Tentative reading list

(01/11 Tu) Internet routing characterization

• [Labovitz2000] Delayed Internet Routing Convergence, by Craig Labovitz, Abha Ahuja, Abhijit Bose and Farnam Jahanian. Proceedings of ACM SIGCOMM, Stockholm, Sweden, August 2000.
• Routing Stability in Congested Networks: Experimentation and Analysis. By Aman Shaikh, Lampros Kalampoukas, Rohit Dube, and Anujan Varma. Proceedings of ACM SIGCOMM, Stockholm, Sweden, August 2000.
• BGP Beacons, Z. Morley Mao, Randy Bush, Tim Griffin, and Matt Roughan. Proceedings of IMC, 2003.

Optional further reading:

• Towards Milli-Second IGP Convergence, by Cengiz Alaettinoglu, VanJacobson and Haobo Yu. Internet Draft, November 2000. Also see NANOG presentation.

(01/13 Th) Internet routing security

• Routing threats: draft-ietf-rpsec-routing-threats-03.txt
• Requirements document: draft-puig-rpsec-generic-requirements-01.txt
• BGP Attack Tree:draft-convery-bgpattack-01.txt
• OSPF Vulnerability Analysis: draft-jones-ospf-vuln-01.txt
• Path Security:draft-white-path-considerations-00.txt

Optional further reading:

• Shining Light on Dark Address Space by Arbor Networks 2001

(1/18 Th) Overlay Networking

• Resilient Overlay Networks by David G. Andersen, Hari Balakrishnan, M. Frans Kaashoek, Robert Morris Proc. 18th ACM SOSP, Banff, Canada, October 2001.
• Improving the Reliability of Internet Paths with One-hop Source Routing by Krishna P. Gummadi, Harsha V. Madhyastha, Steven D. Gribble, Henry M. Levy, and David Wetherall, University of Washington, OSDI 2004

Optional further reading (from last lecture):

• BGP Vulnerability Testing: Separating Fact from FUD Nanog 28, by Sean Convery and Matthew Franz, Cisco

(1/20 Th) Internet AS relationships

• [Subramanian02] Characterizing the Internet hierarchy from multiple vantage points by Lakshminarayanan Subramanian, Sharad Agarwal, Jennifer Rexford, and Randy H. Katz, in Proc. IEEE INFOCOM, June 2002
• [Mahajan03] Quantifying the Causes of Path Inflation by Neil Spring, Ratul Mahajan, and Thomas Anderson. SIGCOMM 2003.

Optional further reading:

• [Norton00] Internet Service Providers and Peering by William B. Norton, Draft paper, 2000.
• On Inferring Autonomous System Relationships in the Internet, by Lixin Gao. Proceedings of IEEE GLOBECOM, San Francisco, CA, November 2000.

(1/25 Tu) Traffic engineering, traffic matrix estimation

• [Felmann00] Deriving Traffic Demands for Operational IP Networks: Methodology and Experience, by Anja Feldmann, Albert Greenberg, Carsten Lund, Nick Reingold, Jennifer Rexford, and Fred True. Proceedings of ACM SIGCOMM, Stockholm, Sweden, August 2000
• [Zhang03] An Information-Theoretic Approach to Traffic Matrix Estimation, by Yin Zhang, Matthew Roughan, Carsten Lund and David Donoho, in Proceedings of the 2003 ACM SIGCOMM Conference, Karlsruhe, Germany, August 2003.

Optional further reading:

• [Feamster03] Guidelines for interdomain traffic engineering by Nick Feamster, Jay Borkenhagen, and Jennifer Rexford, to appear in ACM SIGCOMM Computer Communications Review, fall 2003.

(2/1 Tu) Internet availability and reliability

• [MahajanSOSP03] User-level Internet Path Diagnosis by Ratul Mahajan, Neil Spring, David Wetherall, Thomas Anderson, SOSP 2003.
• [TCPnice] TCP Nice: A Mechanism for Background Transfers by Arun Venkataramani, Ravi Kokku, and Mike Dahlin, University of Texas at Austin, OSDI 2002
• [Dahlin03] End-to-end WAN Service Availability by M. Dahlin, B. Chandra, L. Gao, A. Nayate, ACM/IEEE Transactions on Networking, 11 (2) Apr 2003

(2/3 Th) Critical network infrastructure services

• [DNS_breakin]Using the Domain Name System for System Break-ins, Bellovin
• [firewall]Firewall Gateways, Chapter 3 of Firewalls and Internet Security: Repelling the Wily Hacker, Cheswick and Bellovin.

(2/8 Tu) Firewalls and DDoS attacks

• [Adkins03] Taming IP Packet Flooding Attacks by Daniel Adkins, Karthik Lakshminarayanan, Adrian Perrig, Ion Stoica (UC Berkeley and CMU)
• [Jin03] Hop-Count Filtering: An Effective Defense Against Spoofed DDoS Traffic by Cheng Jin, Caltech, Haining Wang and Kang Shin

(2/10 Thu) Network IDS and worms

(2/17 Th) denial of service

• Attacking DDoS at the Source, by J. Mirkovic, G. Prier and P. Reiher.
• Pi: A Path Identification Mechanism to Defend against DDoS Attacks, by Avi Yaar, Adrian Perrig, and Dawn Song.
• Flash Crowds and Denial of Service Attacks: Characterization and Implications for CDNs and Web Sites, Jaeyeon Jung, Balachander Krishnamurthy, and Michael Rabinovich.

(2/22 Tu) Measurement based anomaly detection

• How to 0wn the Internet in Your Spare Time, by Stuart Staniford, Vern Paxson, Nicholas Weaver.
• Topology-based detection of anomalous BGP messages, by C. Kruegel, D. Mutz, W. Robertson, F. Valeur

(2/24 Th) Peer to peer networks and security

• The Sybil Attack, by John R. Douceur.
• Security Considerations for Peer-to-Peer Distributed Hash Tables, by Emil Sit and Robert Morris.
• Samsara: Honor Among Thieves in Peer-to-Peer Storage, by Landon P. Cox and Brian D. Noble.

(Mar 7 Tu) Anonymous networks

• Crowds: Anonymity for Web Transactions, by Michael Reiter and Avi Rubin.
• Tarzan: A Peer-to-Peer Anonymizing Network Layer, by M. Freedman and Robert Morris.
• Anonymous Connections and Onion Routing, by M. Reed et. al.
• Freenet: A Distributed Anonymous Information Storage and Retrieval System, by Ian Clarke et. al.

(Mar 15 Tu) Storage in sensor networks

• TAG: a Tiny AGgregation Service for Ad-Hoc Sensor Networks, by Sam Madden and Michael J. Franklin, Joseph M. Hellerstein, and Wei Hong.
• Multi-Dimensional Range Queries in Sensor Networks, by Xi Li et. al..

(Mar 17 Th) Sensor networks: networking experience

• Understanding Packet Delivery Performance In Dense Wireless Sensor Networks, by Jerry Zhao.
• Taming the Underlying Challenges of Reliable Multihop Routing in Sensor Networks, by Alec Woo and David Culler.

(3/24) Sensor network security [Saurabh Tyagi]

• Ariadne: A secure on demand routing protocol for adhoc networks by Yih-Chun Hu, Adrian Perrig, and David Johnson
• TinySec: A link layer security architecture for wireless sensor networks by Chris Karlof, Naveen Sastry, and David Wagner
• Zero Interaction Authentication by Mark Corner and Brian Noble

Optional further reading:

• Wireless LAN location-sensing for security applications by Ping Tao, Algis Rudys, Andrew Ladd, Dan S. Wallach
• Rushing attacks and defense in wireless ad hoc network routing protocols by Yih-Chun Hu, Adrian Perrig, and David Johnson
• On securely enabling intermediary-based services and performance enhancements for wireless mobile users. by Sneha Kasera, Semyon Mizikovsky, Ganapathy S. Sundaram, Thomas Y. C. Woo
• On the security of wireless network access with enhancements by Lein Harn, Wen-Jung Hsin
• SPINS: Security Protocols for Sensor Networks, by Adrian Perrig et. al.
• SIA: Secure Information Aggregation in Sensor Networks, by Bartosz Przydatek, Dawn Song, and Adrian Perrig.

(Tuesday March 29) Secure communication [Rangarajan Vasudevan]

• "New Directions in Cryptography" by W. Diffie and M. Hellman, IEEE Transactions on Information Theory, Vol. 22, No. 6, Nov 1976.
• "Using Encryption for Authentication in Large Networks of Computers" by R. Needham and M. Schroeder, Comm. of the ACM, Vol. 21, No. 12, Dec 1978.
• "Chaffing and Winnowing: Confidentiality without Encryption" by R. Rivest, CryptoBytes (RSA Laboratories), Vol. 4, No. 1, 12-17, 1998.

Optional further reading:

• "An Attack against the Needham-Schroeder Public-Key Authentication Protocol" by G. Lowe, 1995.
• "Communication Theory of Secrecy Systems", C. Shannon, Bell Systems Technical Journal, Vol. 28, 656-715, Oct 1949.

(Thursday March 31) Accessing Internet from wireless/cellular networks [Yu-Hong Yeung]

• WebBee: An Architecture for Web Accessibility for Mobile Devices by Krian Upatkoon, Wenjie Wang, Sugih Jamin
• Structure-Aware Web Transcoding for Mobile Devices by Yonghyun Hwang, Jihong Kim, Eunkyong Seo, Seoul National University
• Bringing the wireless Internet to mobile devices by Saha, S.; Jamtgaard, M.; Villasenor, J.
• Cell phone answer Internet's call by William Sweet

(April 5 Tuesday) Anomaly detection and network tomography [Bokdeuk Jeong]

• Anomaly Detection in IP Networks by Marina Thottan and Chuanyi Ji
• MIB Variable Based Fault Classification: The Next Step Towards Proactive Management by Thottan et. al.

Optional further reading:

(April 7 Thursday) Network measurements [Ying Zhang]

• Some Not-So-Pretty Admissions About Dealing With Internet Measurements talk by Vern Paxson at NRDM 2001
• The Interdomain Connectivity of PlanetLab Nodes by Griffin et al.
• A Robust Classifier for Passive TCP/IP fingerprinting by Robert Beverly

Optional further reading:

(April 12 Tuesday) [Arthur Tomlin]

• A Taxonomy of Rational Attacks by Seth James Nielson, Scott A. Crosby and Dan S. Wallach
• Identity Crisis: Anonymity vs. Reputation in P2P Systems, by Sergio Marti and Hector Garcia-Molina
• Puzzles in P2P systems, by Andrei Serjantov and Stephen Lewis

Optional further reading:

• Secure routing for structured peer-to-peer overlay networks, by Miguel Castro, Peter Druschel, Ayalvadi Ganesh, Antony Rowstron and Dan S. Wallach
• Samsara: Honor Among Thieves in Peer-to-Peer Storage, by Landon P. Cox and Brian D. Noble.
• A Self-Repairing Peer-to-Peer System Resilient to Dynamic Adversarial Churn, by Fabian Kuhn, Stefan Schmid, and Roger Wattenhofer

(April 14 Thursday) Queue Management and Router design

• The Effects of Active Queue Management on Web Performance by Le et. al.
• Design of a Robust Active Queue Management Algorithm Based on Feedback by Zhang et. al.
• Persistent Dropping: An Efficient Control of Traffic Aggregates by Jamjoom et. al.

Optional further reading:

• Lightweight Active Router-Queue Management for Multimedia Networking by Mark Parris, Kevin Jeffay, and F. Donelson Smith
• Dynamic-CBT and ChIPS - Router Support for Improved Multimedia Performance on the Internet by Jae Chung and Mark Claypool
• Building a Better NetFlow by Cristian Estan, Ken Keys, David Moore, and George Varghese

() Knowledge Plane

• A knowledge Plane for the Internet by David Clark et. al.
• Why do Internet services fail, and what can be done about it? by David Patterson et. al.
• The Cutting EDGE of IP Router Configuration by Jennifer Rexford et. al.

() Future directions in Internet architecture

• TCP switching: Exposing Circuits to IP. by McKeown et. al.
• The performance of circuit switching in the Internet. by McKeown et. al.
• Tussle in Cyberspace: Defining Tomorrow's Internet. by David Clark et. al.
• Unveiling the Transport by Mogul et. al.

Optional further reading:

• Reverse-Engineering the Internet by Spring et al.
• Turning 802.11 Inside-Out by Bhagwat et al.

() Group communication security

• Antigone: A Flexible Framework for Secure Group Communication by A. Prakash et. al.
• Iolus A Framework for Scalable Secure Multicasting by Suvo Mittra
• Scaling Secure Group Communication Systems: Beyond Peer-to-Peer by Yair Amir et. al.

() Network Models

• Internet Research Needs Better Models by Floyd et. al.
• Sally Floyd's Model page