Journals
- Zonghua Zhang, and P.-H. Ho, "Measuring IDS-Estimated Attack Impacts for Rational Incident Response: A Decision Theoretic Approach," Computers & Security, Vol. 28, No.7, pp. 605-614, Oct. 2009, Elsevier.
- Zonghua Zhang, and P.-H. Ho, "Janus: a dual-purpose Analytical Model for Understanding, Characterizing and Countermining Multi-stage Collusive Attacks in enterprise networks," Journal of Networks and Computer Applications, Vol.32, No.3, pp.710-720, May 2009, Elsevier.
- Zhang, Z. and Shen, H., "M-AID: An adaptive middleware built upon anomaly detectors for intrusion detection and rational response," ACM Trans. Autonom. Adapt. Syst. Vol. 4, No. 4, Art. 24, pp.1-35, Nov. 2009.
- Zonghua Zhang, H. Shen, and Y. Sang, "An Observation-Centric Analysis on the Modeling of Anomaly-based Intrusion Detection," International Journal of Network Security, Vol. 4, No. 3, pp. 292-305, May 2007.
- Zonghua Zhang, and H. Shen, ''Application of online-training SVMs for real-time intrusion detection with different considerations," Computer Communications, Vol.28, No.12, pp.1428-1442, July 2005, Elsevier.
Conferences
- Zonghua Zhang, P-.H.Ho, and F. Nait-Abdesselam, "On Achieving Cost-Sensitive Anomaly Detection and Response in Mobile Ad Hoc Networks", in Proceedings of IEEE International Conference on Communications (ICC'09) - Communicatoin and Information Systems Security Symposium, June 2009, Dresden, Germany.
- Zonghua Zhang, R. Ando, and Y. Kadobayashi, ''Hardening botnet by a rational botmaster,'' in Proceedings of the 4th International Conferences on Information Security and Cryptology (INSCRYPT 2008), pp.348-369, Dec. 2008, Beijing, China.
- Zonghua Zhang, F. Nait-Abdesselam, and P.-H. Ho, "Boosting Markov Reward Models for Probabilistic Security Evaluation By Characterizing Behaviors of Attacker and Defender," in Proceedings of International Conference on Availability, Reliability and Security (ARES 2008-Full), pp.352-359, Mar.2008, Barcelona, Spain.
- Zonghua Zhang, F. Nait-Abdesselam, P.-H. Ho and X. Lin, "RADAR: a ReputAtion-based scheme for Detecting Anomalous nodes in wiReless mesh networks," in Proceedings of IEEE Wireless Communications and Networking Conference (WCNC 2008), pp. 2621-2626, Mar. 2008, Las Vegas, USA.
- Zonghua Zhang, F. Nait-Abdesselam, X. Lin, and P.-H. Ho, "A Model-based Semi-Quantitative Approach for Evaluating Security of Enterprise Networks," in Proceedings of 23rd ACM Symposium on Applied Computing (SAC 2008), pp. 1069-1074, Mar. 2008, Brazil.
- Zonghua Zhang, P.-H. Ho, X. Lin, and H. Shen, ''Janus: A Two-sided Analytical Model for Multi-Stage Coordinated Attacks in Computer Networks," in Proceedings of the 9th Annual international Conference on Information Security and Cryptology (ICISC 2006), pp.136-154, Nov.30-Dec.1 2006, Korea.
- Zonghua Zhang, and H. Shen, ''Constructing Multi-Layered Boundary to Defend Against Intrusive Anomalies: An Autonomic Detection Coordinator," in Proceedings of the 35th International Conference on Dependable Systems and Networks (DSN'05), pp.118-125, June 2005, Yokohama, Japan.
- Zonghua Zhang, and H. Shen, ''Online Training of SVMs for Real-time Intrusion Detection," in Proceedings of the 18th IEEE Int. Conf. on Advanced Information Networking and Applications (AINA 2004), pp.568-573, Mar. 2004, Fukuoka, Japan.