared to others is installing new technologies and testing them with the operational infrastructure.}, address = {Dresden, Germany}, author = {Stiemerling, Martin and Brunner, Marcus and Kiesel, Sebastian and Fu, Xiaoming}, booktitle = {Proceedings of the IEEE International Workshop on the Network of the Future, in conjunction with IEEE International Conference onCommunications (ICC 2009)}, doi = {10.1109/ICCW.2009.5207969}, month = {06}, pdf = {http://www.net.informatik.uni-goettingen.de/publications/1603/tori-final.pdf}, title = {{TORI: User Provided Future Networking Testbeds}}, year = 2009 }
S. Kiesel and J. Kögel, “An operating system independent API for firewall control: design and implementation for Linux,” in Proceedings of the 14th Open European Summer School (EUNICE 2008), Brest, France, Sep. 2008. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36779
- BibTeX
- Link
BibTeX
@inproceedings{ki-2008-0030, abstract = {Firewalls are a crucial building block for securing interconnections between networks of different security domains. Newer IP based applications such as IP telephony require that packet filters are configured dynamically by sessionaware entities. Several architectures and protocols were proposed for firewall remote control (e. g., IETF MIDCOM and NSIS). However, on the nodes that could host the control entity no common local interface for managing packet filter rules exists. This forces developers of firewall control entities to use firewall specific interfaces and limits portability across operating systems and firewall implementations. This paper describes the design of an operating system independent interface, which allows the firewall control entity to modify firewall rules from user space. We implemented this interface for Netfilter chains of the Linux operating system kernel taking functional and security requirements into account. Based on measurements, we analyze the performance characteristics and conclude that the approach is feasible for small to medium network setups.}, address = {Brest, France}, author = {Kiesel, Sebastian and K\"{o}gel, Jochen}, booktitle = {{Proceedings of the 14th Open European Summer School (EUNICE 2008)}}, month = {09}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Kl_paper-camery-ready_36779.pdf}, title = {{An operating system independent API for firewall control: design and implementation for Linux}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36779}, year = 2008 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36779
J. Kögel, S. Kiesel, and S. Meier, “An API for dynamic firewall control and its implementation for Linux Netfilter.” Essen, Germany, Apr. 2008. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36796
- BibTeX
- Link
BibTeX
@misc{ki-2008-0010, address = {Essen, Germany}, author = {K\"{o}gel, Jochen and Kiesel, Sebastian and Meier, Sebastian}, howpublished = {Beitr\"{a}ge zum 3. Essener Workshop 'Neue Herausforderungen in der Netzsicherheit'}, month = {04}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Kl_phapi-final_36796.pdf}, title = {{An API for dynamic firewall control and its implementation for Linux Netfilter}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36796}, year = 2008 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36796
S. Kiesel, “Architekturen verteilter Firewalls für IP-Telefonie-Plattformen - Communication Networks and Computer Engineering Report No. 99,” Universität Stuttgart, 2008. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36815
- BibTeX
- Link
BibTeX
@phdthesis{ki-2008-0020, abstract = {Firewalls sind eine wichtige Ma\ss{}nahme zum Schutz IP-basierter Netze vor Angriffen. Die IP-Telefonie mit separaten Protokollen f\"{u}r Signalisierung und Medientransport erfordert ein Verfahren zur Koordination zwischen r\"{a}umlich getrennten Firewall-Elementen. Hierf\"{u}r wurden zwei verschiedene Architekturen - die Pfad-entkoppelte und die Pfad-gekoppelte Firewall-Signalisierung - vorgeschlagen und entsprechende Protokolle standardisiert. Gegenstand dieser Arbeit ist ein ausf\"{u}hrlicher und unabh\"{a}ngiger Vergleich dieser beiden Ans\"{a}tze. Neben der Erf\"{u}llung der Schutzziele werden hierbei auch funktionale und betriebliche Anforderungen ber\"{u}cksichtigt. Ferner wird untersucht, wie sich die Firewalls auf die Dienstg\"{u}te und die Leistungsf\"{a}higkeit eines Verbundes zusammengeschalteter IP-Telefonie-Plattformen auswirken. Mit Messungen an prototypischen Implementierungen und mit Hilfe analytischer Modelle werden hierzu zun\"{a}chst die Verz\"{o}gerungen beim IP-basierten Transport von Signalisiernachrichten und darauf aufbauend Ruf- und Meldeverzug beim Aufbau einer neuen Multimedia-Sitzung bestimmt.}, author = {Kiesel, Sebastian}, isbn = {978-3-938965-10-8}, pages = {1--179}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_Diss_36815.pdf}, school = {Universit\"{a}t Stuttgart}, title = {{Architekturen verteilter Firewalls f\"{u}r IP-Telefonie-Plattformen - Communication Networks and Computer Engineering Report No. 99}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36815}, year = 2008 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36815
S. Kiesel, J. Kögel, S. Meier, and C. Blankenhorn, “A userspace API for netfilter control.” Karlsruhe, Germany, Sep. 2007. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36603
- BibTeX
- Link
BibTeX
@misc{ki-2007-0030, address = {Karlsruhe, Germany}, author = {Kiesel, Sebastian and K\"{o}gel, Jochen and Meier, Sebastian and Blankenhorn, Christian}, howpublished = {5th Netfilter Workshop}, month = {09}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Kl_NFWS07_36603.pdf}, title = {{A userspace API for netfilter control}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36603}, year = 2007 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36603
S. Kiesel and M. Scharf, “Modeling and performance evaluation of transport protocols for firewall control,” Computer Networks (Elsevier), vol. 51, Art. no. 11, Aug. 2007, doi: 10.1016/j.comnet.2006.11.031.
- BibTeX
- Link
BibTeX
@article{ki-2007-0020, abstract = {Firewalls are a crucial building block for securing IP networks. The usage of out-of-band signaling protocols such as SIP for IP telephony and multimedia applications requires a dynamic control of these firewalls and imposes several challenges. Recently, several firewall control architectures and protocols have been developed. The main focus of this paper is the Simple Middlebox Configuration Protocol (SIMCO), which is a new transaction-based firewall control protocol. Due to the impact on call setup delays, firewall signaling requires small end-to-end delays and thus mandates a careful choice of the transport protocol. Therefore, this paper studies SCTP, TCP and UDP-based transport for SIMCO and compares different configurations that allow to optimize the performance. We present an analytical model to quantify the impact of head-of-line blocking in SCTP and TCP and verify it with measurements. Both the model and measurements reveal that SCTP can significantly reduce the SIMCO response times by leveraging transmission over multiple parallel streams. While already a few SCTP streams can almost completely avoid head-of-line blocking, our results show that TCP- and UDP-based transport may suffer from significantly larger delays.}, author = {Kiesel, Sebastian and Scharf, Michael}, doi = {10.1016/j.comnet.2006.11.031}, journal = {Computer Networks (Elsevier)}, month = {08}, number = 11, pages = {3232--3251}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_ComNet-TranspProt_36560.pdf}, publisher = {Elsevier}, title = {{Modeling and performance evaluation of transport protocols for firewall control}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36560}, volume = 51, year = 2007 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36560
S. Wanke, M. Scharf, S. Kiesel, and S. Wahl, “Measurement of the SIP Parsing Performance in the SIP Express Router,” in Proceedings of the 13th Open European Summer School and IFIP TC6.6 Workshop (EUNICE 2007), LNCS 4606, Enschede, Netherlands, Jul. 2007, pp. 103–110. doi: 10.1007/978-3-540-73530-4_13.
- BibTeX
- Link
BibTeX
@inproceedings{ki-2007-0010, abstract = {Future telephony and multimedia systems will use the Session Initiation Protocol (SIP) for signaling purposes. SIP is a text-based protocol that imposes challenges for an efficient message processing. The ability of SIP entities to process SIP messages quickly is crucial for the performance of these networks, which often have strict timing requirements, e. g., to keep the call setup delays small. This paper studies the performance of SIP message processing in SIP proxies, focusing mainly on the impact of message parsing. We perform a detailed delay analysis for the widely used SIP Express Router (SER). Our measurements show that message parsing actually contributes significantly to a SIP proxy's processing efforts, and therefore confirm other existing studies. However, our results also show that the overall delay in high-performance SIP proxies is stronger affected by other factors, in particular the operating system.}, address = {Enschede, Netherlands}, author = {Wanke, Stephan and Scharf, Michael and Kiesel, Sebastian and Wahl, Stefan}, booktitle = {{Proceedings of the 13th Open European Summer School and IFIP TC6.6 Workshop (EUNICE 2007), LNCS 4606}}, doi = {10.1007/978-3-540-73530-4_13}, month = {07}, pages = {103--110}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Sf_LNCS-Eunice2007_36593.pdf}, title = {{Measurement of the SIP Parsing Performance in the SIP Express Router}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36593}, year = 2007 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36593
M. Scharf and S. Kiesel, “Head-of-line Blocking in TCP and SCTP: Analysis and Measurements,” in Proceedings of the IEEE GLOBECOM 2006, San Francisco, USA, Nov. 2006. doi: 10.1109/GLOCOM.2006.333.
- BibTeX
- Link
BibTeX
@inproceedings{ki-2006-0070, abstract = {Many signaling protocols in IP networks need a protection against message loss, but they do not require a strict in-sequence data delivery. Since TCP provides reliable in-order transport, end-to-end delays may be unnecessarily increased due to head-of-line blocking. An alternative transport protocol is SCTP, which is optimized for signaling applications and provides mechanisms for reliable, partial-ordered or unordered message delivery. In this paper, we quantify the impact of head-of-line blocking on the response time of transaction-based signaling applications. In order to mitigate this problem, we compare different solutions based on TCP and SCTP. Both a new analytical model and measurements on state-of-the-art operating systems show to which extend SCTP can improve transport delays by leveraging transmission over multiple parallel streams or using unordered data delivery. Our analysis reveals that using one or multiple parallel TCP connections can result in much higher end-to-end delays, even for moderate packet loss probabilities. We also observe significant differences in the TCP performance of different operating systems.}, address = {San Francisco, USA}, author = {Scharf, Michael and Kiesel, Sebastian}, booktitle = {{Proceedings of the IEEE GLOBECOM 2006}}, doi = {10.1109/GLOCOM.2006.333}, month = {11}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Sf_GLOBECOM2006_36516.pdf}, title = {{Head-of-line Blocking in TCP and SCTP: Analysis and Measurements}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36516}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36516
J. Kögel and S. Kiesel, “Security Impact of DNS Delegation Structure and Configuration Problems.” Essen, Germany, Oct. 2006. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36555
- BibTeX
- Link
BibTeX
@misc{ki-2006-0060, address = {Essen, Germany}, author = {K\"{o}gel, Jochen and Kiesel, Sebastian}, howpublished = {Beitr\"{a}ge zum Essener Workshop zur Netzwerksicherheit (EWNS) 2006}, month = {10}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Kl_DNSSec-EWNS2006_36555.pdf}, title = {{Security Impact of DNS Delegation Structure and Configuration Problems}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36555}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36555
M. Scharf et al., “To Session or not to Session - Session Concepts in Currently Emerging Future Networks.” Würzburg, Germany, Aug. 2006. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36524
- BibTeX
- Link
BibTeX
@misc{ki-2006-0050, address = {W\"{u}rzburg, Germany}, author = {Scharf, Michael and Necker, Marc C. and Gauger, Christoph M. and Gloss, Bernd and Hauser, Christian and J\"{a}hnert, J\"{u}rgen and Kiesel, Sebastian and K\"{o}hn, Martin and K\"{u}hn, Paul J. and Reifert, Andreas and Sass, Detlef}, howpublished = {6th W\"{u}rzburg Workshop on IP: 'Visions of Future Generation Networks'}, month = {08}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Sf_EuroView2006-Presentation_36524.pdf}, title = {{To Session or not to Session - Session Concepts in Currently Emerging Future Networks}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36524}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36524
S. Kiesel, M. Scharf, S. Beutel, and T. Ruschival, “Performance Measurement of SIMCO over TCP and SCTP,” IKR, Universität Stuttgart, Jul. 2006. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36515
- BibTeX
- Link
BibTeX
@techreport{ki-2006-0030, abstract = {This technical report summarizes the results of the SIMCO performance measurements with different transport protocols. SIMCO (SImple Middlebox COnfiguration) is a signaling protocol that can be used for controlling middleboxes such as firewalls and network address translators - small cable/DSL routers as well as large gateways between VoIP carrier networks, policing thousands of simultaneous calls. In the latter case, optimizing the SIMCO response time is important, as this contributes to the call setup delay perceived by the user in a negative way. SIMCO assumes to be transmitted over a reliable transport layer protocol. However, it requires only partial in-order delivery of messages. Using a Linux and Solaris based prototype implementation and a wide area network emulator, the SIMCO transaction response time was measured both for TCP (Transmission Control Protocol) and SCTP (Stream Control Transmission Protocol) as transport layer protocols, with different parameter settings and for different workloads. The measurement results reveal clear advantages of using SCTP, especially in scenarios with medium to high transaction rates.}, author = {Kiesel, Sebastian and Scharf, Michael and Beutel, Sebastian and Ruschival, Thomas}, institution = {IKR, Universit\"{a}t Stuttgart}, month = {07}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_IB53-simco-tcp-sctp_36515.pdf}, title = {{Performance Measurement of SIMCO over TCP and SCTP}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36515}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36515
C. M. Gauger et al., “To Session or not to Session - Design Issues for the Future Internet,” in Proceedings of the 6th Würzburg Workshop on IP: Joint EuroNGI and ITG Workshop on ‘Visions of Future Generation Networks’ (EuroView2006), Würzburg, Germany, Jul. 2006. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36522
- BibTeX
- Link
BibTeX
@inproceedings{ki-2006-0040, address = {W\"{u}rzburg, Germany}, author = {Gauger, Christoph M. and Gloss, Bernd and Hauser, Christian and J\"{a}hnert, J\"{u}rgen and Kiesel, Sebastian and K\"{o}hn, Martin and K\"{u}hn, Paul J. and Necker, Marc C. and Reifert, Andreas and Sass, Detlef and Scharf, Michael}, booktitle = {{Proceedings of the 6th W\"{u}rzburg Workshop on IP: Joint EuroNGI and ITG Workshop on 'Visions of Future Generation Networks' (EuroView2006)}}, month = {07}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ga_EuroView2006-Abstract_36522.pdf}, title = {{To Session or not to Session - Design Issues for the Future Internet}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36522}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36522
S. Kiesel and M. Scharf, “Modeling and Performance Evaluation of SCTP as Transport Protocol for Firewall Control,” in Proceedings of the 5th international IFIP-TC6 conference on Networking (NETWORKING′06), Springer LNCS 3976, Coimbra, Portugal, May 2006, pp. 451–462. doi: 10.1007/11753810_38.
- BibTeX
- Link
BibTeX
@inproceedings{ki-2006-0020.bib, abstract = { Firewalls are a crucial building block for securing IP networks. The usage of out-of-band-signaling protocols (such as SIP) for VoIP and multimedia applications requires a dynamic control of these firewalls, which can be implemented using the Simple Middlebox Configuration Protocol (SIMCO). In this paper, we study the performance of SCTP and TCP as transport protocols for the transaction-based signaling protocol SIMCO, which requires small end-to-end delays. We present an analytical model in order to quantify the impact of head-of-line blocking in SCTP. Both, the model and measurements reveal that SCTP can significantly reduce the SIMCO response times by leveraging transmission over multiple parallel streams. While a few SCTP streams can almost completely avoid head-of-line blocking, our measurements show that TCP may suffer from rather large end-to-end delays.}, address = {Coimbra, Portugal}, author = {Kiesel, Sebastian and Scharf, Michael}, booktitle = {{Proceedings of the 5th international IFIP-TC6 conference on Networking (NETWORKING'06), Springer LNCS 3976}}, doi = {10.1007/11753810_38}, month = {05}, pages = {451--462}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_IFIPNetworking06_36482.pdf}, title = {{Modeling and Performance Evaluation of SCTP as Transport Protocol for Firewall Control}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36482}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36482
M. C. Necker, C. M. Gauger, S. Kiesel, and U. Reiser, “IKREmuLib: A Library for Seamless Integration of Simulation and Emulation,” in Proceedings of the 13th GI/ITG Conference on Measurement, Modeling, and Evaluation of Computer and Communication Systems (MMB 2006), Nürnberg, Germany, Mar. 2006. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36466
- BibTeX
- Link
BibTeX
@inproceedings{ki-2006-0010.bib, abstract = {The method of emulation is an attractive approach in order to evaluate the performance of communication networks. Compared to simulation, it is especially beneficial when real-world components, e.g., applications or protocols should be included. In this paper, we present the new emulation environment IKREmuLib, which allows for a seamless integration of both the emulation and the simulation domain by exploiting the same system model implementation. By doing so, we avoid the disadvantages of either approach while combining the benefits of both.}, address = {N\"{u}rnberg, Germany}, author = {Necker, Marc C. and Gauger, Christoph M. and Kiesel, Sebastian and Reiser, Ulrich}, booktitle = {{Proceedings of the 13th GI/ITG Conference on Measurement, Modeling, and Evaluation of Computer and Communication Systems (MMB 2006)}}, month = {03}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ne_emulib_36466.pdf}, title = {{IKREmuLib: A Library for Seamless Integration of Simulation and Emulation}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36466}, year = 2006 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36466
C. Raisch, M. Kraemer, S. Kiesel, C. Hauser, and I. B. M. Corporation, “METHOD FOR PROTECTING AGAINST ATTACKS IN A HIGH-SPEED NETWORK.” Dec. 2005. [Online]. Available: http://patentscope.wipo.int/search/en/WO2005120004
- BibTeX
- Link
BibTeX
@misc{ki-2005-0020, abstract = {A method, module and computer program for protecting a target against attacks in a high-speed network. The method according to the invention comprises the steps of generating a question, after having received a request from an initiator identified by a sourcelD associated to a certain node in the network, sending the question to the node identified by the sourcelD, in case that an answer to the question is received, evaluating the answer, and in case that a proper answer has been received, enabling communication between the initiator and the target by sending a further message from the target to the initiator.}, author = {Raisch, Christoph and Kraemer, Marco and Kiesel, Sebastian and Hauser, Christian and Corporation, International Business Machines}, howpublished = {Patent Application}, month = {12}, note = {WO/2005/120004}, title = {{METHOD FOR PROTECTING AGAINST ATTACKS IN A HIGH-SPEED NETWORK}}, url = {http://patentscope.wipo.int/search/en/WO2005120004}, year = 2005 }
Link
http://patentscope.wipo.int/search/en/WO2005120004
S. Kiesel and M. Scharf, “Evaluation of SCTP as transport layer protocol for firewall control.” Oct. 2005. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36454
- BibTeX
- Link
BibTeX
@misc{ki-2005-0010, author = {Kiesel, Sebastian and Scharf, Michael}, howpublished = {Workshop 'Neue Herausforderungen in der Netzsicherheit' an der Universit\"{a}t Duisburg-Essen}, month = {10}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_simco-sctp_36454.pdf}, title = {{Evaluation of SCTP as transport layer protocol for firewall control}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36454}, year = 2005 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36454
A. Müller and S. Kiesel, “Issues with the Interworking of Application Layer Protocols and the MIDCOM Architecture,” in Proceedings of the 10th Open European Summer School and IFIP WG 6.3 Workshop (EUNICE 2004), Tampere, Finland, Jun. 2004, pp. 188–195. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36357
- BibTeX
- Link
BibTeX
@inproceedings{ki-2004-0010, abstract = {In the current Internet, there are many devices performing specific functions in the network going beyond simply routing and forwarding IP packets to their destination. Common examples for such devices - which are frequently referred to as middleboxes are firewalls and network address translators. Middleboxes usually operate exclusively on the network and transport layer in order to fulfill their task, mostly taking adequate action on the basis of the addresses and port numbers of traversing IP packets. However, there are some services ordinary middleboxes do not get along with. As a result of that, the corresponding data packets mostly do not reach their actual destination and hence, a reasonable communication is normally no longer possible. One approach for dealing with this problem is the so-called IETF MIDCOM (MIDdlebox COMmunications) architecture. In this paper -after elucidating the problem in more detail and providing an overview of other existing solution approaches-, we especially focus on MIDCOM and we address some potential problems concerning the interworking between this approach and some specific services, including possible solutions for coping with them. This way, we want to point out the issues that should be taken into account when designing new application layer protocols or when extending existing ones in order to make them fully interoperable with the MIDCOM architecture.}, address = {Tampere, Finland}, author = {M\"{u}ller, Andreas and Kiesel, Sebastian}, booktitle = {{Proceedings of the 10th Open European Summer School and IFIP WG 6.3 Workshop (EUNICE 2004)}}, month = {06}, pages = {188--195}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_paper-midcom-eunic2004_36357.pdf}, title = {{Issues with the Interworking of Application Layer Protocols and the MIDCOM Architecture}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36357}, year = 2004 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36357
S. Kiesel, “On the Use of Cryptographic Cookies for Transport Layer Connection Establishment,” in Proceedings of the 8th EUNICE Open European Summer School (EUNICE 2002), Trondheim, Norway, Sep. 2002, pp. 177–184. [Online]. Available: http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36358
- BibTeX
- Link
BibTeX
@inproceedings{ki-2002-0020, abstract = {In October 2000, the specification of SCTP (Stream Control Transmission Protocol, a new transport layer protocol) was published by the Internet Engineering Task Force (IETF). SCTP uses a cryptographic cookie mechanism to protect itself against denial-of-service attacks aiming at the association startup procedure. However, the basic idea of the cookie mechanism is not new. A similar mechanism for the TCP protocol has been proposed back in 1996 and has been implemented in the TCP protocol engines of several operating systems. The TCP SYN cookie mechanism has not been published as an RFC, probably because it does not require any changes to the existing TCP specification. This paper gives an introduction to the problem of DoS attacks against transport layer protocols and presents the basic idea of the cookie approach. The specific implementations of this idea both for TCP and SCTP are explained and compared, especially with respect to the fact that for TCP, the mechanism had to fit into the existing protocol specification, whereas for SCTP, the protocol has been designed from scratch with the cookie mechanism in mind.}, address = {Trondheim, Norway}, author = {Kiesel, Sebastian}, booktitle = {Proceedings of the 8th EUNICE Open European Summer School (EUNICE 2002)}, month = {09}, pages = {177--184}, pdf = {http://www.ikr.uni-stuttgart.de/Content/Publications/Archive/Ki_paper-sigtran-eunice2002_36358.pdf}, title = {{On the Use of Cryptographic Cookies for Transport Layer Connection Establishment}}, url = {http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36358}, year = 2002 }
Link
http://www.ikr.uni-stuttgart.de/Content/Publications/View/FullPage.html?36358
S. Kiesel, “Analysis and evaluation of security issues for transport of SS7 signaling data over IP networks,” Diplomarbeit, 2002.
- BibTeX
BibTeX
@mastersthesis{ki-2002-0010, abstract = {Since late 1998 the SIGTRAN (Signaling Transport) working group of the Internet Engineering Task Force (IETF) has been working on the specification of a protocol suite for the transport of SS7 signaling data over IP networks. The core of this architecture is comprised by a protocol called SCTP (Stream Control Transmission Protocol), which basically implemets a reliable datagram service on top of an unreliable IP network. Several adaptation layers may reside on top of SCTP and enhance SCTP's services to match different signaling transport scenarios and requirements. SCTP uses a sophisticated four-way handshake protocol for association (connection) setup and so called ``Verification Tags'' to protect itself against denial-of-service and ``blind spoofing'' attacks. The goal of this work was to analyze what these security mechanisms achieve and what they require from their environment in order to work properly. The SCTP four-way handshake protocol has been modelized using the ``BAN logic'', a formal method introduced by Michael Burrows, Mart\'{i}n Abadi and Roger Needham in 1989. SCTP's security mechanisms require that the underlying IP network cannot be wiretapped by hostile nodes. It has been analyzed what an attacker can achieve if this assumption is not fulfilled. Possible attacks include the injection of data into an established SCTP association and hi-jacking or forced teardown of an association. A method for modeling the secrecy of a network at different abstraction levels has been developed. The interworking of SCTP with IPsec and NAT has been considered.}, author = {Kiesel, Sebastian}, month = {02}, school = {Universit\"{a}t Stuttgart, Institut f\"{u}r Nachrichtenvermittlung und Datenverarbeitung}, title = {{Analysis and evaluation of security issues for transport of SS7 signaling data over IP networks}}, type = {Diplomarbeit}, year = 2002 }
S. Kiesel, “Gegenüberstellung und Bewertung verschiedener Mobilitätskonzepte für IP,” Studienarbeit, 2000.
- BibTeX
BibTeX
@mastersthesis{ki-2000-0010, abstract = { The protocols in the TCP/IP protocol suite used for Internet communication do not support mobile end systems by themselves. Encouraged by the growth of the Internet and by technological advance in the fields of wireless communications as well as mobile computing, a whole series of new protocols has been proposed in the recent years in order to provide mobility support for IP networks. This thesis gives an introduction into two protocols for IP mobility support that use different basic approaches. For each protocol an implementation has been installed in the IND network laboratory: the implementation of the Mobile IP protocol from Stanford University and the Cellular IP implementation from Columbia University. Special measurement software was used to investigate performance of these protocols, particularly with regard to packet loss caused by handovers between two Internet access points. }, author = {Kiesel, Sebastian}, month = {08}, school = {Universit\"{a}t Stuttgart, Institut f\"{u}r Nachrichtenvermittlung und Datenverarbeitung}, title = {{Gegen\"{u}berstellung und Bewertung verschiedener Mobilit\"{a}tskonzepte f\"{u}r IP}}, type = {Studienarbeit}, year = 2000 }

Sebastian Kiesel

Kontakt

Fachgebiet

Publikationen

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

BibTeX

Link

BibTeX

Link

BibTeX

BibTeX

Link

BibTeX

BibTeX

BibTeX

BibTeX

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

Link

BibTeX

BibTeX

So erreichen Sie uns

Zielgruppe

Formalia

Services

Organisation