Xinming Ou

发表

Big Data Analytics for Mobile App Security

Doina Caragea, Xinming Ou, Xinming Ou, 2017 .

JN-SAF: Precise and Efficient NDK/JNI-aware Inter-language Static Analysis Framework for Security Vetting of Android Applications with Native Code

Xiaosong Zhang, Ting Chen, Xinming Ou, 2018, CCS.

A host-based security assessment architecture for Industrial Control systems

Xinming Ou, Abhishek Rakshit, 2009, 2009 2nd International Symposium on Resilient Control Systems.

Security Optimization of Dynamic Networks with Probabilistic Graph Modeling and Linear Programming

Layne T. Watson, Xinming Ou, Hussain M. J. Almohri, 2016, IEEE Transactions on Dependable and Secure Computing.

Uncertainty and Risk Management in Cyber Situational Awareness

Xinming Ou, Jason H. Li, Siva Raj Rajagopalan, 2010, Cyber Situational Awareness.

A model for analyzing the effect of moving target defenses on enterprise networks

Scott A. DeLoach, Xinming Ou, Rui Zhuang, 2014, CISR '14.

Automated Security Management

Ehab Al-Shaer, Geoffrey G. Xie, Xinming Ou, 2013, Springer International Publishing.

Effective Network Vulnerability Assessment through Model Abstraction

Xinming Ou, Su Zhang, John Homer, 2011, DIMVA.

Investigating the application of moving target defenses to network security

Scott A. DeLoach, Anoop Singhal, Xinming Ou, 2013, 2013 6th International Symposium on Resilient Control Systems (ISRCS).

An Empirical Study on Using the National Vulnerability Database to Predict Software Vulnerabilities

Doina Caragea, Xinming Ou, Su Zhang, 2011, DEXA.

Identifying Critical Attack Assets in Dependency Attack Graphs

Xinming Ou, Reginald E. Sawilla, Xinming Ou, 2008, ESORICS.

MTD CBITS: Moving Target Defense for Cloud-Based IT Systems

Scott A. DeLoach, Xinming Ou, Sathya Chandran Sundaramurthy, 2017, ESORICS.

Hybrid Analysis of Android Apps for Security Vetting using Deep Learning

Doina Caragea, Sankardas Roy, Xinming Ou, 2020, 2020 IEEE Conference on Communications and Network Security (CNS).

Experimental Study with Real-world Data for Android App Security Analysis using Machine Learning

Nic Herndon, Doina Caragea, Sankardas Roy, 2015, ACSAC.

Distilling critical attack graph surface iteratively through minimum-cost SAT solving

Atul Prakash, Xinming Ou, Su Zhang, 2011, ACSAC '11.

Enforcing Resource Usage Protocols via Scoped Methods

David Walker, Xinming Ou, Gang Tan, 2004 .

Investigative response modeling and predictive data collection

Xinming Ou, Sathya Chandran Sundaramurthy, Siva Raj Rajagopalan, 2012, 2012 eCrime Researchers Summit.

Compiling Abstract Specifications into Concrete Systems - Bringing Order to the Cloud

Scott A. DeLoach, Xinming Ou, Rui Zhuang, 2014, LISA.

Android Malware Clustering through Malicious Payload Mining

Jiyong Jang, Xinming Ou, Xin Hu, 2017, RAID.

Design of an I/O balancing file system on Web server clusters

Wei Liu, Min Wu, Weimin Zheng, 2000, Proceedings 2000. International Workshop on Parallel Processing.

Simulation-based Approaches to Studying Effectiveness of Moving-Target Network Defense | NIST

Scott A. DeLoach, Anoop Singhal, Xinming Ou, 2012 .

A comprehensive approach to enterprise network security management

Xinming Ou, John Homer, Xinming Ou, 2009 .

Cyber SA: Situational Awareness for Cyber Defense

John Yen, Sushil Jajodia, Thomas G. Dietterich, 2010, Cyber Situational Awareness.

Attack Graph Techniques

Anoop Singhal, Xinming Ou, 2012 .

Deep Ground Truth Analysis of Current Android Malware

Sankardas Roy, Xinming Ou, Fengguo Wei, 2017, DIMVA.

Model-driven, Moving-Target Defense for Enterprise Network Security

Scott A. DeLoach, Xinming Ou, Su Zhang, 2011, Models@run.time@Dagstuhl.

Aggregating vulnerability metrics in enterprise networks using attack graphs

David A. Schmidt, Yanhui Du, Anoop Singhal, 2013, J. Comput. Secur..

Humans Are Dynamic - Our Tools Should Be Too

John McHugh, Xinming Ou, Sathya Chandran Sundaramurthy, 2017, IEEE Internet Computing.

Humans are dynamic. Our tools should be too. Innovations from the Anthropological Study of Security Operations Centers.

John McHugh, Xinming Ou, Sathya Chandran Sundaramurthy, 2017 .

A Population-Based Incremental Learning Approach to Network Hardening

Anis Yazidi, Xinming Ou, Boning Feng, 2018, SoMeT.

Turning Contradictions into Innovations or: How We Learned to Stop Whining and Improve Security Operations

John McHugh, Xinming Ou, Sathya Chandran Sundaramurthy, 2016, SOUPS.

Enhanced Security of Building Automation Systems Through Microkernel-Based Controller Platforms

Xiaolong Wang, Masaaki Mizuno, Xinming Ou, 2017, 2017 IEEE 37th International Conference on Distributed Computing Systems Workshops (ICDCSW).

GPU-Based Static Data-Flow Analysis for Fast and Scalable Android App Vetting

Michela Becchi, Xinming Ou, Tekin Bicer, 2020, 2020 IEEE International Parallel and Distributed Processing Symposium (IPDPS).

The Common Vulnerability Scoring System (CVSS)

Anoop Singhal, Xinming Ou, 2012 .

Assessing Attack Surface with Component-Based Package Dependency

Xinwen Zhang, Xinming Ou, Liqun Chen, 2015, NSS.

Practical Always-on Taint Tracking on Mobile Devices

Atul Prakash, Sankardas Roy, Xinming Ou, 2015, HotOS.

Techniques for enterprise network security metrics

Anoop Singhal, Xinming Ou, Xinming Ou, 2009, CSIIRW '09.

Android malware detection with weak ground truth data

Doina Caragea, Xinming Ou, Jordan DeLoach, 2016, 2016 IEEE International Conference on Big Data (Big Data).

Setting up and using a cyber security lab for education purposes

Xinming Ou, Alexandru G. Bardas, 2013 .

Secure RTOS Architecture for Building Automation

Xiaolong Wang, Masaaki Mizuno, Xinming Ou, 2015, CPS-SPC@CCS.

An Anthropological Approach to Studying CSIRTs

John McHugh, Xinming Ou, Sathya Chandran Sundaramurthy, 2014, IEEE Security & Privacy.

A Bottom-Up Approach to Applying Graphical Models in Security Analysis

Xinming Ou, 2016, GraMSec@CSF.

Mission-oriented moving target defense based on cryptographically strong network dynamics

Scott A. DeLoach, Justin Yackoski, Xinming Ou, 2013, CSIIRW '13.

A Certificate Infrastructure for Machine-Checked Proofs of Conditional Information Flow

Andrew W. Appel, Zhi Zhang, Xinming Ou, 2012, POST.

Quantitative Security Risk Assessment of Enterprise Networks

Anoop Singhal, Xinming Ou, Xinming Ou, 2011, Springer Briefs in Computer Science.

Improving Attack Graph Visualization through Data Reduction and Attack Grouping

Xinming Ou, John Homer, Miles A. McQueen, 2008, VizSEC.

MulVAL: A Logic-based Network Security Analyzer

Andrew W. Appel, Xinming Ou, Sudhakar Govindavajhala, 2005, USENIX Security Symposium.

A scalable approach to attack graph generation

Xinming Ou, Miles A. McQueen, Wayne F. Boyer, 2006, CCS '06.

The Need for Quantifying Security

Anoop Singhal, Xinming Ou, 2012 .

A Human Capital Model for Mitigating Security Analyst Burnout

John McHugh, Xinming Ou, Sathya Chandran Sundaramurthy, 2015, SOUPS.

Experimental study of fuzzy hashing in malware clustering analysis

Jiyong Jang, Doina Caragea, Xinming Ou, 2015 .

Metrics of Security

Scott A. DeLoach, Anoop Singhal, Xinming Ou, 2014, Cyber Defense and Situational Awareness.

PREFETCHING AND CACHING METADATA IN A DISTRIBUTED NFS SERVER

Wei Liu, Weimin Zheng, Xinming Ou, 2000 .

Theorem Proving Using Lazy Proof Explication

Xinming Ou, Cormac Flanagan, Rajeev Joshi, 2003, CAV.

An Empirical Study of a Vulnerability Metric Aggregation Method

Anoop Singhal, Xinming Ou, Su Zhang, 2011 .

Dynamic Typing with Dependent Types

David Walker, Xinming Ou, Gang Tan, 2004, IFIP TCS.

SAT-solving approaches to context-aware enterprise network security management

Xinming Ou, John Homer, Xinming Ou, 2009, IEEE Journal on Selected Areas in Communications.

InstaGuard: Instantly Deployable Hot-patches for Vulnerable System Programs on Android

Zhi Wang, Long Lu, Xinming Ou, 2018, NDSS.

Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs

Anoop Singhal, Xinming Ou, Xinming Ou, 2011 .

Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps

Sankardas Roy, Xinming Ou, Fengguo Wei, 2014, CCS.

Prioritizing intrusion analysis using Dempster-Shafer theory

Xinming Ou, Sathya Chandran Sundaramurthy, Siva Raj Rajagopalan, 2011, AISec '11.

A REDUCED COMMUNICATION PROTOCOL FOR NETWORKS OF WORKSTATIONS

Weimin Zheng, Jun Shen, Xinming Ou, 2000 .

A logic-programming approach to network security analysis

Andrew W. Appel, Xinming Ou, 2005 .

Aiding Intrusion Analysis Using Machine Learning

Doina Caragea, Xinming Ou, Sathya Chandran Sundaramurthy, 2013, 2013 12th International Conference on Machine Learning and Applications.

Using Bayesian networks for cyber security analysis

Peng Liu, Peng Xie, Xinming Ou, 2010, 2010 IEEE/IFIP International Conference on Dependable Systems & Networks (DSN).

An Empirical Approach to Modeling Uncertainty in Intrusion Analysis

Xinming Ou, Siva Raj Rajagopalan, Sakthiyuvaraja Sakthivelmurugan, 2009, 2009 Annual Computer Security Applications Conference.

MTD 2017: Fourth ACM Workshop on Moving Target Defense (MTD)

Xinming Ou, Hamed Okhravi, 2017, CCS.

Googling Attack Graphs

Xinming Ou, Reginald E. Sawilla, 2007 .

Towards a Theory of Moving Target Defense

Scott A. DeLoach, Xinming Ou, Rui Zhuang, 2014, MTD '14.

A Theory of Cyber Attacks: A Step Towards Analyzing MTD Systems

Scott A. DeLoach, Xinming Ou, Rui Zhuang, 2015, MTD@CCS.

An effective file migration algorithm in cluster file systems

Wei Liu, Min Wu, Weimin Zheng, 2000, Proceedings 2000. International Workshop on Parallel Processing.

Predicting Cyber Risks through National Vulnerability Database

Doina Caragea, Xinming Ou, Su Zhang, 2015, Inf. Secur. J. A Glob. Perspect..

Proceedings of the 2017 Workshop on Moving Target Defense

Xinming Ou, Hamed Okhravi, 2017, MTD@CCS.

Classification of UDP Traffic for DDoS Detection

Xinming Ou, Sathya Chandran Sundaramurthy, Marc R. Eisenbarth, 2012, LEET.

A Two-Tier Technique for Supporting Quantifiers in a Lazily Proof-Explicating Theorem Prover

K. Rustan M. Leino, Xinming Ou, Madan Musuvathi, 2005, TACAS.

After we knew it: empirical study and modeling of cost-effectiveness of exploiting prevalent known vulnerabilities across IaaS cloud

Xinwen Zhang, Xinming Ou, Su Zhang, 2014, AsiaCCS.

What are Attackers after on IoT Devices? An approach based on a multi-phased multi-faceted IoT honeypot ecosystem and data clustering pdf

Anoop Singhal, Xinming Ou, Armin Ziaie Tabari, 2021, ArXiv.

An Analysis of the Role of Situated Learning in Starting a Security Culture in a Software Company

Anwesh Tuladhar, Xinming Ou, Jay Ligatti, 2021, SOUPS @ USENIX Security Symposium.

A Practical Approach to Modeling Uncertainty in Intrusion Analysis

Xinming Ou, Raj Rajagopalan, Sakthiyuvaraja Sakthivelmurugan, 2008 .

Network Security Management with High-level Security Policies

Xinming Ou, Andrew Appel, Sudhakar Govindavajhala, .

Policy-based Multihost Multistage Vulnerability Analysis ∗

Andrew W. Appel, Xinming Ou, Sudhakar Govindavajhala, .

Security Risk Analysis of Enterprise Networks Using Attack Graphs

Anoop Singhal, Xinming Ou, 2012 .