VLDB 2026 Research / reviewers in the wild / expert
Mark Handley
dblp:h/MarkHandley · also Mark James Handley
· DBLP profile ↗
54ranked-venue papers
10as first author
4since 2021 · last 2026
0000-0001-8509-2001ORCID · corroborated
Domains — the database's venue-derived domains; a paper can count in several
Computer networks · 46 · 9 first-author · 3 since 2021Systems, architecture and hardware · 3Security and privacy · 3 · 1 first-authorHuman-computer interaction and ubiquitous computing · 1Theory of computation · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Computer networks
36 papers |
Routing and switching · 30% Transport protocols and congestion control · 22% Datacenter networks · 11% | |
| Network and information security
5 papers |
Network security · 54% Usable security · 38% Systems and software security · 8% | |
| Computer architecture, parallel and distributed computing, and storage systems
7 papers |
Storage systems · 38% Cloud and datacenter computing · 38% Distributed systems · 21% |
Topics — the 30 heaviest of 85, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Usable security › security operations › security analytics › malicious activity detection
spoofed traffic detection |
0.8 | 1 | 2024 | Bad Packets Come Back, Worse Ones Don't · SIGCOMM 2024 |
Network security
traffic analysis |
0.8 | 1 | 2024 | Bad Packets Come Back, Worse Ones Don't · SIGCOMM 2024 |
Transport protocols and congestion control › multipath transport
multipath TCP |
0.5 | 4 | 2012 | How Hard Can It Be? Designing and Implementing a Deployable Multipath TCP · NSDI 2012 Improving datacenter performance and robustness with multipath TCP · SIGCOMM 2011 Design, Implementation and Evaluation of Congestion Control for Multipath TCP · NSDI 2011 |
Routing and switching
inter-domain routing |
0.4 | 3 | 2024 | Bad Packets Come Back, Worse Ones Don't · SIGCOMM 2024 LOUP: The Principles and Practice of Intra-Domain Route Dissemination · NSDI 2013 HLP: a next generation inter-domain routing protocol · SIGCOMM 2005 |
Routing and switching › routing protocol
intra-domain routing |
0.3 | 1 | 2018 | On low-latency-capable topologies, and their impact on the design of intra-domain routing · SIGCOMM 2018 |
Routing and switching › routing algorithms
minimum delay routing |
0.3 | 1 | 2018 | On low-latency-capable topologies, and their impact on the design of intra-domain routing · SIGCOMM 2018 |
Network optimization and economics › network design
network topology design |
0.3 | 1 | 2018 | On low-latency-capable topologies, and their impact on the design of intra-domain routing · SIGCOMM 2018 |
Routing and switching
switch buffer management |
0.3 | 1 | 2017 | Re-architecting datacenter networks and stacks for low latency and high performance · SIGCOMM 2017 |
Transport protocols and congestion control
transport protocols |
0.3 | 1 | 2017 | Re-architecting datacenter networks and stacks for low latency and high performance · SIGCOMM 2017 |
Routing and switching
multipath routing |
0.2 | 2 | 2018 | Improving datacenter performance and robustness with multipath TCP · SIGCOMM 2011 On low-latency-capable topologies, and their impact on the design of intra-domain routing · SIGCOMM 2018 |
Internet of things and sensor networks › wireless sensor network
in-network processing |
0.2 | 1 | 2015 | In-Net: in-network processing for the masses · EuroSys 2015 |
Cellular and mobile networks › interference management
interference mitigation |
0.2 | 1 | 2015 | COPA: cooperative power allocation for interfering wireless networks · CoNEXT 2015 |
Physical-layer communications
MIMO |
0.2 | 1 | 2015 | COPA: cooperative power allocation for interfering wireless networks · CoNEXT 2015 |
Software-defined and programmable networks
network function virtualization |
0.2 | 1 | 2015 | In-Net: in-network processing for the masses · EuroSys 2015 |
Physical-layer communications
power allocation |
0.2 | 1 | 2015 | COPA: cooperative power allocation for interfering wireless networks · CoNEXT 2015 |
Wireless networking
WLAN |
0.2 | 1 | 2015 | COPA: cooperative power allocation for interfering wireless networks · CoNEXT 2015 |
Wireless networking
medium access control |
0.2 | 1 | 2014 | HACK: Hierarchical ACKs for Efficient Wireless Medium Utilization · USENIX ATC 2014 |
Operating systems
network stack |
0.2 | 1 | 2014 | Network stack specialization for performance · SIGCOMM 2014 |
Datacenter networks
datacenter transport |
0.2 | 1 | 2022 | An edge-queued datagram service for all datacenter traffic · NSDI 2022 |
Transport protocols and congestion control
multipath transport |
0.2 | 2 | 2012 | Design, Implementation and Evaluation of Congestion Control for Multipath TCP · NSDI 2011 How Hard Can It Be? Designing and Implementing a Deployable Multipath TCP · NSDI 2012 |
Routing and switching
routing |
0.2 | 1 | 2013 | LOUP: The Principles and Practice of Intra-Domain Route Dissemination · NSDI 2013 |
Transport protocols and congestion control › congestion control fairness
TCP-friendly congestion control |
0.2 | 5 | 2007 | Fairer TCP-friendly congestion control protocol for multimedia streaming applications · CoNEXT 2007 Extending equation-based congestion control to multicast applications · SIGCOMM 2001 Quality Adaptation for Congestion Controlled Video Playback over the Internet · SIGCOMM 1999 |
Routing and switching › routing protocol
routing protocol design |
0.1 | 2 | 2013 | HLP: a next generation inter-domain routing protocol · SIGCOMM 2005 LOUP: The Principles and Practice of Intra-Domain Route Dissemination · NSDI 2013 |
Routing and switching
traffic engineering |
0.1 | 1 | 2018 | On low-latency-capable topologies, and their impact on the design of intra-domain routing · SIGCOMM 2018 |
Information retrieval › distributed information retrieval
distributed search |
0.1 | 1 | 2009 | ROAR: increasing the flexibility and performance of distributed search · SIGCOMM 2009 |
Datacenter networks
incast |
0.1 | 1 | 2017 | Re-architecting datacenter networks and stacks for low latency and high performance · SIGCOMM 2017 |
Operating systems › resource management › memory management
buffer cache |
0.1 | 1 | 2017 | Disk|Crypt|Net: rethinking the stack for high-performance video streaming · SIGCOMM 2017 |
Routing and switching › packet forwarding
high-speed packet forwarding |
0.1 | 1 | 2008 | Towards high performance virtual routers on commodity hardware · CoNEXT 2008 |
Routing and switching › router architecture
software router |
0.1 | 1 | 2008 | Towards high performance virtual routers on commodity hardware · CoNEXT 2008 |
Systems and software security
operating system security |
0.1 | 1 | 2008 | Wedge: Splitting Applications into Reduced-Privilege Compartments · NSDI 2008 |
Methods — techniques the papers use, named apart from their topics
simulation · 0.9end-to-end encryption · 0.9PCIe flash storage · 0.9kernel bypass · 0.4hardware offload · 0.4measurement · 0.3hardware implementation · 0.3per-subcarrier allocation · 0.2nulling · 0.2cooperative power allocation · 0.2adaptive query routing · 0.2application compartmentalization · 0.2multipath transport · 0.1ubiquitous encryption · 0.1demonstration · 0.1core mapping · 0.1real-time decryption · 0.1cryptanalysis · 0.1
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Characterizing lowest-delay paths in low earth orbit satellite networksabstractModern networks of Low Earth Orbit (LEO) satellites promise to offer low-latency connectivity between any pair of devices on Earth. However, as the length of inter-satellite links constantly changes, the lowest-delay paths between satellites change over time even if the network topology does not. In this paper, we characterize the lowest-delay paths in LEO satellite networks whose topologies are lattice graphs. We show how the shape of these paths can be determined by knowing the satellites’ orbits, their movement direction and the topological positions of source and destination satellites. Our characterization has the potential to inspire several practical applications, including fast, resource-efficient routing algorithms and protocols. Stefano Vissicchio, Mark Handley |
Theor. Comput. Sci. | 2 |
| 2024 | Bad Packets Come Back, Worse Ones Don'tabstractISPs may notice that traffic from certain sources is entering their network at an unexpected location, but it is hard to know if this represents a problem or is just normal spoofed background noise. If such traffic is not spoofed, it would be useful to generate alerts, but alerting on background noise is not useful. Petros Gigis, Mark Handley, Stefano Vissicchio |
SIGCOMM | 2 |
| 2022 | An edge-queued datagram service for all datacenter traffic
Vladimir Andrei Olteanu, Haggai Eran, Dragos Dumitrescu, Adrian Popa, Cristi Baciu, Mark Silberstein, Georgios Nikolaidis, Mark Handley, Costin Raiciu |
NSDI | 8 |
| 2021 | Stats 101 in P4: Towards In-Switch Anomaly DetectionabstractData plane programmability is greatly improving network monitoring. Most new proposals rely on controllers pulling information (e.g., sketches or packets) from the data plane. This architecture is not a good fit for tasks requiring high reactivity, such as failure recovery, attack mitigation, and so on. Focusing on these tasks, we argue for a different architecture, where the data plane autonomously detects anomalies and pushes alerts to the controller. As a first step, we demonstrate that statistical checks can be implemented in P4 by revisiting definition and online computation of statistical measures. We collect our techniques in a P4 library, and showcase how they enable in-switch anomaly detection. Sam Gao, Mark Handley, Stefano Vissicchio |
HotNets | 2 |
| 2019 | Using ground relays for low-latency wide-area routing in megaconstellationsabstractLarge low earth orbit satellite constellations have the potential to provide global high-capacity low-latency Internet access, but early deployments lack dedicated inter-satellite links (ISLs). We investigate the use of ground-based relays as a substitute for ISLs to provide low-latency wide area networking. We examine how to route such huge networks, potentially using user-terminals as relays, and devise an enhanced routing algorithm to cope. We show that even without ISLs, such networks can still beat optical fiber networks for latency. Mark Handley |
HotNets | 1 |
| 2018 | Delay is Not an Option: Low Latency Routing in SpaceabstractSpaceX has filed plans with the US Federal Communications Committee (FCC) to build a constellation of 4,425 low Earth orbit communication satellites. It will use phased array antennas for up and downlinks and laser communication between satellites to provide global low-latency high bandwidth coverage. To understand the latency propertes of such a network, we built a simulator based on public details from the FCC filings. We evaluate how to use the laser links to provide a network, and look at the problem of routing on this network. We provide a preliminary evaluation of how well such a network can provide low-latency communications, and examine its multipath properties. We conclude that a network built in this manner can provide lower latency communications than any possible terrestrial optical fiber network for communications over distances greater than about 3000 km. Mark Handley |
HotNets | 1 |
| 2018 | On low-latency-capable topologies, and their impact on the design of intra-domain routingabstractAn ISP's customers increasingly demand delivery of their traffic without congestion and with low latency. The ISP's topology, routing, and traffic engineering, often over multiple paths, together determine congestion and latency within its backbone. We first consider how to measure a topology's capacity to route traffic without congestion and with low latency. We introduce low-latency path diversity (LLPD), a metric that captures a topology's flexibility to accommodate traffic on alternative low-latency paths. We explore to what extent 116 real backbone topologies can, regardless of routing system, keep latency low when demand exceeds the shortest path's capacity. We find, perhaps surprisingly, that topologies with good LLPD are precisely those where routing schemes struggle to achieve low latency without congestion. We examine why these schemes perform poorly, and offer an existence proof that a practical routing scheme can achieve a topology's potential for congestion-free, low-delay routing. Finally we examine implications for the design of backbone topologies amenable to achieving high capacity and low delay. Nikola Gvozdiev, Stefano Vissicchio, Brad Karp, Mark Handley |
SIGCOMM | 4 |
| 2017 | Low-Latency Routing on Mesh-Like BackbonesabstractEarly in in the Internet's history, routing within a single provider's WAN centered on placing traffic on the shortest path. More recent traffic engineering efforts aim to reduce congestion and/or increase utilization within the status quo of greedy shortest-path first routing on a sparse topology. In this paper, we argue that this status quo of routing and topology is fundamentally at odds with placing traffic so as to minimize latency for users while avoiding congestion. We advocate instead provider backbone topologies that are more mesh-like, and hence better at providing multiple low-latency paths, and a routing system that directly considers latency minimization and congestion avoidance while dynamically placing traffic on multiple unequal-cost paths. We offer a research agenda for achieving this new low-latency approach to WAN topology design and routing. Nikola Gvozdiev, Stefano Vissicchio, Brad Karp, Mark Handley |
HotNets | 4 |
| 2017 | Re-architecting datacenter networks and stacks for low latency and high performanceabstractModern datacenter networks provide very high capacity via redundant Clos topologies and low switch latency, but transport protocols rarely deliver matching performance. We present NDP, a novel data-center transport architecture that achieves near-optimal completion times for short transfers and high flow throughput in a wide range of scenarios, including incast. NDP switch buffers are very shallow and when they fill the switches trim packets to headers and priority forward the headers. This gives receivers a full view of instantaneous demand from all senders, and is the basis for our novel, high-performance, multipath-aware transport protocol that can deal gracefully with massive incast events and prioritize traffic from different senders on RTT timescales. We implemented NDP in Linux hosts with DPDK, in a software switch, in a NetFPGA-based hardware switch, and in P4. We evaluate NDP's performance in our implementations and in large-scale simulations, simultaneously demonstrating support for very low-latency and high throughput. Mark Handley, Costin Raiciu, Alexandru Agache, Andrei Voinescu, Andrew W. Moore 0002, Gianni Antichi, Marcin Wójcik |
SIGCOMM | 1 |
| 2017 | Disk|Crypt|Net: rethinking the stack for high-performance video streamingabstractConventional operating systems used for video streaming employ an in-memory disk buffer cache to mask the high latency and low throughput of disks. However, data from Netflix servers show that this cache has a low hit rate, so does little to improve throughput. Latency is not the problem it once was either, due to PCIe-attached flash storage. With memory bandwidth increasingly becoming a bottleneck for video servers, especially when end-to-end encryption is considered, we revisit the interaction between storage and networking for video streaming servers in pursuit of higher performance. Ilias Marinos, Robert N. M. Watson, Mark Handley, Randall R. Stewart |
SIGCOMM | 3 |
| 2015 | COPA: cooperative power allocation for interfering wireless networksabstractAs 802.11 wireless networks proliferate, interference becomes increasingly severe, particularly in dense, urban environments. These networks are usually operated by different users (e.g., tenants in apartments). In this paper, we develop techniques for mitigating interference between such loosely cooperating 802.11 MIMO APs and clients, which do not share a high-speed wired backplane or central controller. We propose CoOperative Power Allocation (COPA), an approach to concurrent wireless medium access that combines fine-grained, per-subcarrier power allocation, nulling, and multi-stream transmission to claim capacity that status-quo approaches cannot. Jointly turning these knobs allows COPA to allocate subcarriers to senders partially, rather than all-or-nothing, and to embrace a measure of interference when doing so increases capacity. Georgios Nikolaidis, Mark Handley, Kyle Jamieson, Brad Karp |
CoNEXT | 2 |
| 2015 | In-Net: in-network processing for the massesabstractNetwork Function Virtualization is pushing network operators to deploy commodity hardware that will be used to run middlebox functionality and processing on behalf of third parties: in effect, network operators are slowly but surely becoming in-network cloud providers. The market for innetwork clouds is large, ranging from content providers, mobile applications and even end-users. Radu Stoenescu, Vladimir Andrei Olteanu, Matei Popovici, Mohamed Ahmed 0001, Roberto Bifulco, Filipe Manco, Felipe Huici, Georgios Smaragdakis, Mark Handley, Costin Raiciu |
EuroSys | 10 |
| 2014 | FUBAR: Flow Utility Based RoutingabstractWe present FUBAR, a system that reduces congestion and maximizes the utility of the entire network by installing new routes and changing the traffic load on existing ones. FUBAR works offline to periodically adjust the distribution of traffic on paths. It requires neither changes to end hosts nor precise prior knowledge of the traffic matrix. We demonstrate that even in the presence of traffic from all network devices to all other devices, FUBAR can optimize a real-world core-level network in a matter of minutes. Nikola Gvozdiev, Brad Karp, Mark Handley |
HotNets | 3 |
| 2014 | Network stack specialization for performanceabstractContemporary network stacks are masterpieces of generality, supporting many edge-node and middle-node functions. Generality comes at a high performance cost: current APIs, memory models, and implementations drastically limit the effectiveness of increasingly powerful hardware. Generality has historically been required so that individual systems could perform many functions. However, as providers have scaled services to support millions of users, they have transitioned toward thousands (or millions) of dedicated servers, each performing a few functions. We argue that the overhead of generality is now a key obstacle to effective scaling, making specialization not only viable, but necessary. Ilias Marinos, Robert N. M. Watson, Mark Handley |
SIGCOMM | 3 |
| 2014 | HACK: Hierarchical ACKs for Efficient Wireless Medium Utilization
Lynne Salameh, Astrit Zhushi, Mark Handley, Kyle Jamieson, Brad Karp |
USENIX ATC | 3 |
| 2013 | Network stack specialization for performanceabstractContemporary network stacks are masterpieces of generality, supporting a range of edge-node and middle-node functions. This generality comes at significant performance cost: current APIs, memory models, and implementations drastically limit the effectiveness of increasingly powerful hardware. Generality has historically been required to allow individual systems to perform many functions. However, as providers have scaled up services to support hundreds of millions of users, they have transitioned toward many thousands (or even millions) of dedicated servers performing narrow ranges of functions. We argue that the overhead of generality is now a key obstacle to effective scaling, making specialization not only viable, but necessary. Ilias Marinos, Robert N. M. Watson, Mark Handley |
HotNets | 3 |
| 2013 | LOUP: The Principles and Practice of Intra-Domain Route Dissemination
Nikola Gvozdiev, Brad Karp, Mark Handley |
NSDI | 3 |
| 2012 | LOUP: who's afraid of the big bad loop?abstractWe consider the intra-AS route dissemination problem from first principles, and illustrate that when known route dissemination techniques propagate even a single external routing change, they can cause transient anomalies. These anomalies are not fundamental; they are artifacts of the order in which existing proposals disseminate routes. We show that carefully ordering route updates avoids transient looping and black holes. Perhaps surprisingly, this ordering may be enforced in a completely distributed fashion, while retaining familiar correctness, scalability, and convergence properties. Nikola Gvozdiev, Brad Karp, Mark Handley |
HotNets | 3 |
| 2012 | How Hard Can It Be? Designing and Implementing a Deployable Multipath TCP
Costin Raiciu, Christoph Paasch, Sébastien Barré, Alan Ford, Michio Honda, Fabien Duchene 0001, Olivier Bonaventure, Mark Handley |
NSDI | 8 |
| 2011 | Is it still possible to extend TCP?abstractWe've known for a while that the Internet has ossified as a result of the race to optimize existing applications or enhance security. NATs, performance-enhancing-proxies,firewalls and traffic normalizers are only a few of the middleboxes that are deployed in the network and look beyond the IP header to do their job. IP itself can't be extended because "IP options are not an option". Is the same true for TCP? Michio Honda, Yoshifumi Nishida, Costin Raiciu, Adam Greenhalgh, Mark Handley, Hideyuki Tokuda |
Internet Measurement Conference | 5 |
| 2011 | Design, Implementation and Evaluation of Congestion Control for Multipath TCP
Damon Wischik, Costin Raiciu, Adam Greenhalgh, Mark Handley |
NSDI | 4 |
| 2011 | Improving datacenter performance and robustness with multipath TCPabstractThe latest large-scale data centers offer higher aggregate bandwidth and robustness by creating multiple paths in the core of the net- work. To utilize this bandwidth requires different flows take different paths, which poses a challenge. In short, a single-path transport seems ill-suited to such networks. Costin Raiciu, Sébastien Barré, Christopher Pluntke, Adam Greenhalgh, Damon Wischik, Mark Handley |
SIGCOMM | 6 |
| 2010 | Data center networking with multipath TCPabstractRecently new data center topologies have been proposed that offer higher aggregate bandwidth and location independence by creating multiple paths in the core of the network. To effectively use this bandwidth requires ensuring different flows take different paths, which poses a challenge. Costin Raiciu, Christopher Pluntke, Sébastien Barré, Adam Greenhalgh, Damon Wischik, Mark Handley |
HotNets | 6 |
| 2010 | Experimenting with multipath TCPabstractIt is becoming the norm for small mobile devices to have access to multiple technologies for connecting to the Internet. This gives researchers an increasing interest for solutions allowing to use efficiently several communication mediums. We propose a demonstration of our Multipath TCP implementation for Linux, that allows spreading a single TCP flow across multiple Internet paths, without requiring any change to applications. The demonstration will involve a real Internet communication with MPTCP, with simultaneous use of several paths, as well as a demonstration of MPTCP failover capability. Sébastien Barré, Olivier Bonaventure, Costin Raiciu, Mark Handley |
SIGCOMM | 4 |
| 2010 | The Case for Ubiquitous Transport-Level Encryption
Andrea Bittau, Michael Hamburg, Mark Handley, David Mazières, Dan Boneh |
USENIX Security Symposium | 3 |
| 2009 | Improved Forwarding Architecture and Resource Management for Multi-Core Software RoutersabstractRecent technological advances in commodity server architectures, with multiple multi-core CPUs, integrated memory controllers, high-speed interconnects and enhanced network interface cards, provide substantial computational capacity and thus an attractive platform for packet forwarding. However, to exploit this available capacity, we need a suitable software platform that allows effective parallel packet processing and resource management. In this paper, we at first introduce an improved forwarding architecture for software routers that enhances parallelism by exploiting hardware classification and multi-queue support, already available in recent commodity network interface cards. After evaluating the original scheduling algorithm of the widely-used Click modular router, we propose solutions for extending this scheduler for improved fairness, throughput and more precise resource management. To illustrate the potential benefits of our proposal, we implement and evaluate a few key elements of our overall design. Norbert Egi, Adam Greenhalgh, Mark Handley, Gianluca Iannaccone, Maziar Manesh, Laurent Mathy, Sylvia Ratnasamy |
NPC | 3 |
| 2009 | ROAR: increasing the flexibility and performance of distributed searchabstractTo search the web quickly, search engines partition the web index over many machines, and consult every partition when answering a query. To increase throughput, replicas are added for each of these machines. The key parameter of these algorithms is the trade-off between replication and partitioning: increasing the partitioning level improves query completion time since more servers handle the query, but may incur non-negligible startup costs for each sub-query. Finding the right operating point and adapting to it can significantly improve performance and reduce costs. Costin Raiciu, Felipe Huici, Mark Handley, David S. Rosenblum |
SIGCOMM | 3 |
| 2008 | Towards high performance virtual routers on commodity hardwareabstractModern commodity hardware architectures, with their multiple multi-core CPUs and high-speed system interconnects, exhibit tremendous power. In this paper, we study performance limitations when building both software routers and software virtual routers on such systems. We show that the fundamental performance bottleneck is currently the memory system, and that through careful mapping of tasks to CPU cores, we can achieve forwarding rates of 7 million minimum-sized packets per second on mid-range server-class systems, thus demonstrating the viability of software routers. We also find that current virtualisation systems, when used to provide forwarding engine virtualisation, yield aggregate performance equivalent to that of a single software router, a tenfold improvement on current virtual router platform performance. Finally, we identify principles for the construction of high-performance software router systems on commodity hardware, including full router virtualisation support. Norbert Egi, Adam Greenhalgh, Mark Handley, Mickaël Hoerdt, Felipe Huici, Laurent Mathy |
CoNEXT | 3 |
| 2008 | Wedge: Splitting Applications into Reduced-Privilege Compartments
Andrea Bittau, Petr Marchenko, Mark Handley, Brad Karp |
NSDI | 3 |
| 2007 | Fairer TCP-friendly congestion control protocol for multimedia streaming applicationsabstractWe present TFWC, a TCP-friendly window-based congestion control mechanism for real-time multimedia streaming applications. Although TFRC is regarded as a de facto standard for those types of applications, under low stat-mux conditions fairness can be an issue. We re-introduce a TCP-like ACK mechanism while retaining the TCP throughput equation to compute the sending rate. We show that our proposed protocol is fairer than TFRC when competing with TCP flows under certain circumstances. Soo Hyun Choi, Mark Handley |
CoNEXT | 2 |
| 2007 | Evaluating Xen for Router VirtualizationabstractIn this paper, we evaluate the performance of a software IP router forwarding plane inside the Xen virtual machine monitor environment with a view to identifying (some) design issues in Virtual Routers. To this end, we evaluate and compare the forwarding performance of two identical Linux software router configurations, run either above the Xen hypervisor or within vanilla Linux. Even with minimal sized packets, we show that the Xen DomO privileged domain offers near native forwarding performance at the condition that the sollicitation to unpriviledged domains stay minimal, whereas Xen unprivileged domains offer very poor performance in every cases. This shows that an important design principle for virtual router platforms must be to handle all forwarding, for all virtual routers, onto the same forwarding engine, in order to avoid much detrimental per-packet context switching. Norbert Egi, Adam Greenhalgh, Mark Handley, Mickaël Hoerdt, Laurent Mathy, Tim Schooley |
ICCCN | 3 |
| 2006 | Designing DCCP: congestion control without reliabilityabstractFast-growing Internet applications like streaming media and telephony prefer timeliness to reliability, making TCP a poor fit. Unfortunately, UDP, the natural alternative, lacks congestion control. High-bandwidth UDP applications must implement congestion control themselves-a difficult task-or risk rendering congested networks unusable. We set out to ease the safe deployment of these applications by designing a congestion-controlled unreliable transport protocol. The outcome, the Datagram Congestion Control Protocol or DCCP, adds to a UDP-like foundation the minimum mechanisms necessary to support congestion control. We thought those mechanisms would resemble TCP's, but without reliability and, especially, cumulative acknowledgements, we had to reconsider almost every aspect of TCP's design. The resulting protocol sheds light on how congestion control interacts with unreliable transport, how modern network constraints impact protocol design, and how TCP's reliable bytestream semantics intertwine with its other mechanisms, including congestion control. Eddie Kohler, Mark Handley, Sally Floyd |
SIGCOMM | 2 |
| 2006 | The Final Nail in WEP's CoffinabstractThe 802.11 encryption standard Wired Equivalent Privacy (WEP) is still widely used today despite the numerous discussions on its insecurity. In this paper, we present a novel vulnerability which allows an attacker to send arbitrary data on a WEP network after having eavesdropped a single data packet. Furthermore, we present techniques for real-time decryption of data packets, which may be used under common circumstances. Vendor produced mitigation techniques which cause frequent WEP re-keying prevent traditional attacks, whereas our attack remains effective even in such scenarios. We implemented a fully automatic version of this attack which demonstrates its practicality and feasibility in real networks. As even rapidly re-keyed networks can be quickly compromised, we believe WEP must now be abandoned rather than patched yet again. Andrea Bittau, Mark Handley, Joshua Lackey |
S&P | 2 |
| 2005 | Designing Extensible IP Router Software
Mark Handley, Eddie Kohler, Atanu Ghosh, Orion Hodson, Pavlin Radoslavov |
NSDI | 1 |
| 2005 | HLP: a next generation inter-domain routing protocolabstractIt is well-known that BGP, the current inter-domain routing protocol, has many deficiencies. This paper describes a hybrid link-state and path-vector protocol called HLP as an alternative to BGP that has vastly better scalability, isolation and convergence properties. Using current BGP routing information, we show that HLP, in comparison to BGP, can reduce the churn-rate of route updates by a factor 400 as well as isolate the effect of routing events to a region 100 times smaller than that of BGP. For a majority of Internet routes, HLP guarantees worst-case linear-time convergence. We also describe a prototype implementation of HLP on top of the XORP router platform. HLP is not intended to be a finished and final proposal for a replacement for BGP, but is instead offered as a starting point for debates about the nature of the next-generation inter-domain routing protocol. Lakshminarayanan Subramanian, Matthew Caesar 0001, Cheng Tien Ee, Mark Handley, Z. Morley Mao, Scott Shenker, Ion Stoica |
SIGCOMM | 4 |
| 2002 | Topologically-Aware Overlay Construction and Server SelectionabstractA number of large-scale distributed Internet applications could potentially benefit from some level of knowledge about the relative proximity between its participating host nodes. For example, the performance of large overlay networks could be improved if the application-level connectivity between the nodes in these networks is congruent with the underlying IP-level topology. Similarly, in the case of replicated Web content, client nodes could use topological information in selecting one of multiple available servers. For such applications, one need not find the optimal solution in order to achieve significant practical benefits. Thus, these applications, and presumably others like them, do not require exact topological information and can instead use sufficiently informative hints about the relative positions of Internet hosts. In this paper, we present a binning scheme whereby nodes partition themselves into bins such that nodes that fall within a given bin are relatively close to one another in terms of network latency. Our binning strategy is simple (requiring minimal support from any measurement infrastructure), scalable (requiring no form of global knowledge, each node only needs knowledge of a small number of well-known landmark nodes) and completely distributed (requiring no communication or cooperation between the nodes being binned). We apply this binning strategy to the two applications mentioned above: overlay network construction and server selection. We test our binning strategy and its application using simulation and Internet measurement traces. Our results indicate that the performance of these applications can be significantly improved by even the rather coarse-grained knowledge of topology offered by our binning scheme. Sylvia Ratnasamy, Mark Handley, Richard M. Karp, Scott Shenker |
INFOCOM | 2 |
| 2002 | Congestion control for high bandwidth-delay product networksabstractTheory and experiments show that as the per-flow product of bandwidth and latency increases, TCP becomes inefficient and prone to instability, regardless of the queuing scheme. This failing becomes increasingly important as the Internet evolves to incorporate very high-bandwidth optical links and more large-delay satellite links.To address this problem, we develop a novel approach to Internet congestion control that outperforms TCP in conventional environments, and remains efficient, fair, scalable, and stable as the bandwidth-delay product increases. This new eXplicit Control Protocol, XCP, generalizes the Explicit Congestion Notification proposal (ECN). In addition, XCP introduces the new concept of decoupling utilization control from fairness control. This allows a more flexible and analytically tractable protocol design and opens new avenues for service differentiation.Using a control theory framework, we model XCP and demonstrate it is stable and efficient regardless of the link capacity, the round trip delay, and the number of sources. Extensive packet-level simulations show that XCP outperforms TCP in both conventional and high bandwidth-delay environments. Further, XCP achieves fair bandwidth allocation, high utilization, small standing queue size, and near-zero packet drops, with both steady and highly varying traffic. Additionally, the new protocol does not maintain any per-flow state in routers and requires few CPU cycles per packet, which makes it implementable in high-speed routers. Dina Katabi, Mark Handley, Charles E. Rohrs |
SIGCOMM | 2 |
| 2001 | A scalable content-addressable networkabstractHash tables - which map "keys" onto "values" - are an essential building block in modern software systems. We believe a similar functionality would be equally valuable to large distributed systems. In this paper, we introduce the concept of a Content-Addressable Network (CAN) as a distributed infrastructure that provides hash table-like functionality on Internet-like scales. The CAN is scalable, fault-tolerant and completely self-organizing, and we demonstrate its scalability, robustness and low-latency properties through simulation. Sylvia Ratnasamy, Paul Francis, Mark Handley, Richard M. Karp, Scott Shenker |
SIGCOMM | 3 |
| 2001 | Extending equation-based congestion control to multicast applicationsabstractIn this paper we introduce TFMCC, an equation-based multicast congestion control mechanism that extends the TCP-friendly TFRC protocol from the unicast to the multicast domain. The key challenges in the design of TFMCC lie in scalable round-trip time measurements, appropriate feedback suppression, and in ensuring that feedback delays in the control loop do not adversely affect fairness towards competing flows. A major contribution is the feedback mechanism, the key component of end-to-end multicast congestion control schemes. We improve upon the well-known approach of using exponentially weighted random timers by biasing feedback in favor of low-rate receivers while still preventing a response implosion. We evaluate the design using simulation, and demonstrate that TFMCC is both TCP-friendly and scales well to multicast groups with thousands of receivers. We also investigate TFMCC's weaknesses and scaling limits to provide guidance as to application domains for which it is well suited. Jörg Widmer, Mark Handley |
SIGCOMM | 2 |
| 2001 | Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics
Mark Handley, Vern Paxson, Christian Kreibich |
USENIX Security Symposium | 1 |
| 2000 | Multimedia Proxy Caching Mechanism for Quality Adaptive Streaming Applications in the InternetabstractThe Internet has witnessed a rapid growth in deployment of Web-based streaming applications during recent years. In these applications, the server should be able to perform end-to-end congestion control and quality adaptation to match the delivered stream quality to the average available bandwidth. Thus the delivered quality is limited by the bottleneck bandwidth on the path to the client. This paper proposes a proxy caching mechanism for layered-encoded multimedia streams in the Internet to maximize the delivered quality of popular streams to interested clients. The main challenge is to replay a quality-variable cached stream while performing quality adaptation effectively in response to the variations in available bandwidth. We present a prefetching mechanism to support higher quality cached streams during subsequent playbacks and improve the quality of the cached stream with its popularity. We exploit inherent properties of multimedia streams to extend the semantics of popularity and capture both level of interest among clients and usefulness of a layer in the cache. We devise a fine-grain replacement algorithm suited for layered-encoded streams. Our simulation results show that the interaction between the replacement algorithm and prefetching mechanism causes the state of the cache to converge to an efficient state such that the quality of a cached stream is proportional to its popularity, and the variations in quality of a cached stream are inversely proportional to its popularity. This implies that after serving several requests for a stream, the proxy can effectively hide low bandwidth paths to the original server from interested clients. Reza Rejaie, Haobo Yu, Mark Handley, Deborah Estrin |
INFOCOM | 3 |
| 2000 | On the Aggregatability of Multicast Forwarding StateabstractIt has been claimed that multicast state cannot be aggregated. In this paper, we will debunk this myth and present a simple technique that can be used to aggregate multicast forwarding state. In particular, we present an interface-centric data structure model which allows aggregation of ranges of multicast addresses in the forwarding table. Understanding the limits of possible aggregation is critical to our knowledge of how IP multicast will scale as it becomes widely deployed. We show through analysis and simulation that some aggregation is possible, even under purely random address allocation and purely random group membership distribution. We further show how other methods of allocation can significantly improve the ability to aggregate, and how non-random distributions of membership can affect aggregation both positively and negatively. Dave Thaler, Mark Handley |
INFOCOM | 2 |
| 2000 | Equation-based congestion control for unicast applicationsabstractThis paper proposes a mechanism for equation-based congestion control for unicast traffic. Most best-effort traffic in the current Internet is well-served by the dominant transport protocol, TCP. However, traffic such as best-effort unicast streaming multimedia could find use for a TCP-friendly congestion control mechanism that refrains from reducing the sending rate in half in response to a single packet drop. With our mechanism, the sender explicitly adjusts its sending rate as a function of the measured rate of loss events, where a loss event consists of one or more packets dropped within a single round-trip time. We use both simulations and experiments over the Internet to explore performance. Sally Floyd, Mark Handley, Jitendra Padhye, Jörg Widmer |
SIGCOMM | 2 |
| 2000 | Layered quality adaptation for Internet video streamingabstractStreaming audio and video applications are becoming increasingly popular on the Internet, and the lack of effective congestion control in such applications is now a cause for significant concern. The problem is one of adapting the compression without requiring video servers to reencode the data, and fitting the resulting stream into the rapidly varying available bandwidth. At the same time, rapid fluctuations in quality will be disturbing to the users and should be avoided. We present a mechanism for using layered video in the context of unicast congestion control. This quality adaptation mechanism adds and drops layers of the video stream to perform long-term coarse-grain adaptation, while using a TCP-friendly congestion control mechanism to react to congestion on very short timescales. The mismatches between the two timescales are absorbed using buffering at the receiver. We present an efficient scheme for the distribution of available bandwidth among the active layers. Our scheme allows the server to trade short-term improvement for long-term smoothing of quality. We discuss the issues involved in implementing and tuning such a mechanism, and present our simulation results. Reza Rejaie, Mark Handley, Deborah Estrin |
IEEE J. Sel. Areas Commun. | 2 |
| 1999 | A Dynamic Bootstrap Mechanism for Rendezvous-based Multicast RoutingabstractCurrent multicast routing protocols can be classified into three types according to how the multicast tree is established: broadcast and prune (e.g., DVMRP, PIM-DM), membership advertisement (e.g., MO-SPF), and rendezvous-based (e.g., CBT, PIM-SM). Rendezvous-based protocols associate with each logical multicast group address, a physical unicast address, referred to as the 'core' or 'rendezvous point' (RP). Members first join a multicast tree rooted at this rendezvous point in order to receive data packets sent to the group. Rendezvous mechanisms are well suited to large wide-area networks because they distribute group-specific data and membership information only to those routers that are on the multicast distribution tree. However, rendezvous protocols require a bootstrap mechanism to map each logical multicast address to its current physical rendezvous point address. The bootstrap mechanism must adapt to network and router failures but should minimize unnecessary changes in the group-to-RP mapping. In addition, the bootstrap mechanism should be transparent to the hosts. This paper describes and analyzes the bootstrap mechanism developed for PIM-SM. The mechanism employs an algorithmic mapping of multicast group to rendezvous point address, based on a set of available RPs distributed throughout a multicast domain. The primary evaluation measures are convergence time, message distribution overhead, balanced assignment of groups to RPs, and host impact. The mechanism as a whole, and the design lessons in particular, are applicable to other rendezvous-based multicast routing protocols as well. Deborah Estrin, Mark Handley, Ahmed Helmy, Polly Huang, Dave Thaler |
INFOCOM | 2 |
| 1999 | RAP: An End-to-End Rate-Based Congestion Control Mechanism for Realtime Streams in the InternetabstractEnd-to-end congestion control mechanisms have been critical to the robustness and stability of the Internet. Most of today's Internet traffic is TCP, and we expect this to remain so in the future. Thus, having "TCP-friendly" behavior is crucial for new applications. However, the emergence of non-congestion-controlled realtime applications threatens unfairness to competing TCP traffic and possible congestion collapse. We present an end-to-end TCP-friendly rate adaptation protocol (RAP), which employs an additive-increase, multiplicative-decrease (AIMD) algorithm. It is well suited for unicast playback of realtime streams and other semi-reliable rate-based applications. Its primary goal is to be fair and TCP-friendly while separating network congestion control from application-level reliability. We evaluate RAP through extensive simulation, and conclude that bandwidth is usually evenly shared between TCP and RAP traffic. Unfairness to TCP traffic is directly determined by how TCP diverges from the AIMD algorithm. Basic RAP behaves in a TCP-friendly fashion in a wide range of likely conditions, but we also devised a fine-grain rate adaptation mechanism to extend this range further. Finally, we show that deploying RED queue management can result in an ideal fairness between TCP and RAP traffic. Reza Rejaie, Mark Handley, Deborah Estrin |
INFOCOM | 2 |
| 1999 | Quality Adaptation for Congestion Controlled Video Playback over the InternetabstractStreaming audio and video applications are becoming increasingly popular on the Internet, and the lack of effective congestion control in such applications is now a cause for significant concern. The problem is one of adapting the compression without requiring video-servers to re-encode the data, and fitting the resulting stream into the rapidly varying available bandwidth. At the same time, rapid fluctuations in quality will be disturbing to the users and should be avoided.In this paper we present a mechanism for using layered video in the context of unicast congestion control. This quality adaptation mechanism adds and drops layers of the video stream to perform long-term coarse-grain adaptation, while using a TCP-friendly congestion control mechanism to react to congestion on very short timescales. The mismatches between the two timescales are absorbed using buffering at the receiver. We present an efficient-scheme for the distribution of buffering among the active layers. Our scheme allows the server to trade short-term improvement for long-term smoothing of quality. We discuss the issues involved in implementing and tuning such a mechanism, and present our simulation results. Reza Rejaie, Mark Handley, Deborah Estrin |
SIGCOMM | 2 |
| 1999 | Very Large Conferences on the Internet: The Internet Multimedia Conferencing Architecture
Mark Handley, Jon Crowcroft, Carsten Bormann, Jörg Ott |
Comput. Networks | 1 |
| 1998 | Session Directories and Scalable Internet Multicast Address AllocationabstractA multicast session directory is a mechanism by which users can discover the existence of multicast sessions. In the Mbone, session announcements have also served as multicast address reservations - a dual purpose that is efficient, but which may cause some side-affects as session directories scale.In this paper we examine the scaling of multicast address allocation when it is performed by such a multicast session directory. Despite our best efforts to make such an approach scale, this analysis ultimately reveals significant scaling problems, and suggests a new approach to multicast address allocation in the Internet environment. Mark Handley |
SIGCOMM | 1 |
| 1998 | The MASC/BGMP Architecture for Inter-Domain Multicast RoutingabstractMulticast routing enables efficient data distribution to multiple recipients. However, existing work has concentrated on extending single-domain techniques to wide-area networks, rather than providing mechanisms to realize inter-domain multicast on a global scale in the Internet. We describe an architecture for inter-domain multicast routing that consists of two complementary protocols. The Multicast Address-Set Claim (MASC) protocol forms the basis for a hierarchical address allocation architecture. It dynamically allocates to domains multicast address ranges from which groups initiated in the domain get their multicast addresses. The Border-Gateway Multicast Protocol (BGMP), run by the border routers of a domain, constructs inter-domain bidirectional shared trees, while allowing any existing multicast routing protocol to be used within individual domains. The resulting shared tree for a group is rooted at the domain whose address range covers the group's address; this domain is typically the group initiator's domain. We demonstrate the feasibility and performance of these complementary protocols through simulation. This architecture, together with existing protocols operating within each domain, is intended as a framework in which to solve the problems facing the current multicast addressing and routing infrastructure. Pavlin Radoslavov, Dave Thaler, Cengiz Alaettinoglu, Deborah Estrin, Mark Handley |
SIGCOMM | 6 |
| 1997 | Network Text Editor (NTE): A Scalable Shared Text Editor for the MBoneabstractIP Multicast, Lightweight Sessions and Application Level Framing provide guidelines by which multimedia conferencing tools can be designed, but they do not provide specific solutions. In this paper, we use these design principles to guide the design of a multicast based shared editor, and examine the consequences of taking a loose consistency approach to achieve good performance in the face of network failures and losses. Mark Handley, Jon Crowcroft |
SIGCOMM | 1 |
| 1995 | The Conference Control Channel Protocol (CCCP): A Scalable Base for Building Conference Control ApplicationsabstractThis paper presents the Conference Control Channel Protocol (CCCP), a new scheme intended for controlling conferences ranging from small, tightly coupled meetings, to extremely large loosely coupled seminars. We describe the requirements of such a scheme, and present a framework for building systems that connect together new and existing applications. Mark Handley, Ian Wakeman, Jon Crowcroft |
SIGCOMM | 1 |
| 1993 | Support for Collaborative Authoring via Electronic Mail: The MESSIE Environment
M. Angela Sasse, Mark Handley, Shaw-Cheng Chuang |
ECSCW | 2 |
| 1993 | Multimedia Integrated Conferencing for European Researchers (MICE): Piloting Activities and the Conference Management and Multiplexing Centre
Mark Handley, Peter T. Kirstein, M. Angela Sasse |
Comput. Networks ISDN Syst. | 1 |