David Brumley

According to our database, David Brumley authored at least 56 papers between 2000 and 2018.

Collaborative distances:

• Dijkstra number of two.
• Erdős number of three.

2018

The Cyber Grand Challenge and the Future of Cyber-Autonomy.

David Brumley

login Usenix Mag., 2018

The Mayhem Cyber Reasoning System.

Thanassis Avgerinos, David Brumley, John Davis, Ryan Goulden, Tyler Nighswander, Alexandre Rebert, Ned Williamson

IEEE Secur. Priv., 2018

Cloud Datacenter SDN Monitoring: Experiences and Challenges.

Arjun Roy, Deepak Bansal, David Brumley, Harish Kumar Chandrappa, Parag Sharma, Rishabh Tewari, Behnaz Arzani, Alex C. Snoeren

Proceedings of the Internet Measurement Conference 2018, 2018

2017

Your Exploit is Mine: Automatic Shellcode Transplant for Remote Exploits.

Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, David Brumley

Proceedings of the 2017 IEEE Symposium on Security and Privacy, 2017

How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games.

Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, David Brumley

Proceedings of the 30th IEEE Computer Security Foundations Symposium, 2017

Scaling Up DPLL(T) String Solvers Using Context-Dependent Simplification.

Andrew Reynolds, Maverick Woo, Clark W. Barrett, David Brumley, Tianyi Liang, Cesare Tinelli

Proceedings of the Computer Aided Verification - 29th International Conference, 2017

2016

Towards Automated Dynamic Analysis for Linux-based Embedded Firmware.

Daming D. Chen, Maverick Woo, David Brumley, Manuel Egele

Proceedings of the 23rd Annual Network and Distributed System Security Symposium, 2016

2015

Invisible Intruders: Rootkits in Practice.

David Brumley

login Usenix Mag., 2015

Program-Adaptive Mutational Fuzzing.

Sang Kil Cha, Maverick Woo, David Brumley

Proceedings of the 2015 IEEE Symposium on Security and Privacy, 2015

Automatically deriving pointer reference expressions from binary code for memory dump analysis.

Yangchun Fu, Zhiqiang Lin, David Brumley

Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering, 2015

2014

Automatic exploit generation.

Thanassis Avgerinos, Sang Kil Cha, Alexandre Rebert, Edward J. Schwartz, Maverick Woo, David Brumley

Commun. ACM, 2014

Optimizing Seed Selection for Fuzzing.

Alexandre Rebert, Sang Kil Cha, Thanassis Avgerinos, Jonathan Foote, David Warren, Gustavo Grieco, David Brumley

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

Blanket Execution: Dynamic Similarity Testing for Program Binaries and Components.

Manuel Egele, Maverick Woo, Peter Chapman, David Brumley

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

PicoCTF: A Game-Based Computer Security Competition for High School Students.

Peter Chapman, Jonathan Burket, David Brumley

Proceedings of the 2014 USENIX Summit on Gaming, 2014

BYTEWEIGHT: Learning to Recognize Functions in Binary Code.

Tiffany Bao, Jonathan Burket, Maverick Woo, Rafael Turner, David Brumley

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

Enhancing symbolic execution with veritesting.

Thanassis Avgerinos, Alexandre Rebert, Sang Kil Cha, David Brumley

Proceedings of the 36th International Conference on Software Engineering, 2014

2013

Towards Automatic Software Lineage Inference.

Jiyong Jang, Maverick Woo, David Brumley

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Native x86 Decompilation Using Semantics-Preserving Structural Analysis and Iterative Control-Flow Structuring.

David Brumley, JongHyup Lee, Edward J. Schwartz, Maverick Woo

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Automatically Inferring the Evolution of Malicious Activity on the Internet.

Shobha Venkataraman, David Brumley, Subhabrata Sen, Oliver Spatscheck

Proceedings of the 20th Annual Network and Distributed System Security Symposium, 2013

Scheduling black-box mutational fuzzing.

Maverick Woo, Sang Kil Cha, Samantha Gottlieb, David Brumley

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

An empirical study of cryptographic misuse in android applications.

Manuel Egele, David Brumley, Yanick Fratantonio, Christopher Kruegel

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

2012

ReDeBug: Finding Unpatched Code Clones in Entire OS Distributions.

Jiyong Jang, Maverick Woo, David Brumley

login Usenix Mag., 2012

Tachyon: Tandem Execution for Efficient Live Patch Testing.

Matthew Maurer, David Brumley

Proceedings of the 21th USENIX Security Symposium, Bellevue, WA, USA, August 8-10, 2012, 2012

ReDeBug: Finding Unpatched Code Clones in Entire OS Distributions.

Jiyong Jang, Abeer Agrawal, David Brumley

Proceedings of the IEEE Symposium on Security and Privacy, 2012

Unleashing Mayhem on Binary Code.

Sang Kil Cha, Thanassis Avgerinos, Alexandre Rebert, David Brumley

Proceedings of the IEEE Symposium on Security and Privacy, 2012

GPS software attacks.

Tyler Nighswander, Brent M. Ledvina, Jonathan Diamond, Robert Brumley, David Brumley

Proceedings of the ACM Conference on Computer and Communications Security, 2012

2011

Static Analysis.

David Brumley

Proceedings of the Encyclopedia of Cryptography and Security, 2nd Ed., 2011

Q: Exploit Hardening Made Easy.

Edward J. Schwartz, Thanassis Avgerinos, David Brumley

Proceedings of the 20th USENIX Security Symposium, 2011

TIE: Principled Reverse Engineering of Types in Binary Programs.

JongHyup Lee, Thanassis Avgerinos, David Brumley

Proceedings of the Network and Distributed System Security Symposium, 2011

AEG: Automatic Exploit Generation.

Thanassis Avgerinos, Sang Kil Cha, Brent Lim Tze Hao, David Brumley

Proceedings of the Network and Distributed System Security Symposium, 2011

BitShred: feature hashing malware for scalable triage and semantic analysis.

Jiyong Jang, David Brumley, Shobha Venkataraman

Proceedings of the 18th ACM Conference on Computer and Communications Security, 2011

BAP: A Binary Analysis Platform.

David Brumley, Ivan Jager, Thanassis Avgerinos, Edward J. Schwartz

Proceedings of the Computer Aided Verification - 23rd International Conference, 2011

2010

All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask).

Edward J. Schwartz, Thanassis Avgerinos, David Brumley

Proceedings of the 31st IEEE Symposium on Security and Privacy, 2010

SplitScreen: Enabling Efficient, Distributed Malware Detection.

Sang Kil Cha, Iulian Moraru, Jiyong Jang, John Truelove, David Brumley, David G. Andersen

Proceedings of the 7th USENIX Symposium on Networked Systems Design and Implementation, 2010

Contractual Anonymity.

Edward J. Schwartz, David Brumley, Jonathan M. McCune

Proceedings of the Network and Distributed System Security Symposium, 2010

Platform-independent programs.

Sang Kil Cha, Brian Pak, David Brumley, Richard Jay Lipton

Proceedings of the 17th ACM Conference on Computer and Communications Security, 2010

2008

Automatically Identifying Trigger-based Behavior in Malware.

David Brumley, Cody Hartwig, Zhenkai Liang, James Newsome, Dawn Xiaodong Song, Heng Yin

Proceedings of the Botnet Detection: Countering the Largest Security Threat, 2008

Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures.

David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha

IEEE Trans. Dependable Secur. Comput., 2008

Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications.

David Brumley, Pongsin Poosankam, Dawn Xiaodong Song, Jiang Zheng

Proceedings of the 2008 IEEE Symposium on Security and Privacy (SP 2008), 2008

BitBlaze: A New Approach to Computer Security via Binary Analysis.

Dawn Xiaodong Song, David Brumley, Heng Yin, Juan Caballero, Ivan Jager, Min Gyung Kang, Zhenkai Liang, James Newsome, Pongsin Poosankam, Prateek Saxena

Proceedings of the Information Systems Security, 4th International Conference, 2008

2007

Sting: An End-to-End Self-Healing System for Defending against Internet Worms.

David Brumley, James Newsome, Dawn Song

Proceedings of the Malware Detection, 2007

Towards Automatic Discovery of Deviations in Binary Implementations with Applications to Error Detection and Fingerprint Generation.

David Brumley, Juan Caballero, Zhenkai Liang, James Newsome

Proceedings of the 16th USENIX Security Symposium, Boston, MA, USA, August 6-10, 2007, 2007

RICH: Automatically Protecting Against Integer-Based Vulnerabilities.

David Brumley, Dawn Xiaodong Song, Tzi-cker Chiueh, Rob Johnson, Huijia Lin

Proceedings of the Network and Distributed System Security Symposium, 2007

Generic Application-Level Protocol Analyzer and its Language.

Nikita Borisov, David Brumley, Helen J. Wang, John Dunagan, Pallavi Joshi, Chuanxiong Guo

Proceedings of the Network and Distributed System Security Symposium, 2007

Sweeper: a lightweight end-to-end system for defending against fast worms.

Joseph A. Tucek, James Newsome, Shan Lu, Chengdu Huang, Spiros Xanthos, David Brumley, Yuanyuan Zhou, Dawn Xiaodong Song

Proceedings of the 2007 EuroSys Conference, Lisbon, Portugal, March 21-23, 2007, 2007

Creating Vulnerability Signatures Using Weakest Preconditions.

David Brumley, Hao Wang, Somesh Jha, Dawn Xiaodong Song

Proceedings of the 20th IEEE Computer Security Foundations Symposium, 2007

2006

Towards Attack-Agnostic Defenses.

David Brumley, Dawn Song

Proceedings of the 1st USENIX Workshop on Hot Topics in Security, 2006

Towards Automatic Generation of Vulnerability-Based Signatures.

David Brumley, James Newsome, Dawn Xiaodong Song, Hao Wang, Somesh Jha

Proceedings of the 2006 IEEE Symposium on Security and Privacy (S&P 2006), 2006

Vulnerability-Specific Execution Filtering for Exploit Prevention on Commodity Software.

James Newsome, David Brumley, Dawn Xiaodong Song

Proceedings of the Network and Distributed System Security Symposium, 2006

Replayer: automatic protocol replay by binary analysis.

James Newsome, David Brumley, Jason Franklin, Dawn Xiaodong Song

Proceedings of the 13th ACM Conference on Computer and Communications Security, 2006

Design space and analysis of worm defense strategies.

David Brumley, Li-Hao Liu, Pongsin Poosankam, Dawn Xiaodong Song

Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, 2006

2004

Privtrans: Automatically Partitioning Programs for Privilege Separation.

David Brumley, Dawn Xiaodong Song

Proceedings of the 13th USENIX Security Symposium, August 9-13, 2004, San Diego, CA, USA, 2004

2003

Remote Timing Attacks Are Practical.

David Brumley, Dan Boneh

Proceedings of the 12th USENIX Security Symposium, Washington, D.C., USA, August 4-8, 2003, 2003

Virtual Appliances for Deploying and Maintaining Software.

Constantine P. Sapuntzakis, David Brumley, Ramesh Chandra, Nickolai Zeldovich, Jim Chow, Monica S. Lam, Mendel Rosenblum

Proceedings of the 17th Conference on Systems Administration (LISA 2003), 2003

2001

A CrashCourse in Managing Security.

David Brumley

login Usenix Mag., 2001

2000

Repeatable Security.

David Brumley

login Usenix Mag., 2000