Sergey Bratus

发表

Games and Simulation: DS Online's Newest Topic Area

Sergey Bratus, 2007 .

Ghostbusting: mitigating spectre with intraprocess memory isolation

Sergey Bratus, Prashant Anantharaman, J. Peter Brady, 2020, HotSoS.

Exploitation as code reuse: On the need of formalization

Sergey Bratus, Anna Shubina, 2017, it Inf. Technol..

Using Hierarchical Change Mining to Manage Network Security Policy Evolution

Sergey Bratus, Sean W. Smith, Daniel N. Rockmore, 2011, Hot-ICE.

The Seven Turrets of Babel: A Taxonomy of LangSec Errors and How to Expunge Them

Sergey Bratus, Falcon Momot, Sven M. Hallberg, 2016, 2016 IEEE Cybersecurity Development (SecDev).

Ubiquitous Redirection as Access Control Response

Sergey Bratus, George Bakos, S. Bratus, 2005, PST.

Using Active Intrusion Detection to Recover Network Trust

Sergey Bratus, Michael E. Locasto, John F. Williamson, 2011, LISA.

ELFbac: Using the Loader Format for Intent-Level Semantics and Fine-Grained Protection

Sergey Bratus, Anna Shubina, Rebecca Shapiro, 2013 .

Fillory of PHY: Toward a Periodic Table of Signal Corruption Exploits and Polyglots in Digital Radio

Sergey Bratus, Travis Goodspeed, Ange Albertini, 2016, WOOT.

Short paper: speaking the local dialect: exploiting differences between ieee 802.15.4 receivers with commodity radios for fingerprinting, targeted attacks, and wids evasion

Sergey Bratus, Ira Ray Jenkins, Rebecca Shapiro, 2014, WiSec '14.

Hacker Curriculum: How We Can Use It in Teaching

Sergey Bratus, Chris Masone, 2007, IEEE Distributed Systems Online.

Backhoe, a Packet Trace and Log Browser

Sergey Bratus, Anna Shubina, Fabio Pellacini, 2008, VizSEC.

Teaching the principles of the hacker curriculum to undergraduates

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2010, SIGCSE.

Beyond Planted Bugs in "Trusting Trust": The Input-Processing Frontier

Sergey Bratus, Anna Shubina, Rebecca Shapiro, 2014, IEEE Security & Privacy.

The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris

Sergey Bratus, Anna Shubina, Sean W. Smith, 2010, STC '10.

Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2011, Critical Infrastructure Protection.

Api-do: Tools for Exploring the Wireless Attack Surface in Smart Meters

Sergey Bratus, Sean W. Smith, Travis Goodspeed, 2012, 2012 45th Hawaii International Conference on System Sciences.

Identifying Vulnerabilities in SCADA Systems via Fuzz-Testing

Sergey Bratus, Rebecca Shapiro, Sean W. Smith, 2011, Critical Infrastructure Protection.

Fingerprinting IEEE 802.15.4 Devices with Commodity Radios

Sergey Bratus, Ira Ray Jenkins, Rebecca Shapiro, 2014 .

Packets in Packets: Orson Welles' In-Band Signaling Attacks for Modern Radios

Sergey Bratus, Rebecca Shapiro, Travis Goodspeed, 2011, WOOT.

On sampling generating sets of finite groups and product replacement algorithm: extended abstract

Sergey Bratus, Igor Pak, I. Pak, 1999, ISSAC '99.

802.15.4/ZigBee Analysis and Security: Tools for practical exploration of the attack surface

Sergey Bratus, Ricky Melgares, 2011 .

From MAP to DIST: The Evolution of a Large-Scale WLAN Monitoring System

Chrisil Arackaparambil, Sergey Bratus, Chris McDonald, 2014, IEEE Transactions on Mobile Computing.

Converting an Electric Power Utility Network to Defend Against Crafted Inputs

Sergey Bratus, Prashant Anantharaman, Michael C. Millian, 2019, Critical Infrastructure Protection.

Visualizing Network Anomalies for Intrusion Detection with Information Theoretic Metrics

Sergey Bratus, Axel Hansen, 2008 .

Software on the Witness Stand: What Should It Take for Us to Trust It?

Sergey Bratus, Anna Shubina, Ashlyn Lembree, 2010, TRUST.

Reinventing the privilege drop: how principled preservation of programmer intent would prevent security bugs

Sergey Bratus, Ira Ray Jenkins, Sean W. Smith, 2018, HotSoS.

VM-based security overkill: a lament for applied systems security research

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2010, NSPW '10.

Semi-supervised Data Organization for Interactive Anomaly Analysis.

Sergey Bratus, Javed A. Aslam, Virgil Pavlu, 2006, 2006 5th International Conference on Machine Learning and Applications (ICMLA'06).

4 Common Technology Needs and Capability Gaps Across DoD's IA and CND Communities

Sergey Bratus, Daniela Rus, David Kotz, 2005 .

The Halting Problems of Network Stack Insecurity

Sergey Bratus, Anna Shubina, Len Sassaman, 2011, login Usenix Mag..

Streaming Estimation of Information-Theoretic Metrics for Anomaly Detection (Extended Abstract)

Sergey Bratus, Joshua Brody, Anna Shubina, 2008, RAID.

The Bugs We Have to Kill

Sergey Bratus, Anna Shubina, Meredith L. Patterson, 2015, login Usenix Mag..

New Directions for Hardware-assisted Trusted Computing Policies (Position Paper)

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2009 .

Domain-specific entity extraction from noisy, unstructured data using ontology-guided search

Sergey Bratus, Anna Rumshisky, Rajendra Magar, 2011, International Journal on Document Analysis and Recognition (IJDAR).

On the reliability of wireless fingerprinting using clock skews

Chrisil Arackaparambil, Sergey Bratus, Anna Shubina, 2010, WiSec '10.

Dumbots: Unexpected Botnets through Networked Embedded Devices

Sergey Bratus, Sean W. Smith, Sara Sinclair, 2007 .

The Kerf toolkit for intrusion analysis

Sergey Bratus, David Kotz, Daniela Rus, 2003, IEEE Systems, Man and Cybernetics SocietyInformation Assurance Workshop, 2003..

Why offensive security needs engineering textbooks

Sergey Bratus, Stefano Zanero, Iván Arce, 2014 .

Using domain knowledge for ontology-guided entity extraction from noisy, unstructured text data

Sergey Bratus, Anna Rumshisky, Rajendra Magar, 2009, AND '09.

Avoiding a War on Unauthorized Computation

Sergey Bratus, Anna Shubina, S. Bratus, 2013, IEEE Security & Privacy.

Dartmouth Computer Science Technical Report TR2011-680 (Draft version) Exploiting the Hard-Working DWARF: Trojans with no Native Executable Code

Sergey Bratus, James Oakley, 2011 .

Katana: A Hot Patching Framework for ELF Executables

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2010, 2010 International Conference on Availability, Reliability and Security.

"Weird Machines" in ELF: A Spotlight on the Underappreciated Metadata

Sergey Bratus, Rebecca Shapiro, Sean W. Smith, 2013, WOOT.

Experiments in Multi-Modal Automatic Content Extraction

Sergey Bratus, Scott Miller, Elizabeth Boschee, 2001, HLT.

Exploit Programming: From Buffer Overflows to "Weird Machines" and Theory of Computation

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2011, login Usenix Mag..

LZfuzz: a fast compression-based fuzzer for poorly documented protocols

Sergey Bratus, Anna Shubina, Axel Hansen, 2008 .

Fast Constructive Recognition of a Black Box Group Isomorphic to Sn or An using Goldbach's Conjecture

Sergey Bratus, Igor Pak, I. Pak, 2000, J. Symb. Comput..

The Page-Fault Weird Machine: Lessons in Instruction-less Computation

Sergey Bratus, Rebecca Shapiro, Sean W. Smith, 2013, WOOT.

Protecting Against Malicious Bits On the Wire: Automatically Generating a USB Protocol Parser for a Production Kernel

Sergey Bratus, Sean W. Smith, Peter C. Johnson, 2017, ACSAC.

Interrupt-oriented bugdoor programming: a minimalist approach to bugdooring embedded systems firmware

Sergey Bratus, Travis Goodspeed, Samuel Junjie Tan, 2014, ACSAC '14.

Security Applications of Formal Language Theory

Sergey Bratus, Michael E. Locasto, Len Sassaman, 2013, IEEE Systems Journal.

Dynamic Repair of Mission-Critical Applications with Runtime Snap-Ins

Sergey Bratus, Sean W. Smith, J. Peter Brady, 2019, Critical Infrastructure Protection.

The cake is a lie: privilege rings as a policy resource

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2009, VMSec '09.

Why Do Street-Smart People Do Stupid Things Online?

Sergey Bratus, Sean W. Smith, Chris Masone, 2008, IEEE Security & Privacy.

TOCTOU, Traps, and Trusted Computing

Sergey Bratus, Sean W. Smith, Evan R. Sparks, 2008, TRUST.

Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code

Sergey Bratus, James Oakley, 2011, WOOT.

Hacker Curriculum : How Hackers Learn Networking

Sergey Bratus, 2007, IEEE Distributed Systems Online.

Bickering In-Depth: Rethinking the Composition of Competing Security Systems

Sergey Bratus, Michael E. Locasto, Brian Schulte, 2009, IEEE Security & Privacy.

Mismorphism: The Heart of the Weird Machine

Sergey Bratus, Prashant Anantharaman, Ira Ray Jenkins, 2019, Security Protocols Workshop.

Intrusion detection for resource-constrained embedded control systems in the power grid

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2012, Int. J. Crit. Infrastructure Prot..

'Weird Machine' Patterns

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2014, Cyberpatterns.

Curing the Vulnerable Parser: Design Patterns for Secure Input Handling

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2017, login Usenix Mag..

Proceedings of the 8th USENIX conference on Offensive Technologies

Sergey Bratus, Felix Lindner, F. Lindner, 2014 .

What Hackers Learn that the Rest of Us Don't: Notes on Hacker Curriculum

Sergey Bratus, 2007, IEEE Security & Privacy.

Automated mapping of large binary objects using primitive fragment type classification

Sergey Bratus, Anna Shubina, Robert Perez-Alemany, 2010, Digit. Investig..

Why Wassenaar Arrangement's Definitions of "Intrusion Software" and "Controlled Items" Put Security Research and Defense At Risk

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2014, login Usenix Mag..

Bolt-On Security Extensions for Industrial Control System Protocols: A Case Study of DNP3 SAv5

Sergey Bratus, J. Adam Crain, 2015, IEEE Security & Privacy.

Pastures: Towards Usable Security Policy Engineering

Sergey Bratus, Sean W. Smith, Alex Ferguson, 2007, The Second International Conference on Availability, Reliability and Security (ARES'07).

SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms

Sergey Bratus, Michael E. Locasto, Brian Schulte, 2010, TRUST.

Implementing a vertically hardened DNP3 control stack for power applications

Sergey Bratus, Sean W. Smith, Sven M. Hallberg, 2016, ICSS '16.

The Kerf toolkit for intrusion analysis

Sergey Bratus, David Kotz, Daniela Rus, 2004, IEEE Security & Privacy Magazine.

PhasorSec: Protocol Security Filters for Wide Area Measurement Systems

Sergey Bratus, Prashant Anantharaman, Kartik Palani, 2018, 2018 IEEE International Conference on Communications, Control, and Computing Technologies for Smart Grids (SmartGridComm).

A Patch for Postel's Robustness Principle

Sergey Bratus, Len Sassaman, Meredith L. Patterson, 2012, IEEE Security & Privacy.

Rootkits and Bootkits: Reversing Modern Malware and Next Generation Threats

Sergey Bratus, Eugene Rodionov, Alex Matrosov, 2019 .

Katana: Towards Patching as a Runtime Part of the Compiler-Linker-Loader Toolchain

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2010, Int. J. Secur. Softw. Eng..

Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security

Sergey Bratus, Sean W. Smith, Michael E. Locasto, 2008, VMSec '08.

Exe-Guard Project

Sergey Bratus, Adrian R. Chavez, Tim Marshall, 2016 .

Perimeter-Crossing Buses : a New Attack Surface for Embedded Systems

Sergey Bratus, S. Bratus, 2012 .

On Tuning the Knobs of Distribution-Based Methods for Detecting VoIP Covert Channels

Chrisil Arackaparambil, Sergey Bratus, Guanhua Yan, 2012, 2012 45th Hawaii International Conference on System Sciences.

Human-Computability Boundaries

Sergey Bratus, Prashant Anantharaman, Ira Ray Jenkins, 2019, Security Protocols Workshop.

Input Handling Done Right: Building Hardened Parsers Using Language-Theoretic Security

Sergey Bratus, Prashant Anantharaman, Michael C. Millian, 2017, 2017 IEEE Cybersecurity Development (SecDev).

Dartmouth Internet Security Testbed (DIST): Building a Campus-wide Wireless Testbed

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2009, CSET.

Why Offensive Security Needs Engineering Textbooks: Or, How to Avoid a Replay of "Crypto Wars" in Security Research

Sergey Bratus, Stefano Zanero, Iván Arce, 2014, login Usenix Mag..

Active behavioral fingerprinting of wireless devices

Sergey Bratus, David Kotz, Daniel Peebles, 2008, WiSec '08.

FactBrowser Demonstration

Sergey Bratus, Scott Miller, Ralph M. Weischedel, 2001, HLT.

Attacking and Defending Networked Embedded Devices

Sergey Bratus, Sean W. Smith, Sara Sinclair, 2007 .

Mitigating emergent computation: the need for new approaches in systems engineering

Sergey Bratus, 2021 .

Beyond SELinux: the Case for Behavior-Based Policy and Trust Languages

Sergey Bratus, Rebecca Shapiro, Boris Otto, 2011 .

A Visual Study of Primitive Binary Fragment Types

Sergey Bratus, Anna Shubina, Robert Perez-Alemany, 2010 .

How To Count To Two : What “ Two Factor Authentication ” Misses

Sergey Bratus, Eugene Shablygin, 2015 .

Composition Patterns of Hacking

Sergey Bratus, Anna Shubina, Michael E. Locasto, 2012 .

Chapter 1 DO-IT-YOURSELF SCADA VULNERABILITY TESTING WITH LZFUZZ

Sergey Bratus, Rebecca Shapiro, Edmond Rogers, 2011 .