Now showing items 1-10 of 10

    • Achieving Good End-to-End Service Using Bill-Pay 

      Estan, Cristian; Akella, Aditya; Banerjee, Suman (University of Wisconsin-Madison Department of Computer Sciences, 2006)
    • AFIQ: An Accounting Framework for Inter-Domain QoS with Limited Trust 

      Estan, Cristian; Akella, Aditya; Banerjee, Suman (University of Wisconsin-Madison Department of Computer Sciences, 2007)
    • Backtracking Algorithmic Complexity Attacks Against a NIDS 

      Smith, Randy; Estan, Cristian; Jha, Somesh (University of Wisconsin-Madison Department of Computer Sciences, 2006)
      Network Intrusion Detection Systems (NIDS) have become crucial to securing modern networks. To be effective, a NIDS must be able to counter evasion attempts and operate at or near wire-speed. Failure to do so allows ...
    • Constraint Centric Scheduling Guide 

      Estan, Cristian; Sankaralingam, Karthikeyan; De Carli, Lorenzo; Nowatzki, Tony; Sartin-Tarm, Michael (2013-02-19)
      The advent of architectures with software-exposed resources (Spatial Architectures) has created a demand for universally applicable scheduling techniques. This paper describes our generalized spatial scheduling framework, ...
    • End-Biased Samples for Join Cardinality Estimation 

      Estan, Cristian; Naughton, Jeffrey F. (University of Wisconsin-Madison Department of Computer Sciences, 2005)
      We present a new technique for using samples to estimate join cardinalities. This technique, which we term �end-biased samples,� is inspired by recent work in network traffic measurement. It improves on random samples by ...
    • Flexible Lookup Modules for Rapid Deployment of New Protocols in High-speed Routers 

      De Carli, Lorenzo; Pan, Yi; Kumar, Amit; Estan, Cristian; Sankaralingam, Karthikeyan (University of Wisconsin-Madison Department of Computer Sciences, 2009)
      New protocols for the data link and network layer are being proposed to address limitations of current protocols in terms of scalability, security, and manageability. High speed routers and switches that would need to ...
    • From Dumb Pipes to Rivers of Money: a Network Payment System 

      Estan, Cristian; Banerjee, Suman; Akella, Aditya; Pan, Yi (University of Wisconsin-Madison Department of Computer Sciences, 2007)
      We propose extending the service interface of IP with the ability to carry small payments from the sender to the receiver and to ISPs on the path. This allows an endpoint to purchase improved end to end service for the ...
    • A la carte: An Economic Framework for Multi-ISP Service Quality 

      Estan, Cristian; Akella, Aditya; Banerjee, Suman (University of Wisconsin-Madison Department of Computer Sciences, 2007)
      Internet quality of service is required by many applications such as interactive voice and video that could fuel the further growth of the network, but it is not widely available to end-users. While ISPs are providing QoS ...
    • On Filtering of DDoS Attacks Based on Source Address Prefixes 

      Pack, Gary; Yoon, Jaeyoung; Collins, Eli; Estan, Cristian (University of Wisconsin-Madison Department of Computer Sciences, 2005)
      Distributed denial of service (DDoS) attacks are a grave threat to Internet services and even to the network itself. Widely distributed "zombie" computers subverted by malicious hackers are used to orchestrate massive ...
    • Signature Matching in Network Processing Using SIMD/GPU Architectures 

      Goyal, Neelam; Ormont, Justin; Smith, Randy; Sankaralingam, Karthikeyan; Estan, Cristian (University of Wisconsin-Madison Department of Computer Sciences, 2008)
      Deep packet inspection is becoming prevalent for modern network processing systems. They inspect packet payloads for a variety of reasons, including intrusion detection, traffic policing, and load balancing. The focus of ...