Fanglu Guo

Ph.D. (July 2006)

Experimental Computer Systems Laboratory

Computer Science Department

Stony Brook University

Stony Brook, NY 11794

Contact

E-mail:

Phone: (310) 449-8274

WWW: http://www.ecsl.cs.sunysb.edu/~fanglu/

Welcome to Fanglu Guo's homepage.

Previously I was a Ph.D. candidate in the Department of Computer Science at the State University of New York at Stony Brook. I worked in the Experimental Computer Systems Lab with Prof. Tzi-cker Chiueh.

In July 2006, I got my Ph.D. degree and started working for Symantec Research Labs.

Research Expertise

• Network Security: Spoof Detection, Virtual Machine, Vulnerability Assessment, Buffer Overflow Protection, Traffic Analysis, Protocol Recognition
• Wireless Network: Security, Performance and Dependability, Mobility, Monitoring
• Network Performance and Dependability: Load Balancing, Fault Tolerance
• Router Software: Packet Buffer Management, QoS, Inter-CPU Communication
• Operating Systems: Protocol Stack, Kernel Architecture

Brief Biography

• Symantec Research Labs in Los Angeles, Researcher, 07/2006 - present
• State University of New York at Stony Brook, Ph.D. in Computer Science, 08/2001 - 07/2006
• Huawei Bejing Research Center, Huawei Technologies in Beijing, China, Senior Software Engineer (R & D), 08/1999 - 08/2001
• Institute of Automation, Chinese Academy of Sciences in Beijing, China, M.E. in Electrical Engineering, 08/1996 - 08/1999
• Xi'an Jiaotong University in Xi'an, China, B.E. in Electrical Engineering, 08/1992 - 08/1996

Refereed Publications

1. Fanglu Guo and Tzi-cker Chiueh, ``Software-based TDMA for VoIP over Wireless LAN,'' to appear in Proceedings of IEEE INFOCOM 2007 mini-symposium, May 2007
2. Fu-Hau Hsu, Fanglu Guo, and Tzi-cker Chiueh,`` Scalable Network-based Buffer Overflow Attack Detection ,'' in Proceedings of ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS 2006), December, 2006
3. Yang Yu, Fanglu Guo, and Tzi-cker Chiueh, ``A Virtual Environment for Safe Vulnerability Assessment (VA),'' in IATAC (Information Assurance Technology Analysis Center) IAnewsletter. Volume 9, Number 3, Fall 2006
4. Fanglu Guo, Jiawu Chen and Tzi-cker Chiueh, ``Spoof Detection for Preventing DoS Attacks against DNS Servers,'' in Proceedings of the 26th International Conference on Distributed Computing Systems (ICDCS 2006), July 2006
5. Yang Yu, Fanglu Guo, Susanta Nanda, Lap-chung Lam and Tzi-cker Chiueh, ``A Feather-Weight Virtual Machine for Windows Applications,'' in Proceedings of the 2nd International Conference on Virtual Execution Environments (VEE 2006), June, 2006
6. Fanglu Guo, Yang Yu, and Tzi-cker Chiueh, ``Automated and Safe Vulnerability Assessment,'' in Proceedings of the 21st Annual Computer Security Applications Conference (ACSAC 2005), December 2005 (Outstanding Paper Award)
7. Fanglu Guo and Tzi-cker Chiueh, ``Sequence Number-Based MAC Address Spoof Detection,'' in Proceedings of the 8th International Symposium on Recent Advances in Intrusion Detection (RAID 2005), September 2005
8. Fanglu Guo and Tzi-cker Chiueh, ``Scalable and Robust WLAN Connectivity Using Access Point Array,'' in Proceedings of 2005 International Conference on Dependable Systems and Networks (DSN 2005), June 2005
9. Fanglu Guo, Jiawu Chen, Wei Li, and Tzi-cker Chiueh, ``Experiences in Building a Multihoming Load Balancing System,'' in Proceedings of IEEE INFOCOM 2004, March 2004
10. Tzi-cker Chiueh, Kartik Gopalan, Anindya Neogi, Chang Li, Srikant Sharma, Sheng-Ming Shan, Jiawu Chen, Wei Li, Nikolai Joukov, Jie Zhang, Fu-Hau Hsu, Fanglu Guo, and Sheng-I Doong, ``Sago: A Network Resource Management System for Real-Time Content Distribution,'' in Proceedings of International Conference on Parallel and Distributed Systems (ICPADS 2002), December 2002.
11. Fanglu Guo, Hong Yue, and Dongjie Gao, ``A New Optimal Averaging Level Control Strategy,'' in Chinese Journal of Control and Instruments in Petrochemical Industry, May 1999

Papers in Submission

1. Fanglu Guo, ``Monica: A Loss Resilient TCP Congestion Control Algorithm,''
2. Fanglu Guo and Tzi-cker Chiueh, ``Software-based TDMA for VoIP over Wireless LAN,''
3. Gang Wu, Fanglu Guo, Ashish Raniwala, and Tzi-cker Chiueh, ``Scalable and Transparent Monitoring of Enterprise Wireless LAN Traffic,''

Technical Reports

1. Fanglu Guo, ``Traffic Analysis: from Stateful Firewall to Network Intrusion Detection System, '' RPE Report, January 2004

Current Projects

• Research projects in Symantec Research Labs

Past Projects

Security

• DNS Guard: Protecting DNS from DoS by using cookie for spoof detection. A transparent solution much like a traditional firewall.
• Safe Vulnerability Assessment: Duplicating network applications in Feather-weight Virtual Machine (FVM) to make vulnerability assessment safe.
• Wireless LAN MAC Spoof Detection: Leveraging the sequence number in WLAN frames to detect MAC spoofing without changing access points or stations.
• Network-based Buffer Overflow Attack Detection: Detecting buffer overflow attack on network without changing end hosts.
• Network Traffic Analysis: To tell that when and who is doing what on the network.

Wireless Network

• Access Point Array Load Balancer: Balancing the traffic load among different channels of an access point array
• Wireless LAN MAC Spoof Detection: Leveraging the sequence number in WLAN frames to detect MAC spoofing without changing access points or stations.
• Overlay Network for Transparent Mobility on WLAN: Providing transparent layer 3 mobility support by using overlay network
• Low-cost Wireless LAN-based Sensor Network: Leveraging low-cost programmable access point such as WRT54G to build a sensor network

Network Performance and Dependability

• Multihoming Load Balancer: Balancing the traffic load among different links of multihomed enterprise networks
• Access Point Array Load Balancer: Balancing the traffic load among different channels of an access point array

Last modified: February 28, 2007