André Årnes Status: PhD graduate (graduated December 2006) from the  Centre for Quantifiable Quality of Service in Communication Systems (Q2S), Centre of Excellence at the Norwegian University of Science and Technology. E-mail: andrearn AT pvv.ntnu.no andre.arnes AT ieee.org Research Group: Assigned to the research area Trustworthy Multiparty Interactions in Dynamic Networking Environments and the research project Security services in dynamic network environments for mobile users Supervisor: Professor Svein J. Knapskog Research Interests: Security and Privacy in Distributed Systems Network Monitoring and Intrusion Detection Computer and Network Forensics Security Testing and Risk Evaluation PKI, PKI Certificate Revocation Publications: André Årnes, Paul Haas, Giovanni Vigna, Richard A. Kemmerer, "Using a Virtual Security Testbed for Digital Forensic Reconstruction", Journal in Computer Virology, Number 4, Springer Paris, February 2007.Springerlink PDF. André Årnes, "Risk, Privacy, and Security in Computer Networks", PhD Thesis, Norwegian University of Science and Technology, December 2006. André Årnes, Karin Sallhammar, Kjetil Haslum, Svein J. Knapskog, "Real-time Risk Assessment with Network Sensors and Hidden Markov Models", The 11th Nordic Workshop on Secure IT-systems (NORDSEC 2006), October 2006, Linkoping, Sweden. Kjetil Haslum, André Årnes, "Multisensor Real-time Risk Assessment using Continuous-time Hidden Markov Models", 2006 International Conference on Computational Intelligence and Security (CIS 2006), November 2006, Guangzhou, China. André Årnes, Fredrik Valeur, Giovanni Vigna, Richard A. Kemmerer, "Using Hidden Markov Models To Evaluate The Risks Of Intrusions - System Architecture And Model Validation", 9th International Symposium On Recent Advances In Intrusion Detection (RAID 2006), Hamburg, Germany, September 2006, published in Springer LNCS Vol. 4219. André Årnes, Paul Haas, Giovanni Vigna, Richard A. Kemmerer, "Digital Forensic Reconstruction and the Virtual Security Testbed ViSe", Conference on Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA 2006), Berlin, Germany, July 2006, published in Springer LNCS Vol. 4064. André Årnes, Karin Sallhammar, Kjetil Haslum, Tønnes Brekne, Marie Elisabeth Gaup Moe, Svein Johan Knapskog, "Real-time Risk Assessment with Network Sensors and Intrusion Detection Systems", 2005 International Conference on Computational Intelligence and Security (CIS-05), Xian, China, December 2005, published in Springer LNCS Vol. 3801/3802. Lasse Øverlier, Tønnes Brekne, André Årnes, "Non-Expanding Transaction Specific Pseudonymization for IP Traffic Monitoring", 4th International Conference on Cryptology and Network Security (CANS 2005), Xiamen, China, December 2005, published in Springer LNCS Vol. 3810. Tønnes Brekne, André Årnes, "Circumventing IP-Address Pseudonymization", The third IASTED International Conference on Communications and Computer Networks (CCN 2005), Marina del Rey, USA, October 2005. Espen André Fossen, André Årnes, "Forensic Geolocation of Internet Addresses using Network Measurements", The 10th Nordic Workshop on Secure IT-systems (NORDSEC 2005), Tartu, Estonia, October 2005. Tønnes Brekne, André Årnes, Arne Øslebø. "Anonymization of IP Traffic Monitoring Data -- Attacks on Two Prefix-preserving Anonymization Schemes and Some Proposed Remedies''. Workshop on Privacy Enhancing Technologies (PET 2005), Kavtat, Croatia, May 2005, published in Springer LNCS 3856. Einar Edvardsen, Thor Gunnar Eskedal, André Årnes. "Open Access Networks''. Proceedings of the IFIP TC6 / WG6.2 Sixth International Symposium on Communications Internworking (Interworking 2002), Perth, 2002. (PDF) Andre Årnes, Mike Just, Svein J. Knapskog, Steve Lloyd, Henk Meijer. "Selecting Revocation Solutions for PKI", Proceedings of NORDSEC 2000 Fifth Nordic Workshop on Secure IT Systems, Reykjavik, 2000. (PS) Andre Årnes. "Public Key Certificate Revocation Schemes", Siv.Ing. (MSc) Thesis, Norwegian University of Science and Technology, February 2000. (PS) Recent Presentations and Talks: "Digital Kriminalitet". Sikkerhet og sårbarhet 2007, Dataforeningen Trønderlag, Trondheim, May 8-9 2007 "LOBSTER: Large Scale Monitoring of Broadband Internet Infrastructure". Sikkerhet og sårbarhet 2005, Dataforeningen Trønderlag, Trondheim, May 12 2005 "Anonymization of IP monitoring data". Spring School in Security, Marseille, April 28 2005 "Anonymization of passive monitoring data". UNINETT and Q2S Network Measurement Seminar, April 11 2005 "Distribuert nettverksovervåkning". Seminar, Forskningsmessige utfordringer innen dataetterforskning og elektroniske spor, Nye Kripos, March 2005. "Elektroniske spor og etterforskning på Internett". Medlemsmøte Dataforeningen Trøndelag "Jakten på elektroniske spor", Faggruppen Informasjonssikkerhet, March 2005. "Developments in Certificate Revocation''. Norwegian Crypto Seminar, Trondheim, 2004. (PDF) "Challenges in Network Monitoring: Security Applications of Passive Network Monitoring''. Norwegian Network Research Seminar, Trondheim, 2004. "Honeypots - an introduction", Midt-Norsk Sikkerhetsforum, December 2002. Other Publications and Resources: "Sporer dataskurker", Interview, Gemini, 2006. "Kriminelt Kryptisk", Interview, Gemini, 2005. (english) "Open Source Forensic Analysis", GIAC Certified Forensic Analyst (GCFA) Practical Exam, April 2003. Certificate Revocation Performance Simulations (WWW)

andrearn AT q2s.ntnu.no, 2005-10-05