Rethinking Packet Forwarding Hardware (2009)
Martin Casado, Teemu Koponen, Daekyeong Moon, Scott Shenker
For routers and switches to handle ever-increasing bandwidth requirements, the packet “fast-path ” must be handled with specialized hardware. There have been two approaches to building such...
Abstract SANE: A Protection Architecture for Enterprise Networks (2009)
Martin Casado, Tal Garfinkel, Aditya Akella, Michael J. Freedman, Dan Boneh, Nick Mckeown, ...
Connectivity in today’s enterprise networks is regulated by a combination of complex routing and bridging policies, along with various interdiction mechanisms such as ACLs, packet filters, and...
Opportunistic Measurement: Spurious Network Events as a Light in the Darkness (2008)
While network measurement techniques are continually improving, representative network measurements are increasingly scarce. The issue is fundamentally one of access: either the points of interest...
Dear Colleagues, Table of Contents (2008)
Welcome to the Fall 2000 issue of looking.forward. It has been my pleasure to put together this issue. I have chosen to include fewer articles with more depth than previous issues. I hope
Abstract The Clack Graphical Router: Visualizing Network Software (2008)
We present Clack, a graphical environment for teaching students how Internet routers work and other core networking concepts. Clack is a router written as a Java Applet, and routes live network...
Martin Casado, Pei Cao, Aditya Akella, Neils Provos, Google Inc
Distributed Denial-of-Service flooding attacks against public web servers are increasingly common. Websites without the ability to over-provision or rely on a CDN are often overwhelmed by such...
Prototyping Fast, Simple, Secure Switches for Ethane (2008)
Jianying Luo, Justin Pettit, Martin Casado, John Lockwood, Nick Mckeown
We recently published our proposal for Ethane: A cleanslate approach to managing and securing enterprise networks. The goal of Ethane is to make enterprise networks (e.g. networks in companies,...
Abstract The Clack Graphical Router: Visualizing Network Software (2008)
We present Clack, a graphical environment for teaching students how Internet routers work and other core networking concepts. Clack is a router written as a Java Applet, and routes live network...
Prototyping Fast, Simple, Secure Switches for Ethane (2008)
Jianying Luo, Justin Pettit, Martin Casado, John Lockwood, Nick Mckeown
We recently published our proposal for Ethane: A cleanslate approach to managing and securing enterprise networks. The goal of Ethane is to make enterprise networks (e.g. networks in companies,...
Abstract SANE: A Protection Architecture for Enterprise Networks (2008)
Martin Casado, Tal Garfinkel, Aditya Akella, Michael J. Freedman, Dan Boneh, Nick Mckeown, ...
Connectivity in today’s enterprise networks is regulated by a combination of complex routing and bridging policies, along with various interdiction mechanisms such as ACLs, packet filters, and...
Martin Casado, Pei Cao, Aditya Akella, Neils Provos, Google Inc
Distributed Denial-of-Service flooding attacks against public web servers are increasingly common. Websites without the ability to over-provision or rely on a CDN are often overwhelmed by such...
Abstract Prototyping Fast, Simple, Secure Switches for Ethane (2008)
Jianying Luo, Justin Pettit, Martin Casado, John Lockwood, Nick Mckeown
We recently proposed Ethane: A clean-slate approach to managing and securing enterprise networks. The goal of Ethane is to make enterprise networks (e.g. networks in companies, universities, and home...
Teaching Networking Hardware (2008)
IHJ#I+K, LM,$-(!N$-$!&#IK O ! IHJ#I+K, LM,$-(!N$-$!&#IK 28939-4 X/23N@B R # W ,$- 28940-45120 &#IK 28939-4 ! ZW# 92[1$%$ &#IK ! /JC]\$-(!N$-& 28940-43030 28940-45120 &#IK 2 8$...
Peering Through the Shroud: The Effect of Edge Opacity on IP-Based Client Identification (2007)
Abstract Online services often use IP addresses as client identifierswhen enforcing access-control decisions. The academic community has typically eschewed this approach, how-ever, due to the effect...
Flooding attacks, where an attacker attempts to exhaust the downstream bandwidth of a server, are particularly difficult to defend against. Unlike other forms of DDoS such as SYN-flooding,...
Cookies Along Trust-boundaries (CAT): Accurate and Deployable Flood Protection (2006)
Martin Casado, Aditya Akella, Pei Cao, Niels Provos, Scott Shenker
Packet floods targeting a victim’s incoming bandwidth are notoriously difficult to defend against. While a number of solutions have been proposed, such as network capabilities, thirdparty traffic...
Martin Casado, Pei Cao, Neils Provos
Abstract Distributed Denial-of-Service flooding attacks against public web servers are increasingly common. Websites without the ability to over-provision or rely on a CDN are often overwhelmed by...
Cookies Along Trust-boundaries (CAT): Accurate and Deployable Flood Protection (2006)
Martin Casado, Aditya Akella, Pei Cao, Niels Provos, Scott Shenker
Packet floods targeting a victim’s incoming bandwidth are notoriously difficult to defend against. While a number of solutions have been proposed, such as network capabilities, thirdparty traffic...
The Virtual Network System (2005)
A #B:C#%*#"*D*6 9 $ $ "*#>? /-*1"/-=@ A #B:C#%*#"*D*6 0-45150 $C3IH"* 1"/-=@ A #B:C#%*#"*D*6 9 $#"=? ? $U#*< B/? 9G-1A"-=0V R/@+ -*3B #6!...
Opportunistic Measurement: Extracting Insight from Spurious Traffic (2005)
Martin Casado, Tal Garfinkel, Weidong Cui, Vern Paxson, Stefan Savage
While network measurement techniques are continually improving, representative network measurements are increasingly scarce. The issue is fundamentally one of access: either the points of interest...
Reconfigurable Networking Hardware: A Classroom Tool (2005)
Abstract—We present an educational platform for teaching the design, debugging and deployment of real networking equipment in the operational Internet. The emphasis of our work is on teaching and,...
Opportunistic measurement: Extracting insight from spurious traffic (2005)
While network measurement techniques are continually improving, representative network measurements are increasingly scarce. The issue is fundamentally one of access: either the points of interest...