Selected Publications

Mohammad Al-Fares, Virginia Beauregard, Kevin Grant, Angus Griffith, Quan Leng, Alexander Lin, Zhuotao Liu, Bill Martinusen, Nikil Mehta, Jeffrey Mogul, Andrew Narver, Anshul Nigham, Sean Smith, Amin Vahdat

USENIX Annual Technical Conference (ATC) 2023

DOI

Cross Container Attacks: The Bewildered eBPF on Clouds

Sec23

Yi He, Roland Guo, Yunlong Xing, Xijia Che, Kun Sun, Zhuotao Liu, Ke Xu, Qi Li

USENIX Security Symposium (Security) 2023

DOI

iSyn: Semi-Automated Smart Contract Synthesis from Legal Financial Agreements

ISSTA23

Pengcheng Fang, Zhenhua Zou, Xusheng Xiao, Zhuotao Liu^✉️

ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA) 2023

DOI

Learning from Limited Heterogeneous Training Data: Meta-Learning for Unsupervised Zero-day Web Attack Detection across Web Domains

CCS23

Peiyang Li, Ye Wang, Qi Li, Zhuotao Liu, Ke Xu, Ju Ren, Zhiying Liu, Ruilin Lin

ACM Conference on Computer and Communications Security (CCS) 2023

DOI

martFL: Enabling Utility-Driven Data Marketplace with a Robust and Verifiable Federated Learning Architecture

CCS23

Qi Li, Zhuotao Liu^✉️, Qi Li, Ke Xu

ACM Conference on Computer and Communications Security (CCS) 2023

DOI Code

Provenance of Training without Training Data: Towards Privacy-Preserving DNN Model Ownership Verification

WWW23

Yunpeng Liu, Kexin Li, Zhuotao Liu, Bihan Wen, Ke Xu, Weiqiang Wang, Wenbiao Zhao, Qi Li

International World Wide Web Conference (WWW) 2023

DOI

Robust Multi-tab Website Fingerprinting Attacks in the Wild

S&P23

Xinhao Deng, Qilei Yin, Zhuotao Liu, Xiyuan Zhao, Qi Li, Mingwei Xu, Ke Xu, Jianping Wu

IEEE Symposium on Security and Privacy (Oakland) 2023

DOI

Secure Inter-domain Routing and Forwarding via Verifiable Forwarding Commitments

Xiaoliang Wang, Zhuotao Liu, Qi Li, Yangfei Guo, Sitong Ling, Jiangou Zhan, Yi Xu, Ke Xu, Jianping Wu

Arxiv Preprint

arxiv

Threshold-Based Routing-Topology Co-Design for Optical Data Center

Peirui Cao, Shizhen Zhao, Dai Zhang, Zhuotao Liu, Mingwei Xu, Min Yee Teh, Yunzhuo Liu, Xinbing Wang, Chenghu Zou

IEEE/ACM Transactions on Networking (TON) 2023

DOI

2022

Automated Multi-Tab Website Fingerprinting Attack

Qilei Yin, Zhuotao Liu, Qi Li, Tao Wang, Qian Wang, Chao Shen, Yixiao Xu

IEEE Transactions on Dependable and Secure Computing (TDSC) 2022

DOI

Back-Propagating System Dependency Impact for Attack Investigation

Sec22

Pengcheng Fang, Peng Gao, Changlin Liu, Erman Ayday, Kangkook Jee, Ting Wang, Tanfang (Fanny) Ye, Zhuotao Liu, Xusheng Xiao

USENIX Security Symposium (Security) 2022

DOI Code

Dynamic Network Security Function Enforcement via Joint Flow and Function Scheduling

Qi Li, Xinhao Deng, Zhuotao Liu^✉️, Yuan Yang, Xiaoyue Zou, Qian Wang, Mingwei Xu, Jianping Wu

IEEE Transactions on Information Forensics and Security (TIFS) 2022

DOI

FlowTele: Remotely Shaping Traffic on Internet-Scale Networks

CoNEXT22

Bo-Rong Chen, Zhuotao Liu^✉️, Fanhui Zeng, Zhoushi Zhu, Siva Phani Keshav Bachu, Yih-Chun Hu

ACM CoNext 2022

DOI

Good Learning, Bad Performance: A Novel Attack Against RL-Based Congestion Control Systems

Zijie Yang, Jiahao Cao, Zhuotao Liu^✉️, Xiaoli Zhang, Kun Sun, Qi Li

IEEE Transactions on Information Forensics and Security (TIFS) 2022

DOI

Make Web3.0 Connected

Zhuotao Liu, Yangxi Xiang, Jian Shi, Peng Gao, Haoyu Wang, Xusheng Xiao, Bihan Wen, Qi Li, Yih-Chun Hu

IEEE Transactions on Dependable and Secure Computing (TDSC) 2022

DOI Code

RapidPatch: Firmware Hotpatching for Real-Time Embedded Devices

Sec22

Yi He, Zhenhua Zou, Kun Sun, Zhuotao Liu, Ke Xu, Qian Wang, Chao Shen, Zhi Wang, Qi Li

USENIX Security Symposium (Security) 2022

DOI

Unsupervised Contextual Anomaly Detection for Database Systems

SIGMOD22

Sainan Li, Qilei Yin, Guoliang Li, Qi Li, Zhuotao Liu, Jinwei Zhu

ACM SIGMOD 2022

DOI

Before 2021

Efficient Forwarding Anomaly Detection in Software-Defined Networks

Qi Li, Yunpeng Liu, Zhuotao Liu^✉️, Peng Zhang, Chunhui Pang

IEEE Transactions on Parallel and Distributed Systems (TPDS) 2021

DOI Code

A Hard Label Black-box Adversarial Attack Against Graph Neural Networks

CCS21

Jiaming Mu, Binghui Wang, Qi Li, Kun Sun, Mingwei Xu, Zhuotao Liu

ACM Conference on Computer and Communications Security (CCS) 2021

DOI arxiv Code

Umbrella: Enabling ISPs to Offer Readily Deployable and Privacy-Preserving DDoS Prevention Services

Zhuotao Liu, Yuan Cao, Min Zhu, Wei Ge

IEEE Transactions on Information Forensics and Security (TIFS) 2019

DOI arxiv Code

Managing Recurrent Virtual Network Updates in Multi-Tenant Datacenters: A System Perspective

TPDS19

Zhuotao Liu, Yuan Cao, Xuewu Zhang, Changping Zhu, Fan Zhang

IEEE Transactions on Parallel and Distributed Systems 2019

DOI

HyperService: Interoperability and Programmability Across Heterogeneous Blockchains

CCS19

Zhuotao Liu, Yangxi Xiang, Jian Shi, Peng Gao, Haoyu Wang, Xusheng Xiao, Bihan Wen, Yih-Chun Hu

ACM Conference on Computer and Communications Security (CCS) 2019

DOI Code Slides

DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps

CCS19

Shengqu Xi, Shao Yang, Xusheng Xiao, Yuan Yao, Yayuan Xiong, Fengyuan Xu, Haoyu Wang, Peng Gao, Zhuotao Liu, Feng Xu, Jian Lu

ACM Conference on Computer and Communications Security (CCS) 2019

DOI Code

Practical Proactive DDoS-Attack Mitigation via Endpoint-Driven In-Network Traffic Control

Zhuotao Liu, Hao Jin, Yih-Chun Hu, Michael Bailey

IEEE/ACM Transactions on Networking (TON) 2018

DOI Code

Enabling Work-Conserving Bandwidth Guarantees for Multi-Tenant Datacenters via Dynamic Tenant-Queue Binding

INFOCOM18

Zhuotao Liu, Kai Chen, Haitao Wu, Shuihai Hu, Yih-Chun Hu, Yi Wang, Gong Zhang

IEEE Conference on Computer Communications (INFOCOM) 2018

DOI arxiv

Enabling Efficient Source and Path Verification via Probabilistic Packet Marking

IWQoS18

Bo Wu, Ke Xu, Qi Li, Zhuotao Liu, Yih-Chun Hu, Martin J. Reed, Meng Shen, Fan Yang

IEEE/ACM 26th International Symposium on Quality of Service 2018

DOI

TorPolice: Towards enforcing service-defined access policies for anonymous communication in the Tor network

ICNP17

Zhuotao Liu, Yushan Liu, Philipp Winter, Prateek Mittal, Yih-Chun Hu

IEEE International Conference on Network Protocols 2017

DOI

MiddlePolice: Toward Enforcing Destination-Defined Policies in the Middle of the Internet

CCS16

Zhuotao Liu, Hao Jin, Yih-Chun Hu, Michael Bailey

ACM Conference on Computer and Communications Security (CCS) 2016

DOI arxiv Code

Selected Publications

✉️ indicates corresponding authors. Undererlined students are from my group.

Full publication list: [google scholar]

Secure Networking and Systems Infrastructure

AI-Driven Traffic Analysis

CertTA: Certified Robustness Made Practical for Learning-Based Traffic Analysis

MM4flow: A Pre-trained Multi-modal Model for Versatile Network Traffic Analysis

TrafficFormer: An Efficient Pre-trained Model for Traffic Data

Low-Quality Training Data Only? A Robust Framework for Detecting Encrypted Malicious Network Traffic

Towards Fine-Grained Webpage Fingerprinting at Scale

Robust Multi-tab Website Fingerprinting Attacks in the Wild

Learning from Limited Heterogeneous Training Data: Meta-Learning for Unsupervised Zero-day Web Attack Detection across Web Domains

Automated Multi-Tab Website Fingerprinting Attack

DDoS Attack Prevention

Effective DDoS Mitigation via ML-Driven In-Network Traffic Shaping

Dynamic Network Security Function Enforcement via Joint Flow and Function Scheduling

Umbrella: Enabling ISPs to Offer Readily Deployable and Privacy-Preserving DDoS Prevention Services

Practical Proactive DDoS-Attack Mitigation via Endpoint-Driven In-Network Traffic Control

MiddlePolice: Toward Enforcing Destination-Defined Policies in the Middle of the Internet

Secure Internet Routing

Learning with Semantics: Towards a Semantics-Aware Routing Anomaly Detection System

Secure Inter-domain Routing and Forwarding via Verifiable Forwarding Commitments

Enabling Efficient Source and Path Verification via Probabilistic Packet Marking

Systems Security

Cross Container Attacks: The Bewildered eBPF on Clouds

Back-Propagating System Dependency Impact for Attack Investigation

RapidPatch: Firmware Hotpatching for Real-Time Embedded Devices

Unsupervised Contextual Anomaly Detection for Database Systems

DeepIntent: Deep Icon-Behavior Learning for Detecting Intention-Behavior Discrepancy in Mobile Apps

TorPolice: Towards enforcing service-defined access policies for anonymous communication in the Tor network

AI and Data Security (with Applied Cryptography)

AI Security

Detection of Adversarial Attacks via Disentangling Natural Images and Perturbations

Provenance of Training without Training Data: Towards Privacy-Preserving DNN Model Ownership Verification

Good Learning, Bad Performance: A Novel Attack Against RL-Based Congestion Control Systems

A Hard Label Black-box Adversarial Attack Against Graph Neural Networks

Federated Learning

Defending Against Data Reconstruction Attacks in Federated Learning: An Information Theory Approach

martFL: Enabling Utility-Driven Data Marketplace with a Robust and Verifiable Federated Learning Architecture

Privacy-Preserving Machine Learning

RingSG: Optimal Secure Vertex-Centric Computation for Collaborative Graph Processing

Pencil: Private and Extensible Collaborative Learning without Non-Colluding Assumption

CoGNN: Towards Secure and Efficient Collaborative Graph Learning

Networking Infrastructure for AI

Datacenter Networking

PRED: Performance-oriented Random Early Detection for Consistently Stable Performance in Datacenters

Change Management in Physical Network Lifecycle Automation

Threshold-Based Routing-Topology Co-Design for Optical Data Center

Efficient Forwarding Anomaly Detection in Software-Defined Networks

Managing Recurrent Virtual Network Updates in Multi-Tenant Datacenters: A System Perspective

Enabling Work-Conserving Bandwidth Guarantees for Multi-Tenant Datacenters via Dynamic Tenant-Queue Binding

Intelligent Network Architecture

Pegasus: A Universal Framework for Scalable Deep Learning Inference on the Dataplane

Brain-on-Switch: Towards Advanced Intelligent Network Dataplane via NN-Driven Traffic Analysis at Line-Speed

An Efficient Design of Intelligent Network Data Plane

FlowTele: Remotely Shaping Traffic on Internet-Scale Networks

Web3.0 and Blockchain

Interoperability

HyperService: Interoperability and Programmability Across Heterogeneous Blockchains

Web3.0 Infra and Application

iSyn: Semi-Automated Smart Contract Synthesis from Legal Financial Agreements

Make Web3.0 Connected

Zero-Knowledge Proof

martFL: Enabling Utility-Driven Data Marketplace with a Robust and Verifiable Federated Learning Architecture

2025

CertTA: Certified Robustness Made Practical for Learning-Based Traffic Analysis

MM4flow: A Pre-trained Multi-modal Model for Versatile Network Traffic Analysis

Pegasus: A Universal Framework for Scalable Deep Learning Inference on the Dataplane

PRED: Performance-oriented Random Early Detection for Consistently Stable Performance in Datacenters

RingSG: Optimal Secure Vertex-Centric Computation for Collaborative Graph Processing

TrafficFormer: An Efficient Pre-trained Model for Traffic Data

2024

Brain-on-Switch: Towards Advanced Intelligent Network Dataplane via NN-Driven Traffic Analysis at Line-Speed

CoGNN: Towards Secure and Efficient Collaborative Graph Learning

Defending Against Data Reconstruction Attacks in Federated Learning: An Information Theory Approach

Detection of Adversarial Attacks via Disentangling Natural Images and Perturbations

Effective DDoS Mitigation via ML-Driven In-Network Traffic Shaping

Learning with Semantics: Towards a Semantics-Aware Routing Anomaly Detection System

Low-Quality Training Data Only? A Robust Framework for Detecting Encrypted Malicious Network Traffic

Pencil: Private and Extensible Collaborative Learning without Non-Colluding Assumption

^✉️ indicates corresponding authors. Undererlined students are from my group.