Xinming Ou

Publication Activity (10 Years)

Years Active: 2000-2024
Publications (10 Years): 29

Top Topics

Security Analysis

Malware Detection

Moving Target Defense

Top Venues

Publications

Shashwat Kumar, Francis Hahn, Xinming Ou, Dmitry B. Goldgof, Lawrence O. Hall, Jay Ligatti, S. Raj Rajagopalan, Armin Ziaie Tabari
A Preliminary Study on Using Large Language Models in Software Pentesting. CoRR (2024)
Armin Ziaie Tabari, Guojun Liu, Xinming Ou, Anoop Singhal
Revealing Human Attacker Behaviors Using an Adaptive Internet of Things Honeypot Ecosystem. IFIP Int. Conf. Digital Forensics (2023)
Shashwat Kumar, Francis Hahn, Xinming Ou, Anoop Singhal
Security Analysis of Trust on the Controller in the Matter Protocol Specification. CNS (2023)
Soumyadeep Hore, Fariha Moomtaheen, Ankit Shah, Xinming Ou
Towards Optimal Triage and Mitigation of Context-Sensitive Cyber Vulnerabilities. IEEE Trans. Dependable Secur. Comput. 20 (2) (2023)
Anwesh Tuladhar, Daniel Lende, Jay Ligatti, Xinming Ou
An Analysis of the Role of Situated Learning in Starting a Security Culture in a Software Company. SOUPS @ USENIX Security Symposium (2021)
Armin Ziaie Tabari, Xinming Ou, Anoop Singhal
What are Attackers after on IoT Devices? An approach based on a multi-phased multi-faceted IoT honeypot ecosystem and data clustering. CoRR (2021)
Xiaodong Yu, Fengguo Wei, Xinming Ou, Michela Becchi, Tekin Bicer, Danfeng Daphne Yao
GPU-Based Static Data-Flow Analysis for Fast and Scalable Android App Vetting. IPDPS (2020)
Yuping Li, Jiyong Jang, Xinming Ou
Topology-Aware Hashing for Effective Control Flow Graph Similarity Analysis. CoRR (2020)
Armin Ziaie Tabari, Xinming Ou
A Multi-phased Multi-faceted IoT Honeypot Ecosystem. CCS (2020)
Armin Ziaie Tabari, Xinming Ou
A First Step Towards Understanding Real-world Attacks on IoT Devices. CoRR (2020)
Dewan Chaulagain, Prabesh Poudel, Prabesh Pathak, Sankardas Roy, Doina Caragea, Guojun Liu, Xinming Ou
Hybrid Analysis of Android Apps for Security Vetting using Deep Learning. CNS (2020)
Hernan M. Palombo, Armin Ziaie Tabari, Daniel Lende, Jay Ligatti, Xinming Ou
An Ethnographic Understanding of Software (In)Security and a Co-Creation Model to Improve Secure Software Development. SOUPS @ USENIX Security Symposium (2020)
Yuping Li, Jiyong Jang, Xinming Ou
Topology-Aware Hashing for Effective Control Flow Graph Similarity Analysis. SecureComm (1) (2019)
Fengguo Wei, Sankardas Roy, Xinming Ou, Robby
Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps. ACM Trans. Priv. Secur. 21 (3) (2018)
Alexander Paulsen, Anis Yazidi, Boning Feng, Xinming Ou
A Population-Based Incremental Learning Approach to Network Hardening. SoMeT (2018)
Yaohui Chen, Yuping Li, Long Lu, Yueh-Hsun Lin, Hayawardh Vijayakumar, Zhi Wang, Xinming Ou
InstaGuard: Instantly Deployable Hot-patches for Vulnerable System Programs on Android. NDSS (2018)
Fengguo Wei, Xingwei Lin, Xinming Ou, Ting Chen, Xiaosong Zhang
JN-SAF: Precise and Efficient NDK/JNI-aware Inter-language Static Analysis Framework for Security Vetting of Android Applications with Native Code. CCS (2018)
Yuping Li, Jiyong Jang, Xin Hu, Xinming Ou
Android Malware Clustering through Malicious Payload Mining. CoRR (2017)
Fengguo Wei, Yuping Li, Sankardas Roy, Xinming Ou, Wu Zhou
Deep Ground Truth Analysis of Current Android Malware. DIMVA (2017)
Jordan DeLoach, Doina Caragea, Xinming Ou
Android Malware Detection with Weak Ground Truth Data. AAAI (2017)
Yuping Li, Jiyong Jang, Xin Hu, Xinming Ou
Android Malware Clustering Through Malicious Payload Mining. RAID (2017)
Alexandru G. Bardas, Sathya Chandran Sundaramurthy, Xinming Ou, Scott A. DeLoach
MTD CBITS: Moving Target Defense for Cloud-Based IT Systems. ESORICS (1) (2017)
Sathya Chandran Sundaramurthy, Michael Wesch, Xinming Ou, John McHugh, S. Raj Rajagopalan, Alexandru G. Bardas
Humans Are Dynamic - Our Tools Should Be Too. IEEE Internet Comput. 21 (3) (2017)
Xiaolong Wang, Richard Habeeb, Xinming Ou, Siddharth Amaravadi, John Hatcliff, Masaaki Mizuno, Mitchell L. Neilsen, S. Raj Rajagopalan, Srivatsan Varadarajan
Enhanced Security of Building Automation Systems Through Microkernel-Based Controller Platforms. ICDCS Workshops (2017)
Hamed Okhravi, Xinming Ou
MTD 2017: Fourth ACM Workshop on Moving Target Defense (MTD). CCS (2017)
Jordan DeLoach, Doina Caragea, Xinming Ou
Android malware detection with weak ground truth data. IEEE BigData (2016)
Xinming Ou
A Bottom-Up Approach to Applying Graphical Models in Security Analysis. GraMSec@CSF (2016)
Sathya Chandran Sundaramurthy, John McHugh, Xinming Ou, Michael Wesch, Alexandru G. Bardas, S. Raj Rajagopalan
Turning Contradictions into Innovations or: How We Learned to Stop Whining and Improve Security Operations. SOUPS (2016)
Hussain M. J. Almohri, Layne T. Watson, Danfeng Yao, Xinming Ou
Security Optimization of Dynamic Networks with Probabilistic Graph Modeling and Linear Programming. IEEE Trans. Dependable Secur. Comput. 13 (4) (2016)
Justin Paupore, Earlence Fernandes, Atul Prakash, Sankardas Roy, Xinming Ou
Practical Always-on Taint Tracking on Mobile Devices. HotOS (2015)
Su Zhang, Xinwen Zhang, Xinming Ou, Liqun Chen, Nigel Edwards, Jing Jin
Assessing Attack Surface with Component-Based Package Dependency. NSS (2015)
Sankardas Roy, Jordan DeLoach, Yuping Li, Nic Herndon, Doina Caragea, Xinming Ou, Venkatesh Prasad Ranganath, Hongmin Li, Nicolais Guevara
Experimental Study with Real-world Data for Android App Security Analysis using Machine Learning. ACSAC (2015)
Sathya Chandran Sundaramurthy, Alexandru G. Bardas, Jacob Case, Xinming Ou, Michael Wesch, John McHugh, S. Raj Rajagopalan
A Human Capital Model for Mitigating Security Analyst Burnout. SOUPS (2015)
Xiaolong Wang, Masaaki Mizuno, Mitchell L. Neilsen, Xinming Ou, S. Raj Rajagopalan, Will G. Boldwin, Bryan Phillips
Secure RTOS Architecture for Building Automation. CPS-SPC@CCS (2015)
Rui Zhuang, Alexandru G. Bardas, Scott A. DeLoach, Xinming Ou
A Theory of Cyber Attacks: A Step Towards Analyzing MTD Systems. MTD@CCS (2015)
Su Zhang, Xinming Ou, Doina Caragea
Predicting Cyber Risks through National Vulnerability Database. Inf. Secur. J. A Glob. Perspect. 24 (4-6) (2015)
Fengguo Wei, Sankardas Roy, Xinming Ou, Robby
Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps. CCS (2014)
Su Zhang, Xinwen Zhang, Xinming Ou
After we knew it: empirical study and modeling of cost-effectiveness of exploiting prevalent known vulnerabilities across IaaS cloud. AsiaCCS (2014)
Rui Zhuang, Scott A. DeLoach, Xinming Ou
A model for analyzing the effect of moving target defenses on enterprise networks. CISR (2014)
Ian Unruh, Alexandru G. Bardas, Rui Zhuang, Xinming Ou, Scott A. DeLoach
Compiling Abstract Specifications into Concrete Systems - Bringing Order to the Cloud. LISA (2014)
Rui Zhuang, Scott A. DeLoach, Xinming Ou
Towards a Theory of Moving Target Defense. MTD@CCS (2014)
Loai Zomlot, Sathya Chandran Sundaramurthy, Doina Caragea, Xinming Ou
Aiding Intrusion Analysis Using Machine Learning. ICMLA (2) (2013)
Justin Yackoski, Jason H. Li, Scott A. DeLoach, Xinming Ou
Mission-oriented moving target defense based on cryptographically strong network dynamics. CSIIRW (2013)
John Homer, Su Zhang, Xinming Ou, David Schmidt, Yanhui Du, S. Raj Rajagopalan, Anoop Singhal
Aggregating vulnerability metrics in enterprise networks using attack graphs. J. Comput. Secur. 21 (4) (2013)
Torben Amtoft, Josiah Dodds, Zhi Zhang, Andrew W. Appel, Lennart Beringer, John Hatcliff, Xinming Ou, Andrew Cousino
A Certificate Infrastructure for Machine-Checked Proofs of Conditional Information Flow. POST (2012)
Dan Moor, Siva Raj Rajagopalan, Sathya Chandran Sundaramurthy, Xinming Ou
Investigative response modeling and predictive data collection. eCrime Researchers Summit (2012)
Alexandru G. Bardas, Loai Zomlot, Sathya Chandran Sundaramurthy, Xinming Ou, S. Raj Rajagopalan, Marc R. Eisenbarth
Classification of UDP Traffic for DDoS Detection. LEET (2012)
Su Zhang, Doina Caragea, Xinming Ou
An Empirical Study on Using the National Vulnerability Database to Predict Software Vulnerabilities. DEXA (1) (2011)
Heqing Huang, Su Zhang, Xinming Ou, Atul Prakash, Karem A. Sakallah
Distilling critical attack graph surface iteratively through minimum-cost SAT solving. ACSAC (2011)
Loai Zomlot, Sathya Chandran Sundaramurthy, Kui Luo, Xinming Ou, Siva Raj Rajagopalan
Prioritizing intrusion analysis using Dempster-Shafer theory. AISec (2011)
Scott A. DeLoach, Xinming Ou, Rui Zhuang, Su Zhang
Model-driven, Moving-Target Defense for Enterprise Network Security. Models@run.time@Dagstuhl (2011)
Su Zhang, Xinming Ou, John Homer
Effective Network Vulnerability Assessment through Model Abstraction. DIMVA (2011)
Peng Xie, Jason H. Li, Xinming Ou, Peng Liu, Renato Levy
Using Bayesian networks for cyber security analysis. DSN (2010)
John Homer, Xinming Ou
SAT-solving approaches to context-aware enterprise network security management. IEEE J. Sel. Areas Commun. 27 (3) (2009)
Xinming Ou, Siva Raj Rajagopalan, Sakthiyuvaraja Sakthivelmurugan
An Empirical Approach to Modeling Uncertainty in Intrusion Analysis. ACSAC (2009)
Anoop Singhal, Xinming Ou
Techniques for enterprise network security metrics. CSIIRW (2009)
John Homer, Ashok Varikuti, Xinming Ou, Miles A. McQueen
Improving Attack Graph Visualization through Data Reduction and Attack Grouping. VizSEC (2008)
Reginald E. Sawilla, Xinming Ou
Identifying Critical Attack Assets in Dependency Attack Graphs. ESORICS (2008)
Xinming Ou, Wayne F. Boyer, Miles A. McQueen
A scalable approach to attack graph generation. CCS (2006)
Xinming Ou, Sudhakar Govindavajhala, Andrew W. Appel
MulVAL: A Logic-based Network Security Analyzer. USENIX Security Symposium (2005)
K. Rustan M. Leino, Madan Musuvathi, Xinming Ou
A Two-Tier Technique for Supporting Quantifiers in a Lazily Proof-Explicating Theorem Prover. TACAS (2005)
Xinming Ou, Gang Tan, Yitzhak Mandelbaum, David Walker
Dynamic Typing with Dependent Types. IFIP TCS (2004)
Cormac Flanagan, Rajeev Joshi, Xinming Ou, James B. Saxe
Theorem Proving Using Lazy Proof Explication. CAV (2003)
Wei Liu, Min Wu, Xinming Ou, Weimin Zheng, Meiming Shen
Design of an I/O Balancing File System on Web Server Clusters. ICPP Workshops (2000)
Wei Liu, Weimin Zheng, Meiming Shen, Xinming Ou, Min Wu
An Effective File Migration Algorithm in Cluster File Systems. ICPP Workshops (2000)