Urko holds a PhD in Computer Science at Mondragon University. He is an Engineer in Computer Sciences. He combines lectures on Engineering, training to companies, and research in Network Security and Data Mining applications.

Contact information

• +34 943 73 97 35

• uzurutuza AT eps DOT mondragon DOT edu This e-mail address is being protected from spam bots, you need JavaScript enabled to view it
  

Proyects                                                                                                                                   

Artemis JTI

Title: Honeynet: Malicious Fault Characterization Exploiting Honeypot Data
Duration: 2008
Participants: Eurecom Institut, France Telecom, City University, Zurich IBM Research
Laboratory (MGEP)

Ministerio de Educación y Ciencia, Proyectos Investigación Científica

Title: OPTIMA: Optimización de la Evaluación de Líneas de Producto para la Predicción de la Calidad de los Productos Mediante Clustering
Duration: 2007-2010
Principal Investigator: Goiuria Sagardui

Ministerio de Industria y Turismo, Subprograma Avanza I+D

Title: SCALe@rn, Person Centered Adaptative and Scalable Learning Contents
Duration: 2009-2011
Principal Investigator: Andoni Aregita (Alecop SCoop.)

Title: SeCADA: Plataforma de Seguridad Avanzada Para Sistemas de Control Basados en SCADA (Positive Evaluation on Eureka's Eurostars Programme)
Duration: 2008-2010
Principal Investigator: Mondragon Sistemas De Información (MSI)

Gobierno Vasco, Programa INTEK

Title: CORRELAC: Técnicas Avanzadas de Correlación Aplicables a la Seguridad en Sistemas de Gestión de Eventos
Duration: 2007-2008
Principal Investigator: S21Sec

Diputación Foral de Gipuzkoa

Title: Euskalert, Episodio II; Servicios Avanzados de Análisis en la Red Vasca de Honeypots
Duration: 2008-2010
Principal Investigator: Urko Zurutuza

Title: Euskalert, Red Vasca de Honeypots
Duration: 2006-2008
Principal Investigator: Iñaki Lakarra

Title: MIAU: Unidad de Detección de Intrusos Mondragon
Duration: 2005-2007
Principal Investigator: Jesús Lizarraga

Others

Type: Joint Research project between MGEP and IBM Research GmbH (Zurich research Laboratory)
Title: Data mining approaches for analysis of worm activity toward automatic signature and sensor generation
Duration: 2004-2008

Publications

Euskalert, Red Vasca de Honeypots
Urko Zurutuza, Enaitz Ezpeleta, Ignacio Arenaza, Iñaki Vélez de Mendizabal, Jesús Lizarraga, Roberto Uribeetxeberria, Miguel Fernández
En Actas de la XI Reunión Española sobre Criptografía y Seguridad de la Información (RECSI). Tarragona, Spain, Septiembre 2010. Accepted for publication

On the Visualization of Honeypot Data through Projection Techniques
Álvaro Alonso, Santiago Porras, Iñaki Garitano, Ignacio Arenaza, Roberto Uribeetxeberria, Urko Zurutuza, Álvaro Herrero and Emilio Corchado
Proceedings of the 10th International Conference on Computational and Mathematical Methods in Science and Engineering, (CMMSE2010). Almeria, Spain, June 27-30, 2010. Accepted for publication

Behavior Analysis of Domain Servers Through Windows Security Event Monitoring
Urko Zurutuza, Rosa Basagoiti and Asier Aztiria
Journal of Information Assurance and Security (JIAS). Volume 5, 2010.

Clustering of Windows security events by means of Frequent Pattern Mining
Rosa Basagoiti, Urko Zurutuza, Asier Aztiria, Guzmán Santafé and Mario Reyes
In Proceedings of the 2nd International Workshop on Computational Intelligence in Security for Information Systems (CISIS'09), Advances in Intelligent and Soft Computing (Springer), pp.19-27. Burgos, Spain, Sep. 2009

A data mining approach for analysis of worm activity through automatic signature generation
Urko Zurutuza, Roberto Uribeetxeberria, and Diego Zamboni
In AISec ’08: Proceedings of the 1st ACM Workshop on AISec, pages 61–70, Alexandria, VA, USA, 2008. ACM.

Un marco inteligente para el análisis de tráfico generado por gusanos en Internet
Urko Zurutuza, Roberto Uribeetxeberria, Diego Zamboni, Miguel Fernández e Iñaki Vélez de Mendizabal
En Actas de la X Reunión Española sobre Criptografía y Seguridad de la Información (RECSI)
Salamanca, Spain, Sep 2008

Malicious fault characterization exploiting honeypot data
Corrado Leita, Olivier Thonnard, Eric Alata, Marco Serafini, Vladimir Stankovic, Jouni Viinikka and Urko Zurutuza
In Proceedings of the Seventh European Dependable Computing Conference (EDCC-7), Kaunas, Lituania,
May 2008
[pdf]

Beacon frame spoofing attack detection in IEEE 802.11 networks
Asier Martínez, Urko Zurutuza , Roberto Uribeetxeberria , Miguel Fernández , Jesús Lizarraga , Ainhoa Serna
and Iñaki Vélez de Mendizabal . In Proceedings of the Third International Conference on Availability, Reliability and Security (ARES 2008), Barcelona, Spain, March 2008. IEEE Computer Society Press
[pdf] [ppt]

Análisis de datos procedentes de un sistema de detección de gusanos mediante técnicas de clustering
Urko Zurutuza , Roberto Uribetxeberria , and Diego Zamboni
In Actas del II Simposio sobre Seguridad Informática (SSI'2007). II Congreso Español de Informática (CEDI 2007), Zaragoza, Spain, September 2007
[pdf] [ppt]

Combined data mining approach for intrusion detection
Urko Zurutuza , Roberto Uribeetxeberria , Ekain Azketa, Gorka Gil, Jesús Lizarraga , and Miguel Fernández
In Proceedings of the International Conference on Security and Cryptography, (SECRYPT'2007), Barcelona, Spain, July 2007
[pdf] [ppt]

Mejora del clustering de ataques realizado en la red leurre.com a través de la eliminación de las anómalías de red
Miguel Fernández , Roberto Uribeetxeberria , and Urko Zurutuza
In Actas del II Simposio sobre Seguridad Informática (SSI'2007). II Congreso Español de Informática (CEDI'07), Zaragoza, Spain, September 2007
[pdf]

Mining a worm detection system data
Urko Zurutuza , Roberto Uribeetxeberria , James Riordan, and Yan Duponchel
Poster presented at 9th International Symposium on Recent Advances in Intrusion Detection, (RAID'2006), September 2006. Hamburg, Germany
[pdf] [poster]

Security in embedded systems
Jesús Lizarraga , Roberto Uribeetxeberria , Urko Zurutuza , and Miguel Fernández
Poster presented at IADIS International Conference on Applied Computing 2006, February 2006
[pdf] [poster]

Revisión del estado actual de la investigación en el uso de data mining para la detección de intrusiones
Urko Zurutuza and Roberto Uribetxeberria
In Actas del I Simposio sobre Seguridad Informática (SSI'2005). I Congreso Español de Informática (CEDI 2005), Granada, Spain, September 2005
[pdf] [ppt]

A review of three intrusion detection alert correlation methods
Urko Zurutuza and Roberto Uribetxeberria
IADAT Journal of Advanced Technology, ISSN 1698-1073, July 2005
[pdf]

Intrusion detection alarm correlation: A survey
Urko Zurutuza and Roberto Uribetxeberria
In Proceedings of the IADAT International Conference on Telecommunications and Computer Networks (TCN'04), Donostia, Spain, December 2004
[pdf] [ppt]

Secu-audit: Continuous computer security auditing experiences
Urko Zurutuza , Roberto Uribeetxeberria , Jesús Lizarraga , and Iñaki Velez de Mendizabal
In Proceedings of the IADAT International Conference on Telecommunications and Computer Networks (TCN 2004), Donostia, Spain, December 2004
[pdf] [ppt]

A methodology for continuous computer security auditing
Urko Zurutuza , Roberto Uribeetxeberria , Jesús Lizarraga , and Iñaki Velez de Mendizabal
In Proceedings of the IADIS International Conference e-Society 2004, Ávila, Spain, July 2004
[pdf] [ppt]

Sistemas de detección de intrusos
Urko Zurutuza
Estado del arte. State of the Art e-book, October 2004. Available on the Ibero-American Thematic Network on Cryptography and Information Security (CRIPTORED)
[pdf]

PhD Thesis

• Data mining approaches for analysis of worm activity toward automatic signature generation