Salvatore J. Stolfo

ORCID

Publication Activity (10 Years)

Years Active: 1979-2022
Publications (10 Years): 9

Top Venues

RAID

CoRR

IEEE Symposium on Security and Privacy Workshops

NDSS

Publications

Germán Creamer, Salvatore J. Stolfo, Mateo Creamer, Shlomo Hershkop, Ryan Rowe
Discovering Organizational Hierarchy through a Corporate Ranking Algorithm: The Enron Case. Complex. 2022 (2022)
Jonathan Voris, Yingbo Song, Malek Ben Salem, Shlomo Hershkop, Salvatore J. Stolfo
Active authentication using file system decoys and user behavior modeling: results of a large scale study. Comput. Secur. 87 (2019)
Adrian Tang, Simha Sethumadhavan, Salvatore J. Stolfo
Motivating Security-Aware Energy Management. IEEE Micro 38 (3) (2018)
Preetam Dutta, Gabriel Ryan, Aleksander Zieba, Salvatore J. Stolfo
Simulated User Bots: Real Time Testing of Insider Threat Detection Systems. IEEE Symposium on Security and Privacy Workshops (2018)
Theofilos Petsios, Adrian Tang, Dimitris Mitropoulos, Salvatore J. Stolfo, Angelos D. Keromytis, Suman Jana
Tug-of-War: Observations on Unified Content Handling. CoRR (2017)
Theofilos Petsios, Adrian Tang, Salvatore J. Stolfo, Angelos D. Keromytis, Suman Jana
NEZHA: Efficient Domain-Independent Differential Testing. IEEE Symposium on Security and Privacy (2017)
Adrian Tang, Simha Sethumadhavan, Salvatore J. Stolfo
CLKSCREW: Exposing the Perils of Security-Oblivious Energy Management. USENIX Security Symposium (2017)
Jonathan Voris, Yingbo Song, Malek Ben Salem, Salvatore J. Stolfo
You Are What You Use: An Initial Study of Authenticating Mobile Users via Application Usage. MobiCASE (2016)
David M. Tagatac, Michalis Polychronakis, Salvatore J. Stolfo
Using Diversity to Harden Multithreaded Programs Against Exploitation. BigDataSecurity/HPSC/IDS (2016)
Jill Jermyn, Roger Piqueras Jover, Ilona Murynets, Mikhail Istomin, Salvatore J. Stolfo
Scalability of Machine to Machine systems and the Internet of Things on LTE mobile networks. WOWMOM (2015)
Adrian Tang, Simha Sethumadhavan, Salvatore J. Stolfo
Heisenbyte: Thwarting Memory Disclosure Attacks using Destructive Code Reads. CCS (2015)
Jonathan Voris, Jill Jermyn, Nathaniel Boggs, Salvatore J. Stolfo
Fox in the trap: thwarting masqueraders via automated decoy document deployment. EUROSEC (2015)
Adrian Tang, John Demme, Simha Sethumadhavan, Salvatore J. Stolfo
A silicon anti-virus engine. Hot Chips Symposium (2015)
Nathaniel Boggs, Senyao Du, Salvatore J. Stolfo
Measuring Drive-by Download Defense in Depth. RAID (2014)
Adrian Tang, Simha Sethumadhavan, Salvatore J. Stolfo
Unsupervised Anomaly-Based Malware Detection Using Hardware Features. RAID (2014)
Sean Whalen, Nathaniel Boggs, Salvatore J. Stolfo
Model Aggregation for Distributed Content Anomaly Detection. AISec@CCS (2014)
Nathaniel Boggs, Hang Zhao, Senyao Du, Salvatore J. Stolfo
Synthetic Data Generation and Defense in Depth Measurement of Web Applications. RAID (2014)
Jill Jermyn, Jinho Hwang, Kun Bai, Maja Vukovic, Nikos Anerousis, Salvatore J. Stolfo
Improving readiness for enterprise migration to the cloud. Middleware (Industry Track) (2014)
Adrian Tang, Simha Sethumadhavan, Salvatore J. Stolfo
Unsupervised Anomaly-based Malware Detection using Hardware Features. CoRR (2014)
John Demme, Matthew Maycock, Jared Schmitz, Adrian Tang, Adam Waksman, Simha Sethumadhavan, Salvatore J. Stolfo
On the feasibility of online malware detection with performance counters. ISCA (2013)
Ang Cui, Jatin Kataria, Salvatore J. Stolfo
Revisiting the myth of Cisco IOS diversity: recent advances in reliable shellcode design. Inf. Manag. Comput. Secur. 21 (2) (2013)
Ang Cui, Michael Costello, Salvatore J. Stolfo
When Firmware Modifications Attack: A Case Study of Embedded Exploitation. NDSS (2013)
Yingbo Song, Malek Ben Salem, Shlomo Hershkop, Salvatore J. Stolfo
System Level User Behavior Biometrics using Fisher Features and Gaussian Mixture Models. IEEE Symposium on Security and Privacy Workshops (2013)
Young Hee Park, Salvatore J. Stolfo
Software decoys for insider threat. AsiaCCS (2012)
Junfeng Yang, Ang Cui, Salvatore J. Stolfo, Simha Sethumadhavan
Concurrency Attacks. HotPar (2012)
Brian M. Bowen, Vasileios P. Kemerlis, Pratap V. Prabhu, Angelos D. Keromytis, Salvatore J. Stolfo
A system for generating and injecting indistinguishable network decoys. J. Comput. Secur. 20 (2-3) (2012)
Angelos D. Keromytis, Roxana Geambasu, Simha Sethumadhavan, Salvatore J. Stolfo, Junfeng Yang, Azzedine Benameur, Marc Dacier, Matthew C. Elder, Darrell M. Kienzle, Angelos Stavrou
The MEERKATS Cloud Security Architecture. ICDCS Workshops (2012)
Jonathan Voris, Nathaniel Boggs, Salvatore J. Stolfo
Lost in Translation: Improving Decoy Documents via Automated Translation. IEEE Symposium on Security and Privacy Workshops (2012)
Mariana Raykova, Ang Cui, Binh Vo, Bin Liu, Tal Malkin, Steven M. Bellovin, Salvatore J. Stolfo
Usable, Secure, Private Search. IEEE Secur. Priv. 10 (5) (2012)
Shari Lawrence Pfleeger, Marc Rogers, Masooda N. Bashir, Kelly Caine, Deanna D. Caputo, Michael Losavio, Salvatore J. Stolfo
Does Profiling Make Us More Secure? IEEE Secur. Priv. 10 (4) (2012)
Malek Ben Salem, Salvatore J. Stolfo
Combining Baiting and User Search Profiling Techniques for Masquerade Detection. J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl. 3 (1/2) (2012)
Malek Ben Salem, Salvatore J. Stolfo
A comparison of one-class bag-of-words user behavior modeling techniques for masquerade detection. Secur. Commun. Networks 5 (8) (2012)
Salvatore J. Stolfo, Malek Ben Salem, Angelos D. Keromytis
Fog Computing: Mitigating Insider Data Theft Attacks in the Cloud. IEEE Symposium on Security and Privacy Workshops (2012)
Nathaniel Boggs, Sharath Hiremagalore, Angelos Stavrou, Salvatore J. Stolfo
Cross-Domain Collaborative Anomaly Detection: So Far Yet So Close. RAID (2011)
Ang Cui, Salvatore J. Stolfo
Reflections on the engineering and operation of a large-scale embedded device vulnerability scanner. BADGERS@EuroSys (2011)
Salvatore J. Stolfo, Steven M. Bellovin, David Evans
Measuring Security. IEEE Secur. Priv. 9 (3) (2011)
Ang Cui, Jatin Kataria, Salvatore J. Stolfo
From prey to hunter: transforming legacy embedded devices into exploitation sensor grids. ACSAC (2011)
Ang Cui, Salvatore J. Stolfo
Defending Embedded Systems with Software Symbiotes. RAID (2011)
David Evans, Salvatore J. Stolfo
Guest Editors' Introduction: The Science of Security. IEEE Secur. Priv. 9 (3) (2011)
Malek Ben Salem, Salvatore J. Stolfo
On the Design and Execution of Cyber-Security User Studies: Methodology, Challenges, and Lessons Learned. CSET (2011)
Malek Ben Salem, Salvatore J. Stolfo
Modeling User Search Behavior for Masquerade Detection. RAID (2011)
Malek Ben Salem, Salvatore J. Stolfo
Decoy Document Deployment for Effective Masquerade Attack Detection. DIMVA (2011)
Ang Cui, Jatin Kataria, Salvatore J. Stolfo
Killing the Myth of Cisco IOS Diversity: Recent Advances in Reliable Shellcode Design. WOOT (2011)
Simha Sethumadhavan, Salvatore J. Stolfo, Angelos D. Keromytis, Junfeng Yang, David I. August
The SPARCHS Project: Hardware Support for Software Security. SysSec@DIMVA (2011)
Angelos D. Keromytis, Salvatore J. Stolfo, Junfeng Yang, Angelos Stavrou, Anup K. Ghosh, Dawson R. Engler, Marc Dacier, Matthew C. Elder, Darrell M. Kienzle
The MINESTRONE Architecture Combining Static and Dynamic Analysis Techniques for Software Security. SysSec@DIMVA (2011)
Yingbo Song, Michael E. Locasto, Angelos Stavrou, Angelos D. Keromytis, Salvatore J. Stolfo
On the infeasibility of modeling polymorphic shellcode - Re-thinking the role of learning in intrusion detection systems. Mach. Learn. 81 (2) (2010)
Brian M. Bowen, Vasileios P. Kemerlis, Pratap V. Prabhu, Angelos D. Keromytis, Salvatore J. Stolfo
Automating the injection of believable decoys to detect snooping. WISEC (2010)
Germán Creamer, Salvatore J. Stolfo
Erratum to: A link mining algorithm for earnings forecast and trading. Data Min. Knowl. Discov. 21 (3) (2010)
Andrea M. Matwyshyn, Ang Cui, Angelos D. Keromytis, Salvatore J. Stolfo
Ethics in Security Vulnerability Research. IEEE Secur. Priv. 8 (2) (2010)
Malek Ben Salem, Salvatore J. Stolfo
Detecting Masqueraders: A Comparison of One-Class Bag-of-Words User Behavior Modeling Techniques. J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl. 1 (1) (2010)
Salvatore J. Stolfo, Gene Tsudik
Privacy-Preserving Sharing of Sensitive Information. IEEE Secur. Priv. 8 (4) (2010)
Brian M. Bowen, Pratap V. Prabhu, Vasileios P. Kemerlis, Stelios Sidiroglou, Angelos D. Keromytis, Salvatore J. Stolfo
BotSwindler: Tamper Resistant Injection of Believable Decoys in VM-Based Hosts for Crimeware Detection. RAID (2010)
Ang Cui, Salvatore J. Stolfo
A quantitative analysis of the insecurity of embedded network devices: results of a wide-area scan. ACSAC (2010)
Brian M. Bowen, Malek Ben Salem, Shlomo Hershkop, Angelos D. Keromytis, Salvatore J. Stolfo
Designing Host and Network Sensors to Mitigate the Insider Threat. IEEE Secur. Priv. 7 (6) (2009)
Brian M. Bowen, Shlomo Hershkop, Angelos D. Keromytis, Salvatore J. Stolfo
Baiting Inside Attackers Using Decoy Documents. SecureComm (2009)
Salvatore J. Stolfo
Polymorphic shellcode: the demise of signature-based detection. CSIIRW (2009)
Ang Cui, Yingbo Song, Pratap V. Prabhu, Salvatore J. Stolfo
Brave New World: Pervasive Insecurity of Embedded Network Devices. RAID (2009)
Shari Lawrence Pfleeger, Salvatore J. Stolfo
Addressing the Insider Threat. IEEE Secur. Priv. 7 (6) (2009)
Gabriela F. Cretu-Ciocarlie, Angelos Stavrou, Michael E. Locasto, Salvatore J. Stolfo
Adaptive Anomaly Detection via Self-calibration and Dynamic Updating. RAID (2009)
Germán Creamer, Salvatore J. Stolfo
A link mining algorithm for earnings forecast and trading. Data Min. Knowl. Discov. 18 (3) (2009)
Vanessa Frías-Martínez, Joseph Sherrick, Salvatore J. Stolfo, Angelos D. Keromytis
A Network Access Control Mechanism Based on Behavior Profiles. ACSAC (2009)
Vanessa Frías-Martínez, Salvatore J. Stolfo, Angelos D. Keromytis
BARTER: Behavior Profile Exchange for Behavior-Based Admission and Access Control in MANETs. ICISS (2009)
Yingbo Song, Angelos D. Keromytis, Salvatore J. Stolfo
Spectrogram: A Mixture-of-Markov-Chains Model for Anomaly Detection in Web Traffic. NDSS (2009)
Doug Maughan, George Hull, Salvatore J. Stolfo, Robert J. Stratton III
Keynote panel. CSIIRW (2009)
Angelos Stavrou, Gabriela F. Cretu-Ciocarlie, Michael E. Locasto, Salvatore J. Stolfo
Keep your friends close: the necessity for updating an anomaly sensor with legitimate environment changes. AISec (2009)
Gabriela F. Cretu, Angelos Stavrou, Michael E. Locasto, Salvatore J. Stolfo, Angelos D. Keromytis
Casting out Demons: Sanitizing Training Data for Anomaly Sensors. IEEE Symposium on Security and Privacy (2008)
Vanessa Frías-Martínez, Salvatore J. Stolfo, Angelos D. Keromytis
Behavior-Based Network Access Control: A Proof-of-Concept. ISC (2008)
Vanessa Frías-Martínez, Salvatore J. Stolfo, Angelos D. Keromytis
Behavior-Profile Clustering for False Alert Reduction in Anomaly Detection Sensors. ACSAC (2008)
Michael E. Locasto, Angelos Stavrou, Gabriela F. Cretu, Angelos D. Keromytis, Salvatore J. Stolfo
Return Value Predictability Profiles for Self-healing. IWSEC (2008)
Germán Creamer, Ryan Rowe, Shlomo Hershkop, Salvatore J. Stolfo
Segmentation and Automated Social Hierarchy Detection through Email Network Analysis. WebKDD/SNA-KDD (2007)
Wei-Jen Li, Salvatore J. Stolfo, Angelos Stavrou, Elli Androulaki, Angelos D. Keromytis
A Study of Malcode-Bearing Documents. DIMVA (2007)
Yingbo Song, Michael E. Locasto, Angelos Stavrou, Angelos D. Keromytis, Salvatore J. Stolfo
On the infeasibility of modeling polymorphic shellcode. CCS (2007)
Salvatore J. Stolfo, Germán Creamer, Shlomo Hershkop
A temporal based forensic analysis of electronic communication. DG.O (2006)
Janak J. Parekh, Ke Wang, Salvatore J. Stolfo
Privacy-preserving payload-based correlation for accurate malicious traffic detection. LSAD@SIGCOMM (2006)
Suhit Gupta, Hila Becker, Gail E. Kaiser, Salvatore J. Stolfo
Verifying genre-based clustering approach to content extraction. WWW (2006)
Gabriela F. Cretu, Janak J. Parekh, Ke Wang, Salvatore J. Stolfo
Intrusion and anomaly detection model exchange for mobile ad-hoc networks. CCNC (2006)
Salvatore J. Stolfo, Shlomo Hershkop, Chia-Wei Hu, Wei-Jen Li, Olivier Nimeskern, Ke Wang
Behavior-based modeling and its application to Email analysis. ACM Trans. Internet Techn. 6 (2) (2006)
Ke Wang, Janak J. Parekh, Salvatore J. Stolfo
Anagram: A Content Anomaly Detector Resistant to Mimicry Attack. RAID (2006)
Salvatore J. Stolfo, Shlomo Hershkop, Linh H. Bui, Ryan Ferster, Ke Wang
Anomaly Detection in Computer Security and an Application to File System Accesses. ISMIS (2005)
Stelios Sidiroglou, John Ioannidis, Angelos D. Keromytis, Salvatore J. Stolfo
An Email Worm Vaccine Architecture. ISPEC (2005)
Shlomo Hershkop, Salvatore J. Stolfo
Combining email models for false positive reduction. KDD (2005)
Suhit Gupta, Gail E. Kaiser, Salvatore J. Stolfo
Extracting context to improve accuracy for HTML content extraction. WWW (Special interest tracks and posters) (2005)
Salvatore J. Stolfo, Shlomo Hershkop
Email mining toolkit supporting law enforcement forensic analyses. DG.O (2005)
Michael E. Locasto, Ke Wang, Angelos D. Keromytis, Salvatore J. Stolfo
FLIPS: Hybrid Adaptive Intrusion Prevention. RAID (2005)
Ke Wang, Gabriela F. Cretu, Salvatore J. Stolfo
Anomalous Payload-Based Worm Detection and Signature Generation. RAID (2005)
Salvatore J. Stolfo, Frank Apap, Eleazar Eskin, Katherine A. Heller, Shlomo Hershkop, Andrew Honig, Krysta M. Svore
A comparative evaluation of two algorithms for Windows Registry Anomaly Detection. J. Comput. Secur. 13 (4) (2005)
Shlomo Hershkop, Salvatore J. Stolfo
Identifying spam without peeking at the contents. ACM Crossroads 11 (2) (2004)
Wei-Jen Li, Shlomo Hershkop, Salvatore J. Stolfo
Email archive analysis through graphical visualization. VizSEC (2004)
Ke Wang, Salvatore J. Stolfo
Anomalous Payload-Based Network Intrusion Detection. RAID (2004)
Wei Fan, Matthew Miller, Salvatore J. Stolfo, Wenke Lee, Philip K. Chan
Using artificial anomalies to detect unknown and known network intrusions. Knowl. Inf. Syst. 6 (5) (2004)
Salvatore J. Stolfo
Worm and Attack Early Warning. IEEE Secur. Priv. 2 (3) (2004)
Angelos D. Keromytis, Janak J. Parekh, Philip Gross, Gail E. Kaiser, Vishal Misra, Jason Nieh, Dan Rubenstein, Salvatore J. Stolfo
A holistic approach to service survivability. SSRS@CCS (2003)
Salvatore J. Stolfo, Shlomo Hershkop, Ke Wang, Olivier Nimeskern, Chia-Wei Hu
A Behavior-Based Approach to Securing Email Systems. MMM-ACNS (2003)
Seth Robertson, Eric V. Siegel, Matthew Miller, Salvatore J. Stolfo
Surveillance Detection in High Bandwidth Environments. DISCEX (1) (2003)
Salvatore J. Stolfo, Shlomo Hershkop, Ke Wang, Olivier Nimeskern, Chia-Wei Hu
Behavior Profiling of Email. ISI (2003)
Salvatore J. Stolfo, Eric Johnson, Tomislav Pavlicec, Stephen Jan
Citizen's Attitudes about Privacy While Accessing Government and Private Websites: Results of an Online Study. DG.O (2003)
Salvatore J. Stolfo, Shlomo Hershkop, Ke Wang, Olivier Nimeskern
EMT/MET: Systems for Modeling and Detecting Errant Email. DISCEX (2) (2003)
Wei Fan, Haixun Wang, Philip S. Yu, Salvatore J. Stolfo
A Fully Distributed Framework for Cost-Sensitive Data Mining. ICDCS (2002)
Wei Fan, Haixun Wang, Philip S. Yu, Shaw-hwa Lo, Salvatore J. Stolfo
Progressive Modeling. ICDM (2002)
Wenke Lee, Wei Fan, Matthew Miller, Salvatore J. Stolfo, Erez Zadok
Toward Cost-Sensitive Modeling for Intrusion Detection and Response. J. Comput. Secur. 10 (1/2) (2002)

Salvatore J. Stolfo.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Salvatore J. Stolfo