Markus Sosnowski, M.Sc.

Research Associate
Image 79954cb4

Postal address

  • Institut für Informatik der
  • Technischen Universität München
  • Lehrstuhl I8
  • Boltzmannstr. 3
  • 85748 Garching bei München - Germany


Consultation hours

By arrangement


  • Internet-wide scanning of hosts and networks
  • Analysis of TLS, i.a., to fingerprint network entities
  • Analysis of trustfulness of Internet entities
    • Graph-based approaches
    • Machine learning, clustering, classification, fingerprinting, etc.


Supervised Theses

In progress

Student Title Type Advisors Year Links
Robert Dillitz Transformation and Evaluation of TLS Behavior Graphs MA Johannes Zirngibl, Benedikt Jaeger, Markus Sosnowski 2022 Pdf
Rene Jung Capturing the Internet presence of Organizations with the help of a TLS Graph BA Markus Sosnowski, Patrick Sattler 2022 Pdf
Michael Haden Intrusion Detection using Streaming Network Telemetry IDP Kilian Holzinger, Markus Sosnowski, Simon Bauer 2021 Pdf


Author Title Type Advisors Year Links
Felix Myhsok Blocklists: Who is blocked? BA Johannes Zirngibl, Patrick Sattler, Markus Sosnowski 2021 Pdf
Yannik Gehring Revealing Organizational Structures in an Internet-wide TLS Graph MA Markus Sosnowski, Patrick Sattler, Juliane Aulbach 2021 Pdf
Jonas Lang Large Scale TLS Certificate Revocation Analysis BA Juliane Aulbach, Markus Sosnowski 2021
Tim Betzer A Systematic TLS Scanning Approach Minimizing the Used Requests and Comparison with other TLS Scanners GR Markus Sosnowski, Patrick Sattler 2021
Christian Kilb Blocklists: What is blocked and why? IDP Johannes Zirngibl, Patrick Sattler, Markus Sosnowski 2020 Pdf
Justus Fries Graph-based Analysis of Server TLS Parameters IDP Markus Sosnowski, Patrick Sattler, Lars Wüstrich 2020
Muhammed Sahin Analysis of Servers use of TLS Parameters IDP Patrick Sattler, Markus Sosnowski, Lars Wüstrich, Max Helm 2020 Pdf
Tim Betzer Maximize Information Gain from Internet Scans while Minimizing Impact BA Markus Sosnowski, Patrick Sattler 2020 Pdf


2022-06-01 Markus Sosnowski, Johannes Zirngibl, Patrick Sattler, Georg Carle, Claas Grohnfeldt, Michele Russo, Daniele Sgandurra, “Active TLS Stack Fingerprinting: Characterizing TLS Server Deployments at Scale,” in Proc. Network Traffic Measurement and Analysis Conference (TMA), Jun. 2022. Best Paper Award [Pdf] [Slides] [Homepage] [Rawdata] [Bib]