Sergey Bratus

Publication Activity (10 Years)

Years Active: 1999-2020
Publications (10 Years): 14

Top Topics

Formal Language Theory

Security Requirements

Intrusion Detection

Top Venues

IEEE Secur. Priv.

login Usenix Mag.

Publications

Ira Ray Jenkins, Prashant Anantharaman, Rebecca Shapiro, J. Peter Brady, Sergey Bratus, Sean W. Smith
Ghostbusting: mitigating spectre with intraprocess memory isolation. HotSoS (2020)
Vijay H. Kothari, Prashant Anantharaman, Ira Ray Jenkins, Michael C. Millian, J. Peter Brady, Sameed Ali, Sergey Bratus, Jim Blythe, Ross Koppel, Sean W. Smith
Human-Computability Boundaries. Security Protocols Workshop (2019)
J. Peter Brady, Sergey Bratus, Sean W. Smith
Dynamic Repair of Mission-Critical Applications with Runtime Snap-Ins. Critical Infrastructure Protection (2019)
Prashant Anantharaman, Vijay H. Kothari, J. Peter Brady, Ira Ray Jenkins, Sameed Ali, Michael C. Millian, Ross Koppel, Jim Blythe, Sergey Bratus, Sean W. Smith
Mismorphism: The Heart of the Weird Machine. Security Protocols Workshop (2019)
Michael C. Millian, Prashant Anantharaman, Sergey Bratus, Sean W. Smith, Michael E. Locasto
Converting an Electric Power Utility Network to Defend Against Crafted Inputs. Critical Infrastructure Protection (2019)
Ira Ray Jenkins, Sergey Bratus, Sean W. Smith, Maxwell Koo
Reinventing the privilege drop: how principled preservation of programmer intent would prevent security bugs. HotSoS (2018)
Prashant Anantharaman, Kartik Palani, Rafael Brantley, Galen Brown, Sergey Bratus, Sean W. Smith
PhasorSec: Protocol Security Filters for Wide Area Measurement Systems. SmartGridComm (2018)
Peter C. Johnson, Sergey Bratus, Sean W. Smith
Protecting Against Malicious Bits On the Wire: Automatically Generating a USB Protocol Parser for a Production Kernel. ACSAC (2017)
Prashant Anantharaman, Michael C. Millian, Sergey Bratus, Meredith L. Patterson
Input Handling Done Right: Building Hardened Parsers Using Language-Theoretic Security. SecDev (2017)
Sergey Bratus, Anna Shubina
Exploitation as code reuse: On the need of formalization. it Inf. Technol. 59 (2) (2017)
Sergey Bratus, Lars Hermerschmidt, Sven M. Hallberg, Michael E. Locasto, Falcon Momot, Meredith L. Patterson, Anna Shubina
Curing the Vulnerable Parser: Design Patterns for Secure Input Handling. login Usenix Mag. 42 (1) (2017)
Falcon Momot, Sergey Bratus, Sven M. Hallberg, Meredith L. Patterson
The Seven Turrets of Babel: A Taxonomy of LangSec Errors and How to Expunge Them. SecDev (2016)
Sergey Bratus, Travis Goodspeed, Ange Albertini, Debanjum S. Solanky
Fillory of PHY: Toward a Periodic Table of Signal Corruption Exploits and Polyglots in Digital Radio. WOOT (2016)
Sergey Bratus, J. Adam Crain, Sven M. Hallberg, Daniel P. Hirsch, Meredith L. Patterson, Maxwell Koo, Sean W. Smith
Implementing a vertically hardened DNP3 control stack for power applications. ICSS (2016)
J. Adam Crain, Sergey Bratus
Bolt-On Security Extensions for Industrial Control System Protocols: A Case Study of DNP3 SAv5. IEEE Secur. Priv. 13 (3) (2015)
Sergey Bratus, Meredith L. Patterson, Anna Shubina
The Bugs We Have to Kill. login Usenix Mag. 40 (4) (2015)
Ira Ray Jenkins, Rebecca Shapiro, Sergey Bratus, Travis Goodspeed, Ryan Speers, David Dowd
Short paper: speaking the local dialect: exploiting differences between ieee 802.15.4 receivers with commodity radios for fingerprinting, targeted attacks, and wids evasion. WISEC (2014)
Sergey Bratus, Michael E. Locasto, Anna Shubina
Why Wassenaar Arrangement's Definitions of "Intrusion Software" and "Controlled Items" Put Security Research and Defense At Risk. login Usenix Mag. 39 (4) (2014)
Keren Tan, Chris McDonald, Bennet Vance, Chrisil Arackaparambil, Sergey Bratus, David Kotz
From MAP to DIST: The Evolution of a Large-Scale WLAN Monitoring System. IEEE Trans. Mob. Comput. 13 (1) (2014)
Sergey Bratus, Trey Darley, Michael E. Locasto, Meredith L. Patterson, Rebecca Shapiro, Anna Shubina
Beyond Planted Bugs in "Trusting Trust": The Input-Processing Frontier. IEEE Secur. Priv. 12 (1) (2014)
Samuel Junjie Tan, Sergey Bratus, Travis Goodspeed
Interrupt-oriented bugdoor programming: a minimalist approach to bugdooring embedded systems firmware. ACSAC (2014)
Sergey Bratus, Iván Arce, Michael E. Locasto, Stefano Zanero
Why Offensive Security Needs Engineering Textbooks: Or, How to Avoid a Replay of "Crypto Wars" in Security Research. login Usenix Mag. 39 (4) (2014)
Julian Bangert, Sergey Bratus, Rebecca Shapiro, Sean W. Smith
The Page-Fault Weird Machine: Lessons in Instruction-less Computation. WOOT (2013)
Rebecca Shapiro, Sergey Bratus, Sean W. Smith
"Weird Machines" in ELF: A Spotlight on the Underappreciated Metadata. WOOT (2013)
Len Sassaman, Meredith L. Patterson, Sergey Bratus, Michael E. Locasto
Security Applications of Formal Language Theory. IEEE Syst. J. 7 (3) (2013)
Sergey Bratus, Anna Shubina
Avoiding a War on Unauthorized Computation. IEEE Secur. Priv. 11 (2) (2013)
Jason Reeves, Ashwin Ramaswamy, Michael E. Locasto, Sergey Bratus, Sean W. Smith
Intrusion detection for resource-constrained embedded control systems in the power grid. Int. J. Crit. Infrastructure Prot. 5 (2) (2012)
Chrisil Arackaparambil, Guanhua Yan, Sergey Bratus, Alper Caglayan
On Tuning the Knobs of Distribution-Based Methods for Detecting VoIP Covert Channels. HICSS (2012)
Travis Goodspeed, Sergey Bratus, Ricky Melgares, Ryan Speers, Sean W. Smith
Api-do: Tools for Exploring the Wireless Attack Surface in Smart Meters. HICSS (2012)
Len Sassaman, Meredith L. Patterson, Sergey Bratus
A Patch for Postel's Robustness Principle. IEEE Secur. Priv. 10 (2) (2012)
Sergey Bratus, Anna Rumshisky, Alexy Khrabrov, Rajendra Magar, Paul Thompson
Domain-specific entity extraction from noisy, unstructured data using ontology-guided search. Int. J. Document Anal. Recognit. 14 (2) (2011)
Jason Reeves, Ashwin Ramaswamy, Michael E. Locasto, Sergey Bratus, Sean W. Smith
Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems. Critical Infrastructure Protection (2011)
James Oakley, Sergey Bratus
Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code. WOOT (2011)
John F. Williamson, Sergey Bratus, Michael E. Locasto
Using Active Intrusion Detection to Recover Network Trust. LISA (2011)
Len Sassaman, Meredith L. Patterson, Sergey Bratus, Anna Shubina
The Halting Problems of Network Stack Insecurity. login Usenix Mag. 36 (6) (2011)
Travis Goodspeed, Sergey Bratus, Ricky Melgares, Rebecca Shapiro, Ryan Speers
Packets in Packets: Orson Welles' In-Band Signaling Attacks for Modern Radios. WOOT (2011)
Gabriel A. Weaver, Nicholas J. Foti, Sergey Bratus, Daniel N. Rockmore, Sean W. Smith
Using Hierarchical Change Mining to Manage Network Security Policy Evolution. Hot-ICE (2011)
Rebecca Shapiro, Sergey Bratus, Edmond Rogers, Sean W. Smith
Identifying Vulnerabilities in SCADA Systems via Fuzz-Testing. Critical Infrastructure Protection (2011)
Sergey Bratus, Michael E. Locasto, Meredith L. Patterson, Len Sassaman, Anna Shubina
Exploit Programming: From Buffer Overflows to "Weird Machines" and Theory of Computation. login Usenix Mag. 36 (6) (2011)
Sergey Bratus, Michael E. Locasto, Brian Schulte
SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms. TRUST (2010)
Sergey Bratus, Michael E. Locasto, Ashwin Ramaswamy, Sean W. Smith
VM-based security overkill: a lament for applied systems security research. NSPW (2010)
Sergey Bratus, Anna Shubina, Michael E. Locasto
Teaching the principles of the hacker curriculum to undergraduates. SIGCSE (2010)
Chrisil Arackaparambil, Sergey Bratus, Anna Shubina, David Kotz
On the reliability of wireless fingerprinting using clock skews. WISEC (2010)
Anna Shubina, Sergey Bratus, Wyllys Ingersol, Sean W. Smith
The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris. STC@CCS (2010)
Ashwin Ramaswamy, Sergey Bratus, Sean W. Smith, Michael E. Locasto
Katana: A Hot Patching Framework for ELF Executables. ARES (2010)
Sergey Bratus, James Oakley, Ashwin Ramaswamy, Sean W. Smith, Michael E. Locasto
Katana: Towards Patching as a Runtime Part of the Compiler-Linker-Loader Toolchain. Int. J. Secur. Softw. Eng. 1 (3) (2010)
Chrisil Arackaparambil, Sergey Bratus, Joshua Brody, Anna Shubina
Distributed monitoring of conditional entropy for anomaly detection in streams. IPDPS Workshops (2010)
Gregory J. Conti, Sergey Bratus, Anna Shubina, Benjamin Sangster, Roy Ragsdale, Matthew Supan, Andrew Lichtenberg, Robert Perez-Alemany
Automated mapping of large binary objects using primitive fragment type classification. Digit. Investig. 7 (Supplement) (2010)
Sergey Bratus, Ashlyn Lembree, Anna Shubina
Software on the Witness Stand: What Should It Take for Us to Trust It? TRUST (2010)
Sergey Bratus, Anna Rumshisky, Rajendra Magar, Paul Thompson
Using domain knowledge for ontology-guided entity extraction from noisy, unstructured text data. AND (2009)
Sergey Bratus, David Kotz, Keren Tan, William Taylor, Anna Shubina, Bennet Vance, Michael E. Locasto
Dartmouth Internet Security Testbed (DIST): Building a Campus-wide Wireless Testbed. CSET (2009)
Michael E. Locasto, Sergey Bratus, Brian Schulte
Bickering In-Depth: Rethinking the Composition of Competing Security Systems. IEEE Secur. Priv. 7 (6) (2009)
Sergey Bratus, Peter C. Johnson, Ashwin Ramaswamy, Sean W. Smith, Michael E. Locasto
The cake is a lie: privilege rings as a policy resource. VMSec@CCS (2009)
Sergey Bratus, Axel Hansen, Fabio Pellacini, Anna Shubina
Backhoe, a Packet Trace and Log Browser. VizSEC (2008)
Sergey Bratus, Cory Cornelius, David Kotz, Daniel Peebles
Active behavioral fingerprinting of wireless devices. WISEC (2008)
Sergey Bratus, Nihal D'Cunha, Evan R. Sparks, Sean W. Smith
TOCTOU, Traps, and Trusted Computing. TRUST (2008)
Sergey Bratus, Michael E. Locasto, Ashwin Ramaswamy, Sean W. Smith
Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security. VMSec (2008)
Sergey Bratus, Joshua Brody, David Kotz, Anna Shubina
Streaming Estimation of Information-Theoretic Metrics for Anomaly Detection (Extended Abstract). RAID (2008)
Sergey Bratus, Chris Masone, Sean W. Smith
Why Do Street-Smart People Do Stupid Things Online? IEEE Secur. Priv. 6 (3) (2008)
Sergey Bratus, Alex Ferguson, Doug McIlroy, Sean W. Smith
Pastures: Towards Usable Security Policy Engineering. ARES (2007)
Sergey Bratus
Hacker Curriculum : How Hackers Learn Networking. IEEE Distributed Syst. Online 8 (10) (2007)
Sergey Bratus
What Hackers Learn that the Rest of Us Don't: Notes on Hacker Curriculum. IEEE Secur. Priv. 5 (4) (2007)
Sergey Bratus, Christopher Masone
Hacker Curriculum: How We Can Use It in Teaching. IEEE Distributed Syst. Online 8 (11) (2007)
Javed A. Aslam, Sergey Bratus, Virgiliu Pavlu
Semi-supervised Data Organization for Interactive Anomaly Analysis. ICMLA (2006)
George Bakos, Sergey Bratus
Ubiquitous Redirection as Access Control Response. PST (2005)
Javed A. Aslam, Sergey Bratus, David Kotz, Ronald A. Peterson, Brett Tofel, Daniela Rus
The Kerf Toolkit for Intrusion Analysis. IEEE Secur. Priv. 2 (6) (2004)
Javed A. Aslam, Sergey Bratus, David Kotz, Ronald A. Peterson, Daniela Rus, Brett Tofel
The Kerf toolkit for intrusion analysis. IAW (2003)
Scott Miller, Sergey Bratus, Lance A. Ramshaw, Ralph M. Weischedel, Alex Zamanian
FactBrowser Demonstration. HLT (2001)
Lance A. Ramshaw, Elizabeth Boschee, Sergey Bratus, Scott Miller, Rebecca Stone, Ralph M. Weischedel, Alex Zamanian
Experiments in Multi-Modal Automatic Content Extraction. HLT (2001)
Sergey Bratus, Igor Pak
Fast Constructive Recognition of a Black Box Group Isomorphic to Sn or An using Goldbach's Conjecture. J. Symb. Comput. 29 (1) (2000)
Igor Pak, Sergey Bratus
On Sampling Generating Sets of Finite Groups and Product Replacement Algorithm (extended abstract). ISSAC (1999)