9 papers
BGPay: An Incentive-Compatible Mechanism for BGP Hijack Filtering
Tomasz Sadowy, Constantine Doumanidis, Maria Apostolaki
BGP hijacking remains a persistent threat as existing defenses, including RPKI/ROV suffer from a fundamental incentive misalignment: the networks best positioned to filter maliciou…
The Frontier LLM Trap in Network Automation
Minhao Jin, Sean Wang, Aarti Gupta +1
Large LLMs are powerful tools for network automation, but they are expensive, slow to serve, hard to audit, poorly tailored to individual networks, and create long-term dependencie…
Let AI Agents Translate Networks, Not Reason About Them
Hongyu Hè, Maria Apostolaki
A formal model enables verifying reachability, localizing an outage, or anticipating the blast radius of a change. Yet, virtually no production network has one, since writing a mod…
Invariant Discovery for Networked Systems
Hongyu Hè, Alexander Krentsel, Sylvia Ratnasamy +1
Invariants, the relations expected to hold among measured signals of a network, underpin applications from verification to traffic generation, telemetry imputation, and input valid…
HOWLR: A Client-Driven Approach to BGP Hijack Detection
Constantine Doumanidis, Anya Kalogerakos, Maria Apostolaki
BGP hijacking enables impersonation attacks in which adversaries divert traffic at the prefix level and serve malicious content to unsuspecting clients. Detecting such attacks has…
Worst-Case Discovery and Runtime Protection for RL-Based Network Controllers
Hongyu Hè, Minhao Jin, Maria Apostolaki
RL-based controllers achieve strong average-case performance in networking tasks such as congestion control and adaptive bitrate streaming. Yet their performance can degrade severe…