Expert Profile

Zhenhai Duan

Professor

COMP SCI SPONSORED PROJECTS | COLLEGE OF ARTS & SCIENCES

Research Terms & Keywords

Research Terms

Science

Research Projects

Ends

Title

12-2018

Utility-based Approach to Detecting Compromised Machines Utility-based Approach to Detecting Compromised Machines

12-2012

EAGER:TC: Collaborative Research: Experimental Study of Accountability in Existing Anonymous Networks EAGER:TC: Collaborative Research: Experimental Study of Accountability in Existing Anonymous Networks

01-2010

Delayed Finalization of MPI Collective Communication Delayed Finalization of MPI Collective Communication

Publications

Search Google Scholar for Zhenhai Duan OpenAlex Works Search

More Publications (Last OpenAlex import 11/7/24)

"Impacts of a Single GPS Spoofer on Multiple Receivers: Formal Analysis and Experimental Evaluation"

2024 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W4392904897
"IoT Device Identification Based on Network Traffic Characteristics"

2022 ▪ GLOBECOM 2022 - 2022 IEEE Global Communications Conference

Tania Taami; Md Mainuddin; Zhenhai Duan; Shaeke Salman; Yingfei Dong;

https://openalex.org/W4315630123
"DPM: Towards Accurate Drone Position Manipulation"

2022 ▪ IEEE Transactions on Dependable and Secure Computing

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W4207061014
"Accurately Redirecting a Malicious Drone"

2022 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W4211148329
"Compromising Flight Paths of Autopiloted Drones"

2019 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W2967312944
"Manipulating Drone Position Control"

2019 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W2969636469
"Manipulating Drone Dynamic State Estimation to Compromise Navigation"

2018 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W2886096863
"Attacking altitude estimation in drone navigation"

2018 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W2822867925
"False data injection on EKF-based navigation control"

2017 ▪

Zhenhai Duan; Yingfei Dong; Wenxin Chen;

https://openalex.org/W2744001705
"Scalable name-based inter-domain routing for information-centric networks"

2015 ▪

Zhenhai Duan; Fernando Sanchez; None Sangmun Kim;

https://openalex.org/W2290671633
"A Traceback Attack on Freenet"

2015 ▪ IEEE Transactions on Dependable and Secure Computing

Zhenhai Duan; Yingfei Dong; Guanyu Tian; Todd Baumeister;

https://openalex.org/W2524990718
"Reroute on loop in anonymous peer-to-peer content sharing networks"

2014 ▪

Zhenhai Duan; Yingfei Dong; Guanyu Tian; Todd Baumeister;

https://openalex.org/W2018524787
"Thwarting traceback attack on Freenet"

2013 ▪

Zhenhai Duan; Guanyu Tian; Todd Baumeister; Yingfei Dong;

https://openalex.org/W1990552002
"Using randomized routing to counter routing table insertion attack on Freenet"

2013 ▪

Zhenhai Duan; Yingfei Dong; Guanyu Tian; Todd Baumeister;

https://openalex.org/W1994474563
"A traceback attack on Freenet"

2013 ▪

Zhenhai Duan; Yingfei Dong; Guanyu Tian; Todd Baumeister;

https://openalex.org/W2064138472
"A Routing Table Insertion (RTI) Attack on Freenet"

2012 ▪

Zhenhai Duan; Yingfei Dong; Guanyu Tian; Todd Baumeister;

https://openalex.org/W2537286977
"A Sender-Centric Approach to Detecting Phishing Emails"

2012 ▪

Zhenhai Duan; Fernando Sanchez;

https://openalex.org/W2533061047
"Blocking spam by separating end?user machines from legitimate mail server machines"

2012 ▪ Security and Communication Networks

Zhenhai Duan; Fernando Sanchez; Yingfei Dong;

https://openalex.org/W2174920082
"Detecting Spam Zombies by Monitoring Outgoing Messages"

2011 ▪ IEEE Transactions on Dependable and Secure Computing

Zhenhai Duan; Peng Chen; Fernando Sanchez; Yingfei Dong; Mary Stephenson; James Michael Barker;

https://openalex.org/W2146265555
"Blocking spam by separating end-user machines from legitimate mail server machines"

2011 ▪

Zhenhai Duan; Fernando Sanchez; Yingfei Dong;

https://openalex.org/W2150106467
"An empirical study of behavioral characteristics of spammers: Findings and implications"

2011 ▪ Computer Communications

Zhenhai Duan; None Xin Yuan; K. Gopalan;

https://openalex.org/W2045344741
"A sender-centric approach to spam and phishing control"

2011 ▪

Zhenhai Duan; Fernando Sanchez;

https://openalex.org/W2255926860
"Special Issue on Measurement Based Network Management"

2010 ▪ Journal of Network and Systems Management

Zhenhai Duan; Baek-Young Choi; Sue Moon;

https://openalex.org/W2075243466
"Region-based BGP announcement filtering for improved BGP security"

2010 ▪

Zhenhai Duan; Fernando Sanchez;

https://openalex.org/W2015508120
"Trust-based internet accountability: Requirements and legal ramifications"

2010 ▪

Sudhir Aggarwal; Wayne Liu; Zhenhai Duan; Faye Jones;

https://openalex.org/W2743959248
"MDMap: Assisting Users in Identifying Phishing Emails"

2010 ▪

Zhenhai Duan; Patrick Dwyer;

https://openalex.org/W16568508
"Understanding Forgery Properties of Spam Delivery Paths"

2010 ▪

Zhenhai Duan; Fernando Sanchez; Yingfei Dong;

https://openalex.org/W102473562
"Incorporating Accountability into Internet E-mail"

2009 ▪ Journal of Digital Forensic Practice

Sudhir Aggarwal; Zhenhai Duan; Wayne W. Liu;

https://openalex.org/W1974325021
"Oblivious Routing in Fat-Tree Based System Area Networks With Uncertain Traffic Demands"

2009 ▪ IEEE/ACM Transactions on Networking

Zhenhai Duan; None Xin Yuan; W. Nienaber; R. Melhem;

https://openalex.org/W2029407480
"Detecting Spam Zombies by Monitoring Outgoing Messages"

2009 ▪

Zhenhai Duan; Fernando Sanchez; P. Chen; Y. Dong; M. Stephenson; J. Barker;

https://openalex.org/W2130958646
"Incorporating accountability into internet email"

2009 ▪

Sudhir Aggarwal; Wayne Liu; Zhenhai Duan;

https://openalex.org/W1993458615
"Fair Round-Robin: A Low Complexity Packet Schduler with Proportional and Worst-Case Fairness"

2008 ▪ IEEE Transactions on Computers

Zhenhai Duan; None Xin Yuan;

https://openalex.org/W2112512248
"LID Assignment in InfiniBand Networks"

2008 ▪ IEEE Transactions on Parallel and Distributed Systems

Zhenhai Duan; None Xin Yuan; W. Nienaber;

https://openalex.org/W2115328180
"Controlling IP Spoofing through Interdomain Packet Filters"

2008 ▪ IEEE Transactions on Dependable and Secure Computing

Zhenhai Duan; Xin Yuan; J. Chandrashekar;

https://openalex.org/W2102142177
"E-Crime Investigative Technologies"

2008 ▪

Sudhir Aggarwal; Breno de Medeiros; Zhenhai Duan; Leo Kermes;

https://openalex.org/W2150375489
"Traffic-Aware Inter-Domain Routing for Improved Internet Routing Stability"

2008 ▪

Zhenhai Duan; None Xin Yuan; Peng Chen; Woon Hyung Cho;

https://openalex.org/W2111117573
"On LID assignment in infiniBand networks"

2007 ▪

Zhenhai Duan; None Xin Yuan; W. Nienaber;

https://openalex.org/W2011418279
"Damping BGP route flaps"

2007 ▪ Journal of Communications and Networks

Zhenhai Duan; Zhi-Li Zhang; J. Chandrashekar; J. Krasky; Kuai Xu;

https://openalex.org/W2283689071
"On QoS routing and path establishment in the presence of imprecise state information"

2007 ▪ Journal of Communications and Networks

Zhenhai Duan; None Xin Yuan;

https://openalex.org/W2287681861
"The Design and Development of an Undercover Multipurpose Anti-spoofing Kit (UnMask)"

2007 ▪ Annual Computer Security Applications Conference/Proceedings of the annual Computer Security Applications Conference

Sudhir Aggarwal; Wayne Liu; Zhenhai Duan; Jasbinder Bali; Shahank Sahai; Zhenghui Zhu; Leo Kermes;

https://openalex.org/W4236739052
"The Design and Development of an Undercover Multipurpose Anti-spoofing Kit (UnMask)"

2007 ▪

Sudhir Aggarwal; Wayne Liu; Zhenhai Duan; Jasbinder Bali; Leo Kermes; Shahank Sahai; Zhenghui Zhu;

https://openalex.org/W2130191108
"Validation of a Decision Support System for Method Selection in Utility Construction"

2007 ▪

Zhenhai Duan; J. Matthews; E. Allouche;

https://openalex.org/W2318061391
"Oblivious routing for fat-tree based system area networks with uncertain traffic demands"

2007 ▪ ACM SIGMETRICS Performance Evaluation Review

Zhenhai Duan; None Xin Yuan; W. Nienaber; R. Melhem;

https://openalex.org/W3006800484
"Oblivious routing for fat-tree based system area networks with uncertain traffic demands"

2007 ▪

Zhenhai Duan; None Xin Yuan; W. Nienaber; R. Melhem;

https://openalex.org/W2128210890
"Behavioral Characteristics of Spammers and Their Network Reachability Properties"

2007 ▪

Zhenhai Duan; Xin Yuan; K. Gopalan;

https://openalex.org/W2096779829
"DMTP: Controlling spam through message delivery differentiation"

2006 ▪ Computer Networks

Zhenhai Duan; Yingfei Dong; K. Gopalan;

https://openalex.org/W2114748216
"A Differentiated Message Delivery Architecture to Control Spam"

2006 ▪

Zhenhai Duan; Yingfei Dong; K. Gopalan;

https://openalex.org/W2107223104
"BCSQ: Bin-based Core Stateless Queueing for Scalable Support of Guaranteed Services"

2006 ▪ Proceedings/Proceedings - International Conference on Computer Communications and Networks

Zhenhai Duan; Karthik Parsha;

https://openalex.org/W2089958027
"Towards a Service Oriented Internet"

2006 ▪ IEICE Transactions on Communications

Zhenhai Duan; J. Chandrashekar; Zhi Li Zhang; Y.T. Hou;

https://openalex.org/W1998374333
"Constructing Inter-Domain Packet Filters to Control IP Spoofing Based on BGP Updates"

2006 ▪

Zhenhai Duan; None Xin Yuan; J. Chandrashekar;

https://openalex.org/W2113780533
"DMTP: Controlling Spam Through Message Delivery Differentiation"

2006 ▪ Lecture notes in computer science

Zhenhai Duan; Yingfei Dong; K. Gopalan;

https://openalex.org/W1650037363
"Fundamental trade-offs in aggregate packet scheduling"

2005 ▪ IEEE Transactions on Parallel and Distributed Systems

Zhenhai Duan; Y.T. Hou; Z.-Li. Zhang;

https://openalex.org/W2100011143
"Fundamental trade-offs in aggregate packet scheduling"

2005 ▪

Zhenhai Duan; Zhi-Li Zhang; Y.T. Hou;

https://openalex.org/W2539011865
"FRR: A proportional and worst-case fair round robin scheduler"

2005 ▪

Zhenhai Duan; None Xin Yuan;

https://openalex.org/W2130240399
"Limiting path exploration in GBP"

2005 ▪

Zhenhai Duan; J. Chandrashekar; Z.-L. Zhang; J. Krasky;

https://openalex.org/W1648155216
"Push vs. pull: implications of protocol design on controlling unwanted traffic"

2005 ▪ Conference on Steps to Reducing Unwanted Traffic on Internet

Zhenhai Duan; Yingfei Dong; K. Gopalan;

https://openalex.org/W1536177722
"Damping BGP route flaps"

2005 ▪ IEEE International Conference on Performance, Computing, and Communications, 2004

Zhenhai Duan; Zhi-Li Zhang; J. Chandrashekar; J. Krasky; Kuai Xu;

https://openalex.org/W2142538246
"Exploiting Limited Upstream Bandwidth in Peer-to-Peer Streaming"

2005 ▪

Zhenhai Duan; Yingfei Dong; Ewa Kusmierek;

https://openalex.org/W2112160074
"A hybrid client-assisted streaming architecture: Modeling and analysis"

2004 ▪

Zhenhai Duan; Yingfei Dong; Ewa Kusmierek; David H Du;

https://openalex.org/W2681271584
"On properties of internet exchange points and their impact on as topology and relationship"

2004 ▪

Zhenhai Duan; J. Chandrashekar; Zhi Li Zhang; Kuai Xu;

https://openalex.org/W2343953234
"Damping BGP route flaps"

2004 ▪ IEEE International Conference on Performance, Computing, and Communications, 2004

Zhenhai Duan; Kuai Xu; J. Chandrashekar; J. Krasky; None Zhi-Li Zhang;

https://openalex.org/W4241429700
"A core stateless bandwidth broker architecture for scalable support of guaranteed services"

2004 ▪ IEEE Transactions on Parallel and Distributed Systems

Zhenhai Duan; Lixin Gao; Y.T. Hou;

https://openalex.org/W2156403225
"On Properties of Internet Exchange Points and Their Impact on AS Topology and Relationship"

2004 ▪ Lecture notes in computer science

Zhenhai Duan; Zhi-Li Zhang; J. Chandrashekar; Kuai Xu;

https://openalex.org/W1549014341
"Service overlay networks: slas, qos, and bandwidth provisioning"

2003 ▪ IEEE/ACM Transactions on Networking

Zhenhai Duan; Zhi-Li Zhang; Yiwei Thomas Hou;

https://openalex.org/W2088425351
"Service overlay networks: SLAs, QoS and bandwidth provisioning"

2003 ▪

Zhenhai Duan; Yiwei Thomas Hou; Zhi-Li Zhang;

https://openalex.org/W2111928610
"On scalable network resource management using bandwidth brokers"

2003 ▪

Zhenhai Duan; Zhi-Li Zhang; Y.T. Hou;

https://openalex.org/W1686653828
"On Scalable Support of Quality of Services in the Internet"

2003 ▪

Zhenhai Duan;

https://openalex.org/W101527093
"Service Oriented Internet"

2003 ▪ Lecture notes in computer science

Zhenhai Duan; Zhi-Li Zhang; J. Chandrashekar; Y.T. Hou;

https://openalex.org/W1960360737
"Providing scalable support for multiple QoS guarantees: architecture and mechanisms"

2002 ▪

Zhenhai Duan; Zhi-Li Zhang; Y.T. Hou; T. Chujo;

https://openalex.org/W1841110576
"<title>Bandwidth provisioning for service overlay networks</title>"

2002 ▪ Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE

Zhenhai Duan; Zhi-Li Zhang; Yiwei T. Hou;

https://openalex.org/W2104572182
"Providing Scalable Support for Multiple QoS Guarantees: Architecture and Mechanisms"

2001 ▪

Zhenhai Duan; Yiwei Thomas Hou; Zhi-Li Zhang; T. Chujo;

https://openalex.org/W1560067478
"On Scalable Design of Bandwidth Brokers"

2001 ▪

Zhenhai Duan; Yiwei Thomas Hou; Zhi Li Zhang;

https://openalex.org/W1480067644
"<title>Fundamental trade-offs in aggregate packet scheduling</title>"

2001 ▪ Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE

Zhenhai Duan; Zhi-Li Zhang; Yiwei T. Hou;

https://openalex.org/W2150014775
"Decoupling QoS control from core routers"

2000 ▪

Zhenhai Duan; Yiwei Thomas Hou; Zhi-Li Zhang; Lixin Gao;

https://openalex.org/W4237055529
"Decoupling QoS control from core routers"

2000 ▪ ACM SIGCOMM Computer Communication Review

Zhenhai Duan; Yiwei Thomas Hou; Zhi-Li Zhang; Lixin Gao;

https://openalex.org/W2124842597
"Diagnostics and Modeling of an Argon/Helium Plasma Spray Process"

2000 ▪ Journal of Thermal Spray Technology

Zhenhai Duan; J. Heberlein; L. Beall; J. Schein; M. Stachowicz;

https://openalex.org/W2025106108
"Controls for Plasma Spraying Based on Plasma Jet Stability Analysis"

1998 ▪ Thermal spray

Zhenhai Duan; L. Beall; J. Schein; M. Stachowicz; M.P. Planche; J. Heberlein;

https://openalex.org/W3160459472
"Arc Voltage Fluctuations as an Indication of Spray Torch Anode Condition"

1997 ▪ Thermal spray

Zhenhai Duan; L. Beall; M. Stachowicz; M.P. Planche; J. Heberlein; E. Pfender;

https://openalex.org/W3162048032
"Influence of Shroud Gas Flow and Swirl Magnitude on Arc Jet Stability and Coating Quality in Plasma Spray"

1996 ▪ Thermal spray

Zhenhai Duan; E. Pfender; J. Heberlein; H.C. Chen;

https://openalex.org/W3163098974

Technologies

The Spot Method for Detecting Compromised Computers in a Network

Threats to computer network security are increasing, particularly regarding the “botnet” scenario where computers in a network are infected by malware programs (e.g., viruses, spyware, worms) that enable third parties to take control of the machines without the owners’ knowledge. Compromised computers, also known as “zombies,” can markedly decrease the efficiency of a network.

Current malware detection programs are only capable of detecting known malware agents; however, new malware is continuously being developed so that malware detection programs are chronically behind and require frequent updates. Additionally, most detection methods do not allow for the global monitoring of machines on a network.

Unlike the current malware detection programs that focus on the point of infection, Dr. Duan has developed a new program, SPOT, that focuses on the number of outgoing messages that are originated or forwarded by each computer on a network to identify the presence of compromised machines. SPOT uses three algorithms that were specifically developed for the system. The first algorithm is based on the percentage of spam messages that originate or are forwarded from an internal machine. The second is based on the number spam messages that originate or are forwarded from an internal machine. The third is based on a statistical method called the sequential probability ratio test (SPRT). Importantly, SPOT analyses the total number of messages sent by a machine rather than only analyzing the rate at which they are sent to thwart spammers from purposely slowing the rate of message transmission in order to work around the system. The SPOT system enables individual networks to globally monitor computers on their networks and to automatically and accurately detect and efficiently remove compromised computers from their networks in an online manner. This novel detection method is applicable to a wide range of settings in which computer networks play an essential role.

Applications:

Computer security industry.
needing computer security (e.g., government agencies, financial institutions, research laboratories).

Advantages:

May be incorporated into new or added to existing networks at low cost.
Only a single copy of the SPOT software is needed to protect a network.
Fills security holes left by existing malware detection programs that focus only on the point of intrusion.
May be used in combination with other malware detection programs.
Detects compromised computers quickly and accurately, with low false positive and false negative rates.

Co-Investigator Network

Websites

OpenAlex Works Search Search Google Scholar for Zhenhai Duan

Contact Information

zduan@fsu.edu

1017 ACADEMIC WAY
TALLAHASSEE, FL

Profile QR code