Retro-Future Bridge and Outages

Project Summary

Retro-future Bridge and Outages builds on two existing projects: Retro-Future Project and Detecting and Understanding Outages in the Internet (DUOI).

The Retro-Future Project is developing an Internet DVR that can provide time-travel over network data to assist assessing network security problems such as post-facto analysis of zero-day attacks and insider threats. Its technical challenges are how to be efficient, maximizing the effective history that is saved, to be cost-effective commodity hardware and software, and most importantly, to accommodate permission and privacy constraints that are necessary to deploy this system.

DUOI builds on the Trinocular system of Internet outage detection.

The outcome of this project is to assist in technology transfer of both of these efforts. We are working to support Retro-future technology with several groups, and to improve outage detection to report outages in near-real time and additional validation.

This project is carried out at USC’s Information Sciences Institute.


This work is supported by the Department of Homeland Security (DHS) Science and Technology Directorate, Cyber Security Division (DHS S&T/CSD) via contract number HHSP233201600010C.

The views and conclusions contained herein are those of the authors and should not be interpreted as necessarily representing the official policies or endorsements, either expressed or implied, of the Department of Homeland Security.


  • Calvin Ardi, PhD student (USC CS Dept. and ISI)
  • John Heidemann, PI on this project, project leader and professor (USC/ISI)
  • Aqib Nisar, PhD student (USC CS Dept. and ISI)
  • Yuri Pradkin, researcher (USC/ISI)


  • Kensuke Fukuda, John Heidemann and Abdul Qadeer 2017. Detecting Malicious Activity with DNS Backscatter Over Time. ACM/IEEE Transactions on Networking. (Sep. 2017), to appear. [PDF] [Dataset] ["Details"]
  • Lan Wei and John Heidemann 2017. Does Anycast Hang up on You? IEEE. [PDF] ["Details"]
  • John Heidemann 2017. Digging in to Ground Truth in Network Measurements. Talk at the Network Traffic Measurement and Analysis PhD School. [PDF] ["Details"]
  • Moritz Müller, Giovane C. M. Moura, Ricardo de O. Schmidt and John Heidemann 2017. Recursives in the Wild: Engineering Authoritative DNS Servers. Technical Report ISI-TR-720. USC/Information Sciences Institute. [PDF] ["Details"]
  • Wouter B. de Vries, Ricardo de O. Schmidt, Wes Haraker, John Heidemann, Pieter-Tjerk de Boer and Aiko Pras 2017. Verfploeter: Broad and Load-Aware Anycast Mapping. Technical Report ISI-TR-719. USC/Information Sciences Institute. [PDF] [Dataset] ["Details"]
  • Hang Guo and John Heidemann 2017. Detecting ICMP Rate Limiting in the Internet. Technical Report ISI-TR-717. USC/Information Sciences Institute. [PDF] ["Details"]
  • John Heidemann 2017. Collecting and Visualizing Outages Over the Long Haul. Talk at Active Internet Measurement Workshop. [PDF] ["Details"]
  • Lan Wei and John Heidemann 2017. Does Anycast Hang up on You? (extended). Technical Report ISI-TR-716. USC/Information Sciences Institute. [PDF] ["Details"]
  • Abdulla Alwabel, John Healy, John Heidemann, Brian Luu, Yuri Pradkin and Rasoul Safavian. 2015. Evaluating Externally Visible Outages. Technical Report ISI-TR-701. USC/Information Sciences Institute. [PDF] ["Details"]

For related publications, please see the ANT publications web page.


See also the see the ANT distribution web page.


We some datasets from this project available.

Related Links: