I'm a Ph.D student from CS Department, USC since 2014 Fall. I work in Analysis of Network Traffic (ANT) group with my advisor Prof. John Heidemann at Information Sciences Institute (ISI).

I received my B.S. in Telecommunications Engineering from Beijing University of Posts and Telecommunications in 2014.

My research interests are Internet traffic analysis and measurement-based cybersecurity. I previously focused on detecting and explaining ICMP filtering in the Internet and detecting IoT devices by passive network measurements for security purposes (If you happen to own an IoT device, here is how to help). I am currently working on developing source-end defense to IoT-based DDoS attack.

Besides my research, I'm a huge fan of basketball. Occasionally, I go surfing and snow boarding.

Education

• University of Southern California, Los Angeles, California
  Ph.D. student in Computer Science since 2014, advised by Prof. John Heidemann
  
• Beijing University of Posts and Telecommunications, Beijing, China
  B.S. Telecommunications Engineering, 2010 - 2014

Publications

• Hang Guo, John Heidemann. Detecting IoT Devices in the Internet (Extended). USC/ISI Technical Report ISI-TR-726. July 2018. [pdf]

• Hang Guo, John Heidemann. IP-Based IoT Device Detection. Workshop on Internet of Things Security and Privacy (IoT S&P). Budapest, Hungary. Aug 2018. [pdf] [slides]

• Hang Guo, John Heidemann. Detecting ICMP Rate Limiting in the Internet. Passive and Active Measurement Conference (PAM). Berlin, Germany. March 2018. [pdf] [slides]

• Hang Guo, John Heidemann. Detecting ICMP Rate Limiting in the Internet (Extended). USC/ISI Technical Report ISI-TR-717. April 2017. [pdf]

Software

• rejwreply — a Linux kernel patch that adds echo-reply to feedback type of iptable REJECT rule.