Sergey Bratus - RankMe

76 papers A 5B 3C 4Journal 26Unranked 36

Year	Rank	Type	Title / Venue / Authors
2025	A	`conf`	WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls. ACSAC Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuoglu, Sergey Bratus, Engin Kirda
2025	J	`jnl`	WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls. CoRR Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuoglu, Sergey Bratus, Engin Kirda
2024	J	`jnl`	How Exploits Impact Computer Science Theory. Commun. ACM Sergey Bratus
2020	—	`conf`	Ghostbusting: mitigating spectre with intraprocess memory isolation. HotSoS Ira Ray Jenkins, Prashant Anantharaman, Rebecca Shapiro, J. Peter Brady, Sergey Bratus, Sean W. Smith
2019	—	`conf`	Converting an Electric Power Utility Network to Defend Against Crafted Inputs. Critical Infrastructure Protection Michael C. Millian, Prashant Anantharaman, Sergey Bratus, Sean W. Smith, Michael E. Locasto
2019	—	`conf`	Dynamic Repair of Mission-Critical Applications with Runtime Snap-Ins. Critical Infrastructure Protection J. Peter Brady, Sergey Bratus, Sean W. Smith
2019	—	`conf`	Human-Computability Boundaries. Security Protocols Workshop Vijay H. Kothari, Prashant Anantharaman, Ira Ray Jenkins, Michael C. Millian, J. Peter Brady, Sameed Ali, Sergey Bratus, Jim Blythe, Ross Koppel, Sean W. Smith
2019	—	`conf`	Mismorphism: The Heart of the Weird Machine. Security Protocols Workshop Prashant Anantharaman, Vijay H. Kothari, J. Peter Brady, Ira Ray Jenkins, Sameed Ali, Michael C. Millian, Ross Koppel, Jim Blythe, Sergey Bratus, Sean W. Smith
2018	—	`conf`	PhasorSec: Protocol Security Filters for Wide Area Measurement Systems. SmartGridComm Prashant Anantharaman, Kartik Palani, Rafael Brantley, Galen Brown, Sergey Bratus, Sean W. Smith
2018	—	`conf`	Reinventing the privilege drop: how principled preservation of programmer intent would prevent security bugs. HotSoS Ira Ray Jenkins, Sergey Bratus, Sean W. Smith, Maxwell Koo
2017	J	`jnl`	Curing the Vulnerable Parser: Design Patterns for Secure Input Handling. login Usenix Mag. Sergey Bratus, Lars Hermerschmidt, Sven M. Hallberg, Michael E. Locasto, Falcon Momot, Meredith L. Patterson, Anna Shubina
2017	J	`jnl`	Exploitation as code reuse: On the need of formalization. it Inf. Technol. Sergey Bratus, Anna Shubina
2017	—	`conf`	Input Handling Done Right: Building Hardened Parsers Using Language-Theoretic Security. SecDev Prashant Anantharaman, Michael C. Millian, Sergey Bratus, Meredith L. Patterson
2017	A	`conf`	Protecting Against Malicious Bits On the Wire: Automatically Generating a USB Protocol Parser for a Production Kernel. ACSAC Peter C. Johnson, Sergey Bratus, Sean W. Smith
2016	—	`conf`	Fillory of PHY: Toward a Periodic Table of Signal Corruption Exploits and Polyglots in Digital Radio. WOOT Sergey Bratus, Travis Goodspeed, Ange Albertini, Debanjum S. Solanky
2016	—	`conf`	Implementing a vertically hardened DNP3 control stack for power applications. ICSS Sergey Bratus, J. Adam Crain, Sven M. Hallberg, Daniel P. Hirsch, Meredith L. Patterson, Maxwell Koo, Sean W. Smith
2016	—	`conf`	The Seven Turrets of Babel: A Taxonomy of LangSec Errors and How to Expunge Them. SecDev Falcon Momot, Sergey Bratus, Sven M. Hallberg, Meredith L. Patterson
2015	J	`jnl`	Bolt-On Security Extensions for Industrial Control System Protocols: A Case Study of DNP3 SAv5. IEEE Secur. Priv. J. Adam Crain, Sergey Bratus
2015	J	`jnl`	The Bugs We Have to Kill. login Usenix Mag. Sergey Bratus, Meredith L. Patterson, Anna Shubina
2014	—	`ch.`	'Weird Machine' Patterns. Cyberpatterns Sergey Bratus, Julian Bangert, Alexandar Gabrovsky, Anna Shubina, Michael E. Locasto, Daniel Bilar
2014	—	`ed.`	8th USENIX Workshop on Offensive Technologies, WOOT '14, San Diego, CA, USA, August 19, 2014. WOOT Sergey Bratus, Felix "FX" Lindner
2014	J	`jnl`	Beyond Planted Bugs in "Trusting Trust": The Input-Processing Frontier. IEEE Secur. Priv. Sergey Bratus, Trey Darley, Michael E. Locasto, Meredith L. Patterson, Rebecca Shapiro, Anna Shubina
2014	J	`jnl`	From MAP to DIST: The Evolution of a Large-Scale WLAN Monitoring System. IEEE Trans. Mob. Comput. Keren Tan, Chris McDonald, Bennet Vance, Chrisil Arackaparambil, Sergey Bratus, David Kotz
2014	A	`conf`	Interrupt-oriented bugdoor programming: a minimalist approach to bugdooring embedded systems firmware. ACSAC Samuel Junjie Tan, Sergey Bratus, Travis Goodspeed
2014	—	`conf`	Short paper: speaking the local dialect: exploiting differences between ieee 802.15.4 receivers with commodity radios for fingerprinting, targeted attacks, and wids evasion. WISEC Ira Ray Jenkins, Rebecca Shapiro, Sergey Bratus, Travis Goodspeed, Ryan Speers, David Dowd
2014	J	`jnl`	Why Offensive Security Needs Engineering Textbooks: Or, How to Avoid a Replay of "Crypto Wars" in Security Research. login Usenix Mag. Sergey Bratus, Iván Arce, Michael E. Locasto, Stefano Zanero
2014	J	`jnl`	Why Wassenaar Arrangement's Definitions of "Intrusion Software" and "Controlled Items" Put Security Research and Defense At Risk. login Usenix Mag. Sergey Bratus, Michael E. Locasto, Anna Shubina
2013	—	`conf`	"Weird Machines" in ELF: A Spotlight on the Underappreciated Metadata. WOOT Rebecca Shapiro, Sergey Bratus, Sean W. Smith
2013	J	`jnl`	Avoiding a War on Unauthorized Computation. IEEE Secur. Priv. Sergey Bratus, Anna Shubina
2013	J	`jnl`	Security Applications of Formal Language Theory. IEEE Syst. J. Len Sassaman, Meredith L. Patterson, Sergey Bratus, Michael E. Locasto
2013	—	`conf`	The Page-Fault Weird Machine: Lessons in Instruction-less Computation. WOOT Julian Bangert, Sergey Bratus, Rebecca Shapiro, Sean W. Smith
2012	J	`jnl`	A Patch for Postel's Robustness Principle. IEEE Secur. Priv. Len Sassaman, Meredith L. Patterson, Sergey Bratus
2012	—	`conf`	Api-do: Tools for Exploring the Wireless Attack Surface in Smart Meters. HICSS Travis Goodspeed, Sergey Bratus, Ricky Melgares, Ryan Speers, Sean W. Smith
2012	J	`jnl`	Intrusion detection for resource-constrained embedded control systems in the power grid. Int. J. Crit. Infrastructure Prot. Jason Reeves, Ashwin Ramaswamy, Michael E. Locasto, Sergey Bratus, Sean W. Smith
2012	—	`conf`	On Tuning the Knobs of Distribution-Based Methods for Detecting VoIP Covert Channels. HICSS Chrisil Arackaparambil, Guanhua Yan, Sergey Bratus, Alper Caglayan
2011	J	`jnl`	Domain-specific entity extraction from noisy, unstructured data using ontology-guided search. Int. J. Document Anal. Recognit. Sergey Bratus, Anna Rumshisky, Alexy Khrabrov, Rajendra Magar, Paul Thompson
2011	J	`jnl`	Exploit Programming: From Buffer Overflows to "Weird Machines" and Theory of Computation. login Usenix Mag. Sergey Bratus, Michael E. Locasto, Meredith L. Patterson, Len Sassaman, Anna Shubina
2011	—	`conf`	Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code. WOOT James Oakley, Sergey Bratus
2011	—	`conf`	Identifying Vulnerabilities in SCADA Systems via Fuzz-Testing. Critical Infrastructure Protection Rebecca Shapiro, Sergey Bratus, Edmond Rogers, Sean W. Smith
2011	—	`conf`	Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems. Critical Infrastructure Protection Jason Reeves, Ashwin Ramaswamy, Michael E. Locasto, Sergey Bratus, Sean W. Smith
2011	—	`conf`	Packets in Packets: Orson Welles' In-Band Signaling Attacks for Modern Radios. WOOT Travis Goodspeed, Sergey Bratus, Ricky Melgares, Rebecca Shapiro, Ryan Speers
2011	J	`jnl`	The Halting Problems of Network Stack Insecurity. login Usenix Mag. Len Sassaman, Meredith L. Patterson, Sergey Bratus, Anna Shubina
2011	—	`conf`	Using Active Intrusion Detection to Recover Network Trust. LISA John F. Williamson, Sergey Bratus, Michael E. Locasto
2011	—	`conf`	Using Hierarchical Change Mining to Manage Network Security Policy Evolution. Hot-ICE Gabriel A. Weaver, Nicholas J. Foti, Sergey Bratus, Daniel N. Rockmore, Sean W. Smith
2010	J	`jnl`	Automated mapping of large binary objects using primitive fragment type classification. Digit. Investig. Gregory J. Conti, Sergey Bratus, Anna Shubina, Benjamin Sangster, Roy Ragsdale, Matthew Supan, Andrew Lichtenberg, Robert Perez-Alemany
2010	—	`conf`	Distributed monitoring of conditional entropy for anomaly detection in streams. IPDPS Workshops Chrisil Arackaparambil, Sergey Bratus, Joshua Brody, Anna Shubina
2010	B	`conf`	Katana: A Hot Patching Framework for ELF Executables. ARES Ashwin Ramaswamy, Sergey Bratus, Sean W. Smith, Michael E. Locasto
2010	J	`jnl`	Katana: Towards Patching as a Runtime Part of the Compiler-Linker-Loader Toolchain. Int. J. Secur. Softw. Eng. Sergey Bratus, James Oakley, Ashwin Ramaswamy, Sean W. Smith, Michael E. Locasto
2010	—	`conf`	On the reliability of wireless fingerprinting using clock skews. WISEC Chrisil Arackaparambil, Sergey Bratus, Anna Shubina, David Kotz
2010	—	`conf`	SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms. TRUST Sergey Bratus, Michael E. Locasto, Brian Schulte
2010	—	`conf`	Software on the Witness Stand: What Should It Take for Us to Trust It? TRUST Sergey Bratus, Ashlyn Lembree, Anna Shubina
2010	A	`conf`	Teaching the principles of the hacker curriculum to undergraduates. SIGCSE Sergey Bratus, Anna Shubina, Michael E. Locasto
2010	—	`conf`	The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris. STC@CCS Anna Shubina, Sergey Bratus, Wyllys Ingersol, Sean W. Smith
2010	C	`conf`	VM-based security overkill: a lament for applied systems security research. NSPW Sergey Bratus, Michael E. Locasto, Ashwin Ramaswamy, Sean W. Smith
2009	J	`jnl`	Bickering In-Depth: Rethinking the Composition of Competing Security Systems. IEEE Secur. Priv. Michael E. Locasto, Sergey Bratus, Brian Schulte
2009	—	`conf`	Dartmouth Internet Security Testbed (DIST): Building a Campus-wide Wireless Testbed. CSET Sergey Bratus, David Kotz, Keren Tan, William Taylor, Anna Shubina, Bennet Vance, Michael E. Locasto
2009	—	`conf`	The cake is a lie: privilege rings as a policy resource. VMSec@CCS Sergey Bratus, Peter C. Johnson, Ashwin Ramaswamy, Sean W. Smith, Michael E. Locasto
2009	—	`conf`	Using domain knowledge for ontology-guided entity extraction from noisy, unstructured text data. AND Sergey Bratus, Anna Rumshisky, Rajendra Magar, Paul Thompson
2008	—	`conf`	Active behavioral fingerprinting of wireless devices. WISEC Sergey Bratus, Cory Cornelius, David Kotz, Daniel Peebles
2008	C	`conf`	Backhoe, a Packet Trace and Log Browser. VizSEC Sergey Bratus, Axel Hansen, Fabio Pellacini, Anna Shubina
2008	A	`conf`	Streaming Estimation of Information-Theoretic Metrics for Anomaly Detection (Extended Abstract). RAID Sergey Bratus, Joshua Brody, David Kotz, Anna Shubina
2008	—	`conf`	TOCTOU, Traps, and Trusted Computing. TRUST Sergey Bratus, Nihal D'Cunha, Evan Randall Sparks, Sean W. Smith
2008	—	`conf`	Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security. VMSec Sergey Bratus, Michael E. Locasto, Ashwin Ramaswamy, Sean W. Smith
2008	J	`jnl`	Why Do Street-Smart People Do Stupid Things Online? IEEE Secur. Priv. Sergey Bratus, Chris Masone, Sean W. Smith
2007	J	`jnl`	Hacker Curriculum : How Hackers Learn Networking. IEEE Distributed Syst. Online Sergey Bratus
2007	J	`jnl`	Hacker Curriculum: How We Can Use It in Teaching. IEEE Distributed Syst. Online Sergey Bratus, Christopher Masone
2007	B	`conf`	Pastures: Towards Usable Security Policy Engineering. ARES Sergey Bratus, Alex Ferguson, Doug McIlroy, Sean W. Smith
2007	J	`jnl`	What Hackers Learn that the Rest of Us Don't: Notes on Hacker Curriculum. IEEE Secur. Priv. Sergey Bratus
2006	C	`conf`	Semi-supervised Data Organization for Interactive Anomaly Analysis. ICMLA Javed A. Aslam, Sergey Bratus, Virgiliu Pavlu
2005	C	`conf`	Ubiquitous Redirection as Access Control Response. PST George Bakos, Sergey Bratus
2004	J	`jnl`	The Kerf Toolkit for Intrusion Analysis. IEEE Secur. Priv. Javed A. Aslam, Sergey Bratus, David Kotz, Ronald A. Peterson, Brett Tofel, Daniela Rus
2003	—	`conf`	The Kerf toolkit for intrusion analysis. IAW Javed A. Aslam, Sergey Bratus, David Kotz, Ronald A. Peterson, Daniela Rus, Brett Tofel
2001	—	`conf`	Experiments in Multi-Modal Automatic Content Extraction. HLT Lance A. Ramshaw, Elizabeth Boschee, Sergey Bratus, Scott Miller, Rebecca Stone, Ralph M. Weischedel, Alex Zamanian
2001	—	`conf`	FactBrowser Demonstration. HLT Scott Miller, Sergey Bratus, Lance A. Ramshaw, Ralph M. Weischedel, Alex Zamanian
2000	J	`jnl`	Fast Constructive Recognition of a Black Box Group Isomorphic to Sn or An using Goldbach's Conjecture. J. Symb. Comput. Sergey Bratus, Igor Pak
1999	B	`conf`	On Sampling Generating Sets of Finite Groups and Product Replacement Algorithm (extended abstract). ISSAC Igor Pak, Sergey Bratus