Operational experiences with high-volume network intrusion detection. - Holger Dreger; Anja Feldmann; Vern Paxson; Robin Sommer (CCS, 2004)

Packet trace manipulation rramework for test labs. - Andy Rupp; Holger Dreger; Anja Feldmann; Robin Sommer (Internet Measurement Conference, 2004)

Enhancing the Accuracy of Network-Based Intrusion Detection with Host-Based Context. - Holger Dreger; Christian Kreibich; Vern Paxson; Robin Sommer (DIMVA, 2005)

Building a Time Machine for Efficient Recording and Retrieval of High-Volume Network Traffic. - Stefan Kornexl; Vern Paxson; Holger Dreger; Anja Feldmann; Robin Sommer (Internet Measurement Conference, 2005)

A methodology for studying persistency aspects of internet flows. - Jörg Wallerich; Holger Dreger; Anja Feldmann; Balachander Krishnamurthy; Walter Willinger (Comput. Commun. Rev., 2005)

Predicting the DNSSEC overhead using DNS traces. - Bernhard Ager; Holger Dreger; Anja Feldmann (CISS, 2006)

Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection. - Holger Dreger; Anja Feldmann (USENIX Security Symposium, 2006)

Operational network intrusion detection: resource-analysis tradeoffs. - Holger Dreger (2007)

Predicting the Resource Consumption of Network Intrusion Detection Systems. - Holger Dreger; Anja Feldmann; Vern Paxson; Robin Sommer (RAID, 2008)

Enriching network security analysis with time travel. - Gregor Maier; Robin Sommer; Holger Dreger; Anja Feldmann; Vern Paxson; Fabian Schneider 001 (SIGCOMM, 2008)