Publications
Selected publications, chosen by citation count, plus all papers from 2026 and award-winning papers.
The complete and up-to-date list is on Google Scholar. In addition, I have 21 contributions (papers and abstracts) at the Prague Embedded Systems Workshop (2015–2026) and several open datasets published on Zenodo.
Journal articles
- J. Luxemburk, K. Hynek, R. Plný, and T. Čejka,“Universal Embedding Function for Traffic Classification via QUIC Domain Recognition Pretraining: A Transfer Learning Success,” IEEE Transactions on Network and Service Management, vol. 23, pp. 1647–1663, 2026.
BibTeX
@article{luxemburk2026universal, author = {Luxemburk, Jan and Hynek, Karel and Plný, R. and Čejka, Tomáš}, title = {Universal Embedding Function for Traffic Classification via {QUIC} Domain Recognition Pretraining: A Transfer Learning Success}, journal = {IEEE Transactions on Network and Service Management}, volume = {23}, pages = {1647--1663}, year = {2026} } - J. Koumar, K. Hynek, T. Čejka, and P. Šiška,“CESNET-TimeSeries24: Time Series Dataset for Network Traffic Anomaly Detection and Forecasting,” Scientific Data, vol. 12, no. 1, p. 338, 2025.
BibTeX
@article{koumar2025timeseries24, author = {Koumar, Josef and Hynek, Karel and Čejka, Tomáš and Šiška, Pavel}, title = {{CESNET-TimeSeries24}: Time Series Dataset for Network Traffic Anomaly Detection and Forecasting}, journal = {Scientific Data}, volume = {12}, number = {1}, pages = {338}, year = {2025} } - K. Hynek, J. Luxemburk, J. Pešek, T. Čejka, and P. Šiška,“CESNET-TLS-Year22: A Year-Spanning TLS Network Traffic Dataset from Backbone Lines,” Scientific Data, vol. 11, no. 1, p. 1156, 2024.
BibTeX
@article{hynek2024tlsyear22, author = {Hynek, Karel and Luxemburk, Jan and Pešek, Jaroslav and Čejka, Tomáš and Šiška, Pavel}, title = {{CESNET-TLS-Year22}: A Year-Spanning {TLS} Network Traffic Dataset from Backbone Lines}, journal = {Scientific Data}, volume = {11}, number = {1}, pages = {1156}, year = {2024} } - J. Koumar, K. Hynek, J. Pešek, and T. Čejka,“NetTiSA: Extended IP Flow with Time-Series Features for Universal Bandwidth-Constrained High-Speed Network Traffic Classification,” Computer Networks, vol. 240, p. 110147, 2024.
BibTeX
@article{koumar2024nettisa, author = {Koumar, Josef and Hynek, Karel and Pešek, Jaroslav and Čejka, Tomáš}, title = {{NetTiSA}: Extended {IP} Flow with Time-Series Features for Universal Bandwidth-Constrained High-Speed Network Traffic Classification}, journal = {Computer Networks}, volume = {240}, pages = {110147}, year = {2024} } - J. Luxemburk and T. Čejka,“Fine-Grained TLS Services Classification with Reject Option,” Computer Networks, vol. 220, p. 109467, 2023.
BibTeX
@article{luxemburk2023finegrained, author = {Luxemburk, Jan and Čejka, Tomáš}, title = {Fine-Grained {TLS} Services Classification with Reject Option}, journal = {Computer Networks}, volume = {220}, pages = {109467}, year = {2023} } - J. Luxemburk, K. Hynek, T. Čejka, A. Lukačovič, and P. Šiška,“CESNET-QUIC22: A Large One-Month QUIC Network Traffic Dataset from Backbone Lines,” Data in Brief, vol. 46, p. 108888, 2023.
BibTeX
@article{luxemburk2023quic22, author = {Luxemburk, Jan and Hynek, Karel and Čejka, Tomáš and Lukačovič, A. and Šiška, Pavel}, title = {{CESNET-QUIC22}: A Large One-Month {QUIC} Network Traffic Dataset from Backbone Lines}, journal = {Data in Brief}, volume = {46}, pages = {108888}, year = {2023} } - D. Uhříček, K. Hynek, T. Čejka, and D. Kolář,“BOTA: Explainable IoT Malware Detection in Large Networks,” IEEE Internet of Things Journal, vol. 10, no. 10, pp. 8416–8431, 2023.
BibTeX
@article{uhricek2023bota, author = {Uhříček, D. and Hynek, Karel and Čejka, Tomáš and Kolář, D.}, title = {{BOTA}: Explainable {IoT} Malware Detection in Large Networks}, journal = {IEEE Internet of Things Journal}, volume = {10}, number = {10}, pages = {8416--8431}, year = {2023} } - K. Hynek, D. Vekshin, J. Luxemburk, T. Čejka, and A. Wasicek,“Summary of DNS over HTTPS Abuse,” IEEE Access, vol. 10, pp. 54668–54680, 2022.
BibTeX
@article{hynek2022dohabuse, author = {Hynek, Karel and Vekshin, Dmitrii and Luxemburk, Jan and Čejka, Tomáš and Wasicek, A.}, title = {Summary of {DNS} over {HTTPS} Abuse}, journal = {IEEE Access}, volume = {10}, pages = {54668--54680}, year = {2022} } - K. Jeřábek, K. Hynek, T. Čejka, and O. Ryšavý,“Collection of Datasets with DNS over HTTPS Traffic,” Data in Brief, vol. 42, p. 108310, 2022.
BibTeX
@article{jerabek2022dohdatasets, author = {Jeřábek, K. and Hynek, Karel and Čejka, Tomáš and Ryšavý, O.}, title = {Collection of Datasets with {DNS} over {HTTPS} Traffic}, journal = {Data in Brief}, volume = {42}, pages = {108310}, year = {2022} } - P. Benáček, V. Puš, H. Kubátová, and T. Čejka,“P4-to-VHDL: Automatic Generation of High-Speed Input and Output Network Blocks,” Microprocessors and Microsystems, vol. 56, pp. 22–33, 2018.
BibTeX
@article{benacek2018p4tovhdl, author = {Benáček, Pavel and Puš, V. and Kubátová, Hana and Čejka, Tomáš}, title = {{P4-to-VHDL}: Automatic Generation of High-Speed Input and Output Network Blocks}, journal = {Microprocessors and Microsystems}, volume = {56}, pages = {22--33}, publisher = {Elsevier}, year = {2018} }
Conference papers
- J. Koumar and T. Čejka,“Threat Detection in Network Traffic Using Time Series Analysis,” in IEEE/IFIP Network Operations and Management Symposium (NOMS 2026), Rome, Italy, 2026, pp. 1–8.
BibTeX
@inproceedings{koumar2026threat, author = {Koumar, Josef and Čejka, Tomáš}, title = {Threat Detection in Network Traffic Using Time Series Analysis}, booktitle = {IEEE/IFIP Network Operations and Management Symposium (NOMS 2026)}, address = {Rome, Italy}, pages = {1--8}, year = {2026} } - F. Němec and T. Čejka,“Detecting Anomalies in Time-Sensitive Networks: Precision Time Protocol Metrics,” in IEEE/IFIP Network Operations and Management Symposium (NOMS 2026), Rome, Italy, 2026, pp. 1–5.
BibTeX
@inproceedings{nemec2026ptpnoms, author = {Němec, Filip and Čejka, Tomáš}, title = {Detecting Anomalies in Time-Sensitive Networks: Precision Time Protocol Metrics}, booktitle = {IEEE/IFIP Network Operations and Management Symposium (NOMS 2026)}, address = {Rome, Italy}, pages = {1--5}, year = {2026} } - F. Němec and T. Čejka,“Time-Sensitive Networks Telemetrics for PTPv2 Anomaly Detection,” in IEEE International Conference on Future and Intelligent Networking (FINE 2026), Osaka, Japan, 2026.
BibTeX
@inproceedings{nemec2026ptpfine, author = {Němec, Filip and Čejka, Tomáš}, title = {Time-Sensitive Networks Telemetrics for {PTPv2} Anomaly Detection}, booktitle = {IEEE International Conference on Future and Intelligent Networking (FINE 2026)}, address = {Osaka, Japan}, year = {2026} } - F. Chodura, M. Hulák, and T. Čejka,“Evaluating Flow-Based NAT Detection Models Beyond Controlled Environments,” in SpliTech 2026, Split/Bol, Croatia, 2026.
BibTeX
@inproceedings{chodura2026nat, author = {Chodura, F. and Hulák, Matej and Čejka, Tomáš}, title = {Evaluating Flow-Based {NAT} Detection Models Beyond Controlled Environments}, booktitle = {SpliTech 2026}, address = {Split/Bol, Croatia}, year = {2026} } - J. Koumar, K. Hynek, and T. Čejka,“Network Traffic Classification Based on Single Flow Time Series Analysis,” in International Conference on Network and Service Management (CNSM 2023), Niagara Falls, Canada, 2023, pp. 1–7.
BibTeX
@inproceedings{koumar2023singleflow, author = {Koumar, Josef and Hynek, Karel and Čejka, Tomáš}, title = {Network Traffic Classification Based on Single Flow Time Series Analysis}, booktitle = {International Conference on Network and Service Management (CNSM 2023)}, address = {Niagara Falls, Canada}, pages = {1--7}, year = {2023} } - T. Beneš, J. Pešek, and T. Čejka,“Look at My Network: An Insight into the ISP Backbone Traffic,” in International Conference on Network and Service Management (CNSM 2023), Niagara Falls, Canada, 2023, pp. 1–7.
BibTeX
@inproceedings{benes2023lookatmynetwork, author = {Beneš, Tomáš and Pešek, Jaroslav and Čejka, Tomáš}, title = {Look at My Network: An Insight into the {ISP} Backbone Traffic}, booktitle = {International Conference on Network and Service Management (CNSM 2023)}, address = {Niagara Falls, Canada}, pages = {1--7}, year = {2023} } - J. Luxemburk, K. Hynek, and T. Čejka,“Encrypted Traffic Classification: The QUIC Case,” in Network Traffic Measurement and Analysis Conference (TMA 2023), Naples, Italy, 2023, pp. 1–10.
BibTeX
@inproceedings{luxemburk2023quic, author = {Luxemburk, Jan and Hynek, Karel and Čejka, Tomáš}, title = {Encrypted Traffic Classification: The {QUIC} Case}, booktitle = {Network Traffic Measurement and Analysis Conference (TMA 2023)}, address = {Naples, Italy}, pages = {1--10}, year = {2023} } - J. Pešek, D. Soukup, and T. Čejka,“Active Learning Framework for Long-Term Network Traffic Classification,” in IEEE Annual Computing and Communication Workshop and Conference (CCWC 2023), Las Vegas, USA, 2023, pp. 893–899.★ Best Paper AwardLink
BibTeX
@inproceedings{pesek2023activelearning, author = {Pešek, Jaroslav and Soukup, Dominik and Čejka, Tomáš}, title = {Active Learning Framework for Long-Term Network Traffic Classification}, booktitle = {IEEE Annual Computing and Communication Workshop and Conference (CCWC 2023)}, address = {Las Vegas, USA}, pages = {893--899}, doi = {10.1109/CCWC57344.2023.10099065}, url = {https://doi.org/10.1109/CCWC57344.2023.10099065}, award = {Best Paper Award}, year = {2023} } - R. Plný, K. Hynek, and T. Čejka,“DeCrypto: Finding Cryptocurrency Miners on ISP Networks,” in Nordic Conference on Secure IT Systems (NordSec 2022), Reykjavik, Iceland, 2022.
BibTeX
@inproceedings{plny2022decrypto, author = {Plný, R. and Hynek, Karel and Čejka, Tomáš}, title = {{DeCrypto}: Finding Cryptocurrency Miners on {ISP} Networks}, booktitle = {Nordic Conference on Secure IT Systems (NordSec 2022)}, address = {Reykjavik, Iceland}, publisher = {Springer}, series = {LNCS}, year = {2022} } - L. Melcher, K. Hynek, and T. Čejka,“Tunneling through DNS over TLS Providers,” in International Conference on Network and Service Management (CNSM 2022), Thessaloniki, Greece, 2022, pp. 359–363.★ Best Paper AwardLink
BibTeX
@inproceedings{melcher2022dot, author = {Melcher, L. and Hynek, Karel and Čejka, Tomáš}, title = {Tunneling through {DNS} over {TLS} Providers}, booktitle = {International Conference on Network and Service Management (CNSM 2022)}, address = {Thessaloniki, Greece}, pages = {359--363}, doi = {10.23919/CNSM55787.2022.9964617}, url = {https://doi.org/10.23919/CNSM55787.2022.9964617}, award = {Best Paper Award}, year = {2022} } - J. Koumar and T. Čejka,“Network Traffic Classification Based on Periodic Behavior Detection,” in International Conference on Network and Service Management (CNSM 2022), Thessaloniki, Greece, 2022.
BibTeX
@inproceedings{koumar2022periodic, author = {Koumar, Josef and Čejka, Tomáš}, title = {Network Traffic Classification Based on Periodic Behavior Detection}, booktitle = {International Conference on Network and Service Management (CNSM 2022)}, address = {Thessaloniki, Greece}, year = {2022} } - S. García, J. Bogado, K. Hynek, D. Vekshin, T. Čejka, and A. Wasicek,“Large Scale Analysis of DoH Deployment on the Internet,” in European Symposium on Research in Computer Security (ESORICS 2022), 2022.
BibTeX
@inproceedings{garcia2022dohdeployment, author = {García, S. and Bogado, J. and Hynek, Karel and Vekshin, Dmitrii and Čejka, Tomáš and Wasicek, A.}, title = {Large Scale Analysis of {DoH} Deployment on the Internet}, booktitle = {European Symposium on Research in Computer Security (ESORICS 2022)}, publisher = {Springer}, series = {LNCS}, year = {2022} } - D. Soukup, P. Tisovčík, K. Hynek, and T. Čejka,“Towards Evaluating Quality of Datasets for Network Traffic Domain,” in International Conference on Network and Service Management (CNSM 2021), Izmir, Turkey, 2021.
BibTeX
@inproceedings{soukup2021datasetquality, author = {Soukup, Dominik and Tisovčík, P. and Hynek, Karel and Čejka, Tomáš}, title = {Towards Evaluating Quality of Datasets for Network Traffic Domain}, booktitle = {International Conference on Network and Service Management (CNSM 2021)}, address = {Izmir, Turkey}, year = {2021} } - Z. Tropková, K. Hynek, and T. Čejka,“Novel HTTPS Classifier Driven by Packet Bursts, Flows, and Machine Learning,” in International Conference on Network and Service Management (CNSM 2021), Izmir, Turkey, 2021.
BibTeX
@inproceedings{tropkova2021https, author = {Tropková, Z. and Hynek, Karel and Čejka, Tomáš}, title = {Novel {HTTPS} Classifier Driven by Packet Bursts, Flows, and Machine Learning}, booktitle = {International Conference on Network and Service Management (CNSM 2021)}, address = {Izmir, Turkey}, year = {2021} } - J. Luxemburk, K. Hynek, and T. Čejka,“Detection of HTTPS Brute-Force Attacks with Packet-Level Feature Set,” in IEEE Annual Computing and Communication Workshop and Conference (CCWC 2021), 2021.
BibTeX
@inproceedings{luxemburk2021httpsbf, author = {Luxemburk, Jan and Hynek, Karel and Čejka, Tomáš}, title = {Detection of {HTTPS} Brute-Force Attacks with Packet-Level Feature Set}, booktitle = {IEEE Annual Computing and Communication Workshop and Conference (CCWC 2021)}, year = {2021} } - K. Hynek and T. Čejka,“Privacy Illusion: Beware of Unpadded DoH,” in IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON 2020), Vancouver, Canada, 2020, pp. 621–628.★ Best Paper AwardLink
BibTeX
@inproceedings{hynek2020privacyillusion, author = {Hynek, Karel and Čejka, Tomáš}, title = {Privacy Illusion: Beware of Unpadded {DoH}}, booktitle = {IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON 2020)}, address = {Vancouver, Canada}, pages = {621--628}, doi = {10.1109/IEMCON51383.2020.9284864}, url = {https://doi.org/10.1109/IEMCON51383.2020.9284864}, award = {Best Paper Award}, year = {2020} } - D. Vekshin, K. Hynek, and T. Čejka,“DoH Insight: Detecting DNS over HTTPS by Machine Learning,” in Proceedings of the 15th International Conference on Availability, Reliability and Security (ARES 2020), 2020.Link
BibTeX
@inproceedings{vekshin2020dohinsight, author = {Vekshin, Dmitrii and Hynek, Karel and Čejka, Tomáš}, title = {{DoH} Insight: Detecting {DNS} over {HTTPS} by Machine Learning}, booktitle = {Proceedings of the 15th International Conference on Availability, Reliability and Security (ARES 2020)}, publisher = {ACM}, doi = {10.1145/3407023.3409192}, url = {https://doi.org/10.1145/3407023.3409192}, year = {2020} } - K. Hynek, T. Beneš, T. Čejka, and H. Kubátová,“Refined Detection of SSH Brute-Force Attackers Using Machine Learning,” in ICT Systems Security and Privacy Protection (IFIP SEC 2020), 2020, pp. 49–63.Link
BibTeX
@inproceedings{hynek2020sshbf, author = {Hynek, Karel and Beneš, Tomáš and Čejka, Tomáš and Kubátová, Hana}, title = {Refined Detection of {SSH} Brute-Force Attackers Using Machine Learning}, booktitle = {ICT Systems Security and Privacy Protection (IFIP SEC 2020)}, publisher = {Springer}, pages = {49--63}, doi = {10.1007/978-3-030-58201-2_4}, url = {https://doi.org/10.1007/978-3-030-58201-2_4}, year = {2020} } - T. Čejka, V. Bartoš, M. Švepeš, Z. Rosa, and H. Kubátová,“NEMEA: A Framework for Network Traffic Analysis,” in International Conference on Network and Service Management (CNSM 2016), Montreal, Canada, 2016.
BibTeX
@inproceedings{cejka2016nemea, author = {Čejka, Tomáš and Bartoš, Václav and Švepeš, Marek and Rosa, Zdeněk and Kubátová, Hana}, title = {{NEMEA}: A Framework for Network Traffic Analysis}, booktitle = {International Conference on Network and Service Management (CNSM 2016)}, address = {Montreal, Canada}, year = {2016} } - T. Čejka and R. Krejčí,“Configuration of Open vSwitch Using OF-CONFIG,” in IEEE/IFIP Network Operations and Management Symposium (NOMS 2016), Istanbul, Turkey, 2016, pp. 883–888.
BibTeX
@inproceedings{cejka2016ofconfig, author = {Čejka, Tomáš and Krejčí, Radek}, title = {Configuration of {Open vSwitch} Using {OF-CONFIG}}, booktitle = {IEEE/IFIP Network Operations and Management Symposium (NOMS 2016)}, address = {Istanbul, Turkey}, pages = {883--888}, year = {2016} } - T. Čejka, V. Bartoš, L. Truxa, and H. Kubátová,“Using Application-Aware Flow Monitoring for SIP Fraud Detection,” in Autonomous Infrastructure, Management and Security (AIMS 2015), 2015.
BibTeX
@inproceedings{cejka2015sipfraud, author = {Čejka, Tomáš and Bartoš, Václav and Truxa, Lukáš and Kubátová, Hana}, title = {Using Application-Aware Flow Monitoring for {SIP} Fraud Detection}, booktitle = {Autonomous Infrastructure, Management and Security (AIMS 2015)}, publisher = {Springer}, series = {LNCS}, year = {2015} } - T. Čejka, Z. Rosa, and H. Kubátová,“Stream-Wise Detection of Surreptitious Traffic over DNS,” in IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD 2014), Athens, Greece, 2014.
BibTeX
@inproceedings{cejka2014dnstunnel, author = {Čejka, Tomáš and Rosa, Zdeněk and Kubátová, Hana}, title = {Stream-Wise Detection of Surreptitious Traffic over {DNS}}, booktitle = {IEEE International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD 2014)}, address = {Athens, Greece}, year = {2014} }
Archive 2012 – 2020
Show the full list of publications 2012–2020
2020
- D. Vekshin, K. Hynek, and T. Cejka,“DoH Insight: Detecting DNS over HTTPS by Machine Learning,” in Proceedings of the 15th International Conference on Availability, Reliability and Security, New York, NY, USA, 2020.Link
BibTeX
@inproceedings{vekshin2020dohidentares, author = {Vekshin, Dmitrii and Hynek, Karel and Cejka, Tomas}, title = {DoH Insight: Detecting DNS over HTTPS by Machine Learning}, year = {2020}, isbn = {9781450388337}, publisher = {Association for Computing Machinery}, address = {New York, NY, USA}, url = {https://doi.org/10.1145/3407023.3409192}, doi = {10.1145/3407023.3409192}, booktitle = {Proceedings of the 15th International Conference on Availability, Reliability and Security}, articleno = {87}, numpages = {8}, keywords = {classification, DNS over HTTPS, DoH, detection, machine learning, datasets}, location = {Virtual Event, Ireland}, series = {ARES '20} } - K. Hynek, T. Beneš, T. Čejka, and H. Kubátová,“Refined Detection of SSH Brute-Force Attackers Using Machine Learning,” in ICT Systems Security and Privacy Protection, Cham, 2020, pp. 49–63.Link
BibTeX
@inproceedings{hynek2020sshbfsec, author = {Hynek, Karel and Bene{\v{s}}, Tom{\'a}{\v{s}} and {\v{C}}ejka, Tom{\'a}{\v{s}} and Kub{\'a}tov{\'a}, Hana}, editor = {H{\"o}lbl, Marko and Rannenberg, Kai and Welzer, Tatjana}, title = {{Refined Detection of SSH Brute-Force Attackers Using Machine Learning}}, booktitle = {ICT Systems Security and Privacy Protection}, year = {2020}, publisher = {Springer International Publishing}, address = {Cham}, pages = {49--63}, url = {https://doi.org/10.1007/978-3-030-58201-2_4}, doi = {10.1007/978-3-030-58201-2_4} } - K. Hynek, T. Čejka, M. Žádník, and H. Kubátová,“Evaluating Bad Hosts Using Adaptive Blacklist Filter,” in 9th Mediterranean Conference on Embedded Computing (MECO), 2020, pp. 1–5.Link
BibTeX
@inproceedings{hynek2020adaptivefilter, author = {{Hynek}, K. and {Čejka}, T. and {Žádník}, M. and {Kubátová}, H.}, booktitle = {9th Mediterranean Conference on Embedded Computing (MECO)}, title = {Evaluating Bad Hosts Using Adaptive Blacklist Filter}, year = {2020}, url = {https://ieeexplore.ieee.org/abstract/document/9134244}, pages = {1-5} }
2019
- D. Soukup, O. Hujňák, S. Štefunko, Krejčı́Radek, and E. Grešák,“Security Framework for IoT and Fog Computing Networks,” in 2019 Third International conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud)(I-SMAC), 2019, pp. 87–92.Link
BibTeX
@inproceedings{soukup2019security, title = {Security Framework for IoT and Fog Computing Networks}, author = {Soukup, Dominik and Huj{\v{n}}{\'a}k, Ond{\v{r}}ej and {\v{S}}tefunko, Simon and Krej{\v{c}}{\'\i}, Radek and Gre{\v{s}}{\'a}k, Erik}, booktitle = {2019 Third International conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud)(I-SMAC)}, pages = {87--92}, year = {2019}, url = {https://ieeexplore.ieee.org/abstract/document/9032592}, organization = {IEEE} } - D. Soukup, T. Cejka, and K. Hynek,“Behavior Anomaly Detection in IoT Networks,” in International conference on Computer Networks, Big data and IoT, 2019, pp. 465–473.Link
BibTeX
@inproceedings{soukup2019behavior, title = {Behavior Anomaly Detection in IoT Networks}, author = {Soukup, Dominik and Cejka, Tomas and Hynek, Karel}, booktitle = {International conference on Computer Networks, Big data and IoT}, pages = {465--473}, year = {2019}, url = {https://link.springer.com/chapter/10.1007/978-3-030-43192-1_53}, organization = {Springer} } - D. Soukup, T. Čejka, and S. Štefunko,“Multi-level Anomaly Detection in IoT Networks,” in The 7th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2019.Link
BibTeX
@inproceedings{pesw2019-multilevelanomalydetIoT, author = {Soukup, Dominik and Čejka, Tomáš and Štefunko, Simon}, title = {{Multi-level Anomaly Detection in IoT Networks}}, booktitle = {{The 7th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2019}, url = {http://pesw.fit.cvut.cz/2019/PESW_2019.pdf} } - J. Havránek, T. Čejka, and P. Benáček,“L7 capable flow exporter described in P4,” in The 7th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2019.Link
BibTeX
@inproceedings{pesw2019-l7flowexporterP4, author = {Havránek, Jiří and Čejka, Tomáš and Benáček, Pavel}, title = {{L7 capable flow exporter described in P4}}, booktitle = {{The 7th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2019}, url = {http://pesw.fit.cvut.cz/2019/PESW_2019.pdf} } - K. Hynek, T. Beneš, T. Čejka, and H. Kubátová,“Future approaches to monitoring in high-speed backbone networks ,” in The 7th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2019.Link
BibTeX
@inproceedings{pesw2019-futuremonit, author = {Hynek, Karel and Beneš, Tomáš and Čejka, Tomáš and Kubátová, Hana}, title = {{Future approaches to monitoring in high-speed backbone networks }}, booktitle = {{The 7th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2019}, url = {http://pesw.fit.cvut.cz/2019/PESW_2019.pdf} }
2018
- T. Jánský, T. Čejka, Žádnı́kMartin, and V. Bartoš,“Augmented DDoS Mitigation with Reputation Scores,” in Proceedings of the 13th International Conference on Availability, Reliability and Security, New York, NY, USA, 2018, pp. 54:1–54:7.Link
BibTeX
@inproceedings{jansky2018ares, author = {J\'{a}nsk\'{y}, Tom\'{a}\v{s} and \v{C}ejka, Tom\'{a}\v{s} and \v{Z}\'{a}dn\'{\i}k, Martin and Barto\v{s}, V\'{a}clav}, title = {Augmented DDoS Mitigation with Reputation Scores}, booktitle = {Proceedings of the 13th International Conference on Availability, Reliability and Security}, series = {ARES 2018}, year = {2018}, isbn = {978-1-4503-6448-5}, location = {Hamburg, Germany}, pages = {54:1--54:7}, articleno = {54}, numpages = {7}, url = {http://doi.acm.org/10.1145/3230833.3233279}, doi = {10.1145/3230833.3233279}, acmid = {3233279}, publisher = {ACM}, address = {New York, NY, USA}, keywords = {amplification DDoS, attack mitigation, distributed denial of service, packet filtering, reputation score} } - T. Jánský, T. Čejka, M. Žádník, and V. Bartoš,“Informed DDoS Mitigation at 100 Gb/s,” in Proceedings of the 6th Prague Embedded Systems Workshop, 2018, pp. 41–42.
BibTeX
@inproceedings{jansky2018pesw, author = {Jánský, Tomáš and Čejka, Tomáš and Žádník, Martin and Bartoš, Václav}, title = {{Informed DDoS Mitigation at 100 Gb/s}}, booktitle = {{Proceedings of the 6th Prague Embedded Systems Workshop}}, publisher = {{ČVUT v Praze, Fakulta informačních technologií}}, year = {2018}, pages = {41--42}, isbn = {978-80-01-06456-6} } - F. Šuster and T. Čejka,“Stream-wise adaptive blacklist filter based on flow data,” in Proceedings of the 6th Prague Embedded Systems Workshop, 2018, pp. 38–39.
BibTeX
@inproceedings{suster2018pesw, author = {Šuster, Filip and Čejka, Tomáš}, title = {{Stream-wise adaptive blacklist filter based on flow data}}, booktitle = {{Proceedings of the 6th Prague Embedded Systems Workshop}}, publisher = {{ČVUT v Praze, Fakulta informačních technologií}}, year = {2018}, pages = {38--39}, isbn = {978-80-01-06456-6} } - M. Slabihoudek and T. Čejka,“Stream-wise Aggregation of Flow Data,” in Proceedings of the 6th Prague Embedded Systems Workshop, 2018, p. 37.
BibTeX
@inproceedings{slabihoudek2018pesw, author = {Slabihoudek, Michal and Čejka, Tomáš}, title = {{Stream-wise Aggregation of Flow Data}}, booktitle = {{Proceedings of the 6th Prague Embedded Systems Workshop}}, publisher = {{ČVUT v Praze, Fakulta informačních technologií}}, year = {2018}, pages = {37}, isbn = {978-80-01-06456-6} } - L. Stejskalová and T. Čejka,“Grouping evil IP addresses,” in Proceedings of the 6th Prague Embedded Systems Workshop, 2018, p. 30.
BibTeX
@inproceedings{stejskalova2018pesw, author = {Stejskalová, Lenka and Čejka, Tomáš}, title = {{Grouping evil IP addresses}}, booktitle = {{Proceedings of the 6th Prague Embedded Systems Workshop}}, publisher = {{ČVUT v Praze, Fakulta informačních technologií}}, year = {2018}, pages = {30}, isbn = {978-80-01-06456-6} } - P. Benáček, V. Puš, H. Kubátová, and T. Čejka,“P4-To-VHDL: Automatic generation of high-speed input and output network blocks,” Microprocessors and Microsystems, vol. 56, pp. 22–33, 2018.Link
BibTeX
@article{benacek2018p4_2_vhdl, title = {P4-To-VHDL: Automatic generation of high-speed input and output network blocks}, journal = {Microprocessors and Microsystems}, volume = {56}, pages = {22--33}, year = {2018}, issn = {0141-9331}, doi = {https://doi.org/10.1016/j.micpro.2017.10.012}, url = {http://www.sciencedirect.com/science/article/pii/S0141933117304787}, author = {Benáček, Pavel and Puš, Viktor and Kubátová, Hana and Čejka, Tomáš}, keywords = {FPGA, High-level language, P4, 100 Gbps, Parser, Deparser} } - J. Havránek, P. Velan, T. Cejka, and P. Benáček,“Enhanced Flow Monitoring with P4 Generated Flexible Packet Parser,” in AIMS 2018, 2018.
BibTeX
@inproceedings{182007, author = {Havránek, Jiří and Velan, Petr and Cejka, Tomas and Benáček, Pavel}, title = {Enhanced Flow Monitoring with P4 Generated Flexible Packet Parser}, booktitle = {AIMS 2018}, address = {}, days = {4-7}, month = jun, year = {2018}, keywords = {High-speed or ubiquitous monitoring; Proactive and predictive security solutions} }
2017
- T. Jánský, T. Čejka, and V. Bartoš,“Hunting SIP Authentication Attacks Efficiently,” in Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings, D. Tuncer, R. Koch, R. Badonnel, and B. Stiller, Eds. Cham: Springer International Publishing, 2017, pp. 125–130.Link
BibTeX
@inbook{Jansky2017, author = {Jánský, Tomáš and Čejka, Tomáš and Bartoš, Václav}, editor = {Tuncer, Daphne and Koch, Robert and Badonnel, Rémi and Stiller, Burkhard}, title = {Hunting SIP Authentication Attacks Efficiently}, booktitle = {Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings}, year = {2017}, publisher = {Springer International Publishing}, address = {Cham}, pages = {125--130}, isbn = {978-3-319-60774-0}, doi = {10.1007/978-3-319-60774-0_9}, url = {http://dx.doi.org/10.1007/978-3-319-60774-0_9} } - T. Čejka and M. Žádník,“Preserving Relations in Parallel Flow Data Processing,” in Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings, D. Tuncer, R. Koch, R. Badonnel, and B. Stiller, Eds. Cham: Springer International Publishing, 2017, pp. 153–156.Link
BibTeX
@inbook{Cejka2017-phd, author = {Čejka, Tomáš and Žádník, Martin}, editor = {Tuncer, Daphne and Koch, Robert and Badonnel, Rémi and Stiller, Burkhard}, title = {Preserving Relations in Parallel Flow Data Processing}, booktitle = {Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings}, year = {2017}, publisher = {Springer International Publishing}, address = {Cham}, pages = {153--156}, isbn = {978-3-319-60774-0}, doi = {10.1007/978-3-319-60774-0_14}, url = {http://dx.doi.org/10.1007/978-3-319-60774-0_14} } - M. Švepeš and T. Čejka,“Making Flow-Based Security Detection Parallel,” in Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings, D. Tuncer, R. Koch, R. Badonnel, and B. Stiller, Eds. Cham: Springer International Publishing, 2017, pp. 3–15.Link
BibTeX
@inbook{Svepes2017, author = {Švepeš, Marek and Čejka, Tomáš}, editor = {Tuncer, Daphne and Koch, Robert and Badonnel, Rémi and Stiller, Burkhard}, title = {Making Flow-Based Security Detection Parallel}, booktitle = {Security of Networks and Services in an All-Connected World: 11th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2017, Zurich, Switzerland, July 10-13, 2017, Proceedings}, year = {2017}, publisher = {Springer International Publishing}, address = {Cham}, pages = {3--15}, isbn = {978-3-319-60774-0}, doi = {10.1007/978-3-319-60774-0_1}, url = {http://dx.doi.org/10.1007/978-3-319-60774-0_1} } - T. Čejka, M. Švepeš, and J. Viktorin,“Gateway for IoT security,” in The 5th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2017.Link
BibTeX
@inproceedings{pesw2017-siot, author = {Čejka, Tomáš and Švepeš, Marek and Viktorin, Jan}, title = {{Gateway for IoT security}}, booktitle = {{The 5th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2017}, url = {https://www.liberouter.org/wp-content/uploads/2017/07/PESW_2017_svepes.pdf} } - T. Jánský, T. Čejka, and V. Bartoš,“Detection of SIP Scans and Bruteforce Attacks,” in The 5th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2017.Link
BibTeX
@inproceedings{pesw2017-sip, author = {Jánský, Tomáš and Čejka, Tomáš and Bartoš, Václav}, title = {{Detection of SIP Scans and Bruteforce Attacks}}, booktitle = {{The 5th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2017}, url = {https://www.liberouter.org/wp-content/uploads/2017/07/PESW_2017_jansky.pdf} }
2016
- T. Cejka, V. Bartoš, M. Svepes, Z. Rosa, and H. Kubatova,“NEMEA: A Framework for Network Traffic Analysis,” in 12th International Conference on Network and Service Management (CNSM 2016), Montreal, Canada, 2016.Link
BibTeX
@inproceedings{Cejk1610:NEMEA, author = {Cejka, Tomas and Barto{\v s}, Václav and Svepes, Marek and Rosa, Zdenek and Kubatova, Hana}, title = {{NEMEA:} A Framework for Network Traffic Analysis}, booktitle = {12th International Conference on Network and Service Management (CNSM 2016)}, address = {Montreal, Canada}, days = {31}, month = oct, year = {2016}, keywords = {NEMEA;network traffic measurement;flow analysis;detection}, doi = {10.1109/CNSM.2016.7818417}, url = {http://dx.doi.org/10.1109/CNSM.2016.7818417} } - Z. Rosa, T. Cejka, M. Zadnik, and V. Puš,“Building a Feedback Loop to Capture Evidence of Network Incidents,” in 12th International Conference on Network and Service Management (CNSM 2016), Montreal, Canada, 2016.Link
BibTeX
@inproceedings{Cejk1610:Building, author = {Rosa, Zdenek and Cejka, Tomas and Zadnik, Martin and Pu{\v s}, Viktor}, title = {Building a Feedback Loop to Capture Evidence of Network Incidents}, booktitle = {12th International Conference on Network and Service Management (CNSM 2016)}, address = {Montreal, Canada}, days = {31}, month = oct, year = {2016}, keywords = {Software Defined Monitoring;Time-machine;traffic capture;flow;traffic analysis;NEMEA;network security}, doi = {10.1109/CNSM.2016.7818435}, url = {http://dx.doi.org/10.1109/CNSM.2016.7818435} } - T. Cejka and M. Svepes,“Analysis of Vertical Scans Discovered by Naive Detection,” in Management and Security in the Age of Hyperconnectivity: 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016, R. Badonnel, R. Koch, A. Pras, M. Drašar, and B. Stiller, Eds. Munich, Germany: Springer International Publishing, 2016, pp. 165–169.Link
BibTeX
@inbook{aims2016, author = {Cejka, Tomas and Svepes, Marek}, editor = {Badonnel, Rémi and Koch, Robert and Pras, Aiko and Drašar, Martin and Stiller, Burkhard}, title = {Analysis of Vertical Scans Discovered by Naive Detection}, booktitle = {Management and Security in the Age of Hyperconnectivity: 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2016}, year = {2016}, publisher = {Springer International Publishing}, address = {Munich, Germany}, pages = {165--169}, isbn = {978-3-319-39814-3}, doi = {10.1007/978-3-319-39814-3_19}, url = {http://dx.doi.org/10.1007/978-3-319-39814-3_19} } - T. Čejka and R. Krejčí,“Configuration of open vSwitch using OF-CONFIG,” in NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium, Istanbul, Turkey, 2016, pp. 883–888.Link
BibTeX
@inproceedings{noms2016, author = {Čejka, Tomáš and Krejčí, Radek}, booktitle = {NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium}, title = {Configuration of open vSwitch using OF-CONFIG}, year = {2016}, month = apr, pages = {883-888}, keywords = {Bridges;Control systems;Data models;Ports (Computers);Protocols;Servers;Standards}, doi = {10.1109/NOMS.2016.7502920}, address = {Istanbul, Turkey}, url = {http://dx.doi.org/10.1109/NOMS.2016.7502920} } - T. Čejka and A. Robledo,“Detecting Spoofed Time in NTP Traffic,” in The 4th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2016.Link
BibTeX
@inproceedings{pesw2016-ntp, author = {Čejka, Tomáš and Robledo, Alejandro}, title = {{Detecting Spoofed Time in NTP Traffic}}, booktitle = {{The 4th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2016}, url = {https://www.liberouter.org/wp-content/uploads/2016/07/pesw2016-ntpdetection.pdf} } - M. Svepes and T. Cejka,“Overload-resistant Network Traffic Analysis,” in The 4th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2016.Link
BibTeX
@inproceedings{pesw2016-nemea, author = {Svepes, Marek and Cejka, Tomas}, title = {{Overload-resistant Network Traffic Analysis}}, booktitle = {{The 4th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2016}, url = {https://www.liberouter.org/wp-content/uploads/2016/07/pesw2016-nemea.pdf} }
2015
- T. Čejka, R. Bodó, and H. Kubátová,“Nemea: Searching for Botnet Footprints,” in The 3th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2015.Link
BibTeX
@inproceedings{pesw2015-botnet, author = {Čejka, Tomáš and Bodó, Radoslav and Kubátová, Hana}, title = {{Nemea: Searching for Botnet Footprints}}, booktitle = {{The 3th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2015}, url = {https://www.liberouter.org/wp-content/uploads/2015/07/pesw2015-nemea-botnet.pdf} } - D. Alexa and T. Čejka,“Easy configuration of NETCONF devices,” in The 3th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2015.Link
BibTeX
@inproceedings{pesw2015-netopeer, author = {Alexa, David and Čejka, Tomáš}, title = {{Easy configuration of NETCONF devices}}, booktitle = {{The 3th Prague Embedded Systems Workshop}}, address = {{Roztoky u Prahy, Czech Republic}}, year = {2015}, url = {https://www.liberouter.org/wp-content/uploads/2015/07/pesw2015-netopeer.pdf} } - T. Cejka, V. Bartos, L. Truxa, and H. Kubatova,“Using Application-Aware Flow Monitoring for SIP Fraud Detection,” in Intelligent Mechanisms for Network Configuration and Security: 9th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2015, S. Latré, M. Charalambides, J. François, C. Schmitt, and B. Stiller, Eds. Ghent, Belgium: Springer International Publishing, 2015, pp. 87–99.Link
BibTeX
@inbook{aims2015, author = {Cejka, Tomas and Bartos, Vaclav and Truxa, Lukas and Kubatova, Hana}, editor = {Latré, Steven and Charalambides, Marinos and Fran{\c{c}}ois, Jér{\^o}me and Schmitt, Corinna and Stiller, Burkhard}, title = {Using Application-Aware Flow Monitoring for SIP Fraud Detection}, booktitle = {Intelligent Mechanisms for Network Configuration and Security: 9th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2015}, year = {2015}, month = jun, publisher = {Springer International Publishing}, address = {Ghent, Belgium}, pages = {87--99}, isbn = {978-3-319-20034-7}, doi = {10.1007/978-3-319-20034-7_10}, url = {http://dx.doi.org/10.1007/978-3-319-20034-7_10} }
2014
- T. Cejka, Z. Rosa, and H. Kubatova,“Stream-wise detection of surreptitious traffic over dns,” in 2014 IEEE 19th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), Athens, Greece, 2014, pp. 300–304.Link
BibTeX
@inproceedings{camad2014, title = {Stream-wise detection of surreptitious traffic over dns}, author = {Cejka, Tomas and Rosa, Zdenek and Kubatova, Hana}, booktitle = {2014 IEEE 19th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD)}, pages = {300--304}, year = {2014}, organization = {IEEE}, address = {Athens, Greece}, url = {http://dx.doi.org/10.1109/CAMAD.2014.7033254}, doi = {10.1109/CAMAD.2014.7033254} } - P. Benáček, R. B. Blažek, T. Čejka, and H. Kubátová,“Change-point Detection Method on 100 Gb/s Ethernet Interface,” in Proceedings of the Tenth ACM/IEEE Symposium on Architectures for Networking and Communications Systems, New York, NY, USA, 2014, pp. 245–246.Link
BibTeX
@inproceedings{Benacek:2014:CDM:2658260.2661773, author = {Benáček, Pavel and Blažek, Rudolf B. and Čejka, Tomáš and Kubátová, Hana}, title = {Change-point Detection Method on 100 Gb/s Ethernet Interface}, booktitle = {Proceedings of the Tenth ACM/IEEE Symposium on Architectures for Networking and Communications Systems}, series = {ANCS '14}, year = {2014}, isbn = {978-1-4503-2839-5}, location = {Los Angeles, California, USA}, pages = {245--246}, numpages = {2}, url = {http://doi.acm.org/10.1145/2658260.2661773}, doi = {10.1145/2658260.2661773}, acmid = {2661773}, publisher = {ACM}, address = {New York, NY, USA}, keywords = {change-point detection, fpga, network anomaly detection, software defined monitoring} } - T. Čejka, L. Kekely, P. Benáček, R. B. Blažek, and H. Kubátová,“FPGA Accelerated Change-Point Detection Method for 100 Gb/s Networks,” in 9th Doctoral Workshop on Mathematical and Engineering Methods in Computer Science (MEMICS 2014), Telč, Czech Republic, 2014.Link
BibTeX
@inproceedings{cejka2014fpga, author = {Čejka, Tomáš and Kekely, Lukáš and Benáček, Pavel and Blažek, Rudolf B. and Kubátová, Hana}, title = {FPGA Accelerated Change-Point Detection Method for 100 Gb/s Networks}, booktitle = {9th Doctoral Workshop on Mathematical and Engineering Methods in Computer Science (MEMICS 2014)}, year = {2014}, address = {Telč, Czech Republic}, url = {http://wp.liberouter.org/wp-content/uploads/2014/11/llncs_cr.pdf} }
2013
- V. Bartoš, M. Žádník, and T. Čejka,“Nemea: Framework for stream-wise analysis of network traffic,” CESNET, a.l.e., 2013.Link
BibTeX
@techreport{nemea-techrep, author = {Bartoš, Václav and Žádník, Martin and Čejka, Tomáš}, title = {Nemea: Framework for stream-wise analysis of network traffic}, institution = {{CESNET, a.l.e.}}, year = {2013}, url = {http://www.cesnet.cz/wp-content/uploads/2014/02/trapnemea.pdf} }
2012
- T. Čejka, P. Benáček, Š. Friedl, and R. Krejčí,“COMET-COMBO Ethernet Tester,” CESNET, a.l.e., 2012.Link
BibTeX
@techreport{comet-techrep, author = {Čejka, Tomáš and Benáček, Pavel and Friedl, Štěpán and Krejčí, Radek}, title = {{COMET-COMBO Ethernet Tester}}, institution = {{CESNET, a.l.e.}}, year = {2012}, url = {https://www.cesnet.cz/wp-content/uploads/2013/03/comet.pdf} }