This book constitutes the refereed proceedings of the 10th International Conference on Passive and Active Measurement, PAM 2009, held in Seoul, Korea, in April 2009. The 22 revised full papers and 2 revised demo papers presented were carefully reviewed and selected from 77 submissions. The papers focus on research and practical applications of routing and forwarding, topology and delay, methods for large-scale measurements, wireless, management tools, audio and video traffic, peer-to-peer, traffic measurements, and measurements of anomalous and unwanted traffic.

This book constitutes the refereed proceedings of the 6th International Workshop on Passive and Active Measurement, PAM 2005, held in Boston, MA, USA in March/April 2005. The 24 revised full papers and 12 revised short papers presented were carefully reviewed and selected from 84 submissions. The papers are organized in topical sections on TCP measurements, application measurements, network inference and problem diagnosis, topology measurements, wireless network measurements, monitoring facilities, routing and traffic engineering measurements, and spectroscopy and bandwidth estimation.

This book constitutes the refereed proceedings of the 8th International Conference on Passive and Active Measurement, PAM 2007, held in Louvain-la-Neuve, Belgium, April 2007. Coverage focuses on research and practical applications of network measurement and analysis techniques, detailing interdomain routing, P2P, wireless 802.11, wireless 3G/CDMA/Bluetooth, infrastructure and services, traffic, and measurement principles.

PAM 2004 was the 5th International Workshop on Passive and Active Measu- ment, heldinJuan-les-PinsontheFrenchRiviera, co-organizedbytheUniversity ofCambridgeandINRIA-SophiaAntipolis, with?nancialsupportfromInteland Cisco Systems. This year we received a record number of submissions (184), re?ecting the growth of the?eld and the critical role it plays in maintaining the network infrastructure on which we all rely. From the two-page abstracts submitted, the programme committee selected 29 papers whose authors were invited to submit full papers to appear in these proceedings. Particular emphasis was placed on selecting work that we felt was fresh and exciting, so as to encourage a dynamic and interactive workshop that provided a?rst public presentation of research that will go on to appear in other, more formal conferences and journals. The programme committee was greatly impressed with the strength and depth of submissions received, which bodes well for the future of the subject area. This workshop took place during April 19-20, 2004 in Juan-les-Pins. Located betweentheAlpsandtheMediterranean, andclosetoNice, CannesandMonaco, Juan-les-Pins is one of the most beautiful sites on the French Riviera. Juan-les- Pins is also close to Sophia Antipolis, the French telecom valley. The workshop could not have succeeded without the support of many people whom we would like thank. First, we thank the members of the programme c- mittee for donating a considerable amount of time to review the unexpectedly large number of submissions, while working to a very tight deadline.

The 2008 edition of the Passive and Active Measurement Conference was the ninth of a series of successful events. Since 2000, the Passive and Active M- surement (PAM) conference has provided a forum for presenting and discussing innovative and early work in the area of Internet measurement. PAM has a tradition of being a workshop-like conference with lively discussion and active participation from all attendees. This event focuses on research and practical applications of network measurement and analysis techniques. This year’s c- ference was held in Cleveland, Ohio. PAM2008’s call for papers attracted 71 submissions. Each paper was ca- fully reviewed by at least three members of the Technical Program Committee. The reviewing process led to the acceptance of 23 papers. The papers were - ranged into eight sessions covering the following areas: addressing and topology, applications,classi?cationandsampling,measurementsystems andframeworks, wireless 802.11, tools, characterization and trends, and malware and anomalies. We are very grateful to Endace, Intel and Cisco Systems whose sponsoring allowed us to keep low registration costs and also to o?er several travel grants to PhD students. We are also grateful to Case Western Reserve University for sponsoring PAM as a host.

This book constitutes the refereed proceedings of the 15th International Conference on Passive and Active Measurement, PAM 2014, held in Los Angeles, CA, USA, in 2014. The 24 revised full papers presented were carefully reviewed and selected from 76 submissions. The papers have been organized in the following topical sections: internet wireless and mobility; measurement design, experience and analysis; performance measurement; protocol and application behavior; characterization of network behavior; and network security and privacy. In addition 7 poster papers have been included.

This book constitutes the refereed proceedings of the 5th International Passive and Active Measurement Workshop, PAM 2004, held in Antibes Juan-les-Pins, France in April 2004. The 29 revised full papers presented were carefully reviewed and selected from 184 submissions. The papers are organized in topical sections on P2P and overlay, network optimization, traffic analysis, protocol and system measurement, tools, miscellaneous, network measurement, and BGP and routing.

This book constitutes the proceedings of the 18th International Conference on Passive and Active Measurement, PAM 2017, held in Sydney, Australia, in March 2017. The 20 full papers presented in this volume were carefully reviewed and selected from 87 submissions. They are organized in topical sections on IPv6, Web and applications, security, performance, latency, characterization and troubleshooting, and wireless.

This report presents findings of a workshop featuring representatives of Internet Service Providers and others with access to data and insights about how the Internet performed on and immediately after the September 11 attacks. People who design and operate networks were asked to share data and their own preliminary analyses among participants in a closed workshop. They and networking researchers evaluated these inputs to synthesize lessons learned and derive suggestions for improvements in technology, procedures, and, as appropriate, policy.

This book provides a comprehensive overview of network behavior analysis that mines Internet traffic data in order to extract, model, and make sense of behavioral patterns in Internet “objects” such as end hosts, smartphones, Internet of things, and applications. The objective of this book is to fill the book publication gap in network behavior analysis, which has recently become an increasingly important component of comprehensive network security solutions for data center networks, backbone networks, enterprise networks, and edge networks. The book presents fundamental principles and best practices for measuring, extracting, modeling and analyzing network behavior for end hosts and applications on the basis of Internet traffic data. In addition, it explains the concept and key elements (e.g., what, who, where, when, and why) of communication patterns and network behavior of end hosts and network applications, drawing on data mining, machine learning, information theory, probabilistic graphical and structural modeling to do so. The book also discusses the benefits of network behavior analysis for applications in cybersecurity monitoring, Internet traffic profiling, anomaly traffic detection, and emerging application detections. The book will be of particular interest to researchers and practitioners in the fields of Internet measurement, traffic analysis, and cybersecurity, since it provides a spectrum of innovative techniques for summarizing behavior models, structural models, and graphic models of Internet traffic, and explains how to leverage the results for a broad range of real-world applications in network management, security operations, and cyber-intelligent analysis. After finishing this book, readers will 1) have learned the principles and practices of measuring, modeling, and analyzing network behavior on the basis of massive Internet traffic data; 2) be able to make sense of network behavior for a spectrum of applications ranging from cybersecurity and network monitoring to emerging application detection; and 3) understand how to explore network behavior analysis to complement traditional perimeter-based firewall and intrusion detection systems in order to detect unusual traffic patterns or zero-day security threats using data mining and machine learning techniques. To ideally benefit from this book, readers should have a basic grasp of TCP/IP protocols, data packets, network flows, and Internet applications.