Publications

2024:

• M. Novotná and V. Bartoš, “URL Evaluator: Semi-automatic evaluation of suspicious URLs from honeypots.” In 20th International Conference on Network and Service Management (CNSM 2024), Prague, Czech Republic, IFIP, 2024.
• Koumar, Josef, Karel Hynek, Jaroslav Pešek, and Tomáš Čejka. “NetTiSA: Extended IP flow with time-series features for universal bandwidth-constrained high-speed network traffic classification.” Computer Networks 240 (2024): 110147.
• Jančička, Lukáš, Josef Koumar, Dominik Soukup, and Tomáš Čejka. “Analysis of Statistical Distribution Changes of Input Features in Network Traffic Classification Domain.” In NOMS 2024-2024 IEEE Network Operations and Management Symposium, pp. 1-4. IEEE, 2024.
• Soukup, Dominik, Jaroslav Pešek, Lukáš Hejcman, David Beneš, and Tomáš Čejka. “TCI: A system for distributed network monitoring, troubleshooting and dataset creation.” In NOMS 2024-2024 IEEE Network Operations and Management Symposium, pp. 1-6. IEEE, 2024.
• Luxemburk, Jan, and Karel Hynek. “Towards Reusable Models in Traffic Classification.” In 2024 8th Network Traffic Measurement and Analysis Conference (TMA), pp. 1-4. IEEE, 2024.
• Jerabek, Kamil, Karel Hynek, and Ondrej Rysavy. “Comparative analysis of DNS over HTTPS detectors.” Computer Networks 247 (2024): 110452.
• Hranický, Radek, Adam Horák, Jan Polišenský, Kamil Jeřábek, and Ondřej Ryšavý. “Unmasking the phishermen: phishing domain detection with machine learning and multi-source intelligence.” In NOMS 2024-2024 IEEE Network Operations and Management Symposium, pp. 1-5. IEEE, 2024.
• P. Goldschmidt and J. Kučera, “Windower: Feature Extraction for Real-Time DDoS Detection Using Machine Learning“, NOMS 2024-2024 IEEE Network Operations and Management Symposium, Seoul, Korea, Republic of, 2024, pp. 1-10.
• O. Sedláček and V. Bartoš, “Fusing Heterogeneous Data for Network Asset Classification – A Two-layer Approach,” NOMS 2024-2024 IEEE Network Operations and Management Symposium, Seoul, Korea, Republic of, 2024, pp. 1-6.

2023:

• J. Koumar, K. Hynek and T. Čejka, “Network Traffic Classification Based on Single Flow Time Series Analysis,” 2023 19th International Conference on Network and Service Management (CNSM), Niagara Falls, ON, Canada, 2023, pp. 1-7.
• J. Koumar, R. Plný and T. Čejka, “Enhancing DeCrypto: Finding Cryptocurrency Miners Based on Periodic Behavior,” 2023 19th International Conference on Network and Service Management (CNSM), Niagara Falls, ON, Canada, 2023, pp. 1-7.
• T. Benes, J. Pesek and T. Cejka, “Look at my Network: An Insight into the ISP Backbone Traffic,” 2023 19th International Conference on Network and Service Management (CNSM), Niagara Falls, ON, Canada, 2023, pp. 1-7.
• M. Husák, P. Sokol, M. Žádník, V. Bartoš, and M. Horák. “Lessons Learned from Automated Sharing of Intrusion Detection Alerts: The Case of the SABU Platform,” Digital Threats: Research and Practice, Volume 4, Issue 4, December 2023.
• J. Cabal, V. Válek, M. Špinler, D. Kondys and J. Kořenek, “400G Ethernet Packet Capture Demo Based on Network Development Kit for FPGAs,” IEEE INFOCOM 2023, Hoboken, NJ, USA, 2023, pp. 1-2, doi: 10.1109/INFOCOMWKSHPS57453.2023.10225750.
• J. Koumar and T. Čejka, “Unevenly Spaced Time Series from Network Traffic,” 2023 7th Network Traffic Measurement and Analysis Conference (TMA), Naples, Italy, 2023, pp. 1-4.
• Benes, T., Pesek, J., & Cejka, T. (2023, June). How to measure high-speed network: a case study. In 11 th Prague Embedded Systems Workshop (p. 30).
• M. Hulák, V. Bartoš and T. Čejka, “Evaluation of passive OS fingerprinting methods using TCP/IP fields,” 2023 8th International Conference on Smart and Sustainable Technologies (SpliTech), Split/Bol, Croatia, 2023, pp. 1-4.
• J. Luxemburk, K. Hynek and T. Čejka, “Encrypted traffic classification: the QUIC case,” 2023 7th Network Traffic Measurement and Analysis Conference (TMA), Naples, Italy, 2023, pp. 1-10.
• K. Jerabek, K. Hynek, O. Rysavy and I. Burgetova, “DNS Over HTTPS Detection Using Standard Flow Telemetry,” in IEEE Access, vol. 11, pp. 50000-50012, 2023.
• Pešek, J., Plný, R., Koumar, J., Jeřábek, K., Čejka, T. Augmenting Monitoring Infrastructure For Dynamic Software-Defined Networks. In: 8th International Conference on Smart and Sustainable Technologies, 2023.
• Pešek, J., Soukup, D., Čejka, T. Active Learning Framework For Long-term Network Traffic Classification. In: IEEE 13th Annual Computing and Communication Workshop and Conference, 2023.
• Košař, V., Šišmiš, L., Matoušek, J., Kořenek J. IDS Acceleration Using FPGA-Based TLS Pre-Filter. In: Tunis: IEEE Computer Society, 2023, s. 7.
• Sismis, L., Korenek, J. (2023). Analysis of TLS Prefiltering for IDS Acceleration. In: Brunstrom, A., Flores, M., Fiore, M. (eds) Passive and Active Measurement. PAM 2023. Lecture Notes in Computer Science, vol 13882. Springer, Cham. https://doi.org/10.1007/978-3-031-28486-1_5 
• Luxemburk, J., Čejka, T. (2023). CESNET-TLS22: A large dataset for fine-grained classification of TLS services [Data set]. Zenodo. https://doi.org/10.5281/zenodo.7965515
• Luxemburk, J., Hynek, K., Čejka, T., Lukačovič, A., Šiška, P. CESNET-QUIC22: A large one-month QUIC network traffic dataset from backbone lines. Data in Brief (2023): 108888
• Wasielewska, K., Soukup, D., Čejka, T., Camacho, J. Evaluation of the Limit of Detection in Network Dataset Quality Assessment with PerQoDA. In: Machine Learning and Principles and Practice of Knowledge Discovery in Databases. ECML PKDD 2022. Communications in Computer and Information Science, vol 1753. Springer, Cham, 2023.
• Pawlicki, M., Zadnik, M., Kozik, R., Choraś, M. (2023). Analysis and Detection of DDoS Backscatter Using NetFlow Data, Hyperband-Optimised Deep Learning and Explainability Techniques. In: Artificial Intelligence and Soft Computing. ICAISC 2022. Lecture Notes in Computer Science(), vol 13588. Springer, Cham. https://doi.org/10.1007/978-3-031-23492-7_8

2022:

• D. Uhříček, K. Hynek, T. Čejka and D. Kolář, “BOTA: Explainable IoT malware detection in large networks,” in IEEE Internet of Things Journal, doi: 10.1109/JIOT.2022.3228816.
• J. Cabal, J. Sikora, Š. Friedl, M. Špinler and J. Kořenek, “FPL Demo: 400G FPGA Packet Capture Based on Network Development Kit,” in 32nd International Conference on Field Programmable Logic and Applications (FPL), Belfast, UK, 2022.
• L. Šišmiš, “Accelerating Suricata with DPDK Prefilters,” in  Suricon 2022, Athens, Greece, 2022
• R. Plný, K. Hynek and T. Čejka, “DeCrypto: Finding Cryptocurrency Miners on ISP networks,” in 27th Nordic Conference on Secure IT Systems (NordSec), 2022.
• J. Luxemburk, T. Čejka, “Fine-grained TLS Services Classification with Reject Option,” in Elsevier Computer Networks journal, 2022.
• L. Melcher, K. Hynek and T. Čejka, “Tunneling through DNS over TLS providers,” in 18th International Conference on Network and Service Management (CNSM), Thessaloniki, Greece, 2022.
• J. Koumar and T. Čejka, “Network traffic classification based on periodic behavior detection,” in 18th International Conference on Network and Service Management (CNSM), 2022.
• K. Wasielewska, D. Soukup, T. Čejka and J. Camacho, “Dataset Quality Assessment with Permutation Testing Showcased on Network Traffic Datasets,”TechRxiv preprint 2022, doi: 10.36227/techrxiv.20145539.v1
• L. Šišmiš, “Accelerating Suricata with DPDK,” in DPDK Userspace Summit 2022, Arcachon, France, 2022
• S. García, J. Bogado, K. Hynek, D. Vekshin, T. Čejka, and A. Wasicek, “Large Scale Analysis of DoH Deployment on the Internet,” 27th European Symposium on Research in Computer Security (ESORICS), 2022.
• J. Pešek, D. Soukup, T. Čejka, “Vision of Active Learning Framework Approach to Network Traffic Analysis Research,” in: Proceedings of the 10th Prague Embedded Systems Workshop (PESW). Horoměřice, 2022.
• M. Hulák, T. Čejka, “Classification of network traffic”, in Proceedings of the 10th Prague Embedded Systems Workshop (PESW), Horoměřice, 2022.
• M. Žádník, J. Wrona, K. Hynek, T. Čejka and M. Husák, “Discovering coordinated groups of IP addresses through temporal correlation of alerts,” in IEEE Access, 2022, doi: 10.1109/ACCESS.2022.3196362.
• K. Jeřábek, K. Hynek, T. Čejka and O. Ryšavý, “Collection of Datasets with DNS over HTTPS Traffic,” in Data in Brief , 2022, doi: 10.1016/j.dib.2022.108310.
• K. Hynek, D. Vekshin, J. Luxemburk, T. Čejka and A. Wasicek, “Summary of DNS Over HTTPS Abuse,” in IEEE Access, vol. 10, pp. 54668-54680, 2022, doi: 10.1109/ACCESS.2022.3175497.

2021:

• M. S. Ansari, V. Bartos, B. Lee: GRU-based deep learning approach for network intrusion alert prediction, Future Generation Computer Systems, vol. 128, Elsevier, March 2022. ISSN 0167-739X.
• D. Soukup, P. Tisovčík, K. Hynek, T. Čejka: “Towards Evaluating Quality of Datasets for Network Traffic Domain“, 17th International Conference on Network and Service Management (CNSM), 2021.
• Z. Tropková, K. Hynek, T. Čejka: “Novel HTTPS classifier driven by packet bursts, flows, and machine learning“, 17th International Conference on Network and Service Management (CNSM), 2021.
• S. García, K. Hynek, D. Vekshin, T. Čejka, A. Wasicek: “Large Scale Measurement on the Adoption of Encrypted DNS“, preprint – https://arxiv.org/abs/2107.04436, 2021.
• J. Kubálek, J. Cabal, M. Špinler and R. Iša, “DMA Medusa: A Vendor-Independent FPGA-Based Architecture for 400 Gbps DMA Transfers,” 2021 IEEE 29th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM), 2021, pp. 258-258, doi: 10.1109/FCCM51124.2021.00045.
• Patrik Goldschmidt, Jan Kučera: Defense Against SYN Flood DoS Attacks Using Network-based Mitigation Techniques. In IM ’21: IFIP/IEEE International Symposium on Integrated Network Management. Bordeaux, France, 2021. ISBN 978-3-903176-32-4.
• R. Vrána and J. Kořenek: Efficient Acceleration of Decision Tree Algorithms for Encrypted Network Traffic Analysis. 2021 24th International Symposium on Design and Diagnostics of Electronic Circuits & Systems (DDECS). IEEE, 2021.
• M. Orsák and T. Beneš: High-speed stateful packet classifier based on TSS algorithm optimized for off-chip memories. 2021 24th International Symposium on Design and Diagnostics of Electronic Circuits & Systems (DDECS). IEEE, 2021.
• M. Husák, V. Bartoš, P. Sokol, A. Gajdoš: Predictive methods in cyber defense: Current experience and research challenges. Future Generation Computer Systems, vol. 115, Elsevier, February 2021. ISSN 0167-739X.
• J. Luxemburk, J., K. Hynek, and T. Čejka: Detection of HTTPS Brute-Force Attacks with Packet-Level Feature Set. In: 11th Annual Computing and Communication Workshop and Conference (CCWC2021). Piscataway (New Jersey): IEEE, 2021. p. 0115-0123. ISBN 978-0-7381-4394-1.

2020:

• Jan Kučera, Ran Ben Basat, Mário Kuka, Gianni Antichi, Minlan Yu, Michael Mitzenmacher. Detecting Routing Loops in the Data Plane. In: CoNEXT ’20: The 16th International Conference on emerging Networking EXperiments and Technologies. Barcelona, Spain, 2020. ISBN 978-1-4503-7948-9.
• Martin Husák, Martin Žádník, Václav Bartoš, Pavol Sokol: Dataset of intrusion detection alerts from a sharing platform (data article). Data in Brief, vol. 33, Elsevier, November 2020. ISSN 2352-3409.
• K. Hynek and T. Čejka: Privacy Illusion: Beware of Unpadded DoH. In 2020 11th IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), 2020, pp. 621–628.
• K. Hynek and T. Čejka, Dataset used for fingerprinting of DNS over HTTPS responses. [Data set]. Zenodo, 2020. https://doi.org/10.5281/zenodo.4039587.
• D. Vekshin, K. Hynek, and T. Cejka: DoH Insight: Detecting DNS over HTTPS by Machine Learning. In Proceedings of the 15th International Conference on Availability, Reliability and Security (ARES), New York, NY, USA, 2020.
• D. Vekshin, K. Hynek, T. Čejka: Dataset used for detecting DNS over HTTPS by Machine Learning. [Data set]. Zenodo, 2020. http://doi.org/10.5281/zenodo.3906526
• K. Hynek, T. Beneš, T. Čejka, and H. Kubátová: Refined Detection of SSH Brute-Force Attackers Using Machine Learning. In ICT Systems Security and Privacy Protection (SEC), Cham, 2020, pp. 49–63.
• K. Hynek, T. Čejka, M. Žádník, and H. Kubátová: Evaluating Bad Hosts Using Adaptive Blacklist Filter. In 9th Mediterranean Conference on Embedded Computing (MECO), 2020, pp. 1–5.
• T. Beneš, M. Kekely, K. Hynek, T. Čejka: Pipelined ALU for effective external memory access in FPGA. In Proceedings of the 23rd Euromicro Conference on Digital Systems Design (DSD). Los Alamitos, CA: IEEE Computer Soc., 2020.
• Lukáš Kekely, Jakub Cabal, Viktor Puš, Jan Kořenek: Multi Buses: Theory and Practical Considerations of Data Bus Width Scaling in FPGAs. In: Proceedings of the 23rd Euromicro Conference on Digital Systems Design (DSD), Kranj, Slovenia, 2020, pp. 49–56. ISBN 978-1-7281-9535-3.
• Mohammad Samar Ansari, Václav Bartoš, Brian Lee. Shallow and Deep Learning Approaches for Network Intrusion Alert Prediction. In: Procedia Computer Science, vol. 171 (Third International Conference on Computing and Network Communications (CoCoNet’19)). Elsevier, June 2020. ISSN 1877-0509.
• Jan Kučera, Diana A. Popescu, Han Wang, Andrew W. Moore, Jan Kořenek, Gianni Antichi. Elastic Trie: Enabling Event Triggered Monitoring in the Dataplane. In: SOSR ’20: ACM Symposium on SDN Research. San Jose, CA, USA, 2020. ISBN 978-1-4503-7101-8.
• Michal Kekely, Lukáš Kekely, Jan Kořenek: General memory efficient packet matching FPGA architecture for future high-speed networks. In: Microprocessors and Microsystems (MICPRO), volume 73, March 2020. ISSN 0141-9331.
• M. Hulák and T. Cejka: Classification of Network Traffic using Traffic Features. In 8th Prague Embedded Systems Workshop, 2020, pp. 17–18.
• K. Hynek, T. Cejka, and D. Vekshin: DoH detection: Discovering hidden DNS. In 8th Prague Embedded Systems Workshop, 2020, pp. 14–16.
• D. Soukup, K. Hynek, and T. Cejka: QoD: Ideas about Evaluating Quality of Datasets. In 8th Prague Embedded Systems Workshop, 2020, pp. 8–9.
• T. Beneš, T. Cejka, and H. Kubátová: The next step of P4 FPGA architectures: External Memories. In 8th Prague Embedded Systems Workshop, 2020, pp. 5–7.

2019:

• Dominik Soukup, Ondřej Hujňák, Simon Štefunko, Radek Krejčí, Erik Grešák: Security Framework for IoT and Fog Computing Networks. In 2019 Third International conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud)(I-SMAC), 2019, pp. 87–92.
• Dominik Soukup, Tomáš Čejka, Karel Hynek: Behavior Anomaly Detection in IoT Networks. In International conference on Computer Networks, Big data and IoT, 2019, pp. 465–473.
• Mário Kuka, Kamil Vojanec, Jan Kučera, Pavel Benáček: Accelerated DDoS Attacks Mitigation using Programmable Data Plane. In: ANCS ’19: Symposium on Architectures for Networking and Communications Systems, Cambridge, United Kingdom, 2019. ISBN 978-1-72814-387-3.
• Václav Bartoš: NERD: Network Entity Reputation Database. In: Proceedings of the 14th International Conference on Availability, Reliability and Security (ARES). Canterbury, United Kingdom, August 2019.
• Lukáš Kekely, Jakub Cabal, Jan Kořenek: Effective FPGA Architecture for General CRC. In: Architecture of Computing Systems – ARCS 2019 – 32nd International Conference Proceedings. Copenhagen, Denmark, May 2019. ISBN 978-3-030-18655-5.
• Jakub Cabal, Pavel Benáček, Jana Foltová, Juraj Holub: Scalable P4 Deparser for Speeds Over 100 Gbps. In: 2019 IEEE 27th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM). San Diego, USA, 2019. ISBN 978-1-7281-1131-5.
• Václav Bartoš, Martin Žádník, Sheikh Mahbub Habib, Emmanouil Vasilomanolakis: Network entity characterization and attack prediction. Future Generation Computer Systems, volume 97, 2019. ISSN 0167-739X.
• Dominik Soukup, Tomáš Čejka, Simon Štefunko: Multi-level Anomaly Detection in IoT Networks. In The 7th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2019 (abstract).
• Jiří Havránek, Tomáš Čejka, Pavel Benáček: L7 capable flow exporter described in P4. In The 7th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2019.
• Karel Hynek, Tomáš Beneš, Tomáš Čejka, Hana Kubátová: Future approaches to monitoring in high-speed backbone networks. In The 7th Prague Embedded Systems Workshop, Roztoky u Prahy, Czech Republic, 2019 (short paper).

2018:

• Lukáš Kekely, Martin Špinler, Štepán Friedl, Jiří Sikora, Jan Kořenek, Viktor Puš: Demonstration of Full-Duplex Packet Transfers over PCI Express with Sustained 200 Gbps Throughput. In: The 2018 International Conference on Field-Programmable Technology (FPT 2018). Naha, Okinawa, Japan, 2018. ISBN 978-1-72810-214-6.
• Lukáš Kekely, Jakub Cabal, Jan Kořenek: High-Speed Computation of CRC Codes for FPGAs. In: The 2018 International Conference on Field-Programmable Technology (FPT 2018). Naha, Okinawa, Japan, 2018. ISBN 978-1-72810-214-6.
• Pavel Benáček: P4-to-VHDL: How We Built the Fastest P4 FPGA Device in the World. In Proceedings of the 6th Prague Embedded Systems Workshop, 2018, pp. 43–44, Prague, Czech Republic. ISBN 978-80-01-06456-6.
  
• Pavel Benáček, Viktor Puš, Michal Kekely, Matej Vido, Tomáš Martínek, Petr Kaštovský: Flexible OVS acceleration with P4 and low profile FPGA card. In: TNC18, Trondheim, Norway, 2018.
• Pavel Benáček, Viktor Puš, Michal Kekely, Matej Vido, Tomáš Martínek, Petr Kaštovský: Flexible OVS acceleration with P4 and low profile FPGA card. In: P4 Workshop, Stanford, CA, USA, 2018.
• Pavel Benáček, Viktor Puš, Michal Kekely, Petr Kaštovský: Segment Routing at 100G Using FPGA Smart NIC and P4. In 5th P4 Workshop, Stanford, California, USA.
• Iša, Radek, Pavel Benáček, and Viktor Puš: Verification of Generated RTL from P4 Source Code.  In 2018 IEEE 26th International Conference on Network Protocols (ICNP). IEEE, 2018. ISBN 978-1-5386-6043-0.
• Jan Kučera, Lukáš Kekely, Adam Piecek, Jan Kořenek: General IDS Acceleration for High-Speed Networks. In: The 36th IEEE International Conference on Computer Design (ICCD 2018). Orlando, FL, USA, 2018. ISBN 978-1-5386-8477-1.
• Michal Kekely, Lukáš Kekely, Jan Kořenek: Memory Aware Packet Matching Architecture for High-Speed Networks. In: Proceedings of the 21st Euromicro Conference on Digital Systems Design (DSD ’18), Prague, Czech Republic, 2018. ISBN 978-1-5386-7376-8.
• Lukáš Kekely, Martin Špinler, Štepán Friedl, Jiří Sikora, Jan Kořenek: Accelerated Wire-Speed Packet Capture at 200 Gbps. In: 28th International Conference on Field Programmable Logic and Applications (FPL ’18), Dublin, Ireland, 2018.
• Lukáš Kekely, Viktor Puš: Wire-Speed Packet Capture and Replay at 200 Gbps. In: Conference of the ACM Special Interest Group on Data Communication (SIGCOMM ’18), Budapest, Hungary, 2018.
• Jan Kučera, Lukáš Kekely, Viktor Puš, Adam Piecek, Jan Kořenek: Hardware Acceleration of Intrusion Detection Systems for High-Speed Networks. In: ANCS ’18: Symposium on Architectures for Networking and Communications Systems, Ithaca, NY, USA, 2018. ISBN 978-1-4503-5902-3.
• Lukáš Kekely, Martin Špinler, Štepán Friedl, Jiří Sikora, Jan Kořenek: Live Demonstration of FPGA Based Networking Accelerator for 200 Gbps Data Transfers. In: The 30th IEEE/IFIP Network Operations and Management Symposium (NOMS 2018). Taipei, Taiwan, 2018. ISBN 978-1-5386-3416-5.
  
• Jakub Cabal, Pavel Benáček, Lukáš Kekely, Michal Kekely, Viktor Puš, and Jan Kořenek: Configurable FPGA Packet Parser for Terabit Networks with Guaranteed Wire-Speed Throughput. In: Proceedings of the 2018 ACM/SIGDA International Symposium on Field-Programmable Gate Arrays (FPGA ’18). ACM, New York, NY, USA, 249-258. DOI: https://doi.org/10.1145/3174243.3174250
• T. Jánský, T. Čejka, Žádnı́k Martin, and V. Bartoš: Augmented DDoS Mitigation with Reputation Scores. In Proceedings of the 13th International Conference on Availability, Reliability and Security, New York, NY, USA, 2018, pp. 54:1–54:7.
• J. Havránek, P. Velan, T. Cejka, and P. Benáček, Enhanced Flow Monitoring with P4 Generated Flexible Packet Parser. In Proceedings of The International Conference on Autonomous Infrastructure, Management, and Security (AIMS2018), 2018, pp. 21–32, ISBN: 978-3-903176-12-6.
• T. Jánský, T. Čejka, M. Žádník, and V. Bartoš: Informed DDoS Mitigation at 100 Gb/s. In Proceedings of the 6th Prague Embedded Systems Workshop, 2018, pp. 41–42 (abstract).
• F. Šuster and T. Čejka: Stream-wise adaptive blacklist filter based on flow data. In Proceedings of the 6th Prague Embedded Systems Workshop, 2018, pp. 38–39 (abstract).
• M. Slabihoudek and T. Čejka: Stream-wise Aggregation of Flow Data. In Proceedings of the 6th Prague Embedded Systems Workshop, 2018, p. 37 (abstract).
• L. Stejskalová and T. Čejka: Grouping evil IP addresses. In Proceedings of the 6th Prague Embedded Systems Workshop, 2018, p. 30 (abstract).
• Pavel Benáček, Viktor Puš, Hana Kubátová, Tomáš Čejka: P4-to-VHDL: Automatic Generation of High-Speed Input and Output Network Blocks. In: Microprocessors and Microsystems journal (MICPRO, Volume: 56), DOI: 10.1016/j.micpro.2017.10.012., Elsevier, 2018.

2017:

• P. Benáček, V. Puš, J. Kořenek and M. Kekely: Line rate programmable packet processing in 100Gb networks. In: 27th International Conference on Field Programmable Logic and Applications (FPL), Ghent, 2017, pp. 1-1. DOI: https://doi.org/10.23919/FPL.2017.8056835.
• Pavel Benáček, Lukáš Richter, Michal Kekely, Viktor Puš :  Case Study: Usage of High Level Synthesis in HPC Networking. In: Third International Workshop on Heterogeneous High-performance Reconfigurable Computing, Denver, USA, 2017.
• Radek Krejčí, Ondřej Hujňák, Marek Švepeš: Security Survey of the IoT Wireless Protocols. In: Proceedings of the 25th Telecommunications Forum (TELFOR), Belgrade, Serbia, 2017, pp. 60-63.
• Lukáš Kekely: Performance Measurements and Acceleration Potential of Suricata IDS. In: 3rd SIG-PMV meeting, Copenhage, Denmark, 2017.
• Lukáš Kekely: Hardware acceleration of IDS for high-speed networks. In: 44th Network Management Research Group (NMRG) meeting, Prague, Czech Republic, 2017.
• Luuk Hendriks, Petr Velan, Ricardo de O Schmidt, Pieter-Tjerk de Boer, Aiko Pras: Threats and Surprises behind IPv6 Extension Headers. In: 2017 Network Traffic Measurement and Analysis Conference (TMA). Dublin, Ireland, 2017.
• Luuk Hendriks, Petr Velan, Ricardo de O Schmidt, Pieter-Tjerk de Boer, Aiko Pras: Flow-Based Detection of IPv6-specific Network Layer Attacks. In: Security of Networks and Services in an All-Connected World. AIMS 2017. Lecture Notes in Computer Science, vol 10356. Springer, Cham
• Jansky T., Čejka T., Bartoš V. (2017) Hunting SIP Authentication Attacks Efficiently. In: Security of Networks and Services in an All-Connected World. AIMS 2017. Lecture Notes in Computer Science, vol 10356. Springer, Cham
• Čejka T., Žádník M.: Preserving Relations in Parallel Flow Data Processing. In: Security of Networks and Services in an All-Connected World. AIMS 2017. Lecture Notes in Computer Science, vol 10356. Springer, Cham
• Švepeš M., Čejka T.: Making Flow-Based Security Detection Parallel. In: Security of Networks and Services in an All-Connected World. AIMS 2017. Lecture Notes in Computer Science, vol 10356. Springer, Cham
• Václav Bartoš: Evaluating Reputation of IP Addresses. In: Proceedings of the 5th Prague Embedded Systems Workshop 2017 (PESW2017), Roztoky u Prahy, Czech Republic, 2017.
• Tomáš Jánský, Tomáš Čejka, Václav Bartoš: Detection of SIP Scans and Bruteforce Attacks. In: Proceedings of the 5th Prague Embedded Systems Workshop 2017 (PESW2017), Roztoky u Prahy, Czech Republic, 2017.
• Tomáš Čejka, Marek Švepeš, Jan Viktorin: Gateway for IoT Security. In: Proceedings of the 5th Prague Embedded Systems Workshop 2017 (PESW2017), Roztoky u Prahy, Czech Republic, 2017.
• Petr Velan: Security Tools as a Service. In: Proceedings of the 5th Prague Embedded Systems Workshop 2017 (PESW2017), Roztoky u Prahy, Czech Republic, 2017.
• Martin Žádník: DDoS mitigation at 100G. In: Proceedings of the 5th Prague Embedded Systems Workshop 2017 (PESW2017), Roztoky u Prahy, Czech Republic, 2017.
• Pavel Benáček, Viktor Puš, Michal Kekely, Lukáš Richter, Pavel Minařík, Jan Pazdera: 100G In-Band Network Telemetry with P4 and FPGA. In: P4 Workshop, Stanford, CA, USA, 2017.
• Lukáš Kekely, Viktor Puš: Flexible network monitoring at 100Gbps and beyond. In: Géant’s 2nd SIG-PMV meeting, Amsterdam, Netherlands, 2017.
• Lukáš Kekely: Hardware acceleration of network traffic monitoring and analysis in 100Gbps networks. In: HiPEAC Workshop, Ostrava, Czech Republic, 2017.
• Radek Iša, Jiří Matoušek: A Novel Architecture for LZSS Compression of Configuration Bitreams Within FPGA. In: Proceedings 2017 IEEE 20th International Symposium on Design and Diagnotics of Electronic Circuit & Systems (DDECS). Dresden: IEEE CS, 2017, pp. 175-180. ISBN 978-1-5386-0471-7.
• Jiří Matoušek, Gianni Antichi, Adam Lučanský, Andrew W. Moore, Jan Kořenek: ClassBench-ng: Recasting ClassBench After a Decade of Network Evolution. In: 2017 ACM/IEEE Symposium on Architectures for Networking and Communications Systems. Beijing: IEEE CS, 2017, pp. 204-216. 978-1-5090-6386-4.
• Viktor Puš:  InBand Network Telemetry With P4 and FPGA at 100 Gbps. Presentation at Dataplane Acceleration Developer Day Europe 2017, Utrecht, Netherlands, 2017.

2016:

• Tomáš Čejka, Václav Bartoš, M. Švepeš, Zdeněk Rosa, Hana Kubátová: NEMEA: A Framework for Network Traffic Analysis. In 12th International Conference on Network and Service Management (CNSM 2016), Montreal, Canada, 2016.
• Zdeněk Rosa, Tomáš Čejka, Martin Žádník, Viktor Puš: Building a Feedback Loop to Capture Evidence of Network Incidents. In 12th International Conference on Network and Service Management (CNSM 2016), Montreal, Canada, 2016.
• Martin Zadnik, Pavel Krobot, Jan Wrona: Experience with big data frameworks for IP flow collector. technical report, 2016.
• Tomáš Čejka, Marek Švepeš : Analysis of Vertical Scans Discovered by Naive Detection. In Management and Security in the Age of Hyperconnectivity: 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2016), Munich, Germany, 2016.
• Václav Bartoš, Jan Kořenek: Evaluating Reputation of Internet Entities. In: Management and Security in the Age of Hyperconnectivity: Proceedings of the 10th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security (AIMS 2016), Springer International Publishing, 2016.
• Tomáš Čejka, Radek Krejčí : Configuration of Open VSwitch Using OF-CONFIG. NOMS 2016 – 2016 IEEE/IFIP Network Operations and Management Symposium. Istanbul, Turkey, 2016.
  
• Petr Velan : EventFlow: Network Flow Aggregation Based on User Actions. NOMS 2016 – 2016 IEEE/IFIP Network Operations and Management Symposium. Istanbul, Turkey, 2016.
• Tomáš Čejka, Alejandro Robledo : Detecting Spoofed Time in NTP Traffic. The 4th Prague Embedded Systems Workshop. Roztoky u Prahy, Czech Republic, 2016.
  
• Marek Švepeš, Tomáš Čejka : Overload-Resistant Network Traffic Analysis. The 4th Prague Embedded Systems Workshop. Roztoky u Prahy, Czech Republic, 2016.
  
• Pavel Benáček, Viktor Puš : P4-to-VHDL: Generating High Speed Network Devices. In: P4 Workshop, Stanford, California, USA, 2016.
• Lukáš Kekely, Viktor Puš, Jan Kořenek: Adaptive Traffic Processing for High-Speed Networks. In: Proceedings of 1st Workshop on Resource Awareness and Application Autotuning in Adaptive and Heterogeneous Computing (RES4ANT), Dresden, Germany, 2016.
• Lukáš Kekely, Jan Kučera, Viktor Puš, Jan Kořenek, Athanasios V. Vasilakos: Software Defined Monitoring of Application Protocols. In: IEEE Transactions on Computers (Volume: 65, Issue: 2), DOI: 10.1109/TC.2015.2423668, IEEE, 2016.
• Pavel Benáček, Viktor Puš: The P4 Language as the Future of SDN [CZ]. Online at CESNET blog and root.cz (part 1, part 2), 2016
• Jakub Cabal, Viktor Puš: Modern Serial Memory Technology [CZ]. Online at CESNET blog and root.cz, 2016.
• Radek Krejčí: OF-CONFIG [CZ]. Online at CESNET blog, 2016.
• Jan Kořenek: How we made the first 100Gb accelerator card [CZ]. Online at CESNET blog, 2016.
• Pavel Benáček, Viktor Puš, Hana Kubátová: P4-to-VHDL: Automatic Generation of 100Gbps Packet Parsers. In: Proceedings of  2016 IEEE 24th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM2016), Washington, USA, 2016.
• CESNET develops own DDoS attack scrubber [CZ]. Online at root.cz, 2016.

2015:

• Viktor Puš, Lukáš Kekely, Jan Kučera, Denis Matoušek: Live Demonstration of Application Layer Traffic Monitoring at 100 Gbps. In: The 40th IEEE Conference on Local Computer Networks (LCN), Clearwater Beach, US, 2015.
• Pavel Benáček, Viktor Puš, Hana Kubátová :  Automatic Generation of 100 Gbps Packet Parsers from P4 Description. In: First International Workshop on Heterogeneous High-performance Reconfigurable Computing, Austin, USA, 2015.
• Tomáš Čejka, Radoslav Bodó, Hana Kubátová: Nemea: Searching for Botnet Footprints. In: Proceedings of the 3rd Prague Embedded Systems Workshop, Prague, Czech Republic, 2015.
• David Alexa, Tomáš Čejka: Easy configuration of NETCONF devices. In: Proceedings of the 3rd Prague Embedded Systems Workshop, Prague, Czech Republic, 2015.
• Radek Krejčí, Josef Hájek: Overview of the Local Network Monitoring Projects and Tools. CESNET Technical Report, 2015
• Tomáš Čejka, Václav Bartoš, Lukáš Truxa, Hana Kubátová: Using Application-Aware Flow Monitoring for SIP Fraud Detection. In: Proc. of 9th International Conference on Autonomous Infrastructure, Management and Security (AIMS15), 2015.
• Petr Velan, Viktor Puš: High-Density Network Flow Monitoring. In: Proceedings of the 14th IFIP/IEEE Symposium on Integrated Network and Service Management, Ottawa, Canada, 2015
• Viktor Puš, Petr Velan, Lukáš Kekely, Jan Kořenek, Pavel Minařík: Hardware Accelerated Flow Measurement of 100G Ethernet. In: Proceedings of the 14th IFIP/IEEE Symposium on Integrated Network and Service Management, Ottawa, Canada, 2015
• Martin Žádník, Pavel Krobot, Lukáš Kekely, Viktor Puš, Jan Kořenek: Distribuovaný kolektor záznamů o IP tocích: návrh a první experiment. CESNET technical report 2/2015.

2014:

• Viktor Puš: Connection for the fast analysis of packet headers transferred via data bus. United States Patent no. 8,923,300
• Pavel Benáček, Hana Kubátová and Viktor Puš: Architecture of Effective High-Speed Network Stream Merger. In: Euromicro Conference on Digital System Design (DSD), Verona, Italy, 2014
• Tomáš Čejka, Zdeněk Rosa and Hana Kubátová: Stream-wise Detection of Surreptitious Traffic over DNS. In: 2014 IEEE 19th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD) (CAMAD 2014). Athens, 2014
• Pavel Benáček, Rudolf B. Blažek, Tomáš Čejka, and Hana Kubátová: Change-point detection method on 100 Gb/s ethernet interface (poster). In Proceedings of the tenth ACM/IEEE symposium on Architectures for networking and communications systems (ANCS ’14). ACM, New York, USA, 2014
• Martin Žádník, Erik Šabík, Václav Bartoš: Detection of Network Flow Timestamp Reliability. In: 8th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2014, Brno, Czech Republic, 2014.
• Tomáš Čejka, Lukáš Kekely, Pavel Benáček, Rudolf B. Blažek, Hana Kubátová: FPGA Accelerated Change-Point Detection Method for 100Gb/s Networks. In: 9th Doctoral Workshop on Mathematical and Engineering Methods in Computer Science (MEMICS 2014), Telč, Czech Republic, 2014
• Lukáš Kekely, Viktor Puš, Pavel Benáček, Jan Kořenek: Trade-offs and Progressive Adoption of FPGA Acceleration in Network Traffic Monitoring. In: 24th International Conference on Field Programmable Logic and Applications (FPL 2014), Munich, Germany, 2014
• Lukáš Kekely, Viktor Puš, Jan Kořenek: Software Defined Monitoring of Application Protocols. In: Proceedings of the IEEE INFOCOM 2014 – IEEE Conference on Computer Communications, Toronto, Canada, 2014
• Vaibhav Bajpai, Radek Krejčí: Managing SamKnows probes using NETCONF (poster). In: Proceedings of the IEEE Network Operations and Management Symposium (NOMS), Krakow, Poland, 2014
• Viktor Puš, Lukáš Kekely, Jan Kořenek: Design Methodology of Configurable High Performance Packet Parser for FPGA. In: Proceedings of the 17th IEEE Symposium on Design and Diagnostics of Electronic Circuits and Systems, Warsaw, Poland, 2014
• Tomáš Závodník, Lukáš Kekely, Viktor Puš: CRC based hashing in FPGA using DSP blocks. In: Proceedings of the 17th IEEE Symposium on Design and Diagnostics of Electronic Circuits and Systems, Warsaw, Poland, 2014
• Viktor Puš, Pavel Benáček: Application Specific Processor with High Level Synthesized Instructions. In: Proceedings of the 22nd ACM/SIGDA International Symposium on Field-Programmable Gate Arrays, Monterey, USA, 2014
• Tomáš Závodník, Lukáš Kekely, Viktor Puš: Using DSP blocks to compute CRC hash in FPGA. In: Proceedings of the 22nd ACM/SIGDA International Symposium on Field-Programmable Gate Arrays, Monterey, USA, 2014
• Václav Bartoš, Martin Žádník: An Analysis of Correlations of Intrusion Alerts in an NREN. In: 2014 IEEE 19th International Workshop on Computer-Aided Modeling Analysis and Design of Communication Links and Networks (CAMAD). IEEE, 2014.

2013:

• Radek Krejčí: Building NETCONF-enabled Network Management Systems with libnetconf. In: Proceedings of the IFIP/IEEE International Symposium on Integrated Network Management 2013, Ghent, Belgium, 2013
• Petr Velan: Practical Experience with IPFIX Flow Collectors. In: Proceedings of the IFIP/IEEE International Symposium on Integrated Network Management 2013, Ghent, Belgium, 2013
• Václav Bartoš, Pavel Čeleda, Tomáš Kreuzwieser, Viktor Puš, Petr Velan, Martin Žádnik: Monitoring, Detection and Reporting of Security Incidents in CESNET NREN. In: Proceedings of The TERENA Networking Conference 2013, Maastricht, Netherlands, 2013
• Viktor Puš, Lukáš Kekely: Software Defined Monitoring: A New Approach to Network Traffic Monitoring. In: Proceedings of The TERENA Networking Conference 2013, Maastricht, Netherlands, 2013
• Viktor Puš: Connection for the fast analysis of packet headers transferred via data bus. Czech patent no. 303954.
• Jiří Matoušek, Martin Skačan, Jan Kořenek: Memory Efficient IP Lookup in 100 Gbps Networks, In: 23rd International Conference on Field Programmable Logic and Applications (FPL’13), Porto, PT, IEEE CAS, 2013, ISBN 978-1-4799-0004-6
• Martin Elich, Petr Velan, Tomáš Jirsík, Pavel Čeleda: An Investigation Into Teredo and 6to4 Transition Mechanisms: Traffic Analysis. In 38th Annual IEEE Conference on Local Computer Networks (LCN 2013), Sydney, Australia, 2013
• Václav Bartoš, Martin Žádník, Tomáš Čejka: Nemea: Framework for stream-wise analysis of network traffic. CESNET Technical Report, 2013
• Štěpán Friedl, Viktor Puš, Jiří Matoušek, Martin Špinler. Designing a Card for 100 Gb/s Network Monitoring. Technical report 7/2013, CESNET, 2013.

2012:

• Puš V.: Hardware acceleration for measurements in 100 Gb/s networks. In: Proceedings of 6th International Conference on Autonomous Infrastructure, Management and Security (AIMS), LNCS, vol. 7279, Springer, Heidelberg, 2012
• Kořenek J., Puš V.: Reducing memory in high-speed packet classification. In: Proceedings of 3rd International Workshop on TRaffic Analysis and Classification, Limassol, Cyprus, 2012
• Friedl Š., Novotný J., Puš V.: Implementation of 100ge card with hardware acceleration. In: Proceedings of The TERENA Networking Conference 2012, Reykjavík, Iceland, 2012
• Velan, P., Krejčí, R.: Flow Information Storage Assessment Using IPFIXcol. In: Proceedings of 6th International Conference on Autonomous Infrastructure, Management and Security (AIMS), LNCS, vol. 7279, Springer, Heidelberg, 2012, p. 154-157
• Krejčí, R., Čeleda, P., Dobrovolný, J.: Traffic Measurement and Analysis of Building Automation and Control Networks. In: Proceedings of 6th International Conference on Autonomous Infrastructure, Management and Security (AIMS), LNCS, vol. 7279, Springer, Heidelberg, 2012
• Čeleda, P., Krejčí, R., Krmíček, V.: Revealing and Analysing Modem Malware. In Proceedings of IEEE International Conference on Communications, ICC 2011, Ottawa, Canada, 2012
• Čeleda, P., Krejčí, R., Krmíček, V.: Flow-Based Security Issue Detection in Building Automation and Control Networks. In EUNICE Conference on Information and Communications Technologies, LNCS, vol. 7479, Springer, Heidelberg, 2012
• Kekely, L., Puš, V., Kořenek, J.: Low-Latency Modular Packet Header Parser for FPGA, In: ACM/IEEE Symposium on Architectures for Networking and Communications Systems, Austin, US, ACM, 2012, p. 77-78, ISBN 978-1-4503-1685-9
• Václav Bartoš, Pavel Čeleda, Tomáš Kreuzwieser, Viktor Puš, Petr Velan, Martin Žádník: Pilot Deployment of Metering Points at CESNET Border Links. CESNET technical report, CESNET, 2012.
• Tomáš Čejka, Pavel Benáček, Štěpán Friedl, Radek Krejčí: COMET-COMBO Ethernet Tester. CESNET technical report, CESNET, 2012.

2011:

• Kajan M., Kořenek J., Puš V.: Hardware Architecture for Packet Classification with Prefix Coloring, In: IEEE Design and Diagnostics of Electronic Circuits and Systems DDECS’2011, Cottbus, DE, IEEE CS, 2011, p. 231-236, ISBN 978-1-4244-9753-9
• Lhotka, L.: Configuring network devices with NETCONF and YANG., In XML Prague 2011 Conference Proceedings, MATFYZPRESS, Prague, Czech Republic, 2011, p. 99-124, ISBN: 978-80-7378-160-6

2010:

• Kořenek J., Puš V.: Memory Optimization for Packet Classification Algorithms in FPGA, In: Proceedings of the 13th IEEE Symposium on Design and Diagnostics of Electronic Circuits and Systems, Vienna, AT, IEEE CS, 2010, p. 297-300, ISBN 978-1-4244-6610-8
• Novotný J., Čeleda P., Dedek T., Krejčí R.: Hardware Acceleration for Cyber Security. In IST-091 – Information Assurance and Cyber Defence. NATO Research and Technology Organization, Tallinn, Estonia, 2010, p. 86-101, ISBN 978-92-837-0115-6
• Novotný J., Čeleda P., Krejčí R.: Hardware Acceleration: An Essential Part of Cyber Security in High-Speed Networks. DeepSec – In Depth Security Conference. DeepSec GmbH, Vienna, Austria, 2010.

2009:

• Kořenek, J., Puš, V.: Fast and scalable packet classification using perfect hash functions, In: Proceeding of the ACM/SIGDA international symposium on Field programmable gate arrays, New York, US, ACM, 2009, p. 229-236, ISBN 978-1-60558-410-2
• Kořenek, J., Puš, V.: Memory Optimization for Packet Classification Algorithms, In: Proceedings of the 5th ACM/IEEE Symposium on Architectures for Networking and Communications Systems, New York, US, ACM, 2009, p. 165-166, ISBN 978-1-60558-630-4

2008:

• Krejčí R., Lhotka L., Čeleda P., Špringl P.: Secure Remote Configuration of Network Devices – a Case Study, In proceedings of CESNET Conference 2008, CESNET, z. s. p. o., Prague, Czech Republic, 2008, p. 77-84, ISBN: 978-80-904173-0-4
• Bartoš K., Grill M., Krmíček V., Rehák M., Čeleda P.: Flow Based Network Intrusion Detection System using Hardware-Accelerated NetFlow Probes, In proceedings of CESNET Conference 2008, CESNET, z. s. p. o., Prague, Czech Republic, 2008, p. 49-56, ISBN: 978-80-904173-0-4