Phillip A. Porras

Jason Kaehler

Proceedings of the HCI for Cybersecurity, Privacy and Trust, 2019

DPX: Data-Plane eXtensions for SDN Security Service Instantiation.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2019

Coordinated dataflow protection for ultra-high bandwidth science networks.

[BibT_eX]

[DOI]

Proceedings of the 35th Annual Computer Security Applications Conference, 2019

2018

AEGIS: An Automated Permission Generation and Verification System for SDNs.

[BibT_eX]

[DOI]

Proceedings of the 2018 Workshop on Security in Softwarized Networks: Prospects and Challenges, 2018

Barista: An Event-centric NOS Composition Framework for Software-Defined Networks.

[BibT_eX]

[DOI]

Proceedings of the 2018 IEEE Conference on Computer Communications, 2018

2017

Flow Wars: Systemizing the Attack Surface and Defenses in Software-Defined Networks.

[BibT_eX]

[DOI]

IEEE/ACM Trans. Netw., 2017

DELTA: A Security Assessment Framework for Software-Defined Networks.

[BibT_eX]

[DOI]

Proceedings of the 24th Annual Network and Distributed System Security Symposium, 2017

Automated Categorization of Onion Sites for Analyzing the Darkweb Ecosystem.

[BibT_eX]

[DOI]

Proceedings of the 23rd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Halifax, NS, Canada, August 13, 2017

Securing Ultra-High-Bandwidth Science DMZ Networks with Coordinated Situational Awareness.

[BibT_eX]

[DOI]

Vasudevan Nagendra

Venkat N. Venkatakrishnan

Proceedings of the 16th ACM Workshop on Hot Topics in Networks, Palo Alto, CA, USA, 2017

Athena: A Framework for Scalable Anomaly Detection in Software-Defined Networks.

[BibT_eX]

[DOI]

Proceedings of the 47th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2017

Bridging the architectural gap between NOS design principles in software-defined networks.

[BibT_eX]

[DOI]

Proceedings of the 2017 Symposium on Cloud Computing, SoCC 2017, Santa Clara, CA, USA, 2017

A Security-Mode for Carrier-Grade SDN Controllers.

[BibT_eX]

[DOI]

Proceedings of the 33rd Annual Computer Security Applications Conference, 2017

ATOL: A Framework for Automated Analysis and Categorization of the Darkweb Ecosystem.

[BibT_eX]

[DOI]

Proceedings of the Workshops of the The Thirty-First AAAI Conference on Artificial Intelligence, 2017

2016

Reexamining DNS From a Global Recursive Resolver Perspective.

[BibT_eX]

[DOI]

IEEE/ACM Trans. Netw., 2016

HogMap: Using SDNs to Incentivize Collaborative Security Monitoring.

[BibT_eX]

[DOI]

Proceedings of the 2016 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization, 2016

2015

Securing the Software Defined Network Control Layer.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

EKHunter: A Counter-Offensive Toolkit for Exploit Kit Infiltration.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

2014

DroidMiner: Automated Mining and Characterization of Fine-grained Malicious Behaviors in Android Applications.

[BibT_eX]

[DOI]

Proceedings of the Computer Security - ESORICS 2014, 2014

Rosemary: A Robust, Secure, and High-performance Network Operating System.

[BibT_eX]

[DOI]

Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, 2014

2013

An empirical reexamination of global DNS behavior.

[BibT_eX]

[DOI]

Proceedings of the ACM SIGCOMM 2013 Conference, 2013

FRESCO: Modular Composable Security Services for Software-Defined Networks.

[BibT_eX]

[DOI]

Proceedings of the 20th Annual Network and Distributed System Security Symposium, 2013

Clear and Present Data: Opaque Traffic and its Security Implications for the Future.

[BibT_eX]

[DOI]

Proceedings of the 20th Annual Network and Distributed System Security Symposium, 2013

Model checking invariant security properties in OpenFlow.

[BibT_eX]

[DOI]

Proceedings of IEEE International Conference on Communications, 2013

AVANT-GUARD: scalable and vigilant switch flow management in software-defined networks.

[BibT_eX]

[DOI]

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

2012

Bootstrapping Communications into an Anti-Censorship System.

[BibT_eX]

[DOI]

William Allen Simpson

Paul Vixie

Dan Boneh

Proceedings of the 2nd USENIX Workshop on Free and Open Communications on the Internet, 2012

A security enforcement kernel for OpenFlow networks.

[BibT_eX]

[DOI]

Proceedings of the first workshop on Hot topics in software defined networks, 2012

Evading Censorship with Browser-Based Proxies.

[BibT_eX]

[DOI]

David Fifield

Nate Hardison

Jonathan D. Ellithorpe

Proceedings of the Privacy Enhancing Technologies - 12th International Symposium, 2012

PathCutter: Severing the Self-Propagation Path of XSS JavaScript Worms in Social Web Networks.

[BibT_eX]

[DOI]

Proceedings of the 19th Annual Network and Distributed System Security Symposium, 2012

Detecting money-stealing apps in alternative Android markets.

[BibT_eX]

[DOI]

Proceedings of the ACM Conference on Computer and Communications Security, 2012

Efficient Runtime Policy Enforcement Using Counterexample-Guided Abstraction Refinement.

[BibT_eX]

[DOI]

Proceedings of the Computer Aided Verification - 24th International Conference, 2012

2011

A comparative assessment of malware classification using binary texture analysis and dynamic analysis.

[BibT_eX]

[DOI]

Proceedings of the 4th ACM Workshop on Security and Artificial Intelligence, 2011

Poster: a path-cutting approach to blocking XSS worms in social web networks.

[BibT_eX]

[DOI]

Proceedings of the 18th ACM Conference on Computer and Communications Security, 2011

2010

Gaussian process learning for cyber-attack early warning.

[BibT_eX]

[DOI]

Jian Zhang

Johannes Ullrich

Stat. Anal. Data Min., 2010

An Analysis of the iKee.B iPhone Botnet.

[BibT_eX]

[DOI]

Hassen Saïdi

Proceedings of the Security and Privacy in Mobile Information and Communication Systems, 2010

BLADE: an attack-agnostic approach for preventing drive-by malware infections.

[BibT_eX]

[DOI]

Proceedings of the 17th ACM Conference on Computer and Communications Security, 2010

2009

Directions in Network-Based Security Monitoring.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2009

Inside risks - Reflections on Conficker.

[BibT_eX]

[DOI]

Commun. ACM, 2009

BLADE: Slashing the Invisible Channel of Drive-by Download Malware.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 12th International Symposium, 2009

ALICE@home: Distributed Framework for Detecting Malicious Sites.

[BibT_eX]

[DOI]

Ikpeme Erete

Proceedings of the Recent Advances in Intrusion Detection, 12th International Symposium, 2009

A Foray into Conficker's Logic and Rendezvous Points.

[BibT_eX]

[DOI]

Hassen Saïdi

Proceedings of the 2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats, 2009

Active Botnet Probing to Identify Obscure Command and Control Channels.

[BibT_eX]

[DOI]

Proceedings of the Twenty-Fifth Annual Computer Security Applications Conference, 2009

2008

Highly Predictive Blacklisting.

[BibT_eX]

[DOI]

Jian Zhang

Johannes Ullrich

Eureka: A Framework for Enabling Static Malware Analysis.

[BibT_eX]

[DOI]

Proceedings of the Computer Security, 2008

2007

BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation.

[BibT_eX]

[DOI]

Proceedings of the 16th USENIX Security Symposium, Boston, MA, USA, August 6-10, 2007, 2007

A New Service for Increasing the Effectiveness of Network Address Blacklists.

[BibT_eX]

[DOI]

Jian Zhang

Johannes Ullrich

Proceedings of the 3rd Workshop on Steps to Reducing Unwanted Traffic on the Internet, 2007

Misleading and defeating importance-scanning malware propagation.

[BibT_eX]

[DOI]

Proceedings of the Third International Conference on Security and Privacy in Communication Networks and the Workshops, 2007

How to Secure Bluetooth-Based Pico Networks.

[BibT_eX]

[DOI]

Dennis K. Nilsson

Erland Jonsson

Proceedings of the Computer Safety, 2007

Applying Formal Evaluation to Worm Defense Design.

[BibT_eX]

[DOI]

Raman Sharykin

Proceedings of the 26th IEEE International Performance Computing and Communications Conference, 2007

2006

Privacy-Enabled Global Threat Monitoring.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2006

Large-scale collection and sanitization of network security data: risks and challenges.

[BibT_eX]

[DOI]

Vitaly Shmatikov

Proceedings of the New Security Paradigms Workshop 2006, 2006

Automatically deducing propagation sequences that circumvent a collaborative worm defense.

[BibT_eX]

[DOI]

Linda Briesemeister

Proceedings of the 25th IEEE International Performance Computing and Communications Conference, 2006

2005

Microscopic Simulation of a Group Defense Strategy.

[BibT_eX]

[DOI]

Linda Briesemeister

Proceedings of the 19th Workshop on Parallel and Distributed Simulation, 2005

2004

Cyber defense technology networking and evaluation.

[BibT_eX]

[DOI]

Commun. ACM, 2004

A hybrid quarantine defense.

[BibT_eX]

[DOI]

Proceedings of the 2004 ACM Workshop on Rapid Malcode, 2004

Privacy-Preserving Sharing and Correlation of Security Alerts.

[BibT_eX]

[DOI]

Patrick Lincoln

Vitaly Shmatikov

Proceedings of the 13th USENIX Security Symposium, August 9-13, 2004, San Diego, CA, USA, 2004

2003

Epidemic profiles and defense of scale-free networks.

[BibT_eX]

[DOI]

Linda Briesemeister

Patrick Lincoln

Proceedings of the 2003 ACM Workshop on Rapid Malcode, 2003

2002

A Mission-Impact-Based Approach to INFOSEC Alarm Correlation.

[BibT_eX]

[DOI]

Martin W. Fong

Alfonso Valdes

Proceedings of the Recent Advances in Intrusion Detection, 5th International Symposium, 2002

An Adaptable Network COntrol and Reporting System (ANCORS).

[BibT_eX]

[DOI]

Proceedings of the 2002 DARPA Active Networks Conference and Exposition (DANCE 2002), 2002

2001

eXpert-BSM: A Host-Based Intrusion Detection Solution for Sun Solaris.

[BibT_eX]

[DOI]

Ulf Lindqvist

Proceedings of the 17th Annual Computer Security Applications Conference (ACSAC 2001), 2001

1999

Detecting Computer and Network Misuse through the Production-based Expert System Toolset (P-BEST).

[BibT_eX]

[DOI]

Ulf Lindqvist

Proceedings of the 1999 IEEE Symposium on Security and Privacy, 1999

An Adaptable Network COntrol and Reporting System (ANCORS).

[BibT_eX]

[DOI]

Livio Ricciulli

Proceedings of the 1999 IEEE/IFIP International Symposium on Integrated Network Management, 1999

Experience with EMERALD to Date.

[BibT_eX]

[DOI]

Peter G. Neumann

Proceedings of the Workshop on Intrusion Detection and Network Monitoring, 1999

1998

Live Traffic Analysis of TCP/IP Gateways.

[BibT_eX]

[DOI]

Alfonso Valdes

Proceedings of the Network and Distributed System Security Symposium, 1998

1996

An Analysis of the Intel 80x86 Security Architecture and Implementations.

[BibT_eX]

[DOI]

Olin Sibert

Robert Lindell

IEEE Trans. Software Eng., 1996

1995

State Transition Analysis: A Rule-Based Intrusion Detection Approach.

[BibT_eX]

[DOI]

Koral Ilgun

IEEE Trans. Software Eng., 1995

The Intel 80×86 processor architecture: pitfalls for secure systems.

[BibT_eX]

[DOI]

Olin Sibert

Robert Lindell

Proceedings of the 1995 IEEE Symposium on Security and Privacy, 1995

1992

Penetration state transition analysis: A rule-based intrusion detection approach.

[BibT_eX]

[DOI]

Proceedings of the Eighth Annual Computer Security Applications Conference, 1992

1991

Covert Flow Trees: A Visual Approach to Analyzing Covert Storage Channels.

[BibT_eX]

[DOI]

IEEE Trans. Software Eng., 1991

Covert Flow Trees: A Technique for Identifying and Analyzing Covert Storage Channels.

[BibT_eX]

[DOI]