Michael E. Locasto

Publication Activity (10 Years)

Years Active: 2003-2024
Publications (10 Years): 23

Top Topics

Intrusion Detection

Information Security

Top Venues

login Usenix Mag.

IEEE Symposium on Security and Privacy Workshops

Publications

Sameed Ali, Michael E. Locasto, Sean W. Smith
Weird Machines in Package Managers: A Case Study of Input Language Complexity and Emergent Execution in Software Systems. SP (Workshops) (2024)
Ben Kallus, Prashant Anantharaman, Michael E. Locasto, Sean W. Smith
The HTTP Garden: Discovering Parsing Vulnerabilities in HTTP/1.1 Implementations by Differential Fuzzing of Request Streams. CoRR (2024)
Prashant Anantharaman, Robert Lathrop, Rebecca Shapiro, Michael E. Locasto
PolyDoc: Surveying PDF Files from the PolySwarm network. SP Workshops (2023)
Prashant Anantharaman, Steven Cheung, Nicholas Boorman, Michael E. Locasto
A Format-Aware Reducer for Scriptable Rewriting of PDF Files. SP Workshops (2022)
Prashant Anantharaman, Anmol Chachra, Shikhar Sinha, Michael C. Millian, Bogdan Copos, Sean W. Smith, Michael E. Locasto
A Communications Validity Detector for SCADA Networks. Critical Infrastructure Protection (2021)
Prashant Anantharaman, Liwei Song, Ioannis Agadakos, Gabriela F. Ciocarlie, Bogdan Copos, Ulf Lindqvist, Michael E. Locasto
IoTHound: environment-agnostic device identification and monitoring. IOT (2020)
Michael C. Millian, Prashant Anantharaman, Sergey Bratus, Sean W. Smith, Michael E. Locasto
Converting an Electric Power Utility Network to Defend Against Crafted Inputs. Critical Infrastructure Protection (2019)
Richard Weiss, Ambareen Siraj, Jens Mache, Blair Taylor, Siddharth Kaza, Ankur Chattopadhyay, Michael E. Locasto
Integrating Hands-on Cybersecurity Exercises into the Curriculum in 2018: (Abstract Only). SIGCSE (2018)
Ioannis Agadakos, Gabriela F. Ciocarlie, Bogdan Copos, Tancrède Lepoint, Ulf Lindqvist, Michael E. Locasto, James R. Michaelis
Risks and Benefits of Side-Channels in Battlefields. FUSION (2018)
Richard S. Weiss, Jens Mache, Michael E. Locasto
Live Lesson: The EDURange Framework and a Movie-themed Exercise in Network Reconnaissance. ASE @ USENIX Security Symposium (2017)
Richard S. Weiss, Jens Mache, Michael E. Locasto, Franklyn A. Turbak
Hands-on Cybersecurity Exercises That are Easy to Access and Assess (Abstract Only). SIGCSE (2017)
Ioannis Agadakos, Chien-Ying Chen, Matteo Campanelli, Prashant Anantharaman, Monowar Hasan, Bogdan Copos, Tancrède Lepoint, Michael E. Locasto, Gabriela F. Ciocarlie, Ulf Lindqvist
Jumping the Air Gap: Modeling Cyber-Physical Attack Paths in the Internet-of-Things. CPS-SPC@CCS (2017)
Richard S. Weiss, Franklyn A. Turbak, Jens Mache, Michael E. Locasto
Cybersecurity Education and Assessment in EDURange. IEEE Secur. Priv. 15 (3) (2017)
Richard S. Weiss, Ambareen Siraj, Jens Mache, Elizabeth K. Hawthorne, Blair Taylor, Siddharth Kaza, Michael E. Locasto
Building and Supporting a Community of CS Educators Teaching Cybersecurity in 2017 (Abstract Only). SIGCSE (2017)
Sergey Bratus, Lars Hermerschmidt, Sven M. Hallberg, Michael E. Locasto, Falcon Momot, Meredith L. Patterson, Anna Shubina
Curing the Vulnerable Parser: Design Patterns for Secure Input Handling. login Usenix Mag. 42 (1) (2017)
Prashant Anantharaman, Michael E. Locasto, Gabriela F. Ciocarlie, Ulf Lindqvist
Building Hardened Internet-of-Things Clients with Language-Theoretic Security. IEEE Symposium on Security and Privacy Workshops (2017)
Katherine Underwood, Michael E. Locasto
In Search of Shotgun Parsers in Android Applications. IEEE Symposium on Security and Privacy Workshops (2016)
Benedict Chukuka, Michael E. Locasto
A Survey of Ethical Agreements in Information Security Courses. SIGCSE (2016)
Richard S. Weiss, Michael E. Locasto, Jens Mache
A Reflective Approach to Assessing Student Performance in Cybersecurity Exercises. SIGCSE (2016)
Richard Weiss, Michael E. Locasto, Jens Mache, Blair Taylor, Elizabeth K. Hawthorne, Siddharth Kaza, Ambareen Siraj
Assessment of Security Knowledge, Skills and Abilities using Hands-On Exercises in 2016 (Abstract Only). SIGCSE (2016)
Richard S. Weiss, Franklyn A. Turbak, Jens Mache, Erik Nilsen, Michael E. Locasto
Finding the Balance Between Guidance and Independence in Cybersecurity Exercises. ASE @ USENIX Security Symposium (2016)
Richard S. Weiss, Stefan Boesen, James F. Sullivan, Michael E. Locasto, Jens Mache, Erik Nilsen
Teaching Cybersecurity Analysis Skills in the Cloud. SIGCSE (2015)
Richard S. Weiss, Michael E. Locasto, Jens Mache, Blair Taylor, Elizabeth K. Hawthorne, Justin Cappos, Ambareen Siraj
Teaching Security Using Hands-on Exercises in 2015 (Abstract Only). SIGCSE (2015)
Sergey Bratus, Michael E. Locasto, Anna Shubina
Why Wassenaar Arrangement's Definitions of "Intrusion Software" and "Controlled Items" Put Security Research and Defense At Risk. login Usenix Mag. 39 (4) (2014)
Sergey Bratus, Trey Darley, Michael E. Locasto, Meredith L. Patterson, Rebecca Shapiro, Anna Shubina
Beyond Planted Bugs in "Trusting Trust": The Input-Processing Frontier. IEEE Secur. Priv. 12 (1) (2014)
Sarah Laing, Michael E. Locasto, John Aycock
An Experience Report on Extracting and Viewing Memory Events via Wireshark. WOOT (2014)
Richard S. Weiss, Michael E. Locasto, Jens Mache, Elizabeth K. Hawthorne, Justin Cappos
Teaching security using hands-on exercises (abstract only). SIGCSE (2014)
Jonathan Gallagher, Robin Gonzalez, Michael E. Locasto
Verifying security patches. PSP (2014)
Richard S. Weiss, Jens Mache, Michael E. Locasto, Vincent Nestler
Hands-on cybersecurity exercises in the EDURange framework (abstract only). SIGCSE (2014)
Stefan Boesen, Richard S. Weiss, James F. Sullivan, Michael E. Locasto, Jens Mache, Erik Nilsen
EDURange: Meeting the Pedagogical Challenges of Student Participation in Cybertraining Environments. CSET (2014)
Benjamin Edwards, Michael E. Locasto, Jeremy Epstein
Panel Summary: The Future of Software Regulation. NSPW (2014)
Sergey Bratus, Iván Arce, Michael E. Locasto, Stefano Zanero
Why Offensive Security Needs Engineering Textbooks: Or, How to Avoid a Replay of "Crypto Wars" in Security Research. login Usenix Mag. 39 (4) (2014)
Richard S. Weiss, Michael E. Locasto, Jens Mache, Blair Taylor, Elizabeth K. Hawthorne
Teaching security using hands-on exercises (abstract only). SIGCSE (2013)
Len Sassaman, Meredith L. Patterson, Sergey Bratus, Michael E. Locasto
Security Applications of Formal Language Theory. IEEE Syst. J. 7 (3) (2013)
Richard S. Weiss, Vincent Nestler, Michael E. Locasto, Jens Mache, Brian Hay
Hands-on cybersecurity exercises and the rave virtual environment (abstract only). SIGCSE (2013)
Richard S. Weiss, Michael E. Locasto, Jens Mache
Hacking and the security curriculum: building community (abstract only). SIGCSE (2012)
Saran Neti, Anil Somayaji, Michael E. Locasto
Software Diversity: Security, Entropy and Game Theory. HotSec (2012)
John Aycock, Daniel Medeiros Nunes de Castro, Michael E. Locasto, Chris Jarabek
Babel: a secure computer is a polyglot. CCSW (2012)
Jason Reeves, Ashwin Ramaswamy, Michael E. Locasto, Sergey Bratus, Sean W. Smith
Intrusion detection for resource-constrained embedded control systems in the power grid. Int. J. Crit. Infrastructure Prot. 5 (2) (2012)
Peter DePasquale, Michael E. Locasto, Lisa C. Kaczmarczyk
Identifying effective pedagogical practices for commenting computer source code (abstract only). SIGCSE (2012)
Gaven J. Watson, Reihaneh Safavi-Naini, Mohsen Alimomeni, Michael E. Locasto, Shivaramakrishnan Narayan
LoSt: location based storage. CCSW (2012)
Peter J. DePasquale, Michael E. Locasto, Lisa C. Kaczmarczyk, Mike Martinovic
// TODO: Help students improve commenting practices. FIE (2012)
Jason Reeves, Ashwin Ramaswamy, Michael E. Locasto, Sergey Bratus, Sean W. Smith
Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems. Critical Infrastructure Protection (2011)
John F. Williamson, Sergey Bratus, Michael E. Locasto
Using Active Intrusion Detection to Recover Network Trust. LISA (2011)
Michael E. Locasto, Michael Massimi, Peter DePasquale
Security and privacy considerations in digital death. NSPW (2011)
Michael E. Locasto, Matthew C. Little
A Failure-Based Discipline of Trustworthy Information Systems. IEEE Secur. Priv. 9 (4) (2011)
Michael E. Locasto, Anup K. Ghosh, Sushil Jajodia, Angelos Stavrou
The ephemeral legion: producing an expert cyber-security work force from thin air. Commun. ACM 54 (1) (2011)
Sergey Bratus, Michael E. Locasto, Meredith L. Patterson, Len Sassaman, Anna Shubina
Exploit Programming: From Buffer Overflows to "Weird Machines" and Theory of Computation. login Usenix Mag. 36 (6) (2011)
Yingbo Song, Michael E. Locasto, Angelos Stavrou, Angelos D. Keromytis, Salvatore J. Stolfo
On the infeasibility of modeling polymorphic shellcode - Re-thinking the role of learning in intrusion detection systems. Mach. Learn. 81 (2) (2010)
Sergey Bratus, Michael E. Locasto, Brian Schulte
SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms. TRUST (2010)
Sergey Bratus, Michael E. Locasto, Ashwin Ramaswamy, Sean W. Smith
VM-based security overkill: a lament for applied systems security research. NSPW (2010)
Sergey Bratus, Anna Shubina, Michael E. Locasto
Teaching the principles of the hacker curriculum to undergraduates. SIGCSE (2010)
Stephen W. Boyd, Gaurav S. Kc, Michael E. Locasto, Angelos D. Keromytis, Vassilis Prevelakis
On the General Applicability of Instruction-Set Randomization. IEEE Trans. Dependable Secur. Comput. 7 (3) (2010)
Ashwin Ramaswamy, Sergey Bratus, Sean W. Smith, Michael E. Locasto
Katana: A Hot Patching Framework for ELF Executables. ARES (2010)
Sergey Bratus, James Oakley, Ashwin Ramaswamy, Sean W. Smith, Michael E. Locasto
Katana: Towards Patching as a Runtime Part of the Compiler-Linker-Loader Toolchain. Int. J. Secur. Softw. Eng. 1 (3) (2010)
Michael E. Locasto, Matthew Burnside, Darrell Bethea
Pushing Boulders Uphill: The Difficulty of Network Intrusion Recovery. LISA (2009)
Sergey Bratus, David Kotz, Keren Tan, William Taylor, Anna Shubina, Bennet Vance, Michael E. Locasto
Dartmouth Internet Security Testbed (DIST): Building a Campus-wide Wireless Testbed. CSET (2009)
Gabriela F. Cretu-Ciocarlie, Angelos Stavrou, Michael E. Locasto, Salvatore J. Stolfo
Adaptive Anomaly Detection via Self-calibration and Dynamic Updating. RAID (2009)
Michael E. Locasto, Sergey Bratus, Brian Schulte
Bickering In-Depth: Rethinking the Composition of Competing Security Systems. IEEE Secur. Priv. 7 (6) (2009)
Michael E. Locasto
Helping Students 0wn Their Own Code. IEEE Secur. Priv. 7 (3) (2009)
Angelos Stavrou, Gabriela F. Cretu-Ciocarlie, Michael E. Locasto, Salvatore J. Stolfo
Keep your friends close: the necessity for updating an anomaly sensor with legitimate environment changes. AISec (2009)
Sergey Bratus, Peter C. Johnson, Ashwin Ramaswamy, Sean W. Smith, Michael E. Locasto
The cake is a lie: privilege rings as a policy resource. VMSec@CCS (2009)
Michael E. Locasto, Angelos Stavrou
The Hidden Difficulties of Watching and Rebuilding Networks. IEEE Secur. Priv. 6 (2) (2008)
Gabriela F. Cretu, Angelos Stavrou, Michael E. Locasto, Salvatore J. Stolfo, Angelos D. Keromytis
Casting out Demons: Sanitizing Training Data for Anomaly Sensors. IEEE Symposium on Security and Privacy (2008)
Angelos Stavrou, Michael E. Locasto, Angelos D. Keromytis
Pushback for Overlay Networks: Protecting Against Malicious Insiders. ACNS (2008)
Michael E. Locasto, Matthew Burnside, Angelos D. Keromytis
Online Network Forensics for Automatic Repair Validation. IWSEC (2008)
Michael E. Locasto, Angelos Stavrou, Gabriela F. Cretu, Angelos D. Keromytis, Salvatore J. Stolfo
Return Value Predictability Profiles for Self-healing. IWSEC (2008)
Sergey Bratus, Michael E. Locasto, Ashwin Ramaswamy, Sean W. Smith
Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security. VMSec (2008)
Weidong Cui, Marcus Peinado, Helen J. Wang, Michael E. Locasto
ShieldGen: Automatic Data Patch Generation for Unknown Vulnerabilities with Informed Probing. IEEE Symposium on Security and Privacy (2007)
Michael E. Locasto
Self-healing: science, engineering, and fiction. NSPW (2007)
Adam J. Aviv, Michael E. Locasto, Shaya Potter, Angelos D. Keromytis
SSARES: Secure Searchable Automated Remote Email Storage. ACSAC (2007)
Anil Somayaji, Michael E. Locasto, Jan Feyereisl
The future of biologically-inspired security: is there anything left to learn? NSPW (2007)
Michael E. Locasto, Angelos Stavrou, Gabriela F. Cretu, Angelos D. Keromytis
From STEM to SEAD: Speculative Execution for Automated Defense. USENIX Annual Technical Conference (2007)
Yingbo Song, Michael E. Locasto, Angelos Stavrou, Angelos D. Keromytis, Salvatore J. Stolfo
On the infeasibility of modeling polymorphic shellcode. CCS (2007)
Michael E. Locasto, Stelios Sidiroglou, Angelos D. Keromytis
Software Self-Healing Using Collaborative Application Communities. NDSS (2006)
Angelos Stavrou, Michael E. Locasto, Angelos D. Keromytis
W3Bcrypt: Encryption as a Stylesheet. ACNS (2006)
Michael E. Locasto, Angelos Stavrou, Angelos D. Keromytis
Dark application communities. NSPW (2006)
Stelios Sidiroglou, Michael E. Locasto, Angelos D. Keromytis
Hardware support for self-healing software services. SIGARCH Comput. Archit. News 33 (1) (2005)
Michael E. Locasto, Ke Wang, Angelos D. Keromytis, Salvatore J. Stolfo
FLIPS: Hybrid Adaptive Intrusion Prevention. RAID (2005)
Michael E. Locasto, Stelios Sidiroglou, Angelos D. Keromytis
Speculative virtual verification: policy-constrained speculative execution. NSPW (2005)
Simon N. Foley, Abe Singer, Michael E. Locasto, Stelios Sidiroglou, Angelos D. Keromytis, John P. McDermott, Julie Thorpe, Paul C. van Oorschot, Anil Somayaji, Richard Ford, Mark Bush, Alex Boulatov
Highlights from the 2005 New Security Paradigms Workshop. ACSAC (2005)
Stelios Sidiroglou, Michael E. Locasto, Stephen W. Boyd, Angelos D. Keromytis
Building a Reactive Immune System for Software Services. USENIX Annual Technical Conference, General Track (2005)
Michael E. Locasto, Angelos D. Keromytis
CamouflageFS: Increasing the Effective Key Length in Cryptographic Filesystems on the Cheap. ACNS (2004)
Michael Hulme, Michael E. Locasto
Using the web to enhance and transform education. ACM Crossroads 10 (1) (2003)