Publications

The most cited work

1. T. Mori, M. Uchida, R. Kawahara, J. Pan and S. Goto, ``Identifying elephant flows through periodically sampled packets,'' ACM/USENIX Internet Measurement Conference (IMC 2004), Taormina, Italiy, October 2004. [PDF]
   The conference paper was developed into a full journal article, which earned the best paper award of IEICE. This work has been cited by these 95 works + 8 works (according to Google Scholar). This work was collected in the book, Internet Measurement: Infrastructure, Traffic and Applications, authored by Prof. Mark Crovella and Dr. Balachander Krishnamrthy. It has also been cited by sflow's packet sampling theory site. TMA portal: Traffic sampling recently collects this work.
2. T. Mori, R. Kawahara, S. Naito and S. Goto, ``On the Characteristics of Internet Traffic Variability: Spikes and Elephants,'' IEEE/IPSJ SAINT 2004, pp. 99-106, Tokyo, Japan, 2004 [PDF] [IEEE Xplore] [abstract] [slide].
   The conference paper was developed into a full journal article. The work has been cited by these 34 works (according to Google Scholar). You can also find a wikipedia entry, which cites this work; see Elephant Flow - Wikipedia, the free encyclopedia.
3. T. Mori, M. Uchida and S. Goto, ``Flow Analysis of Internet Traffic: World Wide Web versus Peer-to-peer,'' Systems and Computers in Japan, Volume 36, Issue 11, Pages 70 -- 81, 2005 [abstract].
   This paper has been cited by these 17 works (according to Google Scholar). This paper was recently collected in CAIDA traffic-analysis: classification-overview.

Refereed journal articles

1. R. Kawahara, T. Mori, T. Yada, and N. Kamiyama,
   ``Analyzing and Reducing the Impact of Traffic on Large-Scale NAT,''
   IEICE Transactions on Communications Vol. EXX-B, No. X, pp.-, XXX 2012. (accepted for publication)
2. A. Shimoda, T. Mori, and S. Goto,
   ``Extended Darknet: Multi-Dimensional Internet Threat Monitoring System,''
   IEICE Transactions on Communications Vol. E95-B, No. 6, pp.-, June 2012. (in press)
3. K. Ishibashi, R. Kawahara, T. Mori, T. Kondoh, and S. Asano,
   ``Effects of Sampling and Spatio/Temporal Granularity in Traffic Monitoring on Anomaly Detectability,''
   IEICE Transactions on Communications Vol. E95-B, No. 2, pp. 466-476, Feburary 2012. [IEICE]
   An earlier version of this paper was presented at IEEE Global Inernet Symposium 2007
4. R. Kawahara, K. Ishibashi, T. Mori, N. Kamiyama, S. Harada, H. Hasegawa, and S. Asano
   ``Detection accuracy of network anomalies using sampled flow statistics,''
   International Journal of Network Management (IJNM), vol. 21, issue 6, pages 513--535, November/December 2011 [Wiley]
5. N. Kamiyama, T. Mori, R. Kawahara, S. Harada, and H. Hasegawa
   ``Analyzing Influence of Network Topology on Designing ISP-Operated CDN,''
   Telecommunication Systems (2 September 2011), pp. 1-9, [Springer]
   An earlier version of this paper was presented at IEEE NETWORKS 2010.
6. N. Kamiyama, R. Kawahara, T. Mori, S. Harada, and H. Hasegawa
   ``Parallel video streaming optimizing network throughput ,''
   Elsevier Computer Communications, vol. 34, issue 10, July 2011, Pages 1182--1194 [Elsevier] [bibtex]
7. N. Kamiyama, R. Kawahara, T. Mori, S. Harada, and H. Hasegawa
   ``Optimally designing caches to reduce P2P traffic,''
   Elsevier Computer Communications, vol. 34, Issue 7, 16 May 2011, pages 883--897, [Elsevier] [bibtex]
8. R. Kawahara, K. Ishibashi, T. Mori, N. Kamiyama, and H. Yoshino
   ``Packet sampling TCP flow rate estimation and performance degradation detection method,''
   IEICE Transactions 91-B(5): 1309-1319 (2008) [IEICE] [bibtex]
   An earlier version of this paper was presented at IEEE GLOBECOM 2006
   
9. K. Ishibashi, T. Mori, R. Kawahara, Y. Hirokawa, A. Kobayashi, K. Yamamoto, and H. Sakamoto,
   ``Finding Cardinality Heavy-Hitters in Massive Traffic Data and Its Application to Anomaly Detection,''
   IEICE Transactions 91-B(5): 1331-1339 (2008) [IEICE] [bibtex]
   An earlier version of this paper was presented at IEEE NetDB 2006
   
10. T. Mori, T. Takine, J. Pan, R. Kawahara. M. Uchida, and S. Goto,
    ``Identifying Heavy-Hitter Flows From Sampled Flow Statistics,'' (Best Paper Award)
    IEICE Transactions on Communications, Voll. E90-B, No.11, pp. 3061--3072, November 2007 [PDF] [IEICE] [bibtex] [Google Scholar]
    An earlier version of this paper was presented at ACM/USENIX IMC 2004. The original work has been cited by these work and sflow's packet sampling theory site.
11. S. Kamei, M. Uchida, T. Mori, and Y. Takahashi,
    ``Estimating scale of peer-to-peer file sharing applications using multilayer partial measurement,''
    Electronics and Communications in Japan (Part I: Communications) Volume 90, Issue 3, Date: March 2007, Pages: 54-63 [Wiley] [Google Scholar]
12. R. Kawahara, K. Ishibashi, T. Mori, T. Ozawa and T. Abe,
    ``Method of Bandwidth Dimensioning and Management for Aggregated TCP Flows with Heterogeneous Access Links,''
    IEICE Trans. Commun., vol.E88-B, no.12, pp.4605-4615, Dec. 2005. [IEICE] [bibtex]
13. T. Mori, M. Uchida and S. Goto,
    ``Flow Analysis of Internet Traffic: World Wide Web versus Peer-to-peer,''
    Systems and Computers in Japan, Volume 36, Issue 11, Pages 70 -- 81, 2005 (DOI: 10.1002/scj.20283) [IEICE] [bibtex] [Google Scholar]
14. T. Mori, R. Kawahara, S. naito and S. Goto,
    ``On the Characteristics of Internet Traffic Variability: Spikes and Elephants,''
    IEICE Transactions on Information and Systems, Vol. E87-D, No. 12, pp. 2644-2653, Dec. 2004 [IEICE] [wikipedia] [bibtex] [Google Scholar]

Refereed Conference/Workshop Proceedings

1. D. Chiba, K. Tobe, T. Mori, and S. Goto,
   ``Detecting Malicious Websites by Learning IP Address Features,''
   Proc. IEEE/IPSJ SAINT 2012, July 2012 (to appear)
2. N. Kamiyama, T. Mori, and R. Kawahara,
   ``Autonomic Load Balancing for Flow Monitoring,''
   Proc. IEEE ICC 2012, June 2012 (to appear)
3. T. Mori, Y. Takahashi, K. Sato, and K. Ishibashi
   ``How is E-mail Sender Authentication Used and Misused?,''
   Proc. 8th Conference on Email and Anti-spam (CEAS 2011), Perth, WA, Australia, Sep. 2011 [PDF] [ACM portal] [bibtex]
4. Y. Takata, S. Goto, T. Mori,
   ``Analysis of Redirection Caused by Web-based Malware,''
   APAN 32nd Meeting, Network Research Workshop 2011, August 2011. (Best Student Paper Award) [PDF]
5. R. Kawahara, S. Harada, N. Kamiyama, T. Mori, and H. Hasegawa,
   ``Traffic engineering using overlay network,''
   Proc. IEEE ICC 2011, Kyoto, Japan, June 2011. [IEEE Xplore] [PDF] [bibtex]
6. N. Kamiyama, R. Kawahara, T. Mori, and H. Hasegawa,
   ``Limiting pre-distribution and clustering users on multicast pre-distribution VoD,''
   Proc. IEEE IM 2011, 706--709, Dublin, Ireland, May 2011 [IEEE Xplore] [bibtex]
7. R. Kawahara, N. Kamiyama, T. Mori, and H. Hasegawa,
   ``Performance evaluation of peer-assisted content distribution,''
   Proc. IEEE CCNC 2011, Las Vegas, US, Jan 2011. [IEEE Xplore]
8. N. Kamiyama, T. Mori, R. Kawahara, S. Harada, and H. Hasegawa
   ``Analyzing Influence of Network Topology on Designing ISP-Operated CDN,''
   Proc. IEEE NETWORKS 2010, Walsaw, Poland, Sep 2010. [IEEE Xplore]
9. K. Ishibashi, T. Kondoh, S. Harada, T. Mori, and R. Kawahara,
   ``Detecting Anomalous Traffic using Communication Graphs,''
   World Telecommunications Congress 2010 (WTC2010), Vienna, Austria, September 2010. [IEEE Xplore]
10. A. Shimoda, T. Mori, and S. Goto,
    ``Sensor in the Dark: Building Untraceable Large-scale Honeypots using Virtualization Technologies,''
    Proc. IEEE/IPSJ SAINT 2010, pp. 22--30, Seoul, South Korea, July 2010. (Best Student Paper Award) [pdf] [IEEE Xplore] [bibtex]
11. T Mori,H. Esquivel, A. Akella, A. Shimoda, and S. Goto
    ``Understanding Large-Scale Spamming Botnets From Internet Edge Sites,''
    Proc. Seventh Conference on Email and Anti-spam (CEAS 2010), Redmond, Washington, USA, Jul. 2010 [PDF][slide][poster]
12. N. Kamiyama, R. Kawahara, T. Mori, S. Harada, and H. Hasegawa
    ``Optimally Designing Capacity and Location of Caches to Reduce P2P Traffic,''
    Proc. IEEE ICC 2010, pp. 1--6, Cape Town, South Africa, May 2010. [IEEE Xplore]
13. T. Mori, R. Kawahara, H. Hasegawa, and S. Shimogawa
    ``Characterizing traffic flows originating from large-scale video sharing services,''
    Proc. COST Traffic Monitoring and Analysis (TMA) workshop 2010, pp. 17-31, Springer-Verlag LNCS 6003, Zurich, Switzerland, Apr. 2010.
    [PDF] [Springer] [Google Book] [slide] [talk] [bibtex] [Google Scholar] (notice: I really don't recommend you to spend your time on watching the movie, though...)
14. N. Kamiyama, R. Kawahara, T. Mori, S. Harada, and H. Hasegawa
    ``Impact of Topology on Parallel Video Streaming,''
    Proc. IEEE/IFIP NOMS 2010, pp. 607--614, Osaka, Japan, Apr 2010. [IEEE Xplore]
15. H. Esquivel, T. Mori, and A. Akella
    ``On the Effectiveness of IP reputation for Spam Filtering,''
    Proc. IEEE/ACM COMSNETS 2010, pp. 40--49, Bengalooru, India, Jan. 2010. (Best Paper Award) [paper][slide][CiteSeer][ACM portal][bibtex][Google Scholar]
    
16. T. Mori, N. Kamiyama, S. Harada, H. Hasegawa, and R. Kawahara,
    ``Improving deployability of peer-assisted CDN platform with incentive,''
    Proc. IEEE GLOBECOM 2009, pp. 1-7, Honolulu, HI, USA., Dec. 2009 [pdf] [slide] [ACM portal] [bibtex] [Google Scholar]
17. H. Esquivel, T. Mori, and A. Akella
    ``Router-Level Spam Filtering Using TCP Fingerprints: Architecture and Measurement-Based Evaluation,''
    Proc. Sixth Conference on Email and Anti-spam (CEAS 2009), Mountain View, CA, USA, Jul. 2009 [paper] [CiteSeer] [Google Scholar]
18. R. Kawahara, T. Mori, N. Kamiyama, S. Harada, and H. Hasegawa,
    ``Adaptive bandwidth control to handle long-duration large flows,''
    Proc. IEEE ICC 2009 Next Generation Networking Symposium, pp. 1--6, Dresden, Germany, June 2009. [IEEE Xplore] [bibtex]
19. N. Kamiyama, T. Mori, R. Kawahara, S. Harada, and H. Hasegawa
    ``ISP-Operated CDN,''
    IEEE Global Internet Symposium 2009, Apr. 2009. [IEEE Xplore] [Google Scholar]
20. K. Ishibashi, T. Mori, S. Harada, T. Kondoh, R. Kawahara, and S. Asano,
    ``Detecting Anomalies in Inter-hosts Communication Graph,''
    CERT FloCon 2009, Jan. 2009 [paper]
21. S. Harada, R. Kawahara, T. Mori, N. Kamiyama, S. Hasegawa, and H. Yoshino
    ``A method of detecting network anomalies in cyclic traffic',''
    Proc. IEEE GLOBECOM 2008, pp. 2057-2061, New Orleans, LA, USA Dec., 2008. [PDF] [IEEE Xplore] [bibtex] [Google Scholar]
22. N. Kamiyama, T. Mori, R. Kawahara, and S. Harada,
    ``Optimum Identification of Worm-Infected Hosts,''
    Proc. IEEE IPOM 2008, Samos Island, Greece, Sep., 2008. [ACM portal]
23. N. Kamiyama, T. Mori, R. Kawahara, S. Harada, and H. Yoshino
    ``Extracting Worm-Infected Hosts Using White List,''
    IEEE/IPSJ SAINT 2008, Turku, FINLAND, Aug., 2008. [IEEE Xplore]
24. R. Kawahara, K. Ishibashi, T. Mori, N. Kamiyama, and S. Asano
    ``Detection accuracy of network anomalies using sampled flow statistics''
    IEEE GLOBECOM 2007, Washington, D.C., USA, November 2007. [IEEE Xplore]
25. N. Kamiyama, T. Mori, R. Kawahara, and E. K. Lua
    ``Efficient Timeout Checking Mechanism for Traffic Control,''
    IEEE ICCCN 2007, Honolulu, Hawaii, USA, Aug 2007 [IEEE Xplore]
26. K. Ishibashi, R. Kawahara, T. Mori, and R. Kawahara
    ``Effect of sampling rate and monitoring granularity on anomaly detectability,''
    IEEE Global Inernet Symposium 2007 Minisymposia, Anchorage, Alaska, USA, May 2007. [PDF] [IEEE Xplore] [Google Scholar]
27. N. Kamiyama, T. Mori, and R. Kawahara
    ``Simple and Adaptive Identification of Superspreaders by Flow Sampling,''
    Proc. IEEE INFOCOM 2007 Minisymposia, pp. 2481-2485, Anchorage, Alaska, USA, May 2007. [abstract][bibtex][Google Scholar]
28. T. Mori, R. Kawahara, N. Kamiyama, and S. Harada
    ``Inferring original traffic pattern from sampled flow statistics,''
    IEEE/IPSJ SAINT 2007 Workshop on Internet Measurement Technology, Hiroshima, Japan, January 2007. [abstract][paper][bibtex]
29. R. Kawahara, T. Mori, N. Kamiyama, S. Harada, and S. Asano
    ``A study on detecting network anomalies using sampled flow statistics,''
    IEEE/IPSJ SAINT 2007 Workshop on Internet Measurement Technology, Hiroshima, Japan, January 2007. [abstract] [Google Scholar]
30. K. Ishibashi, T. Mori, R. Kawahara, K. Toyama, S. Osawa, and S. Asano,
    ``2-D Bitmap for Summarizing Inter-Host Communication Pattern,''
    IEEE/IPSJ SAINT 2007 Workshop on Internet Measurement Technology, Hiroshima, Japan, January 2007. [IEEE Xplore]
31. R. Kawahara, T. Mori, Keisuke Ishibashi, Noriaki Kamiyama and Takeo Abe,
    ``Estimating flow rate from sampled packet streams for detection of performance degradation at TCP flow level,''
    Proc. IEEE GLOBECOM 2006, pp. 1--6, San Francisco, USA, December 2006. [IEEE Xplore]
32. R. Kawahara, T. Mori, and T. Abe,
    ``QoS control to handle long-duration large flows and its performance evaluation,''
    Proc. IEEE ICC 2006, Istanbul, Turkey, June 2006. [IEEE Xplore]
33. K. Ishibashi, T. Mori, R. Kawahara, Y. Hirokawa, A. Kobayashi, K. Yamamoto, and H. Sakamoto,
    ``Estimating Top-N Hosts in Cardinality,''
    Proc. 2nd IEEE International Workshop on Networking Meets Databases (NetDB'06), Atlanta, GA, USA, April 2006. [IEEE Xplore] [Google Scholar]
34. N. Kamiyama and T. Mori,
    ``Simple and Accurate Identification of High-Rate Flows by Packet Sampling,''
    Proc. IEEE INFOCOM 2006, pp. 2836-2848, Barcelona, Spain, April 2006. [PDF] [IEEE Xplore] [bibtex] [Google Scholar]
35. R. Kawahara, K. Ishibashi, T. Mori, and T. Abe,
    ``A Method of Detecting Performance Degradation at TCP Flow Level from Sampled Packet Streams,''
    Proc. IEEE High Performance Switching and Routing (HPSR) 2005, pp. 157--161, HongKong, China, May 2005. [IEEE Xplore] [Google Scholar]
36. T. Mori, M. Uchida, R. Kawahara, J. Pan and S. Goto,
    ``Identifying elephant flows through periodically sampled packets,''
    Proc. ACM/USENIX IMC 2004, pp. 115-120, Taormina, Italiy, October 2004. [PDF] [ACM portal] [bibtex] [Google Scholar]
    
37. R. Kawahara, T. Mori, S. Sumita, and T. Abe,
    ``A scalable form of QoS control that handles long-duration P2P flows,''
    XIX World Telecommunications Congress (WTC/ISS 2004), 2004.
    
38. R. Kawahara, K. Ishibashi, T. Mori, T. Ozawa, S. Sumita, and T. Abe,
    ``A method of bandwidth dimensioning and management for aggregated TCP flows with heterogeneous access links,''
    Proc. 11th International Telecommunications Network Strategy and Planning Symposium, pp.15-20, June, 2004. [IEEE Xplore] [Google Books]
39. T. Mori, R. Kawahara, S. Naito and S. Goto,
    ``On the Characteristics of Internet Traffic Variability: Spikes and Elephants,''
    IEEE/IPSJ SAINT 2004, pp. 99-106, Tokyo, Japan, 2004 [PDF] [IEEE Xplore] [slide] [wikipedia] [bibtex] [Google Scholar]
    The conference paper was developed into a full journal article.

Technical Reports

1. Tatsuya Mori, Holly Esquivel, Aditya Akella, Akihiro Shimoda, and Shigeki Goto,
   ``Understanding the World's Worst Spamming Botnet,''
   The University of Wisconsin-Madison Computer Sciences Tech Reports TR1660, June 2009 [paper|abstract]
2. Tatsuya Mori, Holly Esquivel, Aditya Akella, Z. Morley Mao, Yinglian Xie, and Fang Yu,
   ``On the Effectiveness of Pre-Acceptance Spam Filtering,''
   The University of Wisconsin-Madison Computer Sciences Tech Reports TR1650, Feb. 2009 [paper|abstract]
3. T. Mori and R. Kawahara,
   ``A study on the marginal distribution of network traffic,''
   IEICE Technical Report, IN2001-107, pp. 1-7, (2001-11)

Other talks

1. T. Mori, A. Nakao, N. Kamiyama, H. Hasegawa, and R. Kawahara
   ``Toward scalable byte caching on high-speer routers,''
   IEICE Society Conference 2009, BS-5-6, September 2009.
2. T. Mori, N. Kamiyama, S. Harada, H. Hasegawa, and R. Kawahara,
   ``How Incentive Helps In Making Peer-assisted CDN Deployable?,''
   IEICE General Conference BS-4-14, March 2009
3. T. Mori,
   ``A robust approach of detecting anomalous hosts,''
   Intimate 2006, Network Anomaly Diagnosis Workshop, Paris, France, July 2006. (invited) [slide]
4. T. Mori, R. Kawahara, and N. Kamiyama,
   ``A simple and scalable detector of heavy-hitter flows,''
   Sampling Workshop 2005, Paris, France, July 2005. (invited)
5. T. Mori,
   ``Detecting Abusive Traffic Flows in Very High-Speed Networks,''
   Joint Workshop of the Core University Program and JSPS 163rd Committee on Next Generation Internet Technology, Daejong, Korea, Nov. 2004.
6. T. Mori, R. Kawahara and S. Naito,
   ``Analysis of Non-Gaussian Nature of Network Traffic,'' [preprint]
   IEICE General Conference 2002, SB-13-5, (2002-03)
   
7. T. Mori and R. Kawahara,
   ``Is Hurst parameter sufficient for evaluating the performance of bursty traffic?,''
   IEICE Society Conference 2001, SB-10-3, (2001-09) [Science Links Japan] [Google Scholar]