Detecting VoIP Floods Using the Hellinger Distance (2009)
Hemant Sengar, Student Member, Haining Wang, Duminda Wijesekera, Senior Member, Sushil Jajodia, ...
Abstract—Voice over IP (VoIP), also known as Internet telephony, is gaining market share rapidly and now competes favorably as one of the visible applications of the Internet. Nevertheless, being...
Thwarting E-mail Spam Laundering (2009)
Mengjun Xie, Heng Yin, Haining Wang
Laundering e-mail spam through open-proxies or compromised PCs is a widely-used trick to conceal real spam sources and reduce spamming cost in the underground e-mail spam industry. Spammers have...
Measurement and Classification of Humans and Bots in Internet Chat (2009)
Steven Gianvecchio, Mengjun Xie, Zhenyu Wu, Haining Wang
The abuse of chat services by automated programs, known as chat bots, poses a serious threat to Internet users. Chat bots target popular chat networks to distribute spam and malware. In this paper,...
Model-Based Covert Timing Channels: Automated Modeling and Evasion (2009)
Steven Gianvecchio, Haining Wang, Duminda Wijesekera
Abstract. The exploration of advanced covert timing channel design is important to understand and defend against covert timing channels. In this paper, we introduce a new class of covert timing...
Swift: A Fast Dynamic Packet Filter (2009)
Zhenyu Wu, Mengjun Xie, Haining Wang
This paper presents Swift, a packet filter for high performance packet capture on commercial off-the-shelf hardware. The key features of Swift include (1) extremely low filter update latency for...
Measurement and Classification of Humans and Bots in Internet Chat (2009)
Steven Gianvecchio, Mengjun Xie, Zhenyu Wu, Haining Wang
The abuse of chat services by automated programs, known as chat bots, poses a serious threat to Internet users. Chat bots target popular chat networks to distribute spam and malware. In this paper,...
Ultrafast Relaxation Dynamics of Hot Optical Phonons in Graphene (2009)
Wang, Haining, Strait, Jared H., George, Paul A., Shivaraman, Shriram, Shields, Virgil B., Chandrashekhar, Mvs, ...
Using ultrafast optical pump-probe spectroscopy we study the relaxation dynamics of hot optical phonons in few-layer and multi-layer graphene films grown by epitaxy on silicon carbide substrates and...
Securing BGP through Keychain-based Signatures (2009)
Heng Yin, Bo Sheng, Haining Wang
Abstract — As the major component of Internet routing infrastructure, the Border Gateway Protocol (BGP) is vulnerable to malicious attacks. While Secure BGP (S-BGP) provides a comprehensive...
Defense Against Spoofed IP Traffic Using Hop-Count Filtering (2009)
Haining Wang, Cheng Jin, Kang G. Shin
Abstract—IP spoofing has often been exploited by Distributed Denial of Service (DDoS) attacks to: 1) conceal flooding sources and dilute localities in flooding traffic, and 2) coax legitimate hosts...
Cooperative Relay Service in a Wireless LAN (2009)
Lei Guo, Xiaoning Ding, Haining Wang, Qun Li, Songqing Chen, Xiaodong Zhang
As a family of wireless local area network (WLAN) protocols between physical layer and higher layer protocols, IEEE 802.11 has to accommodate the features and requirements of both ends. However,...
Maintaining Strong Cache Consistency for the Domain Name System (2008)
Xin Chen, Haining Wang, Shansi Ren, Student Member, Xiaodong Zhang
(DNS) is critical to its performance and scalability. Existing DNS only supports weak cache consistency by using the Time-To-Live (TTL) mechanism, which functions reasonably well in normal...
Fast Detection of Denial-of-Service Attacks on IP Telephony (2008)
Hemant Sengar, Haining Wang, Duminda Wijesekera, Sushil Jajodia
Abstract — Recently Voice over IP (VoIP) is experiencing a phenomenal growth. Being a real-time service, VoIP is more susceptible to Denial-of-Service (DoS) attacks than regular Internet services....
Thwarting Email Spam Laundering (2008)
Mengjun Xie, Heng Yin, Haining Wang
Laundering email spam through open-proxies or compromised PCs is a widely-used trick to conceal real spam sources and reduce spamming cost in underground email spam industry. Spammers have been...
Securing BGP through Keychain-based Signatures (2008)
Heng Yin, Bo Sheng, Haining Wang
Abstract — As the major component of Internet routing infrastructure, the Border Gateway Protocol (BGP) is vulnerable to malicious attacks. While Secure BGP (S-BGP) provides a comprehensive...
Abstract Building an Application-aware IPsec Policy System (2008)
As a security mechanism at the network-layer, the IP security protocol (IPsec) has been available for years, but its usage is limited to Virtual Private Networks (VPNs). The end-to-end security...
Profit-aware Admission Control for Overload Protection in E-commerce Web Sites (2008)
Abstract—Overload protection is critical to E-commerce Web sites. This paper presents a profit-aware admission control mechanism for overload protection in E-commerce Web sites. Motivated by the...
Mengjun Xie, Zhenyu Wu, Haining Wang
Instant messaging (IM) has been one of most frequently used malware attack vectors due to its popularity. Distinct from other malware, it is straightforward for IM malware to find and hit the next...
Abstract Hop-Count Filtering: An Effective Defense Against Spoofed DDoS Traffic (2008)
Cheng Jin, Haining Wang, Kang G. Shin
IP spoofing has been exploited by Distributed Denial of Service (DDoS) attacks to (1) conceal flooding sources and localities in flooding traffic, and (2) coax legitimate hosts into becoming...
Feature Article Segment-Based Proxy Caching for Internet Streaming Media Delivery (2008)
The Proliferation Of, Songqing Chen, Haining Wang, Xiaodong Zhang, Bo Shen, Susie Wee
multimedia content on the Internet poses challenges to existing content delivery networks. While proxy caching can successfully deliver traditional text-based static objects, it faces difficulty...
IP Easy-pass: A Light-Weight Network-Edge Resource Access Control (2008)
Haining Wang, Abhijit Bose, Mohamed El-gendy, Kang G. Shin
Abstract — Providing real-time communication services to multimedia applications and subscription-based Internet access often requires that sufficient network resources be reserved for real-time...
Maintaining Strong Cache Consistency for the Domain Name System (2008)
Xin Chen, Haining Wang, Shansi Ren, Student Member, Xiaodong Zhang, Senior Member
Abstract—Effective caching in the Domain Name System (DNS) is critical to its performance and scalability. Existing DNS only supports weak cache consistency by using the Time-to-Live (TTL)...
Cooperative Relay Service in a Wireless LAN (2008)
Lei Guo, Student Member, Xiaoning Ding, Student Member, Haining Wang, Songqing Chen, ...
Abstract — As a family of wireless local area network (WLAN) protocols between physical layer and higher layer protocols, IEEE 802.11 has to accommodate the features and requirements of both ends....
Robust TCP Congestion Recovery (2008)
This paper presents a new robust TCP congestion-recovery scheme to (1) handle bursty packet losses while preserving the self-clocking capability; (2) detect a TCP connection’s new equilibrium...
X/05/$20.00 2005 IEEE Published by the IEEE Computer Society 59 (2008)
Feature Article Treaming, The Proliferation Of, Songqing Chen, Haining Wang, Xiaodong Zhang, Bo Shen, ...
erest content to serve different clients more quickly than the client directly accessing the servers. As an alternative to expensive CDNs, these existing proxy resources can deliver media content...
Enhanced Wired Equivalent Privacy for IEEE 802.11 Wireless LANs (2007)
Taejoon Park, Haining Wang, Min-gyu Cho, Kang G. Shin
The Wired Equivalent Privacy (WEP) is defined as part of the IEEE 802.11 standard to provide secure communication over a wireless channel. However, it suffers serious security flaws, such as the...
Statistical Characterization for Per-Hop QoS (2007)
Mohamed El Gendy, Abhijit Bose, Haining Wang, Kang G. Shin
The Differentiated Services (DiffServ) architecture is designed to provide scalable network-level Quality of Service (QoS) via service differentiation at intermediate nodes of a network (called...
Robust TCP Congestion Recovery (2007)
This paper presents a new robust TCP congestion-recovery scheme to (1) handle bursty packet losses while preserving the self-clocking capability; (2) detect a TCP connection's new equilibrium...
IP Easy-pass: Edge Resource Access Control (2007)
Haining Wang Abhijit, Haining Wang, Abhijit Bose, Mohamed El-gendy, Kang G. Shin
Providing real-time communication services to multimedia applications and subscription-based Internet access often requires sufficient network resources to be reserved for real-time traffic. However,...
ABSTRACT Robust TCP Congestion Recovery (2007)
This paper presents a new robust TCP congestion-recovery scheme to (1) handle bursty packet losses while preserving the self-clocking capability; (2) detect a TCP connection’s new equilibrium...
IP Easy-pass: Edge Resource Access Control (2007)
Haining Wang, Abhijit Bose, Mohamed El-gendy, Kang G. Shin
Abstract — Providing real-time communication services to multimedia applications and subscription-based Internet access often requires sufficient network resources to be reserved for real-time...
Defense Against Spoofed IP Traffic Using Hop-Count Filtering (2007)
Wang, Haining, Jin, Cheng, Shin, Kang G.
IP spoofing has often been exploited by Distributed Denial of Service (DDoS) attacks to: 1)conceal flooding sources and dilute localities in flooding traffic, and 2)coax legitimate hosts into...
Shansi Ren, Student Member, Qun Li, Haining Wang, Xiaodong Zhang
Abstract — Object detection quality and network lifetime are two conflicting aspects of a sensor network, but both are critical to many sensor applications such as military surveillance. Partial...
Shansi Ren, Student Member, Qun Li, Haining Wang, Xin Chen, Xiaodong Zhang, ...
Abstract—Object detection quality and network lifetime are two conflicting aspects of a sensor network, but both are critical to many sensor applications such as military surveillance. Partial...
Lei Guo, Xiaoning Ding, Haining Wang, Qun Li, Songqing Chen, Xiaodong Zhang
Abstract — As a family of wireless local area network (WLAN) protocols between physical layer and higher-layer protocols, IEEE 802.11 has to accommodate the features and requirements of both ends....
Voip intrusion detection through interacting protocol state machines (2006)
Hemant Sengar, Duminda Wijesekera, Haining Wang, Sushil Jajodia
Being a fast-growing Internet application, Voice over Internet Protocol (VoIP) shares the network resources with the regular Internet traffic, and is susceptible to the existing security holes of the...
Lei Guo, Xiaoning Ding, Haining Wang, Qun Li, Songqing Chen, Xiaodong Zhang
Abstract — As a family of wireless local area network (WLAN) protocols between physical layer and higher-layer protocols, IEEE 802.11 has to accommodate the features and requirements of both ends....
Exploiting Idle Communication Power to Improve (2006)
Wireless Network Performance, Lei Guo, Xiaoning Ding, Haining Wang, Songqing Chen, Xiaodong Zhang
As a family of wireless local area network (WLAN) protocols between physical layer and higher-layer protocols, IEEE 802.11 has to accommodate the features and requirements of both ends. However,...
Segment-based proxy caching for Internet streaming media delivery (2005)
Songqing Chen, Haining Wang, Bo Shen, Susie Wee, Xiaodong Zhang
The proliferation of multimedia content on the Internet poses challenges on existing content delivery networks. While proxy caching proves to be a successful approach to delivering traditional...
Analyzing object detection quality under probabilistic coverage in sensor networks (2005)
Shansi Ren, Qun Li, Haining Wang, Xin Chen, Xiaodong Zhang
Abstract. Object detection quality and network lifetime are two conflicting aspects of a sensor network, but both are critical to many sensor applications such as military surveillance. Probabilistic...
Design and Analysis of Wave Sensing Scheduling Protocols for Object-Tracking Applications (2005)
Shansi Ren, Qun Li, Haining Wang, Xiaodong Zhang
Abstract. Many sensor network applications demand tightly-bounded object detection quality. To meet such stringent requirements, we develop three sensing scheduling protocols to guarantee worst-case...
A Study on Object Tracking Quality under Probabilistic Coverage in Sensor Networks (2005)
Shansi Ren Qun, Qun Li, Haining Wang, Xin Chen, Xiaodong Zhang
Introduction Sensor networks are used for a wide range of object tracking applications, such as vehicle tracking in military surveillance and wild animal tracking in habitat monitoring [1]. These...
Design and Analysis of Wave Sensing Scheduling (2005)
Shansi Ren, Qun Li, Haining Wang, Xiaodong Zhang
Many sensor network applications demand tightly-bounded object detection quality. To meet such stringent requirements, we develop three sensing scheduling protocols to guarantee worst-case detection...
Analyzing Object Detection Quality Under (2005)
Probabilistic Coverage In, Shansi Ren, Qun Li, Haining Wang, Xin Chen, Xiaodong Zhang
Object detection quality and network lifetime are two conflicting aspects of a sensor network, but both are critical to many sensor applications such as military surveillance. Probabilistic coverage...
SCOPE: Scalable Consistency Maintenance in Structured P2P Systems (2005)
Xin Chen, Shansi Ren, Haining Wang, Xiaodong Zhang
While current Peer-to-Peer (P2P) systems facilitate static file sharing, newly-developed applications demand that P2P systems be able to manage dynamically-changing files. Maintaining consistency...
Analyzing object detection quality under probabilistic coverage in sensor networks (2005)
Shansi Ren, Qun Li, Haining Wang, Xin Chen, Xiaodong Zhang
Abstract. Object detection quality and network lifetime are two conflicting aspects of a sensor network, but both are critical to many sensor applications such as military surveillance. Probabilistic...
Change-Point Monitoring for Detection of DoS Attacks (2004)
Haining Wang, Danlu Zhang, Kang G. Shin
This paper presents a simple and robust mechanism, called Change-Point Monitoring (CPM), to detect denial of service (DoS) attacks. The core of CPM is based on the inherent network protocol...
Countering distributed denial of service attacks. (2003)
Dissertation (Ph.D.)--University of Michigan.
Hop-count filtering: an effective defense against spoofed DDoS traffic (2003)
IP spoofing has been exploited by Distributed Denial of Service (DDoS) attacks to (1) conceal flooding sources and localities in flooding traffic, and (2) coax legitimate hosts into becoming...
Hop-count filtering: an effective defense against spoofed DDoS traffic (2003)
Cheng Jin, Haining Wang, Kang G. Shin
(DDoS) attackers to (1) conceal flooding sources and localities of flooding traffic, and (2) coax uncompromised hosts into becoming reflectors, redirecting and amplifying flooding traffic. Thus, the...
Xiaodong Zhang, Haining Wang, Jean Mayo
ii To my mother. iii Table of Contents Acknowledgments xi
Hop-count filtering: an effective defense against spoofed DDoS traffic (2003)
Cheng Jin, Haining Wang, Kang G. Shin
(DDoS) attackers to (1) conceal flooding sources and localities of flooding traffic, and (2) coax uncompromised hosts into becoming reflectors, redirecting and amplifying flooding traffic. Thus, the...
Hop-Count Filtering: An Effective Defense Against Spoofed DDoS Traffic (2003)
Cheng Jin, Haining Wang, Kang G. Shin
IP spoofing has been exploited by Distributed Denial of Service (DDoS) attacks to (1) conceal flooding sources and localities in flooding traffic, and (2) coax legitimate hosts into becoming...
Hop-count filtering: an effective defense against spoofed DDoS traffic (2003)
IP spoofing has been exploited by Distributed Denial of Service (DDoS) attacks to (1) conceal flooding sources and localities in flooding traffic, and (2) coax legitimate hosts into becoming...
Hop-count filtering: an effective defense against spoofed DDoS traffic (2003)
Cheng Jin, Haining Wang, Kang G. Shin
Abstract — IP spoofing has often been exploited by Distributed Denial of Service (DDoS) attacks to (1) conceal flooding sources and localities in flooding traffic, and (2) coax legitimate hosts...
Layer-4 service differentiation and resource isolation (2002)
While the Differentiated Services (DiffServ) infrastructure is scalable and robust in providing network Quality of Service (QoS), there are serious drawbacks with the services provided by DiffServ:...
SYN-dog: Sniffing SYN Flooding Sources (2002)
Haining Wang, Danlu Zhang, Kang G. Shin
This paper presents a simple and robust mechanism called SYN-dog to sniff SYN flooding sources. We install SYN-dog as a software agent at leaf routers that connect stub networks to the Internet. The...
Detecting SYN flooding Attacks (2002)
Haining Wang, Danlu Zhang, Kang G. Shin
Abstract--- We propose a simple and robust mechanism for detecting SYN flooding attacks. Instead of monitoring the ongoing traffic at the front end (like firewall or proxy) or a victim server itself,...
Layer-4 service differentiation and resource isolation (2002)
Haining Wang, Kang G. Shin, Real-time Computing, Computer Science
Adaptive-Weighted Packet Scheduling for Premium Service (2001)
Haining Wang, Chia Shen, Kang G. Shin
Abstract—This paper presents a new scheduling scheme to support premium service in the Differentiated Service (DiffServ) architecture. It is based on weighted packet scheduling policies such as...
Adaptive-Weighted Packet Scheduling for Premium Service (2001)
Haining Wang, Haining Wang, Chia Shen, Chia Shen, Kang G. Shin, Kang G. Shin
This paper presents a new scheduling scheme to support premium service in the Differentiated Service (DiffServ) architecture. It is based on weighted packet scheduling policies such as weighted round...
A Simple Refinement of Slow Start of TCP Congestion Control (2000)
Haining Wang, Hongjie Xin, Douglas S. Reeves, Kang G. Shin
Abstract — This paper presents a new variant of Slow-start, called Smooth-start, which provides a smooth transition between the exponential and linear growth phases of TCP congestion window....
Scalability evaluation of multi-protocol over ATM (MPOA (1999)
Indra Widjaja, Haining Wang, Steve Wright, Amalendu Chatterjee
Multi-Protocol over ATM (MPOA) is being considered by the industry as an important short-cut technology that provides an efficient transfer of inter-subnet unicast data in a LANE environment. MPOA...
Refined design of random early detection gateways (1999)
Abstract — Random Early Detection (RED) was proposed as an active gateway queue-management mechanism. This paper proposes to alter the RED design guideline that unconditionally allows transient...
A New Scheme for TCP Congestion Control: Smooth-Start and Dynamic (1998)
Haining Wang, Carey Williamson
This paper presents a new approach to TCP congestion control. The new scheme includes two parts: (1) the Smooth-Start algorithm, which replaces the Slow-Start algorithm at the start of a TCP...