Identifying dynamic IP address blocks serendipitously through background scanning traffic. - Yu Jin 001; Esam Sharafuddin; Zhi-Li Zhang (CoNEXT, 2007)

Unveiling core network-wide communication patterns through application traffic activity graph decomposition. - Yu Jin 001; Esam Sharafuddin; Zhi-Li Zhang (SIGMETRICS/Performance, 2009)

Know Your Enemy, Know Yourself: Block-Level Network Behavior Profiling and Tracking. - Esam Sharafuddin; Nan Jiang 017; Yu Jin 001; Zhi-Li Zhang (GLOBECOM, 2010)

Sifting through Network Data to Cull Activity Patterns with HEAPs. - Esam Sharafuddin; Yu Jin 001; Nan Jiang 017; Zhi-Li Zhang (ICDCS, 2010)