BitShred: Feature Hashing Malware for Scalable Triage and Semantic Analysis Jiyong Jang David Brumley

Source URL: users.ece.cmu.edu

• Information science
• Information retrieval
• Hashing
• Information
• Search algorithms
• Jaccard index
• Malware analysis
• Malware
• Locality-sensitive hashing
• Cluster analysis
• Hash function
• Hierarchical clustering

ReDeBug: Finding Unpatched Code Clones in Entire OS Distributions Jiyong Jang, Abeer Agrawal, and David Brumley Carnegie Mellon University Pittsburgh, PA, USA {jiyongj, abeer, dbrumley}@cmu.edu

Source URL: users.ece.cmu.edu

• Portable software
• Dpkg
• Linux distributions
• Ubuntu
• Debian
• Bloom filter
• Duplicate code
• Almquist shell
• Deb
• GIMP
• OpenOffice.org

Design Space and Analysis of Worm Defense Strategies David Brumley Li-Hao Liu Pongsin Poosankam

Source URL: users.ece.cmu.edu

• Computer worms
• Computer network security
• Warhol worm
• SQL Slammer
• Computer security
• Antibody

Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications David Brumley, Pongsin Poosankam Dawn Song Jiang Zheng {dbrumley,ppoosank}@cs.cmu.edu

Source URL: users.ece.cmu.edu

• Software testing
• Software bugs
• Hacking
• Buffer overflow
• Computer memory
• Vulnerability
• Static single assignment form
• Exploit
• Patch
• Test data generation
• Concolic testing

Towards Automatic Generation of Vulnerability-Based Signatures David Brumley, James Newsome, and Dawn Song Carnegie Mellon University Pittsburgh, PA, USA {dbrumley,jnewsome,dawnsong}@cmu.edu

Source URL: users.ece.cmu.edu

• Computability theory
• Vulnerability
• Public-key cryptography
• Theoretical computer science
• Models of computation
• Buffer overflow
• Social vulnerability
• Zero-day
• Ring signature
• Symbolic execution
• Turing machine
• Halting problem

A Generic Application-Level Protocol Analyzer and its Language Nikita Borisov UIUC David J. Brumley

Source URL: users.ece.cmu.edu

• OSI protocols
• Internet protocols
• Network protocols
• Data transmission
• Network architecture
• Communications protocol
• Application layer
• OSI model
• Transport layer
• Microsoft Network Monitor
• Transmission Control Protocol
• Hypertext Transfer Protocol

Towards Automated Dynamic Analysis for Linux-based Embedded Firmware Daming D. Chen∗ , Manuel Egele† , Maverick Woo∗ , and David Brumley∗ ∗ Carnegie Mellon University

Source URL: www.dcddcc.com

• Custom firmware
• QEMU
• Firmware
• Linux kernel
• OpenWrt
• Kernel-based Virtual Machine
• Device driver
• Rooting
• Unified Extensible Firmware Interface
• Binary blob

Towards Attack-Agnostic Defenses David Brumley and Dawn Song Carnegie Mellon University {dbrumley,dawnsong}@cs.cmu.edu Abstract

Source URL: users.ece.cmu.edu

• Cyberwarfare
• Computer network security
• Peer-to-peer
• Botnet
• Hosts
• Denial-of-service attack
• Public-key cryptography
• Computer security
• Fabric of Security

Remote Timing Attacks are Practical David Brumley Stanford University Abstract Timing attacks are usually used to attack weak computing devices such as smartcards. We show that timing

Source URL: css.csail.mit.edu

AEG: Automatic Exploit Generation Thanassis Avgerinos, Sang Kil Cha, Brent Lim Tze Hao and David Brumley Carnegie Mellon University, Pittsburgh, PA {thanassis, sangkilc, brentlim, dbrumley}@cmu.edu Abstract

Source URL: www.isoc.org