Research on event correlation, event log data mining, and security monitoring; supervision of graduate students and teaching activities.
Development and maintenance of a system and network management framework (based on HP OpenView and a number of open source tools) which includes solutions for monitoring applications, servers, network devices, etc.; for event correlation and event log monitoring; for gathering SNMP and NetFlow statistics from servers, routers, and probes; for intrusion detection; etc.
Research on security monitoring techniques and various teaching activities.
Administration of Cisco and Bay Networks routers, development and maintenance of a network management system (based on Tivoli NetView), administration of UNIX servers (Linux and AIX)
Administration of UNIX servers (Linux and AIX), PC-workstation maintenance and user support