Publications

2013

• Hongyu Gao, Vinod Yegneswaran, Yan Chen, Phil Porras, Shalini Ghosh, Jian Jiang, Haixin Duan, "An Empirical Reexamination of Global DNS Behavior", to appear in ACM SIGCOMM 2013.
• Xitao Wen, Yan Chen, Chengchen Hu, Chao Shi, Yi Wang, "Towards A Secure Controller Platform for OpenFlow Applications", Short Paper, to appear in ACM SIGCOMM HotSDN Workshop ((24+16)/84=47.6%).
• Yinzhi Cao, Vaibhav Rastogi, Zhichun Li, Yan Chen, and Alex Moshchuk, Redefining Web Browser Principals with a Configurable Origin Policy, in the Proc. of The IEEE/IFIP International Conference on Dependable Systems and Network - Dependable Computing and Communications Symposium (DSN - DCCS), 2013 (21/107=19.6%).
• Vaibhav Rastogi, Yan Chen, and Xuxian Jiang, DroidChameleon: Evaluating Android Anti-malware against Transformation Attacks, Short Paper, in the Proc. of the 8th ACM Symposium on Information, Computer and Communications Security (ASIACCS), 2013 ((35+26)/216=28.2%).
• Vaibhav Rastogi, Yan Chen, and William Enck, AppsPlayground: Automatic Security Analysis of Smartphone Applications, in the Proc. of Third ACM Conference on Data and Application Security and Privcy (CODASPY), 2013 (24/107=22%).

  Presentation PowerPoint and Demo Video.

2012

• Yao Zhao, Yinzhi Cao, Yan Chen, Ming Zhang, and Anup Goyal, Rake: Semantics Assisted Network-based Tracing Framework, in IEEE Transactions on Network and Service Management, Vol. 9, No. 4, 2012.
• Huichen Dai, Bin Liu, Yan Chen, and Yi Wang, On Pending Interest Table in Named Data Networking, in the Proc. of ACM Symposium on Architectures for Networking and Communications Systems (ANCS), 2012 (18/64=28%).

  Presentation PowerPoint

• Chengchen Hu, Kai Chen, Yan Chen, Gao Xia, Bin Liu, Thanos Vasilakos, A Measurement Study on Potential Inter-Domain Routing Diversity, in IEEE Transactions on Network and Service Management, Vol. 9, No. 3, pp. 268-278, 2012.
• Xitao Wen, Kai Chen, Yan Chen, Yongqiang Liu, Yong Xia, and Chengchen Hu, VirtualKnotter: Online Virtual Machine Shuffling for Congestion Resolving in Virtualized Datacenter, in the Proc. of IEEE ICDCS, 2012 (71/515=13%).

  Presentation PowerPoint

• Yi Wang, Keqiang He, Huichen Dai, Wei Meng, Junchen Jiang, Bin Liu, and Yan Chen, Scalable Name Lookup in NDN Using Effective Name Component Encoding, in the Proc. of IEEE ICDCS, 2012 (71/515=13%).

  Presentation PowerPoint

• Xingyu Ma, Chengchen Hu, Kai Chen, Che Zhang, Hongtao Zhang, Kai Zheng, Yan Chen, and Xianda Sun, Error Tolerant Address Configuration for Data Center Networks with Malfunctioning Devices, in the Proc. of IEEE ICDCS, 2012 (71/515=13%).

  Presentation PowerPoint

• Yinzhi Cao, Zhichun Li, Vaibhav Rastogi, Xitao Wen, and Yan Chen, Virtual Browser: a Virtualized Browser to Sandbox Third-party JavaScripts with Enhanced Security, full paper, in the Proc. of ACM ASIACCS, 2012 (35/159=22%).

  Presentation PowerPoint

• Kai Chen, Ankit Singla, Atul Singh, Kishore Ramachandran, Lei Xu, Yueping Zhang, Xitao Wen, Yan Chen, OSA: An Optical Switching Architecture for Data Center Networks with Unprecedented Flexibility, in the Proc. of ACM/USNEIX NSDI, 2012 (30/169=17.8%).

  Presentation PowerPoint

• Hongyu Gao, Yan Chen, Kathy Lee, Diana Palsetia and Alok Choudhary, Towards Online Spam Filtering in Social Networks, in the Proc. of 19th Network & Distributed System Security Symposium (NDSS), 2012 (46/258=17.8%).

  Presentation PowerPoint

• Yinzhi Cao, Vinod Yegneswaran, Phillip Porras and Yan Chen, PathCutter: Severing the Self-Propagation Path of XSS JavaScript Worms in Social Web Networks, in the Proc. of 19th Network & Distributed System Security Symposium (NDSS), 2012 (46/258=17.8%).

  Presentation PowerPoint

• Kai Chen, Chuanxiong Guo, Haitao Wu, Jing Yuan, Zhenqian Feng, Yan Chen, Songwu Lu, Wenfei Wu, DAC: Generic and Automatic Address Configuration for Data Center Networks, in ACM/IEEE Transaction on Networking (ToN), Volume 20, Number 1, 2012.

2011

• Chengchen Hu, Bin Liu, Sheng Wang, Jia Tian, Yu Cheng, and Yan Chen, Adaptive Non-Linear Sampling Method for Accurate Flow Size Measurement, IEEE Transactions on Communications, 2011.
• Kai Chen, Chengchen Hu, Xin Zhang, Kai Zheng, Yan Chen, and Athanasios V. Vasilakos, Survey on Routing in Data Centers: Insights and Future, in IEEE Network magazine - Special Issue on Cloud Computing, Volume 25, No. 4, July/August 2011, pp.6-10.
• Yao Zhao, Yinzhi Cao, Anup Goyal, Yan Chen, and Ming Zhang, Rake: Semantics Assisted Network-based Tracing Framework, in the Proc. of IEEE/ACM IWQoS, 2011 (23/80=28.8%).

  Presentation PowerPoint

• Zhichun Li, Anup Goyal, Yan Chen, and Vern Paxson, "Towards Situational Awareness of Large-scale Botnet Probing", in IEEE Transactions on Information Forensics & Security, Vol. 6, Issue 1, pp. 175-188, 2011.
• Hongyu Gao, Jun Hu, Tuo Huang, Jingnan Wang and Yan Chen, Security Issues in Online Social Networks, in IEEE Internet Computing, Volume 15, No. 4, July/August, 2011, pp. 56-63.
• Zhichun Li, Yi Tang, Yinzhi Cao, Vaibhav Rastogi, Yan Chen, Bin Liu, Clint Sbisa, WebShield: Enabling Various Web Defense Techniques without Client Side Modifications, in the Proc. of 18th Network & Distributed System Security Symposium (NDSS), 2011 (28/139=20%).

  Presentation PowerPoint

2010

• Hongyu Gao, Jun Hu, Christo Wilson, Zhichun Li, Yan Chen, and Ben Y. Zhao, Detecting and Characterizing Social Spam Campaigns, in the Proc. of ACM SIGCOMM IMC 2010 (47/211=22.3%).

  Presentation PowerPoint

  This research was featured in Wall Street Journal, MIT Technology Review, ACM Tech News, and the McCormick Magazine.

• Zhichun Li, Gao Xia, Hongyu Gao, Tang Yi, Yan Chen, Bin Liu, Junchen Jiang, and Yuezhou Lv, NetShield: Massive Semantics-based Vulnerability Signature Matching for High-speed Networks, in the Proc. of ACM SIGCOMM 2010 (33/276=12%).

  Presentation PowerPoint

  The prototype and sample vulnerability signatures are available at www.nshield.org.

• Kai Chen, Chuanxiong Guo, Haitao Wu, Jing Yuan, Zhenqian Feng, Yan Chen, Songwu Lu, Wenfei Wu, Generic and Automatic Address Configuration for Data Center Networks, in the Proc. of ACM SIGCOMM 2010 (33/276=12%). Selected as one of three best papers for fast track to ACM/IEEE ToN.

  Presentation PowerPoint

• Zhichun Li, Yan Gao, and Yan Chen, HiFIND: A high-speed flow-level intrusion detection approach with DoS resiliency, Journal of Computer Networks, Volume 54, Issue 8, June 2010.
• Zhichun Li, Ming Zhang, Zhaosheng Zhu, Yan Chen, Albert Greenberg, and Yi-Min Wang, WebProphet: Automating Performance Prediction for Web Services, in the Proc. of ACM/USENIX NSDI 2010 (29/175=16.6%).

  Presentation PowerPoint

• Chengchen Hu, Bin Liu, Hongbo Zhao, Kai Chen and Yan Chen, "DISCO: Memory Efficient and Accurate Flow Statistics for Network Measurement", in the Proc. of IEEE ICDCS, 2010 (84/585=14.4%).
• Zhichun Li, Anup Goyal, Yan Chen, and Aleksandar Kuzmanovic, Measurement and Diagnosis of Address Misconfigured P2P Traffic, in the Proc. of IEEE INFOCOM (main conference), 2010 (276/1575 = 17.5%)

  Presentation PowerPoint

• Chengchen Hu, Kai Chen, Yan Chen and Bin Liu, Evaluating Potential Routing Diversity for Internet Failure Recovery, in the Proc. of IEEE INFOCOM (mini conference), 2010 (276+106/1575 = 24.3%)

  Presentation PowerPoint

• Lanjia Wang, Zhichun Li, Yan Chen, Zhi (Judy) Fu, and Xing Li, Thwarting Zero-Day Polymorphic Worms With Network-Level Length-Based Signature Generation, in ACM/IEEE Transaction on Networking (ToN), Volume 18, Issue 1, 2010.
• Guohan Lu, Yan Chen, Stefan Birrer, Fabian E. Bustamante, and Xing Li, POPI: A User-level Tool for Inferring Router Packet Forwarding Priority, in ACM/IEEE Transaction on Networking (ToN), Volume 18, Issue 1, 2010.

2009

• Yao Zhao, Yan Chen, and David Bindel, "Towards Unbiased End-to-End Network Diagnosis", in ACM/IEEE Transaction on Networking (ToN), Volume 17, Number 6, Dec. 2009.
• Kai Chen, David R. Choffnes, Rahul Potharaju, Yan Chen, Fabian E. Bustamante, Dan Pei, Yao Zhao, Where the Sidewalk Ends: Extending the Internet AS Graph Using Traceroutes From P2P Users, in the Proc. of the Fifth ACM International Conference on emerging Networking Experiments and Technologies (CoNEXT), 2009 (29/170=17%).

  Presentation PowerPoint

• Zhaosheng Zhu, Vinod Yegneswaran, and Yan Chen, Using Failure Information Analysis to Detect Enterprise Zombies, full paper, in the Proc. of the 5th International Conference on Security and Privacy in Communication Networks (SecureComm), 2009 (19/75 =25.3%).

  Presentation PowerPoint

• Yao Zhao and Yan Chen, "FAD and SPA: End-to-end Link-level Loss Rate Inference without Infrastructure", in the Journal of Computer Networks, 53(9): 1303-1318, 2009.
• Yao Zhao and Yan Chen, "Algebraic Approaches for Scalable End-to-End Monitoring and Diagnosis", invited book chapter for Algorithms for Next Generation Network Architecture, Springer, 2009. ISBN: 978-1-84882-764-6.
• Yao Zhao, Sagar Vemuri, Jiazhen Chen, Yan Chen, Hai Zhou and Zhi (Judy) Fu, Exception Triggered DoS Attacks on Wireless Networks, in the Proc. of the 39th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN-DCCS), 2009 (37/177 = 21%).

  Presentation PowerPoint

• Yao Zhao, Yinglian Xie, Fang Yu, Qifa Ke, Yuan Yu, Yan Chen, and Eliot Gillum, BotGraph: Large Scale Spamming Botnet Detection, in the Proc. of the 6th USENIX Symposium on Networked Systems Design and Implementation (NSDI) 2009 (32/162=20%).

  Presentation PowerPoint

• Yao Zhao, Zhaosheng Zhu, Yan Chen, Dan Pei, and Jia Wang, Towards Efficient Large-Scale VPN Monitoring and Diagnosis under Operational Constraints, IEEE INFOCOM (main conference), 2009 (282/1435=20%). A full version can be found in the technique report NWU-EECS-08-06.

  Presentation PowerPoint

• Zhichun Li, Anup Goyal, Yan Chen, and Vern Paxson, Automating Analysis of Large-Scale Botnet Probing Events, in the Proc. of ACM Symposium on Information, Computer and Communications Security (ASIACCS), 2009 (33/147=22.4%).

  Presentation PowerPoint

2008

• Leiwen Deng, Yan Gao, Yan Chen, and Alexsander Kuzmanovic, Pollution Attacks and Defenses for Internet Caching Systems, in Journal of Computer Networks, Volume 52, Issue 5, 2008.
• Yao Zhao, Yan Chen, and Sylvia Ratnasamy, Load balanced and Efficient Hierarchical Data-Centric Storage in Sensor Networks, in the Proc. of the fifth IEEE Conference on Sensor, Mesh and Ad Hoc Communications and Networks (SECON), 2008 (64/300=21.3%).

  Presentation PowerPoint

• Yan Chen, Dynamic, Scalable, and Efficient Content Replication Techniques, invited book chapter for Content Delivery Networks: Principles and Paradigms, Springer, 2008.
• Chengchen Hu, Sheng Wang, Jia Tian, Bin Liu, Yu Cheng, and Yan Chen, Accurate and Efficient Traffic Monitoring Using Adaptive Non-linear Sampling Method, in the Proc. of IEEE INFOCOM, 2008 (236/1160=20%).

  Presentation PowerPoint

2007

• Zhichun Li, Anup Goyal, and Yan Chen, Honeynet-based Botnet Scan Traffic Analysis, invited book chapter for Botnet Detection: Countering the Largest Security Threat, Springer, 2007.
• Robert Schweller, Zhichun Li, Yan Chen, Yan Gao, Anup Gupta, Elliot Pearson, Yin Zhang, Peter Dinda, Ming-Yang Kao, and Gokan Memik, Reversible Sketches: Enabling Monitoring and Analysis over High-speed Data Streams, in ACM/IEEE Transaction on Networking, Volume 15, Issue 5, Oct. 2007.
• Y. Chen, D. Bindel, H. Song, B. Chavez, and R. H. Katz, An Algebraic Approach for Scalable Overlay Network Monitoring: Algorithms, Evaluation, and Applications, in ACM/IEEE Transaction on Networking, Volume 15, Issue 5, Oct. 2007.
• Zhichun Li, Lanjia Wang, Yan Chen and Zhi Fu, Network-based and Attack-resilient Length Signature Generation for Zero-day Polymorphic Worms, in the Proc. of the 15th IEEE International Conference on Network Protocols (ICNP), 2007(32/220=14%).

  Presentation PowerPoint

• Ehab Al-Shaer and Yan Chen, Integrated Fault and Security Management, invited book chapter for Information Assurance: Dependability and Security in Networked Systems, Morgan Kaufmann Publishers, 2007.
• Yan Gao, Yao Zhao, Robert Schweller, Shobha Venkataraman, Yan Chen, Dawn Song, and Ming-Yang Kao, Detecting Stealthy Spreaders Using Online Outdegree Histograms, in the Proc. of the 15th IEEE International Workshop on Quality of Service (IWQoS), 2007 (17/64=26.6%).

  Presentation PowerPoint

• Yao Zhao and Yan Chen, A Suite of Schemes for User-level Network Diagnosis without Infrastructure, in the Proc. of IEEE INFOCOM, 2007 (252/1400=18%). Full version is in the tech report.

  Presentation PowerPoint

• Guohan Lu, Yan Chen, Stefan Birrer, Fabian E. Bustamante, Chi Yin Cheung and Xing Li, End-to-end Inference of Router Packet Forwarding Priority, in the Proc. of IEEE INFOCOM, 2007 (252/1400=18%). The POPI tool is available here.

  Presentation PowerPoint

• Yao Zhao, Yan Chen, Bo Li, and Qian Zhang, Hop ID: A Virtual Coordinate based Routing for Sparse Mobile Ad Hoc Networks, in IEEE Transaction on Mobile Computing, Volume 6, Number 9, September 2007.

2006

• Yan Gao, Leiwen Deng, Aleksandar Kuzmanovic, and Yan Chen, Internet Cache Pollution Attacks and Countermeasures, in Proc. of the 14th IEEE International Conference on Network Protocols (ICNP), Nov. 2006 (33/232=14%).

  Presentation PowerPoint

• Prasad Narayana, Ruiming Chen, Yao Zhao, Yan Chen, Zhi Fu, and Hai Zhou, Automatic Vulnerability Checking of IEEE 802.16 WiMAX Protocols through TLA+, in Proc. of the Second Workshop on Secure Network Protocols (NPSec), co-located with ICNP 2006 (7/21 = 33%).

  Presentation PowerPoint

• Yao Zhao, Yan Chen, and David Bindel, Towards Unbiased End-to-End Network Diagnosis, in Proc. of ACM SIGCOMM 2006 (37/340=10%).

  Presentation PowerPoint

• Zhichun Li, Yan Chen, and Aaron Beach, Towards Scalable and Robust Distributed Intrusion Alert Fusion with Good Load Balancing, in Proc. of ACM SIGCOMM Workshop on Large-Scale Attack Defense 2006(11/33=33%).

  Presentation PowerPoint

• Y. Gao, Z. Li, and Y. Chen, A DoS Resilient Flow-level Intrusion Detection Approach for High-speed Networks, to appear in Proc. of IEEE International Conference on Distributed Computing Systems (ICDCS), 2006 (75/536=14%).

  Presentation PowerPoint

• Y. Zhao, Y. Chen, and D. Bindel, Towards Deterministic Overlay Diagnosis, poster paper in ACM SIGMETRICS/Performance 2006, (30 full + 17 poster papers out of 217 (14-22%))
• Z. Li, M. Sanghi, Y. Chen, M. Kao, and B. Chavez, Hamsa: Fast Signature Generation for Zero-day Polymorphic Worms with Provable Attack Resilience, full paper, in Proc. of IEEE Symposium on Security and Privacy, 2006 (23/251=9%).

  Presentation PowerPoint

• R. Schweller, Z. Li, Y. Chen, Y. Gao, A. Gupta, Y. Zhang, P. Dinda, M. Kao, and G. Memik, Reverse Hashing for High-speed Network Monitoring: Algorithms, Evaluation, and Applications, Proc. of IEEE INFOCOM, 2006 (252/1400=18%).

  Presentation PowerPoint

• Pin Ren, Yan Gao, Zhichun Li, Yan Chen and Ben Watson, IDGraphs: Intrusion Detection and Analysis Using Stream Compositing, in IEEE Computer Graphics & Applications, special issue on Visualization for Cyber Security, Volume 26, Number 2, March/April, 2006.

2005

• Yao Zhao, Bo Li, Qian Zhang, Yan Chen, and Wenwu Zhu, Efficient HopID based Routing for Sparse Ad Hoc Networks, Proc. of the 13th IEEE International Conference on Network Protocols (ICNP), Boston, Nov. 2005 (36/212=17%).

Presentation PowerPoint

• G. Lu, X. Li and Y. Chen, An End-to-end Approach to Infer Priority Settings on Routers, Proc. of the 12th China Education and Research Network Conference (CERNET), Nov. 2005.
• Pin Ren, Yan Gao, Zhichun Li, Yan Chen and Ben Watson, IDGraphs: Intrusion Detection and Analysis Using Histographs, Proc. of the IEEE Workshop on Visualization for Computer Security (VizSEC), in conjunction with Visualization 2005 and InfoVis 2005 conferences, Oct. 2005.
• Y. Chen, Z. Xu and C. Zhai, A Scalable Semantic Indexing Framework for Peer-to-Peer Information Retrieval, Proc. of ACM SIGIR Workshop on Heterogeneous and Distributed Information Retrieval , Aug. 2005.

  Presentation PowerPoint

• Y. Zhao, Y. Chen, and D. Bindel, Scalable and Deterministic Overlay Network Diagnosis, poster in ACM SIGCOMM, Aug., 2005.
• Z. Li, Y. Gao, and Y. Chen, Towards a High-speed Router-based Anomaly/Intrusion Detection System, poster in ACM SIGCOMM, Aug., 2005.
  Also, Work in Progress talk with the same title at USENIX Security Symposium, Aug. 2005.

2004

• R. Schweller, A. Gupta, E. Parsons, and Y. Chen, Reversible Sketches for Efficient and Accurate Change Detection over Network Data Streams, in ACM SIGCOMM Internet Measurement Conference (IMC), 2004 (ps) (39/157=25%).

  Presentation slides

• Y. Chen, D. Bindel, H. Song, and R. H. Katz, An Algebraic Approach to Practical and Scalable Overlay Network Monitoring, in Proceedings of ACM SIGCOMM, 2004 (ps) (31/340 =9%).

  Presentation slides

  Source code is available upon request.

2003

• My Ph.D. thesis Towards a Scalable, Adaptive and Network-aware Content Distribution Network, Nov. 2003, also appear as Tech Report UCB//CSD-03-1295.
• Y. Chen, D. Bindel, and R. H. Katz, Tomography-based Overlay Network Monitoring, poster in ACM SIGCOMM, 2003. Abstract of the poster to appear in ACM Computer Communication Review(CCR), 2004.
• Y. Chen, D. Bindel, and R. H. Katz, Tomography-based Overlay Network Monitoring, Proceedings of ACM SIGCOMM Internet Measurement Conference (IMC), 2003 (ps).

  Talk slides at HP Lab, ICIR, IMC conference.

• B. Krishnamurthy, S. Sen, Y. Zhang, and Y. Chen, Sketch-based Change Detection: Methods, Evaluation, and Applications, Proceedings of ACM SIGCOMM Internet Measurement Conference (IMC), 2003 (ps).
• Y. Chen, L. Qiu, W. Chen, L. Nguyen and R. H. Katz, Efficient and Adaptive Web Replication using Content Clustering, to appear in IEEE Journal on Selected Areas in Communications (J-SAC), Special Issue on Internet and WWW Measurement, Mapping, and Modeling, Aug., 2003.

2002

• Y. Chen, L. Qiu, W. Chen, L. Nguyen and R. H. Katz, Clustering Web Content for Efficient Replication, Proceeding of the 10th IEEE International Conference on Network Protocols (ICNP), Paris, France, Nov. 2002.