David Brumley

Publication Activity (10 Years)

Years Active: 2000-2018
Publications (10 Years): 8

Top Topics

Dynamic Analysis

High School Students

Top Venues

USENIX Security Symposium

IEEE Symposium on Security and Privacy

login Usenix Mag.

Publications

Thanassis Avgerinos, David Brumley, John Davis, Ryan Goulden, Tyler Nighswander, Alexandre Rebert, Ned Williamson
The Mayhem Cyber Reasoning System. IEEE Secur. Priv. 16 (2) (2018)
David Brumley
The Cyber Grand Challenge and the Future of Cyber-Autonomy. login Usenix Mag. 43 (2) (2018)
Arjun Roy, Deepak Bansal, David Brumley, Harish Kumar Chandrappa, Parag Sharma, Rishabh Tewari, Behnaz Arzani, Alex C. Snoeren
Cloud Datacenter SDN Monitoring: Experiences and Challenges. Internet Measurement Conference (2018)
Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, David Brumley
Your Exploit is Mine: Automatic Shellcode Transplant for Remote Exploits. IEEE Symposium on Security and Privacy (2017)
Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, David Brumley
How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games. CSF (2017)
Andrew Reynolds, Maverick Woo, Clark W. Barrett, David Brumley, Tianyi Liang, Cesare Tinelli
Scaling Up DPLL(T) String Solvers Using Context-Dependent Simplification. CAV (2) (2017)
Daming D. Chen, Maverick Woo, David Brumley, Manuel Egele
Towards Automated Dynamic Analysis for Linux-based Embedded Firmware. NDSS (2016)
Thanassis Avgerinos, Alexandre Rebert, Sang Kil Cha, David Brumley
Enhancing symbolic execution with veritesting. Commun. ACM 59 (6) (2016)
Yangchun Fu, Zhiqiang Lin, David Brumley
Automatically deriving pointer reference expressions from binary code for memory dump analysis. ESEC/SIGSOFT FSE (2015)
Sang Kil Cha, Maverick Woo, David Brumley
Program-Adaptive Mutational Fuzzing. IEEE Symposium on Security and Privacy (2015)
David Brumley
Invisible Intruders: Rootkits in Practice. login Usenix Mag. 40 (2) (2015)
Alexandre Rebert, Sang Kil Cha, Thanassis Avgerinos, Jonathan Foote, David Warren, Gustavo Grieco, David Brumley
Optimizing Seed Selection for Fuzzing. USENIX Security Symposium (2014)
Tiffany Bao, Jonathan Burket, Maverick Woo, Rafael Turner, David Brumley
BYTEWEIGHT: Learning to Recognize Functions in Binary Code. USENIX Security Symposium (2014)
Thanassis Avgerinos, Alexandre Rebert, Sang Kil Cha, David Brumley
Enhancing symbolic execution with veritesting. ICSE (2014)
Peter Chapman, Jonathan Burket, David Brumley
PicoCTF: A Game-Based Computer Security Competition for High School Students. 3GSE (2014)
Manuel Egele, Maverick Woo, Peter Chapman, David Brumley
Blanket Execution: Dynamic Similarity Testing for Program Binaries and Components. USENIX Security Symposium (2014)
Thanassis Avgerinos, Sang Kil Cha, Alexandre Rebert, Edward J. Schwartz, Maverick Woo, David Brumley
Automatic exploit generation. Commun. ACM 57 (2) (2014)
Manuel Egele, David Brumley, Yanick Fratantonio, Christopher Kruegel
An empirical study of cryptographic misuse in android applications. CCS (2013)
Maverick Woo, Sang Kil Cha, Samantha Gottlieb, David Brumley
Scheduling black-box mutational fuzzing. CCS (2013)
Jiyong Jang, Maverick Woo, David Brumley
Towards Automatic Software Lineage Inference. USENIX Security Symposium (2013)
Shobha Venkataraman, David Brumley, Subhabrata Sen, Oliver Spatscheck
Automatically Inferring the Evolution of Malicious Activity on the Internet. NDSS (2013)
David Brumley, JongHyup Lee, Edward J. Schwartz, Maverick Woo
Native x86 Decompilation Using Semantics-Preserving Structural Analysis and Iterative Control-Flow Structuring. USENIX Security Symposium (2013)
Matthew Maurer, David Brumley
Tachyon: Tandem Execution for Efficient Live Patch Testing. USENIX Security Symposium (2012)
Jiyong Jang, Maverick Woo, David Brumley
ReDeBug: Finding Unpatched Code Clones in Entire OS Distributions. login Usenix Mag. 37 (6) (2012)
Tyler Nighswander, Brent M. Ledvina, Jonathan Diamond, Robert Brumley, David Brumley
GPS software attacks. CCS (2012)
Jiyong Jang, Abeer Agrawal, David Brumley
ReDeBug: Finding Unpatched Code Clones in Entire OS Distributions. IEEE Symposium on Security and Privacy (2012)
Sang Kil Cha, Thanassis Avgerinos, Alexandre Rebert, David Brumley
Unleashing Mayhem on Binary Code. IEEE Symposium on Security and Privacy (2012)
Sang Kil Cha, Iulian Moraru, Jiyong Jang, John Truelove, David Brumley, David G. Andersen
SplitScreen: Enabling efficient, distributed malware detection. J. Commun. Networks 13 (2) (2011)
David Brumley, Ivan Jager, Thanassis Avgerinos, Edward J. Schwartz
BAP: A Binary Analysis Platform. CAV (2011)
JongHyup Lee, Thanassis Avgerinos, David Brumley
TIE: Principled Reverse Engineering of Types in Binary Programs. NDSS (2011)
Thanassis Avgerinos, Sang Kil Cha, Brent Lim Tze Hao, David Brumley
AEG: Automatic Exploit Generation. NDSS (2011)
Edward J. Schwartz, Thanassis Avgerinos, David Brumley
Q: Exploit Hardening Made Easy. USENIX Security Symposium (2011)
Jiyong Jang, David Brumley, Shobha Venkataraman
BitShred: feature hashing malware for scalable triage and semantic analysis. CCS (2011)
Sang Kil Cha, Brian Pak, David Brumley, Richard Jay Lipton
Platform-independent programs. CCS (2010)
Edward J. Schwartz, Thanassis Avgerinos, David Brumley
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask). IEEE Symposium on Security and Privacy (2010)
Sang Kil Cha, Iulian Moraru, Jiyong Jang, John Truelove, David Brumley, David G. Andersen
SplitScreen: Enabling Efficient, Distributed Malware Detection. NSDI (2010)
Edward J. Schwartz, David Brumley, Jonathan M. McCune
Contractual Anonymity. NDSS (2010)
Dawn Xiaodong Song, David Brumley, Heng Yin, Juan Caballero, Ivan Jager, Min Gyung Kang, Zhenkai Liang, James Newsome, Pongsin Poosankam, Prateek Saxena
BitBlaze: A New Approach to Computer Security via Binary Analysis. ICISS (2008)
David Brumley, James Newsome, Dawn Song, Hao Wang, Somesh Jha
Theory and Techniques for Automatic Generation of Vulnerability-Based Signatures. IEEE Trans. Dependable Secur. Comput. 5 (4) (2008)
David Brumley, Pongsin Poosankam, Dawn Xiaodong Song, Jiang Zheng
Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications. IEEE Symposium on Security and Privacy (2008)
David Brumley, Juan Caballero, Zhenkai Liang, James Newsome
Towards Automatic Discovery of Deviations in Binary Implementations with Applications to Error Detection and Fingerprint Generation. USENIX Security Symposium (2007)
David Brumley, Hao Wang, Somesh Jha, Dawn Xiaodong Song
Creating Vulnerability Signatures Using Weakest Preconditions. CSF (2007)
Joseph Tucek, James Newsome, Shan Lu, Chengdu Huang, Spiros Xanthos, David Brumley, Yuanyuan Zhou, Dawn Xiaodong Song
Sweeper: a lightweight end-to-end system for defending against fast worms. EuroSys (2007)
Nikita Borisov, David Brumley, Helen J. Wang, John Dunagan, Pallavi Joshi, Chuanxiong Guo
Generic Application-Level Protocol Analyzer and its Language. NDSS (2007)
David Brumley, Dawn Xiaodong Song, Tzi-cker Chiueh, Rob Johnson, Huijia Lin
RICH: Automatically Protecting Against Integer-Based Vulnerabilities. NDSS (2007)
David Brumley, Li-Hao Liu, Pongsin Poosankam, Dawn Xiaodong Song
Design space and analysis of worm defense strategies. AsiaCCS (2006)
James Newsome, David Brumley, Jason Franklin, Dawn Xiaodong Song
Replayer: automatic protocol replay by binary analysis. CCS (2006)
James Newsome, David Brumley, Dawn Xiaodong Song
Vulnerability-Specific Execution Filtering for Exploit Prevention on Commodity Software. NDSS (2006)
David Brumley, James Newsome, Dawn Xiaodong Song, Hao Wang, Somesh Jha
Towards Automatic Generation of Vulnerability-Based Signatures. IEEE Symposium on Security and Privacy (2006)
David Brumley, Dawn Song
Towards Attack-Agnostic Defenses. HotSec (2006)
David Brumley, Dan Boneh
Remote timing attacks are practical. Comput. Networks 48 (5) (2005)
David Brumley, Dawn Xiaodong Song
Privtrans: Automatically Partitioning Programs for Privilege Separation. USENIX Security Symposium (2004)
David Brumley, Dan Boneh
Remote Timing Attacks Are Practical. USENIX Security Symposium (2003)
Constantine P. Sapuntzakis, David Brumley, Ramesh Chandra, Nickolai Zeldovich, Jim Chow, Monica S. Lam, Mendel Rosenblum
Virtual Appliances for Deploying and Maintaining Software. LISA (2003)
David Brumley
A CrashCourse in Managing Security. login Usenix Mag. 26 (7) (2001)
David Brumley
Repeatable Security. login Usenix Mag. 25 (7) (2000)