Previously, I was a post-doctoral researcher at TU Delft and a member of the Economics of Cybersecurity group analyzing large-scale Internet measurement and incident data to identify how providers of Internet services deal with security risks and incidents.

Between February 2013 and May 2014, I was a post-doctoral researcher at Rutgers University and a member of the Fefferman Lab investigating bio-inspired algorithms in distributed anomaly detection systems.

I received my Ph.D. in Computer Science from the Grenoble Alpes University. Between October 2009 and December 2012 I was a member of the Drakkar group at LIG Lab.

• Security of DNS infrastructure and domain name abuse

• Large-scale network traffic measurement, analysis, and classification

• Secure protocols and communication mechanisms

• Distributed detection and confinement of abnormal activities in network traffic

• Reputation metrics to improve intermediary incentives for security

• [2024.01.10] Congratulations to Yevheniya! Our paper titled "Extended DNS Errors: Unlocking the Full Potential of DNS Troubleshooting" that was presented at ACM IMC 2023 has been awarded the Applied Networking Research Prize in 2024!

• [2023.11.22] We invite applications for a PhD Student position in the area of network secuity. The Ph.D. program is part of the Joint Base for Cyber Intelligence and Detection project, a French initiative led by Thales in collaboration with public and private sector stakeholders.

• [2023.10.10] I will give a talk entitled "Building a Resilient Domain Whitelist to Enhance Phishing Blocklist Accuracy" at ICANN Tech Day on October 23, 2023.

• [2022.02.07] I will give a talk entitled "Compromised versus Maliciously Registered Domains" at the ICANN Plenary Session: Evolving the DNS Abuse Conversation on March 9, 2022.

• [2022.02.01] I will be giving several presentations on the Technical Report of the Domain Name System Abuse Project commissioned by the European Commission at the ICANN Contracted Party House DNS Abuse Subgroup Meeting (April 12, 2022), High-Level Group on Internet Governance Multi-stakeholder Open Session (March 11, 2022), ICANN73 GAC Public Safety Working Group (March 8, 2022), Names and Numbers SIG at M3AAWG Conference Call (March 2, 2022), DNS Abuse SIG-FIRST Conference Call (March 1, 2022), and ICANN73 Business Constituency (February 17, 2022).

• [2021-05-20] We will give a talk about the COMAR project titled: "Classification of Compromised versus Maliciously Registered Domains" at the 2021 ICANN DNS Symposium (virtual) on May 26th 2021.

• [2021-04-22] Together with colleagues from AFNIC and SIDN Labs, we wrote a blog post entitled Distinguishing exploited from malicious domain names using COMAR: Key findings and future directions.

• [2020.11.06] I co-organize the 6th International Workshop on Traffic Measurements for Cybersecurity (WTMC 2021) co-located with the IEEE S&P 2021 (Virtual event). Paper submission deadline: January 15, 2021.

• [2020.10.29] We wrote two blog posts describing our method for inferring the deployment of inbound Source Address Validation using DNS resolvers (Closed Resolver Project) for APNIC and RIPE NCC.

• [2020.06.08] Our research paper titled "From Defensive Registration to Subdomain Protection: Evaluation of Email Anti-Spoofing Schemes for High-Profile Domains" received the Best Paper Award at the Network Traffic Measurement and Analysis Conference 2020.

• [2019.12.12] I co-organize the International Workshop on Traffic Measurements for Cybersecurity (WTMC 2020) co-located with the IEEE Euro S&P 2020 in Genova, Italy. Paper submission (firm deadline): May 11, 2020.

• [2019.11.02] Apply for an internship position in the Drakkar research group at LIG lab, France.

• [2019.07.12] I will give a keynote speech titled: "Internet-wide Measurements to Prevent and Combat Cybercrime" at the 8th International Workshop on Cyber Crime at ARES on August 28, 2019 in Canterbury, UK.

• [2019.06.23] We invite applications for a PhD Student position in the area of measurements for cybersecurity and Domain Name System (DNS) abuse. Application deadline: 31.07.2019

• [2019.06.13] I will give a talk titled: "Internet-wide Measurements for Cybersecurity: The Case of DNS Zone Poisoning" at the French Cyber Defence and Strategy conference organized by the Cercle National des Armees on Tuesday, 2nd July 2019.

• [2019.03.25] We're happy to announce that we are organizing a workshop on DNS security at LIG Lab on April 4, 2019! Dr. Paul Vixie (Farsight Security) will give a keynote speech titled Benefits and Hazards of "Public" vs "Private" vs "Local" DNS

• [2018.11.10] We are happy to announce we will be hosting a meeting of the Scientific Council of AFNIC at LIG Lab on November 22, 2018!

• [2018.11.02] Apply for an internship position in the Drakkar research group at LIG lab, France.

• [2018.10.12] I co-organize the IEEE S&P 4th International Workshop on Traffic Measurements for Cybersecurity (WTMC 2019). Submission deadline: January 7, 2019. Consider submitting your paper!

• [2018.10.02] SIDN Labs, Afnic Labs, and Grenoble Alps University started a new research project called "Classification of compromised versus maliciously registered domains" (COMAR) on 1 October 2018. You can find our blog post here.

• [2018.10.02] Our colleague Oliver Gasser (TU Munich) will give a talk titled "Clusters in the Expanse: Understanding and Unbiasing IPv6 Hitlists" at the upcoming RIPE meeting. You can find more information on our blog post.

• [2018.07.02] Mehmet Tahir Sandikkaya will be joining the Drakkar team as a visiting researcher to work on the security of IoT devices. Welcome, Tahir!

• [2018.03.26] The publication "In Log We Trust: Revealing Poor Security Practices with Certificate Transparency Logs and Internet Measurements" has been awarded the Best Paper Award at the Passive and Active Measurement Conference (PAM'18)!

• [2018.02.11] Our ACM CCS paper titled "Herding Vulnerable Cats: A Statistical Approach to Disentangle Joint Responsibility for Web Security in Shared Hosting" was nominated along with 4 other paper for the best Dutch cybersecurity research paper in 2018.

• [2017.12.22] I co-organize the ACM SIGCOMM 2018 3rd International Workshop on Traffic Measurements for Cybersecurity (WTMC 2018). Submission deadline (final extension): April 8, 2018

• [2017.11.01] We invite applications for a PhD Student position in the area of measurements for cybersecurity and Domain Name System (DNS) abuse. Application deadline: 31.12.2017

• [2017.09.05] Together with my colleague Maarten Wullink (SIDN) we would like to invite everyone to join the webinar entitled: "The Statistical Analysis of DNS Abuse in gTLDs", on 13 and 14 September 2017, organized and hosted by ICANN.

• [2017.08.20] I'm very happy to announce that starting from September 2017 I will be appointed at ENSIMAG and will join the Drakkar research group lead by Prof. Andrzej Duda at LIG Lab (Grenoble Computer Science Laboratory).

• [2017.08.04] We have delivered the SADAG final report to ICANN. Between August 9 and September 27, 2017, ICANN invites public comments from the community on the data, methodology, and results of our report.

• [2016.12.15] Our paper No domain left behind: is Let's Encrypt democratizing encryption? was covered by Reddit and Schneier on Security.

• [2016.12.13] I'm very happy to announce that we kicked off a new study for ICANN together with SIDN Labs to investigate the abuse of domain names in new and legacy gTLDs. Please check our blog post and the SADAG site for more information.

• [2016.09.29] I co-organize the International Workshop on Traffic Measurements for Cybersecurity (WTMC 2017) co-located with the IEEE S&P 2017 in San Jose, CA. Deadline: January 15, 2017.

• [2016.06.07] I am co-guest editing a Feature Topic on Traffic Measurements for Cyber Security for IEEE Communications Magazine. Consider submitting your paper! Deadline: October 1, 2016.

• [2016.05.05] I will give a talk about the Clean Netherlands project titled: "Tackling Internet pollution using science and law enforcement" at a cybercrime conference organized by the Cambridge Cloud Cybercrime Centre on Thursday, 14th July 2016.

• [2015.11.05] The EconSec group is co-organizing the International Workshop on Traffic Measurements for Cybersecurity (WTMC 2016) co-located with the 11th ACM Asia Conference on Computer and Communications Security (AsiaCCS 2016) on May 30th, 2016. Consider submitting your paper! Deadline (extended): 08.02.2016.

• "Spoofed Emails: An Analysis of the Issues Hindering a Larger Deployment of DMARC", Olivier Hureau, Jan Bayer, Andrzej Duda, Maciej Korczynski, Passive and Active Measurement Conference (PAM), Virtual Event, 2024

• "WHOIS Right? An Analysis of WHOIS and RDAP Consistency", Simon Fernandez, Olivier Hureau, Andrzej Duda, Maciej Korczynski, Passive and Active Measurement Conference (PAM), Virtual Event, 2024

• "Building a Resilient Domain Whitelist to Enhance Phishing Blocklist Accuracy", Jan Bayer, Sourena Maroofi, Olivier Hureau, Andrzej Duda, Maciej Korczynski, Symposium on Electronic Crime Research (eCrime), Spain, 2023

• "Extended DNS Errors: Unlocking the Full Potential of DNS Troubleshooting", Yevheniya Nosyk, Maciej Korczynski, Andrzej Duda, ACM SIGCOMM Internet Measurement Conference (IMC), Canada, 2023

• "The Cloud Strikes Back: Investigating the Decentralization of IPFS", Leonhard Balduf, Maciej Korczynski, Onur Ascigil, Navin V. Keizer, George Pavlou, Bjorn Scheuermann, Michal Krol, ACM SIGCOMM Internet Measurement Conference (IMC), Canada, 2023

• "Guardians of DNS Integrity: A Remote Method for Identifying DNSSEC Validators Across the Internet", Yevheniya Nosyk, Maciej Korczynski, Andrzej Duda, Proc. of IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), UK, 2023

• "Don't Get Hijacked: Prevalence, Mitigation, and Impact of Non-Secure DNS Dynamic Updates", Yevheniya Nosyk, Maciej Korczynski, Carlos H. Ganan, Michal Krol, Qasim Lone, Andrzej Duda, Proc. of IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), UK, 2023

• "The Closed Resolver Project: Measuring the Deployment of Inbound Source Address Validation", Yevheniya Nosyk, Maciej Korczynski, Qasim Lone, Marcin Skwarek, Baptiste Jonglez, Andrzej Duda, IEEE/ACM ransactions on Networking (TON), 2023

• "Exploring the Dark Side of AI: Advanced Phishing Attack Design and Deployment Using ChatGPT", Nils Begou, Jeremy Vinoy, Andrzej Duda, Maciej Korczynski, Proc. of IEEE Conference on Communications and Network Security (CNS), Orlando, USA, 2023

• "Unveiling the Weak Links: Exploring DNS Infrastructure Vulnerabilities and Fortifying Defenses", Yevheniya Nosyk, Olivier Hureau, Simon Fernandez, Andrzej Duda, Maciej Korczynski, IEEE EuroS&P Workshop on Traffic Measurements for Cybersecurity (WTMC), Netherlands, 2023

• "Hazardous Echoes: The DNS Resolvers that Should Be Put on Mute", Ramin Yazdani, Yevheniya Nosyk, Ralph Holz, Maciej Korczynski, Mattijs Jonker, Anna Sperotto, Network Traffic Measurement and Analysis Conference (TMA), Italy, 2023

• "Intercept and Inject: DNS Response Manipulation in the Wild", Yevheniya Nosyk, Qasim Lone, Yury Zhauniarovich, Carlos Hernandez Ganan, Emile Aben, Giovane C. M. Moura, Samaneh Tajalizadehkhoob, Andrzej Duda, Maciej Korczynski, Passive and Active Measurement Conference (PAM), Virtual Event, 2023

• "Operational Domain Name Classification: From Automatic Ground Truth Generation to Adaptation to Missing Values", Jan Bayer, Ben Chukwuemeka Benjamin, Sourena Maroofi, Thymen Wabeke, Cristian Hesselman, Andrzej Duda, Maciej Korczynski, Passive and Active Measurement Conference (PAM), Virtual Event, 2023

• "Deployment of Source Address Validation by Network Operators: A Randomized Control Trial", Qasim Lone, Alisa Frik, Matthew Luckie, Maciej Korczynski, Michel van Eeten, Carlos Ganan, 43rd IEEE Symposium on Security and Privacy (IEEE S&P), San Francisco, 2022

• "Routing Loops as Mega Amplifiers for DNS-based DDoS Attacks", Yevheniya Nosyk, Maciej Korczynski, Andrzej Duda, Passive and Active Measurement Conference (PAM 2022), the Netherlands

• "Early Detection of Spam Domains with Passive DNS and SPF", Simon Fernandez, Maciej Korczynski, Andrzej Duda, Passive and Active Measurement Conference (PAM 2022), the Netherlands

• "Study on Domain Name System (DNS) abuse : technical report" Jan Bayer, Yevheniya Nosyk, Olivier Hureau, Simon Fernandez, Ivett Paulovics, Andrzej Duda, Maciej Korczynski, Publications Office of the European Union, 2022

• "Traffic Measurements and Data Analysis for DNS Security", Maciej Korczynski, Grenoble, December 2021

• "Classifying Application Flows and Intrusion Detection in Internet Traffic", Maciej Korczynski, Grenoble, November 2012

• "Evaluating Impact of Sampling Methods on Detection of DDoS Attacks Accuracy for Unified Rate Limiting Algorithm", Maciej Korczynski, Cracow, July 2009

• "Zone poisonng and General Data Protection Regulation" (speaker), ICANN 63 meeting, Barcelona, Spain, October 22, 2018

• Trends in Abuse: New and Legacy gTLDs (speaker), 41st M3AAWG General Meeting, Toronto, Canada, September 5, 2017

• Statistical Analysis of DNS Abuse in gTLDs (SADAG) (invited speaker), ICANN 59 meeting, Johannesburg, South Africa, June 27, 2017

• Zone Poisoning: The How and Where of Non-Secure DNS Dynamic Updates (speaker), DNS-OARC 2017 Spring Workshop, Madrid, Spain, May 15, 2017

• Statistical Analysis of DNS Abuse in generic Top-Level Domains, ICANN meeting (invited speaker), Copenhagen, Denmark, March 14, 2017

• Measuring Malware and Phishing Rates in .nl and Other TLDs (co-author), Council of European National Top-Level Domain Registries (CENTR), Belgrade, Serbia, October 6, 2016

• Who gets the Boot? Analyzing Victimization by DDoS-as-a-Service (keynote speaker), Tech Together (ISPConnect & Dutch Hosting Provider Association), Nieuwegein, The Netherlands, September 1, 2016

• Tackling Internet Pollution Using Science and Law Enforcement (invited speaker), Cambridge Cybercrime Centre: Inaugural Cybercrime Conference, Cambridge, UK, July 14, 2016

• "Reputation metrics for TLDs and hosting providers" pdf (speaker), ICANN meeting, Tech Day, Dublin, Ireland, October 19, 2015

• "Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs" pdf (invited speaker), Dutch Hosting Provider Association TechDay, The Hague, The Netherlands, May 21, 2015

• "Clean Netherlands: Tackling Internet Pollution Using Science and Law Enforcement" pdf (speaker), International NCSC (National Cyber Security Centre) One Conference 2015, The Hague, The Netherlands, April 13-14, 2015

• "Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs" (invited speaker, panelist), The First IAS-YNU Symposium on Information and Physical Security, Yokohama, Japan, March 18, 2015

• "Badness Metrics for Hosters: Ranking Abuse in the Dutch Market" (co-author), Digital Crimes Consortium, Miami, Florida, USA, March 12, 2015

• "Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs" (speaker), DNS-OARC 2014 Fall Workshop, Los Angeles, California, USA, October 11-13, 2014

• PrevDDoS: Preventing DDoS Attacks. Project funded by the IDEX Universite Grenoble Alpes Initiatives de Recherche Strategiques (IRS) (2019-2021). Role: Principal Investigator

• COMAR: Classification of compromised versus maliciously registered domains (2018-2021). Project funded by SIDN and AFNIC. Role Principal Investigator

• DINS: DNS Naming and Services for Secure Seamless IoT. Project funded by the Agence Nationale de la Recherche (ANR). Project in collaboration with AFNIC, ACKLIO, Bouygues Telecom, and IMT Atlantique (2020-2023). Role: Senior researcher

Past Projects:

• SADAG: Statistical Analysis of DNS Abuse in generic Top-Level Domains (2016-2017). Project in collaboration with SIDN and the Internet Corporation for Assigned Names and Numbers (ICANN). Project coordinator: SIDN Labs. Role co-Principal Investigator, senior researcher

• REMEDI3S-TLD Phase 2: Reputation Metrics Design to Improve Intermediary Incentives for Security of Top-Level Domains (2016-2017). Project in collaboration with SIDN Labs. Role: Principal Investigator

• Benchmark System for the Security of the Dutch Hosting Market. Project funded by the Dutch Ministry of Economics (2016-2018). Role: Principal Investigator

• Crowd-sourcing BCP38 Compliance Measurements (2017). Project in collaboration with NCSC. Role: co-Principal Investigator

• REMEDI3S-TLD: Reputation Metrics Design to Improve Intermediary Incentives for Security of Top-Level Domains. Project in collaboration with SIDN Labs and National Cyber-Security Centrum (2014-2016). Role: Senior researcher

• Nederland Schoon (Clean NL): Project aims to tackle Internet pollution in the Dutch hosting market. A collaboration between the Dutch National Police, the Authority for Consumers and Markets (ACM), the Public Prosecutor, and Delft University of Technology. Role: Senior researcher

• Nature-Inspired Cyber Health: DHS project on bio-inspired distributed decision algorithms for anomaly detection (2013-2015). Role: Senior researcher

• INDECT: European research project on the security of citizens in both real and virtual environments (2009-2014). Role: PhD researcher

• COST IC0703: European research project on traffic monitoring and analysis (2008-2012). Role: Junior researcher

• PBZ: National project on next-generation services and networks (2007-2010). Role: Junior researcher.