
Assistant Professor of Software Engineering at Milwaukee School of Engineering
Greater Milwaukee Area

Assistant Professor of Software Engineering at Milwaukee School of Engineering
Greater Milwaukee Area
Ben Uphoff is a co-founder of Packet Analytics (http://www.PacketAnalytics.com) and a former technical staff member at Los Alamos National Laboratory where he was a network security analyst and researcher in the network engineering group. Ben received his Ph. D. in Computer Science from Iowa State University in 2006. His dissertation involved high-volume alert correlation of intrusion alarms from diverse, heterogeneous data sources.
Ben joined the Software Engineering faculty at the Milwaukee School of Engineering in the Fall of 2008. He continues to server as a board member and VP of Research at Packet Analytics.
Computer and network security, high-volume data management, multi-terabyte storage systems. Intrusion detection systems, network behavior analysis and scalable alert correlation.
(Educational Institution; 201-500 employees; Higher Education industry)
September 2008 — Present (1 year 3 months)
Teaching software engineering principals, methods and best practices. Focusing on integrating computer and network security concepts into undergraduate education.
(Computer & Network Security industry)
October 2007 — Present (2 years 2 months)
Developing a distributed log management and search platform for network forensics, incident response and network operations.
(Government Agency; 10,001 or more employees; Research industry)
July 2001 — September 2007 (6 years 3 months)
Worked as a network security research and software developer in the Network Engineering group. Created and developed Distributed Signature and Anomaly Real-Time Monitoring (DiSARM), now exclusively licensed to Packet Analytics. Developer and architect for Framework for Responding to Network Security Events (FRNSE). Also served as a security analyst investigation classified and unclassified cybersecurity incidents.
(Educational Institution; 10,001 or more employees; Higher Education industry)
August 1999 — May 2001 (1 year 10 months)
Taught introductory computer science to undergraduates. Led lab sessions. Created homework assignments, quizzes and exams. Graded. Substitute lecturer on occasion.
Ph. D. , Computer Science , 2002 — 2006
Advised by Johnny Wong.
Dissertation Topic: Multi-paradigm frameworks for scalable intrusion detection
“Current research in intrusion detection systems does not adequately address scalability issues inherent in large networks. With this in mind, a framework for managing multi-terabyte, multi-sensor network security data is designed and implemented. Next a framework for distributed alert evaluation and verification is built on top of the data management system. Both frameworks are leveraged to perform scalable alert correlation in an environment that supports anomaly detection and misuse detection concurrently. Lastly we present performance evaluation and feature selection techniques for tuning alert correlation algorithms on production networks without the use of labeled data.”
MS , Computer Science , 1999 — 2001
BS , Computer Information Systems , 1995 — 1998