曹家浩｜清华大学｜学者主页

2026

From Unknown to Known: Enhancing BGP Route Origin Validation with Multi-Source Data

Jia Zhang, Shaorui Ren, Andong Chen, Shuhe Wang, Yangyang Wang, Jiahao Cao, Ming Xu, Jiayu Zheng

IEEE Transactions on Information Forensics and Security

DOI

2026

Janus: Enabling Expressive and Efficient ACLs in High-speed RDMA Clouds

Ziteng Chen, Menghao Zhang, Jiahao Cao, Xuzheng Chen, Qiyang Peng, Shicheng Wang, Guanyu Li, Mingwei Xu

Network and Distributed System Security Symposium

DOI

2025

SimBlock:全球互联网路由阻塞模拟与检测系统

李羿志，李江，曹家浩，王旸旸，徐明伟

《清华大学学报(自然科学版)》

DOI

2025

Poster: Uncovering Hidden ASes in ROV Deployment via Temporal Fingerprinting

Zirui Chen, Li Jiang, Shucan Yang, Yuqian Wang, Jiahao Cao, Ming Xu, Haotian Deng, Renjie Xie, Yangyang Wang

Proceedings/Proceedings - International Conference on Network Protocols

DOI

2025

Undermining Delay-based QUIC Congestion Control: A Receiver-driven Attack via Crafted Host Delays

Shaorui Ren, Jia Zhang, Enhuan Dong, Ming Xu, Yixuan Zhang, Jiahao Cao, Jianping Wu

Proceedings/Proceedings - International Conference on Network Protocols

DOI

2025

Fuzzing RPKI Validators with Semantic and Structural Awareness

Zizhi Shang, Jiahao Cao, Zhechao Lin, Yi Liu, Ming Xu, Yangyang Wang, Jiang Li

DOI

2025

GeoWatch: Measuring Geoblocking Practices Towards China at Scale

Yuying Du, Jiahao Cao, Junrui Xu, Yangyang Wang, Jiang Li, Chiung‐Lin Liu, Guozhen Cheng

IEEE/ACM International Symposium on Quality of Service (IWQoS)

DOI

2025

VPGFuzz: Vulnerable Path-Guided Greybox Fuzzing

Zhechao Lin, Jiahao Cao, Xinda Wang, Renjie Xie, Yuxi Zhu, Xiao Li, Qi Lecky Li, Yangyang Wang, Ming Xu

IEEE Transactions on Information Forensics and Security

DOI

2024

Poster: Few-Shot Inter-Domain Routing Threat Detection with Large-Scale Multi-Modal Pre-Training

Yizhi Li, Jiang Li, Jiahao Cao, Renjie Xie, Yangyang Wang, Ming Xu

DOI

2024

Constructing SDN Covert Timing Channels Between Hosts With Unprivileged Attackers

Yuheng Ji, Jiahao Cao, Qi Li, Yan Liu, Tao Wei, Ke Xu, Jianping Wu

IEEE Transactions on Networking

DOI

2024

Poster: Automatic Network Protocol Fingerprint Discovery with Difference-Guided Fuzzing

Yuxi Zhu, Hanyi Peng, Jiahao Cao, Renjie Xie, Xinda Wang, Ming Xu, Jianping Wu

Proceedings/Proceedings - International Conference on Network Protocols

DOI

2024

Unsupervised and Adaptive Tor Website Fingerprinting

Guoqiang Zhang, Jiahao Cao, Ming Xu, Xinhao Deng

Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

DOI

2024

RoLL+: Real-Time and Accurate Route Leak Locating With AS Triplet Features at Scale

Jiang Li, Jiahao Cao, Zili Meng, Renjie Xie, Qi Li, Yuan Yang, Ming Xu

IEEE/ACM Transactions on Networking

DOI

2024

POSTER: Co4U: Efficient and Robust HTTP Message Compression for Edge Computing Networks

Shiguang Zhang, Jiahao Cao, Menghao Zhang, Ming Xu, Wei Han, Yanbin Zhai, Zhiming Zhang

ACM SIGCOMM Conference Posters and Demos

DOI

2024

Cactus: Obfuscating Bidirectional Encrypted TCP Traffic at Client Side

Renjie Xie, Jiahao Cao, Yuxi Zhu, Yixiang Zhang, Yi He, Hanyi Peng, Yixiao Wang, Ming Xu, Kun Sun, Enhuan Dong, Qi Lecky Li, Menghao Zhang, Jiang Li

IEEE Transactions on Information Forensics and Security

DOI

2023

基于区块链技术的去中心化互联网号码资源管理系统

李江，徐明伟，曹家浩，孟子立，张国强

《清华大学学报(自然科学版)》

DOI

2023

Rosetta: Enabling Robust TLS Encrypted Traffic Classification in Diverse Network Environments with TCP-Aware Traffic Augmentation

Renjie Xie, Yixiao Wang, Jiahao Cao, Enhuan Dong, Ming Xu, Kun Sun, Qi Li, Licheng Shen, Menghao Zhang

ACM Turing Award Celebration Conference - China (ACM TURC)

DOI

2023

RoLL: Real-Time and Accurate Route Leak Location with AS Triplet Features

Jiang Li, Jiahao Cao, Zili Meng, Renjie Xie, Ming Xu

International Conference on Communications

DOI

2022

The LOFT Attack: Overflowing SDN Flow Tables at a Low Rate

Jiahao Cao, Ming Xu, Qi Lecky Li, Kun Sun, Yuan Yang

IEEE/ACM Transactions on Networking

DOI

2022

Less is More: Mitigating Tor Traffic Correlation with Distance-Aware Path Selection

Guoqiang Zhang, Jiahao Cao, Ming Xu, Qi Lecky Li

DOI

2022

SysCap: Profiling and Crosschecking Syscall and Capability Configurations for Docker Images

Yunlong Xing, Jiahao Cao, Xinda Wang, Sadegh Torabi, Kun Sun, Fei Yan, Qi Lecky Li

IEEE Conference on Communications and Network Security

DOI

2022

Disrupting the SDN Control Channel via Shared Links: Attacks and Countermeasures

Renjie Xie, Jiahao Cao, Qi Lecky Li, Kun Sun, Guofei Gu, Ming Xu, Yuan Yang

IEEE/ACM Transactions on Networking

DOI

2022

The devil is in the detail: Generating system call whitelist for Linux seccomp

Yunlong Xing, Jiahao Cao, Kun Sun, Fei Yan, Shengye Wan

Future Generation Computer Systems

DOI

2022

Auter: Automatically Tuning Multi-layer Network Buffers in Long-Distance Shadowsocks Networks

Xu He, Jiahao Cao, Shu Wang, Kun Sun, Lisong Xu, Qi Lecky Li

DOI

2022

Enhancing malware analysis sandboxes with emulated user behavior

Songsong Liu, Pengbin Feng, Shu Wang, Kun Sun, Jiahao Cao

Computers & Security

DOI

2022

Consistency is All I Ask: Attacks and Countermeasures on the Network Context of Distributed Honeypots

Songsong Liu, Pengbin Feng, Jiahao Cao, Xu He, Tommy Chin, Kun Sun, Qi Lecky Li

Lecture notes in computer science

DOI

2022

Good Learning, Bad Performance: A Novel Attack Against RL-Based Congestion Control Systems

Zijie Yang, Jiahao Cao, Zhuotao Liu, Xiaoli Zhang, Kun Sun, Qi Lecky Li

IEEE Transactions on Information Forensics and Security

DOI

2021

Try before You Buy: Privacy-preserving Data Evaluation on Cloud-based Machine Learning Data Marketplace

Qiyang Song, Jiahao Cao, Kun Sun, Qi Lecky Li, Ke Xu

Annual Computer Security Applications Conference

DOI

2021

Hopping on Spectrum: Measuring and Boosting a Large-scale Dual-band Wireless Network

Haibo Wang, Tao Gao, Weizhen Dang, Jing'an Xue, Jiahao Cao, Fenghua Li, Jilong Wang

Proceedings/Proceedings - International Conference on Network Protocols

DOI

2020

SAP-SSE: Protecting Search Patterns and Access Patterns in Searchable Symmetric Encryption

Qiyang Song, Zhuotao Liu, Jiahao Cao, Kun Sun, Qi Lecky Li, Cong Wang

IEEE Transactions on Information Forensics and Security

DOI

2020

When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN

Jiahao Cao, Renjie Xie, Kun Sun, Qi Lecky Li, Guofei Gu, Ming Xu

Network and Distributed System Security Symposium

DOI

2020

CloudDLP: Transparent and Scalable Data Sanitization for Browser-Based Cloud Storage

Peiyi Han, Chuanyi Liu, Jiahao Cao, Shaoming Duan, Hezhong Pan, Zekun Cao, Binxing Fang

IEEE Access

DOI

2019

Flow Table Overflow Attacks

Qi Lecky Li, Jiahao Cao, Ming Xu, Kun Sun

Springer eBooks

DOI

2019

cSFC: Building Credible Service Function Chain on the Cloud

Shengsheng Yao, Ming Xu, Qi Lecky Li, Jiahao Cao, Qiyang Song

Globecom

DOI

2019

The CrossPath Attack: Disrupting the SDN Control Channel via Shared Links.

Jiahao Cao, Qi Li, Renjie Xie, Kun Sun, Guofei Gu, Ming Xu, Yuan Yang

USENIX Security Symposium

2019

Covert Channels in SDN: Leaking Out Information from Controllers to End Hosts

Jiahao Cao, Kun Sun, Qi Lecky Li, Ming Xu, Zijie Yang, Kyung Joon Kwak, Jason Li

Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

DOI

2018

Realtime DDoS Defense Using COTS SDN Switches via Adaptive Correlation Analysis

Jing Zheng, Qi Lecky Li, Guofei Gu, Jiahao Cao, David K. Y. Yau, Jianping Wu

IEEE Transactions on Information Forensics and Security

DOI

2018

Disrupting SDN via the Data Plane: A Low-Rate Flow Table Overflow Attack

Jiahao Cao, Ming Xu, Qi Lecky Li, Kun Sun, Yuan Yang, Jing Zheng

Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

DOI

2018

TSA: A Two-Phase Scheme Against Amplification DDoS Attack in SDN

Zheng Liu, Ming Xu, Jiahao Cao, Qi Lecky Li

Communications in computer and information science

DOI

精选作品

期刊论文

From Unknown to Known: Enhancing BGP Route Origin Validation with Multi-Source Data

Janus: Enabling Expressive and Efficient ACLs in High-speed RDMA Clouds

SimBlock:全球互联网路由阻塞模拟与检测系统

Poster: Uncovering Hidden ASes in ROV Deployment via Temporal Fingerprinting

Undermining Delay-based QUIC Congestion Control: A Receiver-driven Attack via Crafted Host Delays

Fuzzing RPKI Validators with Semantic and Structural Awareness

GeoWatch: Measuring Geoblocking Practices Towards China at Scale

VPGFuzz: Vulnerable Path-Guided Greybox Fuzzing

Poster: Few-Shot Inter-Domain Routing Threat Detection with Large-Scale Multi-Modal Pre-Training

Constructing SDN Covert Timing Channels Between Hosts With Unprivileged Attackers

Poster: Automatic Network Protocol Fingerprint Discovery with Difference-Guided Fuzzing

Unsupervised and Adaptive Tor Website Fingerprinting

RoLL+: Real-Time and Accurate Route Leak Locating With AS Triplet Features at Scale

POSTER: Co4U: Efficient and Robust HTTP Message Compression for Edge Computing Networks

Cactus: Obfuscating Bidirectional Encrypted TCP Traffic at Client Side

基于区块链技术的去中心化互联网号码资源管理系统

Rosetta: Enabling Robust TLS Encrypted Traffic Classification in Diverse Network Environments with TCP-Aware Traffic Augmentation

RoLL: Real-Time and Accurate Route Leak Location with AS Triplet Features

The LOFT Attack: Overflowing SDN Flow Tables at a Low Rate

Less is More: Mitigating Tor Traffic Correlation with Distance-Aware Path Selection

SysCap: Profiling and Crosschecking Syscall and Capability Configurations for Docker Images

Disrupting the SDN Control Channel via Shared Links: Attacks and Countermeasures

The devil is in the detail: Generating system call whitelist for Linux seccomp

Auter: Automatically Tuning Multi-layer Network Buffers in Long-Distance Shadowsocks Networks

Enhancing malware analysis sandboxes with emulated user behavior

Consistency is All I Ask: Attacks and Countermeasures on the Network Context of Distributed Honeypots

Good Learning, Bad Performance: A Novel Attack Against RL-Based Congestion Control Systems

Try before You Buy: Privacy-preserving Data Evaluation on Cloud-based Machine Learning Data Marketplace

Hopping on Spectrum: Measuring and Boosting a Large-scale Dual-band Wireless Network

SAP-SSE: Protecting Search Patterns and Access Patterns in Searchable Symmetric Encryption

When Match Fields Do Not Need to Match: Buffered Packets Hijacking in SDN

CloudDLP: Transparent and Scalable Data Sanitization for Browser-Based Cloud Storage

Flow Table Overflow Attacks

cSFC: Building Credible Service Function Chain on the Cloud

The CrossPath Attack: Disrupting the SDN Control Channel via Shared Links.

Covert Channels in SDN: Leaking Out Information from Controllers to End Hosts

Realtime DDoS Defense Using COTS SDN Switches via Adaptive Correlation Analysis

Disrupting SDN via the Data Plane: A Low-Rate Flow Table Overflow Attack

TSA: A Two-Phase Scheme Against Amplification DDoS Attack in SDN

会议论文

Fingerprinting SDN Applications via Encrypted Control Traffic.