CCERT 
Intrusion Detection
Incident Response
Malicious Mobile Code
Policy base security management 
Network security architecture 


Projects 


	Study on incident response  system and attack isolation in large networks
	
	S-Bone based network security demonstration project
	Network  attacking signature database 
	Study on Intrusion Detection based based on autonomous agent
	Security management system in high speed campus network
	Study on  malicious mobile code propagation and response model in Internet



Publications


	Qianli Zhang,  Xing Li.  CCERT in Progress  , The 12th Annual FIRST Conference, 
	 July  2000,  Chicago, U.S.A

	Haixin Duan, Jianping Wu.  Security Management for Large Computer Networks, 
	Proceeding of the 5th Asia and Pacific Communication Conference (APCC'99),
	Beijing ,China ,1999, pp 256-261
	
	Haixin Duan, Jianping Wu, Xing Li. Policy-based Access Control Framework for 
	Large Scale Networks，IEEE International Conference On Networks(ICON) '2000 ，
	Sep.2000, Singapore 
	 
	Haixin Duan, Jianping Wu. 计算机网络的一种实体安全体系结构，计算机学报， 
	Vol.24(8)，2001，pp853-859
	
	Haixin Duan, Jiahai Yang, Jianping Wu. 基于Web和数据库的网络管理系统的设计与实现, 
	 软件学报  V11(4),2000, pp 468-473
	 
	Haixin Duan, Jianping Wu, Xing Li. 防火墙规则的动态分配和散列表匹配算法 清华学报，
	20001年 Vol.41, No.1
	
	Haixin Duan, Jianping Wu. 计算机网络安全体系的一种框架结构及其应用. 计算机工程与应
	用, V36(5) ,2000, pp 24-28 
	
	Haixin Duan, Jianping Wu.一种分布式协同入侵检测系统的设计与实现 软件学报，2001 ，
	 V(12) ，N(9)
	Haixin Duan, Jianping Wu. 防火墙在传输网络中的吞吐量与管理问题及解决方案,  计算机
	工程与应用，2000  Vol.36 , No.11
	
	Haixin Duan, Jianping Wu.分布式协同入侵检测: 设计与实现问题 小型微型计算机系统，
	Vol.22(6)， pp646-650

	Haixin Duan. 基于多视图的计算机网络安全体系结构的研究.清华大学博士学位论文，
	2000年10月