On Sampling Generating Sets of Finite Groups and Product Replacement Algorithm (extended abstract). - Igor Pak; Sergey Bratus (ISSAC, 1999)

Fast Constructive Recognition of a Black Box Group Isomorphic to Sn or An using Goldbach's Conjecture. - Sergey Bratus; Igor Pak (J. Symb. Comput., 2000)

FactBrowser Demonstration. - Scott Miller; Sergey Bratus; Lance A. Ramshaw; Ralph M. Weischedel; Alex Zamanian (HLT, 2001)

Experiments in Multi-Modal Automatic Content Extraction. - Lance A. Ramshaw; Elizabeth Boschee; Sergey Bratus; Scott Miller; Rebecca Stone; Ralph M. Weischedel; Alex Zamanian (HLT, 2001)

The Kerf Toolkit for Intrusion Analysis. - Javed A. Aslam; Sergey Bratus; David Kotz; Ronald A. Peterson; Brett Tofel; Daniela Rus (IEEE Secur. Priv., 2004)

Ubiquitous Redirection as Access Control Response. - George Bakos; Sergey Bratus (PST, 2005)

Semi-supervised Data Organization for Interactive Anomaly Analysis. - Javed A. Aslam; Sergey Bratus; Virgiliu Pavlu (ICMLA, 2006)

Pastures: Towards Usable Security Policy Engineering. - Sergey Bratus; Alex Ferguson; Doug McIlroy; Sean W. Smith (ARES, 2007)

Hacker Curriculum : How Hackers Learn Networking. - Sergey Bratus (IEEE Distributed Syst. Online, 2007)

Hacker Curriculum: How We Can Use It in Teaching. - Sergey Bratus; Christopher Masone (IEEE Distributed Syst. Online, 2007)

What Hackers Learn that the Rest of Us Don't: Notes on Hacker Curriculum. - Sergey Bratus (IEEE Secur. Priv., 2007)

Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security. - Sergey Bratus; Michael E. Locasto; Ashwin Ramaswamy; Sean W. Smith (VMSec, 2008)

Streaming Estimation of Information-Theoretic Metrics for Anomaly Detection (Extended Abstract). - Sergey Bratus; Joshua Brody; David Kotz; Anna Shubina (RAID, 2008)

TOCTOU, Traps, and Trusted Computing. - Sergey Bratus; Nihal D'Cunha; Evan Randall Sparks; Sean W. Smith (TRUST, 2008)

Backhoe, a Packet Trace and Log Browser. - Sergey Bratus; Axel Hansen; Fabio Pellacini; Anna Shubina (VizSEC, 2008)

Active behavioral fingerprinting of wireless devices. - Sergey Bratus; Cory Cornelius; David Kotz; Daniel Peebles (WISEC, 2008)

Why Do Street-Smart People Do Stupid Things Online? - Sergey Bratus; Chris Masone; Sean W. Smith (IEEE Secur. Priv., 2008)

Using domain knowledge for ontology-guided entity extraction from noisy, unstructured text data. - Sergey Bratus; Anna Rumshisky; Rajendra Magar; Paul Thompson (AND, 2009)

The cake is a lie: privilege rings as a policy resource. - Sergey Bratus; Peter C. Johnson 001; Ashwin Ramaswamy; Sean W. Smith; Michael E. Locasto (VMSec@CCS, 2009)

Dartmouth Internet Security Testbed (DIST): Building a Campus-wide Wireless Testbed. - Sergey Bratus; David Kotz; Keren Tan; William Taylor; Anna Shubina; Bennet Vance; Michael E. Locasto (CSET, 2009)

Bickering In-Depth: Rethinking the Composition of Competing Security Systems. - Michael E. Locasto; Sergey Bratus; Brian Schulte (IEEE Secur. Priv., 2009)

Katana: A Hot Patching Framework for ELF Executables. - Ashwin Ramaswamy; Sergey Bratus; Sean W. Smith; Michael E. Locasto (ARES, 2010)

The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris. - Anna Shubina; Sergey Bratus; Wyllys Ingersol; Sean W. Smith (STC@CCS, 2010)

Distributed monitoring of conditional entropy for anomaly detection in streams. - Chrisil Arackaparambil; Sergey Bratus; Joshua Brody; Anna Shubina (IPDPS Workshops, 2010)

VM-based security overkill: a lament for applied systems security research. - Sergey Bratus; Michael E. Locasto; Ashwin Ramaswamy; Sean W. Smith (NSPW, 2010)

Teaching the principles of the hacker curriculum to undergraduates. - Sergey Bratus; Anna Shubina; Michael E. Locasto (SIGCSE, 2010)

SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms. - Sergey Bratus; Michael E. Locasto; Brian Schulte (TRUST, 2010)

Software on the Witness Stand: What Should It Take for Us to Trust It? - Sergey Bratus; Ashlyn Lembree; Anna Shubina (TRUST, 2010)

On the reliability of wireless fingerprinting using clock skews. - Chrisil Arackaparambil; Sergey Bratus; Anna Shubina; David Kotz (WISEC, 2010)

Automated mapping of large binary objects using primitive fragment type classification. - Gregory J. Conti; Sergey Bratus; Anna Shubina; Benjamin Sangster; Roy Ragsdale; Matthew Supan; Andrew Lichtenberg; Robert Perez-Alemany (Digit. Investig., 2010)

Katana: Towards Patching as a Runtime Part of the Compiler-Linker-Loader Toolchain. - Sergey Bratus; James Oakley; Ashwin Ramaswamy; Sean W. Smith; Michael E. Locasto (Int. J. Secur. Softw. Eng., 2010)

Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems. - Jason Reeves; Ashwin Ramaswamy; Michael E. Locasto; Sergey Bratus; Sean W. Smith (Critical Infrastructure Protection, 2011)

Identifying Vulnerabilities in SCADA Systems via Fuzz-Testing. - Rebecca Shapiro; Sergey Bratus; Edmond Rogers; Sean W. Smith (Critical Infrastructure Protection, 2011)

Using Active Intrusion Detection to Recover Network Trust. - John F. Williamson; Sergey Bratus; Michael E. Locasto (LISA, 2011)

Using Hierarchical Change Mining to Manage Network Security Policy Evolution. - Gabriel A. Weaver; Nicholas J. Foti; Sergey Bratus; Daniel N. Rockmore; Sean W. Smith (Hot-ICE, 2011)

Packets in Packets: Orson Welles' In-Band Signaling Attacks for Modern Radios. - Travis Goodspeed; Sergey Bratus; Ricky Melgares; Rebecca Shapiro; Ryan Speers (WOOT, 2011)

Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code. - James Oakley; Sergey Bratus (WOOT, 2011)

Domain-specific entity extraction from noisy, unstructured data using ontology-guided search. - Sergey Bratus; Anna Rumshisky; Alexy Khrabrov 001; Rajendra Magar; Paul Thompson (Int. J. Document Anal. Recognit., 2011)

Exploit Programming: From Buffer Overflows to "Weird Machines" and Theory of Computation. - Sergey Bratus; Michael E. Locasto; Meredith L. Patterson; Len Sassaman; Anna Shubina (login Usenix Mag., 2011)

The Halting Problems of Network Stack Insecurity. - Len Sassaman; Meredith L. Patterson; Sergey Bratus; Anna Shubina (login Usenix Mag., 2011)

On Tuning the Knobs of Distribution-Based Methods for Detecting VoIP Covert Channels. - Chrisil Arackaparambil; Guanhua Yan; Sergey Bratus; Alper Caglayan (HICSS, 2012)

Api-do: Tools for Exploring the Wireless Attack Surface in Smart Meters. - Travis Goodspeed; Sergey Bratus; Ricky Melgares; Ryan Speers; Sean W. Smith (HICSS, 2012)

A Patch for Postel's Robustness Principle. - Len Sassaman; Meredith L. Patterson; Sergey Bratus (IEEE Secur. Priv., 2012)

Intrusion detection for resource-constrained embedded control systems in the power grid. - Jason Reeves; Ashwin Ramaswamy; Michael E. Locasto; Sergey Bratus; Sean W. Smith (Int. J. Crit. Infrastructure Prot., 2012)

The Page-Fault Weird Machine: Lessons in Instruction-less Computation. - Julian Bangert; Sergey Bratus; Rebecca Shapiro; Sean W. Smith (WOOT, 2013)

"Weird Machines" in ELF: A Spotlight on the Underappreciated Metadata. - Rebecca Shapiro; Sergey Bratus; Sean W. Smith (WOOT, 2013)

Avoiding a War on Unauthorized Computation. - Sergey Bratus; Anna Shubina (IEEE Secur. Priv., 2013)

Security Applications of Formal Language Theory. - Len Sassaman; Meredith L. Patterson; Sergey Bratus; Michael E. Locasto (IEEE Syst. J., 2013)

'Weird Machine' Patterns. - Sergey Bratus; Julian Bangert; Alexandar Gabrovsky; Anna Shubina; Michael E. Locasto; Daniel Bilar (Cyberpatterns, 2014)

Interrupt-oriented bugdoor programming: a minimalist approach to bugdooring embedded systems firmware. - Samuel Junjie Tan; Sergey Bratus; Travis Goodspeed (ACSAC, 2014)

Short paper: speaking the local dialect: exploiting differences between ieee 802.15.4 receivers with commodity radios for fingerprinting, targeted attacks, and wids evasion. - Ira Ray Jenkins; Rebecca Shapiro; Sergey Bratus; Travis Goodspeed; Ryan Speers; David Dowd (WISEC, 2014)

Beyond Planted Bugs in "Trusting Trust": The Input-Processing Frontier. - Sergey Bratus; Trey Darley; Michael E. Locasto; Meredith L. Patterson; Rebecca Shapiro; Anna Shubina (IEEE Secur. Priv., 2014)

From MAP to DIST: The Evolution of a Large-Scale WLAN Monitoring System. - Keren Tan; Chris McDonald; Bennet Vance; Chrisil Arackaparambil; Sergey Bratus; David Kotz (IEEE Trans. Mob. Comput., 2014)

Why Offensive Security Needs Engineering Textbooks: Or, How to Avoid a Replay of "Crypto Wars" in Security Research. - Sergey Bratus; Iván Arce; Michael E. Locasto; Stefano Zanero (login Usenix Mag., 2014)

Why Wassenaar Arrangement's Definitions of "Intrusion Software" and "Controlled Items" Put Security Research and Defense At Risk. - Sergey Bratus; Michael E. Locasto; Anna Shubina (login Usenix Mag., 2014)

Bolt-On Security Extensions for Industrial Control System Protocols: A Case Study of DNP3 SAv5. - J. Adam Crain; Sergey Bratus (IEEE Secur. Priv., 2015)

The Bugs We Have to Kill. - Sergey Bratus; Meredith L. Patterson; Anna Shubina (login Usenix Mag., 2015)

Implementing a vertically hardened DNP3 control stack for power applications. - Sergey Bratus; J. Adam Crain; Sven M. Hallberg; Daniel P. Hirsch; Meredith L. Patterson; Maxwell Koo; Sean W. Smith (ICSS, 2016)

The Seven Turrets of Babel: A Taxonomy of LangSec Errors and How to Expunge Them. - Falcon Momot; Sergey Bratus; Sven M. Hallberg; Meredith L. Patterson (SecDev, 2016)

Fillory of PHY: Toward a Periodic Table of Signal Corruption Exploits and Polyglots in Digital Radio. - Sergey Bratus; Travis Goodspeed; Ange Albertini; Debanjum S. Solanky (WOOT, 2016)

Protecting Against Malicious Bits On the Wire: Automatically Generating a USB Protocol Parser for a Production Kernel. - Peter C. Johnson 001; Sergey Bratus; Sean W. Smith (ACSAC, 2017)

Input Handling Done Right: Building Hardened Parsers Using Language-Theoretic Security. - Prashant Anantharaman; Michael C. Millian; Sergey Bratus; Meredith L. Patterson (SecDev, 2017)

Exploitation as code reuse: On the need of formalization. - Sergey Bratus; Anna Shubina (it Inf. Technol., 2017)

Curing the Vulnerable Parser: Design Patterns for Secure Input Handling. - Sergey Bratus; Lars Hermerschmidt; Sven M. Hallberg; Michael E. Locasto; Falcon Momot; Meredith L. Patterson; Anna Shubina (login Usenix Mag., 2017)

Reinventing the privilege drop: how principled preservation of programmer intent would prevent security bugs. - Ira Ray Jenkins; Sergey Bratus; Sean W. Smith; Maxwell Koo (HotSoS, 2018)

PhasorSec: Protocol Security Filters for Wide Area Measurement Systems. - Prashant Anantharaman; Kartik Palani; Rafael Brantley; Galen Brown; Sergey Bratus; Sean W. Smith (SmartGridComm, 2018)

Dynamic Repair of Mission-Critical Applications with Runtime Snap-Ins. - J. Peter Brady; Sergey Bratus; Sean W. Smith (Critical Infrastructure Protection, 2019)

Converting an Electric Power Utility Network to Defend Against Crafted Inputs. - Michael C. Millian; Prashant Anantharaman; Sergey Bratus; Sean W. Smith; Michael E. Locasto (Critical Infrastructure Protection, 2019)

Mismorphism: The Heart of the Weird Machine. - Prashant Anantharaman; Vijay H. Kothari; J. Peter Brady; Ira Ray Jenkins; Sameed Ali; Michael C. Millian; Ross Koppel; Jim Blythe; Sergey Bratus; Sean W. Smith (Security Protocols Workshop, 2019)

Human-Computability Boundaries. - Vijay H. Kothari; Prashant Anantharaman; Ira Ray Jenkins; Michael C. Millian; J. Peter Brady; Sameed Ali; Sergey Bratus; Jim Blythe; Ross Koppel; Sean W. Smith (Security Protocols Workshop, 2019)

Ghostbusting: mitigating spectre with intraprocess memory isolation. - Ira Ray Jenkins; Prashant Anantharaman; Rebecca Shapiro; J. Peter Brady; Sergey Bratus; Sean W. Smith (HotSoS, 2020)

How Exploits Impact Computer Science Theory. - Sergey Bratus (Commun. ACM, 2024)

WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls. - Seyed Ali Akhavani; Bahruz Jabiyev; Ben Kallus; Cem Topcuoglu; Sergey Bratus; Engin Kirda (CoRR, 2025)