___conferences & journals

GNNIC: Finding Long-Lost Sibling Functions with Abstract Similarity

, , and
Network and Distributed System Security (NDSS) Symposium
San Diego, USA,

Practical and Flexible Kernel CFI Enforcement using eBPF

, , , and
Proceedings of the 1st Workshop on eBPF and Kernel Extensions
New York, USA,

Not All Data are Created Equal: Data and Pointer Prioritization for Scalable Protection Against Data-Oriented Attacks

, , , , and
USENIX Security
Anaheim, CA,

Securing Container-based Clouds with Syscall-aware Scheduling

, , and
Asia CCS
Melbourne, Austria,

Intel TDX Demystified: A Top-Down Approach

, , , , , , and
Arxiv
, ,

Separation of Powers in Federated Learning

, , , , , and
The 1st Workshop on Systems Challenges in Reliable and Secure Federated Learning (ResilientFL'21)
Virtual Event,

Analyzing Control-flow-based Glitching Attacks and Defenses

, , , , , , , and
The 51th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Taipei, Taiwan,

Confidential Computing for OpenPOWER

, , , , , , , , , , , , , , , , , , , , , and
ACM EuroSys
Virtual,

Houdini's Escape: Breaking the Resource Rein of Linux Control Groups

, , , and
ACM SIGSAC Conference on Computer and Communications Security (CCS '19)
London UK,

Deep Enforcement: Policy-based Data Transformations for Data in the Cloud

, , , , , , , and
USENIX Workshop on Hot Topics in Cloud Computing (HotCloud '19)
Renton, WA,

How to Discover IoT Devices When Network Traffic is Encrypted

, and
IEEE International Congress on Internet of Things (IEEE ICIOT)
Milan, Italy,

Reaching Data Confidentiality and Model Accountability on the CalTrain

, , , , , , and
The 49th IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)
Portland, OR,

Hieroglyph: Locally-Sufficient Graph Processing via Compute-Sync-Merge

, and
ACM SIGMETRICS
Champaign-Urbana, USA,

Version Traveler: Fast and Memory-Efficient Version Switching in Graph Processing Systems

, , and
USENIX Annutal Technical Conference
Denver, Co,

Opportunities and Challenges in Adopting Microservice Architectures for Enterprise Workloads

, , and
USENIX Annutal Technical Conference (Practitioner Talk)
Denver, Co,

QoX: Quality of Service and Consumption in the Cloud

, and
USENIX Workshop on Hot Topics in Cloud Computing (HotCloud '16)
Denver, CO,

Gremlin: Systematic Resilience Testing of Microservices

, , , and
IEEE Conference on Distributed Computing Systems (ICDCS)
Nara, Japan,

CRONets: Cloud-Routed Overlay Networks

, , , , and
IEEE Conference on Distributed Computing Systems (ICDCS)
Nara, Japan,

Enabling Efficient Hypervisor-as-a-Service Clouds with Ephemeral Virtualization

, , , , , and
The 12th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE'16)
Atlanta, GA,

Stateless Network Functions

, , , and
ACM SIGCOMM Workshop on Hot Topics in Middleboxes and Network Function Virtualization (HotMiddlebox). Also appeared as a poster in USENIX NSDI.
London, UK,

App–Bisect: Autonomous Healing for Microservice-Based Apps

and
USENIX Workshop on Hot Topics in Cloud Computing (HotCloud)
Santa Clara, CA,

Flux: Multi-Surface Computing in Android

, , and
ACM EuroSys
Bordeaux, France,

Don’t Call Them Middleboxes, Call Them Middlepipes

, and
ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking (HotSDN)
Chicago, IL,

Software Defining System Devices with the ‘Banana’ Double-Split Driver Model

, and
USENIX Workshop on Hot Topics in Cloud Computing (HotCloud)
Philadelphia, PA,

TideWatch: Fingerprinting the Cyclicality of Big Data Workloads

, , and
IEEE INFOCOM
Toronto, Canada,

Pico Replication: A High Availability Framework for Middleboxes

, and
ACM Symposium on Cloud Computing (SoCC)
Santa Clara, California,

To 4,000 Compute Nodes and Beyond: Network-aware Vertex Placement in Large-scale Graph Processing Systems

, and
ACM SIGCOMM Posters and Demos
Hong Kong, China,

Cementing High Availability in OpenFlow with RuleBricks

and
ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking (HotSDN)
Hong Kong, China,

AIN: A Blueprint for an All-IP Data Center Network

, and
USENIX Workshop on Hot Topics in Cloud Computing (HotCloud)
San Jose, CA,

VirtualWire: System Support for Live Migrating Virtual Networks Across Clouds

International Workshop on Virtualization Technologies in Distributed Computing (Invited Talk)
New York, NY,

Escape Capsule: Explicit State is Robust and Scalable

, , and
USENIX Workshop on Hot Topics in Operating Systems (HotOS XIV)
Santa Ana Pueblo, New Mexico,

What to Discover Before Migrating to the Cloud

, , , , and
IFIP/IEEE Integrated Network Management Symposium (IM)
Ghent, Belgium,

Mizan: A System for Dynamic Load Balancing in Large-scale Graph Processing

, , , , and
ACM EuroSys
Prague, Czech Republic,

Split/Merge: System Support for Elastic Execution in Virtual Middleboxes

, , and
USENIX Symposium on Networked Systems Design and Implementation (NSDI)
Lombard, Illinois,

Plug into the Supercloud

, and
IEEE Internet Computing Special Issue on Virtualization
Vol. 17, No. 2,

Enabling High-Performance Computing as a Service

, , , , , , , , , and
IEEE Computer
Vol. 45, No. 10,

Scheduling Batch and Heterogeneous Jobs with Runtime Elasticity in a Parallel Processing Environment

, and
IEEE International Parallel and Distributed Processing Symposium Workshops, the 21st International Heterogeneity in Computing Workshop (HCW)
Shanghai, China,

The Xen-Blanket: Virtualize Once, Run Everywhere

, and
ACM EuroSys
Bern, Switzerland,

Virtual Machine Migration in an Over-committed Cloud

, , and
IEEE/IFIP Network Operations and Management Symposium (NOMS)
Maui, Hawaii,

Analysis and Modeling of Social Influence in High Performance Computing Workloads

, , , and
17th International European Conference on Parallel and Distributed Computing (Euro-Par)
Bordeaux, France,

Unshackle the Cloud!

, , , , and
USENIX Workshop on Hot Topics in Cloud Computing (HotCloud)
Portland, OR,

Overdriver: Handling Memory Overload in an Oversubscribed Cloud

, , and
ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE)
Newport Beach, CA,

Application-aware Virtual Machine Migration in Data Centers

, , , , and
IEEE INFOCOM Mini-conference
Shanghai, China,

Managing Process Assets in a Global IT Service Delivery Environment

, , and
International Conference on BPM
Hoboken, NJ,

On the Design of a Deep Computing Service Cloud

, , , and
INFORMS 2010 Service Science Conference
Taipei, Taiwan,

Time-Of-Use Pricing Policies for Offering Cloud Computing as a Service

, , , and
IEEE Service Operations and Logistics, and Informatics (SOLI)
QingDao, China,

A Service Composition Framework for Market-Oriented High Performance Computing Cloud

, , and
ACM International Symposium on High Performance Distributed Computing (HPDC)
Chicago, Illinois,

AIM-HI: A Framework for Request Routing in Large-Scale IT Global Service Delivery

, and
IBM Systems Journal
Vol. 53, No. 6,

Crowdsourcing and Service Delivery

, , , , and
IBM Systems Journal
Vol. 53, No. 6,

iPoG: Fast Interactive Proximity Querying on Graphs

, and
ACM Conference on Information and Knowledge Management (CIKM)
Hong Kong, China,

Social Computing and Governance in an Enterprise Service for Managing Business Processes

, , and
World Conference on Services
Bangalore, India,

Rule-Based Problem Classification in IT Service Management

, and
IEEE International Conference on Cloud Computing
Bangalore, India,

Measuring Proximity on Graphs with Side Information

, and
IEEE International Conference on Data Mining (ICDM)
Pisa, Italy,

SOAR: SOcially Aware Routing for Request Matching in Enterprise Environments

and
IEEE International Conference on Services Computing (SCC)
Honolulu, Hawaii,

SCOOP: Automated Social Recommendation in Enterprise Process

, and
IEEE International Conference on Services Computing (SCC)
Honolulu, Hawaii,

Enterprise Mashups and Web 2.0 for Management (Tutorial)

and
IEEE/IFIP Network Operations and Management Symposium (NOMS)
Salvador, Brazil,

NetworkMD: Topology Inference and Failure Diagnosis in the Last Mile

, , and
ACM Internet Measurement Conference (IMC)
San Diego, CA,

Service Assurance Process Re-Engineering Using Location-aware Infrastructure Intelligence

, , and
IFIP/IEEE International Symposium on Integrated Network Management (IM)
Munich, Germany,

Eve: A Scalable Network Client Emulator

, , and
10th Communications and Networking Simulation Symposium
Norfolk, VA,

On the Role and Controllability of Persistent Clients in Traffic Aggregates

and
IEEE/ACM Transactions on Networking
Vol. 14, No. 2,

Re-synchronization and Controllability of Bursty Service Requests

, and
IEEE/ACM Transactions on Networking
Vol. 12, No. 4,

The Impact of Concurrency Gains on the Analysis and Control of Multi-threaded Internet Services

, and
IEEE INFOCOM
Hong Kong, China,

Persistent Dropping: An Efficient Control of Traffic Aggregates

and
ACM SIGCOMM
Karlsruhe, Germany,

Scalable Parallel-Access for Mirrored Servers

, and
IASTED International Multi-Conference on Applied Informatics (AI)
Innsbruck, Austria,

Adaptive Packet Filters

, and
IEEE GLOBECOM
San Antonio, Texas,

___patents

Inactivating basic blocks of program code to prevent code reuse attacks

and
US Patent
, (Granted)

Fuzzy cyber detection pattern matching

, , and
US Patent
, (Granted)

Detecting and purifying adversarial inputs in deep learning computing systems

and
US Patent US11373093B2
, (Granted)

Reducing attack surface by selectively collocating applications on host computers

, and
US Patent US11277434B2
, (Granted)

Serving data assets based on security policies by applying space-time optimized inline data transformations

, , , , and
US Patent US11210410B2
, (Granted)

3D surface estimation and prediction to boost fidelity of realtime LiDAR model generation

and
US Patent US10979644B2
, (Granted)

Enforcing policy in dataflows

, , and
US Patent US10956135B1
, (Granted)

Autonomously healing microservice-based applications

and
US Patent US10656929B2
, (Granted)

Predicting user attentiveness to electronic notifications

, , , and
US Patent US10832160B2
, (Granted)

Sensor data manipulation using emulation

, , , and
US Patent US10887396B2
, (Granted)

High performance computing as a service

, , , , , and
US Patent US10089147B2
, (Granted)

Dynamic extensibility of application programming interfaces

, and
US Patent US10073694B2
, (Granted)

Multipathing using flow tunneling through bound overlay virtual machines

, , and
US Patent US9942131B2
, (Granted)

Failure recovery testing framework for microservice-based applications

, and
US Patent US9842045B2
, (Granted)

Operating a plurality of drones and trucks in package delivery

, , and
US Patent US9792576
, (Granted)

Scheduling homogeneous and heterogeneous workloads with runtime elasticity in a parallel processing environment

, and
US Patent US9645848B2
, (Granted)

Coordinating application migration processes

, , , , , , , , , and
US Patent US9602599
, (Granted)

Supporting software application developers to iteratively refine requirements for web application programming interfaces

, , , , , and
US Patent US9588739
, (Granted)

Service delivery controller for learning network security services

, , , , and
US Patent US9578050
, (Granted)

Strategic Placement Of Jobs For Spatial Elasticity In A High Performance Computing Environment

, and
US Patent US9311146
, (Granted)

Reservation system with graphical user interface

, , , , and
US Patent US9286579B2
, (Granted)

Method and apparatus to replicate stateful virtual machines between clouds

and
US Patent US9256463B2
, (Granted)

Metadata-driven version management service in pervasive environment

, , and
US Patent US9244960B2
, (Granted)

Fault Tolerance Solution For Stateful Applications

, and
US Patent US9110864
, (Granted)

System and method for dynamic rescheduling of multiple varying resources with user social mapping

, , , , and
US Patent US8479212
, (Granted)

Dynamic pricing of a resource

, , , , , , and
US Patent US8458011
, (Granted)

Network-aware virtual machine migration in datacenters

, , and
US Patent US8423646
, (Granted)

Method and system for microlocking web content

, and
US Patent US8433906
, (Granted)

Method for dispatching service requests

, , , , , , , and
US Patent US8385534
, (Granted)

Efficient calculation of node proximity on graphs with side information

, and
US Patent US8346766
, (Granted)

System and method for monitoring large-scale distribution networks by data sampling

, , , and
China Patent CN101237356
, (Granted)

System and method for constructing flexible ordering to improve productivity and efficiency in process flows

, , , and
US Patent 8,036,865
, (Granted)

Method and apparatus for component association inference, failure diagnosis and misconfiguration detection based on historical failure data

, , and
US Patent 7,937,347
, (Granted)

Apparatus and method for identifying process elements using request-response pairs, a process graph and noise reduction in the graph

, , and
US Patent 7,761,398
, (Granted)