Network Intrusion Detection and Prevention

Data Driven Network Security (Machine Learning, Deep learning, Data Mining)

High Performance Packet Processing(Parallel Processing Architecture, Pattern Matching Algorithm, Efficient I/O Data-path )

Network Function Virtualization

2009-2014  Ph.D. in Computer Science, Université Grenoble Alpes, France

2000-2007 B.S. & M.S. in Telecommunications Engineering, Beijing University of Post and Telecommunications, China

   

09/2016 -- present Associate Professor and Master Supervisor, Department of Computer Networks, Institute of Computing Technology, Chinese Academy of Sciences, China 

07/2014 -- 09/2016 Assistant Professor, Department of Computer Networks, Institute of Computing Technology, Chinese Academy of Sciences, China

   

1. Wei Xiong, Yang Wang, Haiyang Jiang, and Hongtao Guan. "Graph‑Based Fast‑Flux Domain Detection Using Graph Neural Networks.", Available at SSRN 4872037.

2. Ru Jia, Haiyang Jiang, Zhenyu Li, Gaogang Xie, "Dynamic Instrumentation Based Performance Measurement For Software Based Network Functions[J]" . Journal of Computer Research and Development. Accepted

3. Ru Jia, Heng Pan, Haiyang Jiang, Serge Fdida, and Gaogang Xie. "Towards Diagnosing Accurately the Performance Bottleneck of Software-Based Network Function Implementation", In International Conference on Passive and Active Network Measurement, pp. 227-253. Cham: Springer Nature Switzerland, 2023.

4. Yang D, Li Z, Haiyang Jiang, et al. "A deep dive into DNS behavior and query failures[J]". Computer Networks, 2022, 214: 109131.

5. Haiyang Jiang, LI X, YANG Y, "Distance Comparison Based Parallel Pattern Matching[J]", Journal of Electronics and Information Technology, 2022, 44(2): 581-590.

6. Ran Tian, Zulong Diao, Haiyang Jiang, Gaogang Xie, "Cognition: Accurate and Consistent Linear Log Parsing using Template Correction[J]". Journal of Computer Science and Technology. doi: 10.1007/s11390-021-1691-3

7. Tian R, Diao Z, Haiyang Jiang, et al. "LogDAC: A Universal Efficient Parser-based Log Compression Approach[C], //ICC 2022-IEEE International Conference on Communications. IEEE, 2022: 3679-3684.

8. Liu F, Haiyang Jiang, Diao z, et al. "CyCo: A Time Series Labeling Method Based on Temporal Cycle Consistency", International Joint Conference on Neural Network, (IJCNN 2021)

9. Tian R, Diao Z, Haiyang Jiang, et al. "NeVe: A Log-based Fast Incremental Network Feature Embedding Approach[C]" //2021 IEEE Symposium on Computers and Communications (ISCC). IEEE, 2021: 1-7.

10. Wang Y, Zhang G, Haiyang Jiang, et al. "Compact-index: an efficient index algorithm for network traffic[C]" //Proceedings of the 17th International Conference on emerging Networking EXperiments and Technologies. 2021: 90-103.

11. Yang Y, Haiyang Jiang, Wu Y, et al. "C2QoS: Network QoS guarantee in vSwitch through CPU-cycle management[J]", Journal of Systems Architecture, 2021: 102148.

12. Ye Yang, Haiyang Jiang, Guangxing Zhang, Xin Wang, Yilong Lv, Xing Li, Serge Fdida, Gaogang Xie, "S2H: Hypervisor as a setter within Virtualized Network I/O for VM isolation on cloud platform", Comput. Networks 201: 108577 (2021)

13. Xiong W, Haiyang Jiang, Guan H, et al. "DSQNet: Domain SeQuence based Deep Neural Network for AGDs Detection[C]", IEEE Symposium on Computers and Communications (ISCC). IEEE, 2021: 1-7.

14. Liu, Fengrui, Xuefei Li, Wei Xiong, Haiyang Jiang, and Gaogang Xie. "An accuracy network anomaly detection method based on ensemble model." In ICASSP 2021-2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), pp. 8548-8552. IEEE, 2021.

15. Yang Y, Haiyang Jiang, Liang Y, et al. "Isolation Guarantee for Efficient Virtualized Network I/O on Cloud Platform", the 22nd IEEE International Conferences on High Performance Computing and Communications (HPCC 2020)

16. Yang Y, Haiyang Jiang, Wu Y, et al. "C2QoS: CPU-Cycle based Network QoS Strategy in vSwitch of Public Cloud", the 17th IFIP/IEEE International Symposium on Integrated Network Management (IM 2021)

17. Haiyang Jiang, et al. "A Massively Multi-Tenant Virtualized Network Intrusion Prevention Service on NFV Platform", 28th International Conference on Computer Communication and Networks (ICCCN), 2019, pp. 1-9.

18. Haiyang Jiang, et al. "Scalable High-Performance Parallel Design for Network Intrusion Detection Systems on Many-Core Processors", Proceedings of the Ninth ACM/IEEE Symposium on Architectures for Networking and Communications Systems, 2013, pp. 137-146.

19. Haiyang Jiang, et al. "Load Balancing by Ruleset Partition for Parallel IDS on Multi-Core Processors", 22th International Conference on Computer Communication and Networks (ICCCN), 2013, pp. 1–8.

20. Haiyang Jiang, et al. "Efficient Fingerprint Extraction for High Performance Intrusion Detection System", IEEE Symposium on Computers and Communications (ISCC), 2013, pp. 179-184.

21. Haiyang Jiang, et al. "Exploring and Enhancing the Performance of Parallel IDS on Multi-Core Processors", IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications, 2011, pp. 673-680.

22. Haiyang Jiang, et al. "Exploring the Performance of Software Pipeline IDS on Multi-core Processors", 14th Chinese Fault Tolerant Computing Conference

23. Haiyang Jiang, et al. "High-performance parallel NIDS on ManyCore processors", Chinese High Technology Letters; 2014-09 [in Chinese]

24. Shuguang W, Peng H, Haiyang Jiang, et al. "NFCloud: Network Function Virtualization System Upon OpenContrail[J]", Information and Communications Technologies, 2016.[in Chinese]

25. Haiyang Jiang, Hongxiang Wang, and Yuefeng Ji. Comparison of EDC-TX and EDC-RX performance with different pulse formats in optical system at 10G b/s[C]//Optical Transmission, Switching, and Subsystems V. SPIE, 2007, 6783: 1142-1149.

26. Haiyang Jiang, Hongxiang Wang, and Yuefeng Ji. "Experimental investigation on aggregation amplification of TCP throughput in OBS mesh network testbed", In Optical Transmission, Switching, and Subsystems V, vol. 6783, pp. 412-419. SPIE, 2007.

1. Method for virtualization system and virtualization system, CN109901909B, Ye Yang, Haiyang Jiang, Gaogang Xie

https://patents.google.com/patent/CN109901909B/en

2. Virtualization system and data exchange method thereof, CN109857517B, Ye Yang, Haiyang Jiang, Gaogang Xie

https://patents.google.com/patent/CN109857517B/en

3. Forwarding speed-limiting method and system of virtual forwarding equipment,CN112671667B,Ye Yang, Haiyang Jiang, Gaogang Xie

https://patents.google.com/patent/CN112671667B/en

4. Flow table query method and system based on flow table structure isolation in virtual switch, CN112953927A, Ye Yang, Haiyang Jiang, Gaogang Xie

https://patents.google.com/patent/CN112953927A/en

5. Parallel pattern matching method for data packet detection, CN112506789A, Xuefei Li, Haiyang Jiang, Ye Yang

https://patents.google.com/patent/CN112506789A/en

6. Network flow real-time indexing method and system, CN113139100A, Yue Wang, Gaogang Xie, Guangxing Zhang, Haiyang Jiang, Zulong Diao

https://patents.google.com/patent/CN113139100A/en

7. DGA type botnet detection method, medium and electronic equipment, CN111628970A, Wei Xiong, Haiyang Jiang 

https://patents.google.com/patent/CN111628970A/en

8. Method and system for extracting fingerprint database in network intrusion detection, CN103324886A, Haiyang Jiang, Guangxing Zhang, Gaogang Xie

https://patents.google.com/patent/CN103324886A/en

9. A kind of processing method of SDN multimodes deployment rule conflict, CN105207912B, Heng Pan, Shuguang Wen, Gaogang Xie, Hongtao Guan, Peng He, Haiyang Jiang

https://patents.google.com/patent/CN105207912B/en

10. Intrusion prevention optimization method and device based on missing scanning result, CN115580428A, Guangxing Zhang, Haiyang Jiang, Ping Song, Keqiang Xia, Chu Tu.

https://patents.google.com/patent/CN115580428A/en

11. Malicious URL blocking method, CN115270120A, Guangxing Zhang, Haiyang Jiang, Yang Jing, Shuai Liang, Keqiang Xia, Chu Tu, Xu He.

https://patents.google.com/patent/CN115270120A/en

12. Rule matching-based intrusion prevention system self-adaptive protection method and device, CN115987588A, Guangxing Zhang , Haiyang Jiang, Yang Jing, Shuai Liang, Lirong Tian, Fenghao Liu.

https://patents.google.com/patent/CN115987588A/en

13. Database table structure and network flow retrieval method, CN115114499A, Guangxing Zhang, Haiyang Jiang, Ying Wu, Wei Wang, Lirong Tian, Keqiang Xia.

https://patents.google.com/patent/CN115114499A/en

14. NTA equipment configuration strategy method for automatically adapting hardware resource, CN114138482A, Guangxing Zhang , Haiyang Jiang, Yang Jing, Wei Wang, Lirong Tian, Shuai Liang, Xu He, Bo Li.

https://patents.google.com/patent/CN114138482A/en

15. Malicious load marking method of intrusion detection system with separated recording and picking processes, CN114254309A, Guangxing Zhang, Haiyang Jiang, Zhiyuan Liao, Chu Tu, Hang Tan

https://patents.google.com/patent/CN114254309A/en

16. New network host vulnerability scanning method based on Hadoop platform, CN115118519A, Guangxing Zhang, Haiyang Jiang, Liantao Zhu, Lirong Tian, Chu Tu, Keqiang Xia, Bo Li.

https://patents.google.com/patent/CN115118519A/en

17. Domain name cache replacement method and system based on time window, CN115967746A, Guangxing Zhang, Haiyang Jiang, Ying Wu, Keqiang Xia, Wei Wang, Jia Wang.

https://patents.google.com/patent/CN115967746A/en

18. Method for perfecting security rule base based on crawler technology, CN114238991A, Guangxing Zhang, Haiyang Jiang, Tingting Wang, Lirong Tian, Yujun Zhang, Quansong Bao.

https://patents.google.com/patent/CN114238991A/en

19. Network data packet storage device and method based on user strategy, CN114047881A, Guangxing Zhang, Haiyang Jiang, Ying Wu, Wei Wang, Lirong Tian, Keqiang Xia.

https://patents.google.com/patent/CN114047881A/en

20. A method for implementing custom visualization topology graph based on Antv, CN114048110A, Guangxing Zhang , Haiyang Jiang, Chunbo Yan, Yujun Zhang, Hang Tan, Shuai Liang, Jia Wang, Keqiang Xia.

https://patents.google.com/patent/CN114048110A/en

21. Vue framework-based user-defined data visualization large-screen implementation method, CN114048111A, Guangxing Zhang, Haiyang Jiang, Yingying Zhang, Yujun Zhang, Quansong Bao, Shuai Liang, Jia, Xia Wang, Keqiang Xia.

https://patents.google.com/patent/CN114048111A/en

22. Classification model construction method and classification system for domain name classification, CN116502153A, JunyuCai, Xuefei Li, Haiyang Jiang.

https://patents.google.com/patent/CN116502153A/en

23. CPU resource dynamic control method for DPDK real-time flow, CN117978694A, Guangxing Zhang, Haiyang Jiang, Renxiang Mao, Zhiyuan Liao, Wei Wang,ChuTu, Bo Li, Jia Wang.

https://patents.google.com/patent/CN117978694A/en

24. Network flow storage parallel processing service architecture andimplementation method thereof, CN116962326A, Ying Wu, Guangxing Zhang, Haiyang Jiang, Shuai Liang, Lirong Tian, Jia Wang, Hongsheng Lu, Wei Wang.

https://patents.google.com/patent/CN116962326A/en

25. Attack flow generation method and system, CN116488928A, Guangxing Zhang, Haiyang Jiang, Hongxiu Lin, Shuai Liang, Lirong Tian, Jia Wang, Hongsheng Lu.

https://patents.google.com/patent/CN116488928A/en

26. Method and system for optimizing strategy of network flow index based on HashTrie and Bitmap, CN117407564A, Guangxing Zhang, Haiyang Jiang, Ying Wu, Yuxiang Jin, Lirong Tian, Shuai Liang.

https://patents.google.com/patent/CN117407564A/en

27. Dynamic storage method and system based on CPU load and data packet compression efficiency, CN117857391A, Ying Wu, Guangxing Zhang, Haiyang Jiang, Lirong Tian, Jia Wang, Zhiyuan Liao.

https://patents.google.com/patent/CN117857391A/en

28. Data packet index and retrieval method based on network data packet attribute value length characteristics, CN117435912A, Guangxing Zhang, Haiyang Jiang, Ying Wu, Yuxiang Jin, Fenghao Liu, Zhiyuan Liao, Jia Wang.

https://patents.google.com/patent/CN117435912A/en

1. The technical specification for IPv6 Networks of Industrial Internet, Chinese Institute of Electronics, review stage

2021 Annually Outstanding Staff Award, Institute of Computing Technology, Chinese Academy of Science

2019 Third Prize of Science and Technology Award of China Communications Society

2019 First Prize of Jiangsu Information and Communication Industry Science and Technology Award

2017 Alibaba Innovation Research Program Scientist Award

2023-2024 Project ”Network Traffic Deep Analysis techonology research”, funded by Beijing Beixinheng Network Technology Inc., Lead and Principal Investigator

2022 – 2023 Project ”Traffic mirror scheme for cloud data center”, funded by Sangfor Technologies Inc., Lead and Principal Investigator

2019 – 2020 Project ”Network traffic collection and characteristic analysis”, funded by HuaWei, Lead and Principal Investigator

2016 – 2017 Project ”Performance Optimization of Software based Packet Forwarding”, funded by Huawei, Lead and Principal Investigator

2017 – 2018 Project ”Research on Security Isolation Strategy in Open Virtual Switch(OVS)”, funded by Alibaba Cloud, Alibaba Innovative Research, Lead and Principal Investigator

2020 – 2022 Project ”Efficient DNS Algorithm and Mechanism”, National Key Research and Development Program funded by Ministry of Science and Technology, Lead and Principal Investigator

2016 – 2018 Project ”Research on Scalability of Network Function Virtualization” funded by National Natural Science Foundation of China(NSFC),  Lead and Principal Investigator

2017 – 2018 Project ”Open and Efficient Network Tester” funded by Chinese Academy of Sciences, Co‑Principal Investigator

2018 – 2023 Project ”China Environment for Network Innovations” funded by Ministry of Science and Technology, Main participants

2010 – 2014 Project ”Parallel Flow Recognition with Multi‑Core Processor” funded by NSFC and Agence Nationale de Recherche of France (ANR), Main participants