Detecting encrypted botnet traffic. - Han Zhang 050; Christos Papadopoulos; Daniel Massey (INFOCOM, 2013)

Early detection of high entropy traffic. - Han Zhang 050; Christos Papadopoulos (CNS, 2015)

Assessing co-locality of IP blocks. - Manaf Gharaibeh; Han Zhang 050; Christos Papadopoulos; John S. Heidemann (INFOCOM Workshops, 2016)

BotDigger: Detecting DGA Bots in a Single Network. - Han Zhang 050; Manaf Gharaibeh; Spiros Thanasoulas; Christos Papadopoulos (TMA, 2016)

A look at router geolocation in public and commercial databases. - Manaf Gharaibeh; Anant Shah; Bradley Huffaker; Han Zhang 050; Roya Ensafi; Christos Papadopoulos (Internet Measurement Conference, 2017)