Our group offers both semester and master theses for ETH students in D-ITET and D-INFK (if you're in another department, please contact us first), see below for a non-exhaustive list.
Theses topics can also be crafted according to the student's interests. Feel free to contact us if you are interested in a more tailor-made topic. Please write to this mailing list and mention which high-level topics you are interested in: nsg-theses(at)ethz.ch.
Available Theses
Running Theses
Generalizing Passive Routing Attacks Against Overlay Networks (M)
Analyzing and Comparing Defense Strategies in a Cyber Defense Exercise (M)
Detecting Internet Events (M)
Enhancing Data Plane Signals for Network Monitoring Systems (M)
Interactive Synthesis of Network Queries from Traffic Examples (M)
Memento NG (S)
Developing an Automated Defender for Cyber Security Exercises (M)
PACKS: A Practical Abstraction for Programmable Packet Scheduling (S)
Route Convergence Optimization in the SWITCH Network (M)
Completed Theses
2021
O4: A Higher-level Data-plane Programming Language (M)
Gauging Risk in Resource Optimizations on Stateful Packet-Processing Devices (M)
Routing in P4 (S)
Mailing List Analysis (S)
Process Mining for Networking (S)
Stateful Tofino-based Traffic Generator (M)
Improving Current P4 Prototyping Tools (S)
In Search of Network Shifts (B)
2020
Synthesizing Network-Wide Configuration Updates (M)
- ABB Research Award 2021
Traffic-Aware Compilation
2019
Network behavior monitoring in the data plane (S)
On making correlation attacks practical (M)
Self-protecting Networks from IoT-based Attacks (M)
Improving Performance with Network-aware Scheduling Algorithms (S)
Developing a Semi-Automated Framework to Label Network Traffic Datasets (M)
On combining SWIFT and Blink to improve Internet convergence (M)
Traffic-analysis Attacks over Encrypted HTTP from the Data Plane (M)
Developing a Dataset with Coordinated Network Attacks (M)
On Making Blink Deployable in Practice (M)
Automatic Generation of Adversarial Workload for Programmable Switches (S)
Network Performance Obfuscation (S)
2018
Monitoring and Controlling Network Reconnaissance using Programmable Networks (S)
Automatic BGP Configuration Analysis and Summarisation (S)
Leveraging Network Programmability for Machine Learning in the Data Plane (M)
- ABB Research Award 2019
Packet Header Obfuscation in the Data Plane (S)
Traffic Matrix Obfuscation (M)
Net2Text: A Matter of Time (M)
Next-Generation Network Monitoring Using Programmable Network Devices (M)
On Offloading Control Plane Applications to the Data Plane (M)
2017
Data Plane Driven Network Convergence (M)
Learning Defenses in Computer Networks: Neural Networks Approach (M)
Probabilistic Network Analysis and Synthesis (M)
Data-driven classification and isolation of network devices (S)
Detection of Malicious Remote Shell Sessions (S)
Verifying ADS-B Position Claims with Passive Radar (M)
Adding Passive Measurability to QUIC (M)
Exploring the impact of TCP/IP parameter tuning on performance (M)
A FLARM Receiver for Crowdsourced Air Traffic Monitoring (S)
Chronos: Finding the configurations recipe for fast convergence (S)
Constraint-based routing as a stream computation (M)
Evaluation of AQM schemes to support Low Latency in the Internet (M)
In-network Anomaly Detection with Programmable Switches (S)
Load balancing in a data center using the data plane (M)
Methods to Evaluate Cyber Threat Intelligence Feeds (M)
Tracing Internet Path Transparency (M)
2016
A Fast and Loop-Free Convergence upon Remote BGP Disruptions in Large IP Networks (S)
Boosting the convergence performance of SDX platforms (S)
Continuous Measurements of Internet Path Transparency (S)
Detecting and mitigating network attacks on Bitcoin (S)
Practical Concurrency Analysis for SDN (M)
Accurate Classification of Web Requests (S)
Applying meaningful destruction in Software-Defined Networks (S)
Building a Path Transparency Observatory (M)
Cooperating with Middleboxes in the Internet (S)
Does Your Phone Spy on You? (M)
Flexible Traffic Engineering in existing networks with Fibbing (S)
Human or Malware? Detection of Malicious Web Requests (M)
Improving Load-Balancing Decisions in Data Center Networks Using Software-Defined Networking (M)
Measuring Internet Path Transparency for Transport Protocol Extensions (S)
2015
Design and Implementation of an ECN Proxy for Performance Improvements in the Internet (S)
Integration of Measurement Probes into a Distributed Measurement Plane (S)
On the Correctness of Inter-Domain Deflections (M)
Unleashing The Dragon (M)
Self-Learning Enterprise Networks Via Software Defined Networking (M)
NetBursting: Network Infrastructure in the Cloud (M)
Flexible SDN Testing in Production with Shadow Policies (M)
Improving Network-Wide Troubleshooting with Few SDN Devices (M)
Multipath bonding at Layer 3 (M)
Supercharging IP router memory with SDN (S)
Detecting Concurrency Violations in Software-Defined Networks (M)
Improving the Scalability of Software-Defined Internet Exchange Points (S)
SDN-based Network Obfuscation (M)
- ETH Medal 2016
- NATO CCD COE CyCon Student Award 2017
