Aleksandar Milenkoski

[July 2016] Paper accepted at ISSRE 2016.

[April 2016] Won DFG grant for research in IT security.

[March 2016] Paper on NFV/SDN security published (in collaboration with the CSA Virtualization WG).

[January 2016] Won SPECtacular award for Outstanding Research.

[December 2015] Held a guest lecture at the University of Stuttgart on the topic of Intrusion Detection Systems [slides].

[August 2015] Paper accepted at RAID 2015.

[July 2015] Accepted an invitation for a guest lecture at the University of Stuttgart on the topic of Secure and Dependable Software Systems.

[June 2015] Paper accepted at ACM Computing Surveys.

[June 2015] My work with the CSA Virtualization WG on NFV/SDN security has kicked off! Stay tuned for a paper release in November 2015.

[May 2015] The Dagstuhl Report from the Dagstuhl Seminar 15041 is now published.

[Apr. 2015] CSA's report on Best Practices for Mitigating Risks in Virtualized Environments published.

[Apr. 2015] Fast abstract accepted at DSN 2015.

[Sept. 2014] Our work providing technical information on hypervisor vulnerabilities is now available at exploit-db.com and PacketStormSecurity.

[August 2014] Paper accepted at ISSRE 2014.

• Network and system security
• Vulnerability analysis
• Intrusion detection
• Evaluation of intrusion detection systems

Technology domains:

• Virtualization and cloud computing
• Virtual machine introspection
• Intrusion detection systems for virtualized environments

• Grant for research in IT security (in the area of intrusion detection), awarded by DFG, April 2016.
• Aleksandar Milenkoski. SPECtacular Award for Outstanding Research, awarded by SPEC President, January 2016.
• Aleksandar Milenkoski. SPECtacular Award for Outstanding Service to SPEC (Standard Performance Evaluation Corporation), awarded by SPEC President, March 2014.
• Aleksandar Milenkoski. Recognition of Service Award, awarded by SPEC President, March 2013.
• Aleksandar Milenkoski. Marie Sklodowska-Curie Fellowship, September 2011.

Projects

FP7 RELATE
Trans-European Research Training Network on Engineering and Provisioning of Service Based Cloud Applications

Invited Talks

Intrusion Detection Systems. At University of Stuttgart, Stuttgart, Germany, December 15, 2015. [html]

Evaluating Security Mechanisms in Dynamic Virtualized Environments. Dagstuhl Seminar "Model-driven Algorithms and Architectures for Self-Aware Computing Systems", Dagstuhl, Germany, January 20, 2015. [html]

Benchmarking Intrusion Detection Systems for Virtualized Environments at SPEC RG. European Workshop on Dependable Computing (EWDC), Coimbra, Portugal, May 15, 2013. [.html]

Benchmarking VMM-based Intrusion Detection Systems and Cloud Research at SPEC. INRIA Seminar "Software Engineering for Adaptive and Cloud Systems", Rennes, France, April 10, 2013. [.html]

Ensuring Dependability of Virtualized Cloud Infrastructures Through Reliable Intrusion Detection. At Charles University, Prague, Czech Republic, June 21, 2012.

• Teaching assistance. Undergraduate obligatory course "Basics of programming", Winter Semester 2015/2016, at the Department of Mathematics and Informatics at the University of Würzburg.
• Software Engineering Practicum. Winter Semester 2015/2016, at the Department of Mathematics and Informatics at the University of Würzburg.
• Software Design and Quality Advanced Practicum. Winter Semester 2015/2016, at the Department of Mathematics and Informatics at the University of Würzburg.
• Teaching assistance. Undergraduate obligatory course "Basics of programming", Winter Semester 2014/2015, at the Department of Mathematics and Informatics at the University of Würzburg.
• Software Engineering Practicum. Winter Semester 2014/2015, at the Department of Mathematics and Informatics at the University of Würzburg.
• Software Design and Quality Advanced Practicum. Winter Semester 2014/2015, at the Department of Mathematics and Informatics at the University of Würzburg.
• Software Engineering Practicum. Summer Semester 2013/2014, at the Department of Mathematics and Informatics at the University of Würzburg.

Supervised Theses

• Stefan Geissler. Mining Vulnerability Databases for Information on Hypervisor Vulnerabilities: Analyses and Predictions (eng.). Master's Thesis. University of Würzburg, 2016.
• Christoph Sendner. Analysis and Demonstration of Local Attacks Against Hypervisors (eng.). Master's Thesis. University of Würzburg, 2016. [ongoing]
• Alexander Leonhardt. Quantifizierung des Einflusses des Zeitverhaltens eines IDS auf IDS-Benchmarking-Metriken (orig., ger.), Quantification of the Impact of Transient Behaviors of Intrusion Detection Systems on Evaluation Metrics (eng.). Bachelor's Thesis. University of Würzburg, 2015.

• TRACER Fire (Forensic and Incident Response Exercise) 2013, collocated with ACSAC (Annual Computer Security Applications Conference) 2013. Organized by Sandia National Laboratories.

Organization Activities

• Appointed Collector and organisation assistance. Dagstuhl Seminar on "Model-driven Algorithms and Architectures for Self-Aware Computing Systems"
• Local Organization Chair for RELATE Open Excellence Workshop “Online models for quality-of-service and resource management in modern IT systems, infrastructures and services”, Karlsruhe, Germany, December 2012.

Review Activities

• IEEE Transactions on Information Forensics & Security
• IEEE Transactions on Services Computing, Special Issue "Security and Dependability of Cloud Systems and Services"
• IEEE International Symposium on Software Reliability Engineering ISSRE 2015
• ACM SIGMETRICS 2012
• IEEE Cloud Computing Magazine
• International Conference on Autonomic Computing ICAC 2013
• International ICST Conference on Simulation Tools and Techniques SIMUTools 2012/2013
• ACM/SPEC International Conference on Performance Engineering ICPE 2012/2013/2015
• European Workshop on Performance Engineering EPEW 2013/2015
• Workshop on Formal Engineering approaches to Software Components and Architectures FESCA 2011
• Software and Systems Modeling, Springer
• Winter Simulation Conference 2012

Professional Functions

• Elected Secretary (since April 2012). SPEC RG Cloud Working Group
• Elected Secretary (since August 2012). SPEC RG IDS Benchmarking Working Group
• Elected Release Manager (since August 2012). SPEC RG IDS Benchmarking Working Group
• Elected Web/Publicity Chair (since July 2012). ICPE Conferences

Memberships

• Cloud Security Alliance (CSA). Virtualization Working Group
• Association for Computing Machinery (ACM). Special Interest Group on Security, Audit and Control (SIGSAC)
• Institute of Electrical and Electronics Engineers (IEEE)

Visiting Researcher