Publications:

2009

• PACMAN: a Platform for Automated and Controlled network operations and configuration MANagement by Xu Chen, Z. Morley Mao, and Jacobus Van der Merwe, Proceedings of CoNext 2009.
• TCP Revisited: A Fresh Look at TCP in the Wild by Feng Qian, Alex Gerber, Z. Morley Mao, Subhabrata Sen, Oliver Spatscheck, and Walter Willinger, Proceedings of IMC 2009.
• Detecting Traffic Differentiation in Backbone ISPs with NetPolice by Ying Zhang, Z. Morley Mao, and Ming Zhang, Proceedings of IMC 2009.
• Ensemble: Community-based Anomaly Detection for Popular Applications by Feng Qian, Zhiyun Qian, Z. Morley Mao, and Atul Prakash, Proceedings of SecureComm 2009.(PDF)
• DECOR: DEClarative network management and OpeRation by Xu Chen, Yun Mao, Z. Morley Mao, and Jacobus Van der Merwe, Proceedings of PRESTO Workshop 2009.(PDF) (fast-tracked to CCR)
• ShadowNet: A Platform for Rapid and Safe Network Evolution by Xu Chen, Z. Morley Mao, and Kobus van der Merwe, Proceedings of Usenix Technical Conference 2009.(PDF)
• Botnet Spam Campaigns can be Long Lasting: Evidence, Implications, and Analysis by Abhinav Pathak, Feng Qian, Y. Charlie Hu, Z. Morley Mao, and Supranamaya Ranjan, Proceedings of SIGMETRICS 2009.(PDF)
• HC-BGP: A Light-weight and Flexible Scheme for Securing Prefix Ownership by Ying Zhang, Zheng Zhang, Z. Morley Mao and Y. Charlie Hu, Proceedings of DSN-DCCS 2009.(PDF)

2008

Routing analysis, network security and management:

• WebBee: A Platform for Secure Mobile Coordination and Communication in Crisis Scenarios by Sugih Jamin, Z. Morley Mao, T. V. Lakshman, Sarit Mukherjee, Jignesh Patel, and Limin Wang et al. , STSC CrossTalk Journal of Defense Software Engineering, Oct 2008. (link)
• Ascertaining the Reality of Network Neutrality Violation in Backbone ISPs by Ying Zhang, Z. Morley Mao, and Ming Zhang, Proceedings of HotNets 2008.(PDF)
• Automating Network Application Dependency Discovery: Experiences, Limitations, and New Solutions by Xu Chen, Ming Zhang, Z. Morley Mao, and Victor Bahl, Proceedings of OSDI 2008.(PDF)
• iSPY: Detecting IP Prefix Hijacking on My Own by Zheng Zhang, Ying Zhang, Y Charlie Hu, Z Morley Mao, and Randy Bush, Proceedings of ACM SIGCOMM 2008.(PDF)
• Peeking into Spammer Behavior from a Unique Vantage Point by Abhinav Pathak, Y. Charlie Hu, and Z. Morley Mao, Proceedings of the First USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET) 2008.(PDF)
• Deterring Malware by Imitating Emulation and Debugging Environment by Xu Chen, Jon Andersen, Z. Morley Mao, Michael Bailey, Jose Nazario, and Farnam Jahanian, Proceedings of DSN-DCCS 2008.(PDF)
• A Measurement Study of Internet Delay Asymmetry by Abhinav Pathak, Himabindu Pucha, Ying Zhang, Y. Charlie Hu, and Z. Morley Mao, Proceedings of Passive and Active Measurement Conference (PAM) 2008.(PDF)
• Effective Diagnosis of Routing Disruptions from End Systems by Ying Zhang, Z. Morley Mao and Ming Zhang, Proceedings of NSDI 2008.(PDF)
• Wide-Area IP Network Mobility by Xin Hu, Li Li, Z. Morley Mao, and Yang Richard Yang, Proceedings of IEEE INFOCOM 2008.(PDF)
• Internet traffic and multiresolution analysis by Ying Zhang, Zihui Ge, Suhas Diggavi, Z. Morley Mao, Matthew Roughan, Vinay Vaishampayan, Walter Willinger, and Yin Zhang, Markov Processes and Related Fields: A Festschrift in Honor of Thomas G. Kurtz/, S. N. Ethier, J. Feng and R. H. Stockbridge (eds.), IMS Lecture Notes--Monograph Series.(PDF)

2007

• Practical Defenses Against BGP Prefix Hijacking by Zheng Zhang, Ying Zhang, Y. Charlie Hu and Z. Morley Mao, Proceedings of CoNext 2007.(PDF)
• Internet Routing Resilience to Failures: Analysis and Implications by Jian Wu and Ying Zhang, Z. Morley Mao, and Kang Shin, Proceedings of CoNext 2007.(PDF)
• On the Impact of Route Monitor Selection by Ying Zhang, Zheng Zhang, Z. Morley Mao, Y. Charlie Hu, and Bruce Maggs, Proceedings of ACM Internet Measurement Conference (IMC) 2007.(PDF)
• Automated Classification and Analysis of Internet Malware by Michael Bailey, Jon Oberheide, Jon Andersen, Z. Morley Mao, Farnam Jahanian, and Jose Nazario, Proceedings of RAID 2007.(PDF)
• Towards Automated Network Management: Network Operations using Dynamic Views by Xu Chen, Z. Morley Mao, and Kobus van der Merwe, Proceedings of SIGCOMM INM workshop 2007.(PDF)
• MIDAS: An Impact Scale for DDoS attacks by Ranga Vasudevan, Z. Morley Mao, Oliver Spatscheck, Kobus Van der Merwe, Proceedings of LANMAN 2007 (15th Workshop on Local and Metropolitan Area Networks).(PDF)
• Characterizing Dark DNS Behavior by Jon Oberheide, Manish Karir and Z. Morley Mao, Proceedings of DIMVA 2007.(PDF)
• A Firewall for Routers: Protecting Against Routing Misbehavior by Ying Zhang, Z. Morley Mao, Jia Wang, Proceedings of DSN-DCCS 2007.(PDF)
• Understanding Network Delay Changes Caused by Routing Events by Himabindu Pucha, Ying Zhang, Z. Morley Mao, Y. Charlie Hu, Proceedings of ACM SIGMETRICS 2007.(PDF)
• Accurate Real-time Identification of IP Prefix Hijacking by Xin Hu and Z. Morley Mao, Proceedings of IEEE Security and Privacy (Oakland) 2007.(PDF)
• A Framework for Measuring and Predicting Impact of Routing Changes by Ying Zhang, Z. Morley Mao, and Jia Wang, Proceedings of IEEE INFOCOM 2007. (PDF)
• Low-Rate TCP-Targeted DoS Attacks Disrupts Internet Routing by Ying Zhang, Z. Morley Mao, and Jia Wang, Proceedings of 14th Annual Network & Distributed System Security Symposium (NDSS) 2007.(PDF)

2006

• Tussle in Routing: Who Determines Internet Paths? by Z. Morley Mao. Invited paper, Workshop on Internet Routing Evolution and Design (WIRED), 2006 (PDF)
• On the Impact of Research Network Based Testbeds on Wide-area Experiments by Himabindu Pucha, Y. Charlie Hu, and Z. Morley Mao, Proceedings of ACM Internet Measurement Conference (IMC) 2006. (paper [PDF])
• Internet-scale Malware Mitigation: Combining Intelligence of the Control and Data Plane by Ying Zhang, Evan Cooke, and Z. Morley Mao, Proceedings of WORM 2006. (paper [PDF])
• Differentiated BGP Update Processing for Improved Routing Convergence by Wei Sun, Z. Morley Mao, and Kang Shin, Proceedings of IEEE ICNP 2006. (paper [PDF])
• Analyzing Large DDoS Attacks using Multiple Data Sources, by Z. Morley Mao, Vyas Sekar, Oliver Spatscheck, Jacobus van der Merwe, Rangarajan Vasudevan, Proceedings of ACM SIGCOMM Workshop on Large-Scale Attack Defense (LSAD) 2006. (paper [PDF])
• A Measurement Study on the Impact of Routing Events on End-to-End Internet Path Performance, by Feng Wang, Z. Morley Mao, Jia Wang, Lixin Gao, and Randy Bush, Proceedings of ACM SIGCOMM 2006. (paper [PDF])
• Reval: A Tool for Real-time Evaluation of DDoS Mitigation Strategies, by Ranga Vasudevan, Z. Morley Mao, Oliver Spatscheck, Kobus Van der Merwe, Proceedings of Usenix Technical Conference 2006. (paper [PDF])
• Hotspots: The Root Causes of Non-Uniformity in Self-Propagating Malware, by Evan Cooke, Z. Morley Mao, Farnam Jahanian, Proceedings of DSN 2006. (paper [PDF])
• Is BGP Update Storm a Sign of Trouble: Observing the Internet Control and Data Planes During Internet Worms, by Matthew Roughan, Jun Li, Randy Bush, Z. Morley Mao and Timothy Griffin, Proceedings of SPECTS 2006. (paper [PDF])
• Watching Data Streams Toward a Multi-Homed Sink Under Routing Changes Introduced by a BGP Beacon, by Jun Li, Randy Bush, Z. Mao, Tim Griffin, Matt Roughan, Dan Stutzbach, and E. Purpus, Proceedings of Passive and Active Measurement Conference (PAM) 2006. (paper [PDF])

2005

• Guest editorial - Interdomain routing and the border gateway protocol by Olivier Bonaventure, A. Feldmann, L. Gao, T. Griffin, Z. M. Mao, IEEE Network 19(6): 3-4 (2005).
• An Empirical Approach to Modeling Inter-AS Traffic Matrices, by H. Chang, S. Jamin, Z. Mao, and W. Willinger, Proceedings of ACM Internet Measurement Conference (IMC) 2005.(paper [PDF])
• HLP: A Next-generation Interdomain Routing Protocol, by Lakshminarayanan Subramanian, Matthew Caesar, Cheng Tien Ee, Mark Handley, Z. Morley Mao, Scott Shenker, Ion Stoica, Proceedings of ACM SIGCOMM 2005 (paper [PDF])
• Finding a Needle in a Haystack: Pinpointing Significant BGP Routing Changes in an IP Network, by Jian Wu, Z. Morley Mao, Jennifer Rexford, and Jia Wang, Proceedings of 2nd Symposium on Networked Systems Design and Implementation (NSDI), Boston, MA, May 2005. (talk [PDF], [PPT], paper [PDF])
• On AS-Level Path Inference by Z. Morley Mao, Lili Qiu, Jia Wang, and Yin Zhang, Proceedings of ACM SIGMETRICS, Banff, Canada, June 2005. (paper [PDF])
• Enriching intrusion alerts through multi-host causality by Samuel T. King, Z. Morley Mao, Dominic G. Lucchetti, and Peter M. Chen, Proceedings of the 2005 Network and Distributed System Security Symposium (NDSS), February 2005. (paper [PDF])
• A Measurement Study of Internet Bottlenecks by Ningning Hu, Li Li, Z. Morley Mao, Peter Steenkiste, and Jia Wang, Proceedings of IEEE INFOCOM 2005 (paper [PDF])

2004

• Towards a Next Generation Inter-domain Routing Protocol by Lakshminarayanan Subramanian, Matthew Caesar, Cheng Tien Ee (UC Berkeley), Mark Handley (University College, London), Z. Morley Mao (University of Michigan), Scott Shenker (UC Berkeley and ICSI), and Ion Stoica (UC Berkeley), Proceedings of HotNets 2004 (paper [PDF])
• BorderGuard: Detecting Cold Potatoes from Peers by N. Feamster, Z. Mao, and J. Rexford, Proc. ACM Internet Measurement Conference (IMC), Taormina, Sicily, Italy, October 2004 (PDF).
• Toward Understanding Distributed Blackhole Placement by Evan Cooke, Michael Bailey, Z. Morley Mao, David Watson, Farnam Jahanian and Danny McPherson, Proceedings of WORM 2004 (paper [PDF])
• Combining Routing and Traffic Data for Detection of IP Forwarding Anomalies by Matthew Roughan, Tim Griffin, Z. Morley Mao, Albert Greenberg, and Brian Freeman, Poster paper, Proceedings of ACM SIGMETRICS 2004 (full version [PDF])(talk PDF)
Proceedings of ACM SIGCOMM NeTs Workshop, Portland, OR, August 2004
• Locating Internet Bottlenecks: Algorithms, Measurements, and Implications by Ningning Hu, Li Li, Z. Morley Mao, Peter Steenkiste, and Jia Wang, Proceedings of ACM SIGCOMM, Portland, OR, August 2004 (PS) Project info
• Locating Internet Routing Instabilities by Anja Feldmann, Olaf Maennel, Z. Morley Mao, Arthur Berger, Bruce Maggs, Proceedings of ACM SIGCOMM, Portland, OR, August 2004 (PS)

Routing at various layers:

• Scalable and accurate identification of AS-level forwarding paths by Z. Morley Mao, David Johnson, Jennifer Rexford, Jia Wang, and Randy H. Katz, Proc. IEEE INFOCOM, March 2004. (PDF)

2003

• BGP Beacons by Z. Morley Mao, Randy Bush, Tim Griffin, and Matt Roughan, Internet Measurement Conference (IMC) 2003.(PDF)
• Towards an Accurate AS-Level Traceroute Tool by Z. Morley Mao, Jennifer Rexford, Jia Wang, and Randy Katz, ACM SIGCOMM 2003.(PDF) software
• Interdomain Routing Streams by Timothy G. Griffin and Z. Morley Mao, Workshop on Management and Processing of Data Streams 2003.(PDF)
• Efficient and Robust Streaming Provisioning in VPNs by Z. Morley Mao, David Johnson, Oliver Spatscheck, Jacobus Van der Merwe, and Jia Wang. World Wide Web Conference 2003.(ps.gz)(PDF)(Conference presentation: PDF)
• Routing Research Issues by Z. Morley Mao. Invited paper, Workshop on Internet Routing Evolution and Design (WIRED), 2003 (PDF)

  2002 and earlier

• Route Flap Damping Exacerbates Internet Routing Convergence by Z. Morley Mao, Ramesh Govindan, George Varghese, and Randy Katz. ACM SIGCOMM 2002.(PS) (PDF)
• A Precise and Efficient Evaluation of the Proximity between Web Clients and their Local DNS Servers, by Z. Morley Mao, Charles Cranor, Fred Douglis, Michael Rabinovich, Oliver Spatscheck, and Jia Wang,USENIX Annual Technical Conference, 2002.(PS)(PDF) (Invited talk at HP Labs PPT) (Conference presentation: PPT)

Automatic Service Composition:

• Achieving Service Portability using Self-adaptive Data Paths, by Z. Morley Mao, Randy H. Katz, IEEE Communications Magazine special Issue on Service Portability and Virtual Home Environment, January 2002.(PDF)
• A Framework for Universal Service Access Using Device Ensemble by Z. Morley Mao, and Randy Katz. (Young Investigator Award) Grace Hopper Celebration of Women in Computing 2002.(PS) (PDF)
• Network Support for Mobile Multimedia using a Self-adaptive Distributed Proxy, by Z. Morley Mao, H. Wilson So, ByungHoon Kang, and Randy H. Katz, 11th International Workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV-2001).(PS) (PDF).
• Achieving Service Portability in ICEBERG, by Z. Morley Mao and Randy H. Katz, IEEE GlobeCom 2000, Workshop on Service Portability (SerP-2000).(PS) (PDF)
• Fault-tolerant, Scalable, Wide-Area Internet Service Composition, by Z. Morley Mao and Eric A. Brewer and Randy H. Katz, U.C. Berkeley Technical Report UCB//CSD-01-1129, Jan 2001. (PS.GZ, archive)

SAHARA, ICEBERG, Ninja Group Project Papers

• The SAHARA Model for Service Composition Across Multiple Providers, by B. Raman, S. Agarwal, Y. Chen, M. Caesar, W. Cui, P. Johansson, K. Lai, T. Lavian, S. Machiraju, Z. M. Mao, G. Porter, T. Roscoe, M. Seshadri, J. Shih, K. Sklower, L. Subramanian, T. Suzuki, S. Zhuang, A. D. Joseph, Randy Katz, Ion Stoica, Proceedings of the International Conference on Pervasive Computing, August 26-28, 2002. (PS)(PDF)
• The Ninja Architecture for Robust Internet-Scale Systems and Services, by Steven D. Gribble, Matt Welsh, Rob von Behren, Eric A. Brewer, David Culler, N. Borisov, S. Czerwinski, R. Gummadi, J. Hill, A. Joseph, R.H. Katz, Z. Mao, S. Ross, and B. Zhao.
(Best Journal Paper Award for the Year 2001), Special Issue of Computer Networks on Pervasive Computing, Volume 35, Issue 4, March 2001, Pages 473-497. (PS)((PDF).
• ICEBERG: An Internet-core Network Architecture for Integrated Communications, H. J. Wang, B. Raman, C-N. Chuah, R. Biswas, R. Gummadi, B. Hohlt, X. Hong, E. Kiciman, Z. Mao, J. S. Shih, L. Subramanian, B. Y. Zhao, A. D. Joseph, and R. H. Katz, IEEE Personal Communications Special Issue on IP-based Mobile Telecommunications Networks, August 2000. (PDF, 2.2 MB) (PS.GZ)