dr. Roland van Rijswijk-Deij

Associate Professor of Network Security

University of Twente - EEMCS/DACS

NLnet Labs

About Me

I’m associate professor of Computer Network Security in the Design and Analysis of Communication Systems (DACS) group at the Faculty of Electrical Engineering, Maths and Computer Science (EEMCS) at the University of Twente.

I am also principal scientist at NLnet Labs, a not-for-profit foundation dedicated to research into and open source software for the core protocols of the Internet.

For more information, see my CV.

Research

My research focuses on network security, with two particular areas of interest:

The Domain Name System (DNS) – after IP, DNS is the most critical protocol on the Internet, without which the Internet effectively stops working for most users. I explore the security of the DNS using large scale measurements and statistical analysis, for instance studying the effects of the deployment of the DNS Security Extensions (DNSSEC), both in the positive (added security) and the negative (larger potential for abuse in DDoS attacks) sense. DNS also plays an important role in other security issues on the Internet, such as botnets, phishing and malware.
Routing Security (RPKI) – much like other early core protocols of the Internet, the interdomain routing protocol BGP was not designed with security in mind. The Resource Public Key Infrastructure (RPKI) aims to remedy this by allowing resource holders to manage authorizations for their resources. Apart from having an interest in the gradual deployment of this technology on the global Internet, I am also interested in studying new applications that further enhance the security of the routing ecosystem.

My research is supported by SURF, the collaborative organisation for ICT in Dutch higher education and research, by the Netherlands Organisation for Scientific Research (NWO) by SIDN Fonds and by European Commission Framework Project grants.

Public Service

I regularly review for IEEE Communications Magazine (ComMag), ACM/IEEE Transactions on Networking (TON), ACM SIGCOMM Computer Communication Review (CCR), IEEE Transactions on Network and Service Management (TNSM), ACM Digital Threats: Research and Practice (DTRAP) and other journals.

In 2019, I was one of the general chairs of the ACM Internet Measurement Conference (IMC 2019), which was held in Amsterdam, October 21-23.

I also regularly serve on TPCs, my 2020 commitments include:

TPC member Passive and Active Measurements Conference (PAM 2020)
TPC member Network Traffic Measurements and Analysis Conference (TMA 2020)
TPC member International Workshop on Traffic Measurements for Cybersecurity (WTMC 2020)
TPC co-chair Applied Networking Research Workshop (ANRW 2020)
TPC member 16th International Conference on Network and Service Management

Interests

Network Security
Network Measurements
Domain Name System
Routing Security

Education

Ph.D. in Computer Science, 2017

University of Twente
M.Sc. in Computer Science, 2001

University of Twente

Selected Publications

For a list of all my publications, click here, or visit my Google Scholar profile.

A Longitudinal and Comprehensive Study of the DANE Ecosystem in Email

H. Lee, A. Girish, R. van Rijswijk-Deij, T. Kwon, T. Chung

In Proceedings of the 29th USENIX Security Symposium (USENIX Security ‘20), Boston, MA, USA, 12-14 August, 2020.

PDF Project Conference

RPKI is Coming of Age: A Longitudinal Study of RPKI Deployment and Invalid Route Origins

T. Chung, E. Aben, T. Bruijnzeels, B. Chandrasekaran, D. Choffnes, D. Levin, B. Maggs, A. Mislove, R. van Rijswijk-Deij, J. Rula, N. Sullivan

In proceedings of the ACM Internet Measurement Conference 2019 (IMC 2019), Amsterdam, The Netherlands, 21-23 October, 2019.

PDF Slides Video

Roll, Roll, Roll your Root: A Comprehensive Analysis of the First Ever DNSSEC Root KSK Rollover

This paper discusses a comprehensive study of the ²⁰¹⁷⁄₂₀₁₈ rollover of the DNSSEC Root Key Signing Key.

M. Müller, M. Thomas, D. Wessels, W. Hardaker, T. Chung, W. Toorop, R. van Rijswijk-Deij

In proceedings of the ACM Internet Measurement Conference 2019 (IMC 2019), Amsterdam, The Netherlands, 21-23 October, 2019.

PDF Slides Video Best Paper Award

Melting the Snow: Using Active DNS Measurements to Detect Snowshoe Spam Domains

Snowshoe spam is a notoriously hard to detect form of spam e-mail. Senders of this type of spam spread the load of sending mail over tens or hundreds of hosts, in order to remain below the detection radar of classic spam blacklists. In this paper, we show how we can leverage active DNS measurements combined with machine learning to detect domains crafted for snowshoe spam. Our results show that we can detect snowshoe spam domains up to 180 days earlier than they appear on existing blacklists.

O. van der Toorn, R. van Rijswijk-Deij, B. Geesink, A. Sperotto

In Proceedings of IEEE/IFIP Network Operations and Management Symposium (NOMS 2018), Taipei, Taiwan, 23-27 April, 2018.

Preprint Project Best Paper Award

Understanding the Role of Registrars in DNSSEC Deployment

In this paper we study the role of domain name registrars in deployment of the Domain Name System Security Extensions (DNSSEC). We find a number of significant hurdles to deployment of DNSSEC as a consequence of a general lack of implementation at large registrars or poor implementation choices at those registrars that do support DNSSEC.

T. Chung, R. van Rijswijk-Deij, D. Choffnes, A. Mislove, C. Wilson, D. Levin, B. Maggs

In ACM Internet Measurement Conference 2017 (IMC 2017), London, United Kingdom, 1-3 November, 2017.

PDF Project ANRP 2019

A Longitudinal, End-to-End View of the DNSSEC Ecosystem

This paper provides an end-to-end view of the state of the DNSSEC ecosystem. It covers both DNSSEC-signed domains and a survey of DNSSEC validation by DNS resolvers. The paper paints a bleak picture of the state of DNSSEC deployment, with just over 1% of domains in .com, .net and .org signed and just over 12% of the observed DNS resolvers correctly validating DNSSEC signatures.

T. Chung, R. van Rijswijk-Deij, B. Chandrasekaran, D. Choffnes, D. Levin, B. Maggs, A. Mislove, C. Wilson

In Proceedings of the 26th USENIX Security Symposium (USENIX Security ‘17), Vancouver, BC, Canada, 16-18 August, 2017.

PDF Project Distinguished Paper Award

The Performance Impact of Elliptic Curve Cryptography on DNSSEC Validation

In this work, we study the impact of a switch to elliptic curve cryptography on the performance of DNSSEC-validating DNS resolvers.

R. van Rijswijk-Deij, K. Hageman, A. Sperotto, A. Pras

In IEEE/ACM Transactions on Networking, Volume 25, Issue 2, April, 2017.

Preprint PDF ANRP 2017

A High-Performance, Scalable Infrastructure for Active DNS Measurements

In this paper we present OpenINTEL: a large-scale high-performance active measurement infrastructure for the DNS.

R. van Rijswijk-Deij, M. Jonker, A. Sperotto, A. Pras

In IEEE Journal on Selected Areas in Communications (JSAC), Volume 34, Issue 7, May, 2016.

Preprint PDF Research Data NL Prize

DNSSEC and Its Potential for DDoS Attacks

This paper establishes ground truth for the amplification attack potential in 70% of all DNSSEC-signed domains. The paper demonstrates that DNSSEC-signed domains have an average amplification factor that is 6 to 12 times higher than that of unsigned domains.

R. van Rijswijk-Deij, A. Sperotto, A. Pras

In Proceedings of the ACM Internet Measurement Conference 2014 (IMC 2014), Vancouver, BC, Canada, 5-7 November, 2014.

PDF Community Contribution Award ANRP 2015

Students

Ph.D. Candidates

Current

I am daily supervisor of the following Ph.D. candidates in our group:

Moritz Müller
Leandro Bertholdo

All Ph.D. candidates I supervise are advised by prof. dr. ir. Aiko Pras

Graduated

Wouter B. de Vries (2019) – thesis

Master Students

Current

Etiënne Khan (University of Twente) – co-supervising with dr. Anna Sperotto

Graduated

Caspar Schutijser (2018) – thesis
Gijs Rijnders (2018) – thesis
Olivier van der Toorn (2017, co-supervisor) – paper
Tho Le (2017) – thesis
Romanos Dodopoulos (2015) – thesis
Kaspar Hageman (2015) – thesis
Sean Rijs (2014) – report
Gijs van den Broek (2012) – paper
Niels Monen (2011) – report
Boudewijn Ector (2009) – thesis (in Dutch)

Bachelor Students

Current

I am currently not supervising any bachelor students. If you are a bachelor student enrolled in the CS, EE or BIT curriculum at the University of Twente and looking for a bachelor assignment, contact me, or pass by my office.

Graduated

Anja Scherjon (2020) – thesis
Bjorn Oude Roelink (2020) – thesis
Jorik van Nielen (2020) – thesis
J.J. Yu (2017) – thesis
Breus Blaauwendraad (2017) – thesis (best paper in track)
Eva van den Eijnden (2017) – thesis
Jeroen Vollenbrock (2016) – thesis (best paper in track)
Remy Bien (2014) – thesis (in Dutch)

dr. Roland van Rijswijk-Deij

Associate Professor of Network Security

About Me

Research

Public Service

Interests

Education

Selected Publications

Students

Ph.D. Candidates

Current

Graduated

Master Students

Current

Graduated

Bachelor Students

Current

Graduated

Contact