 |
|
The Security Lab Seminars are a forum for individual presentations of current research efforts. Both graduate and undergraduate students are welcome to attend. The seclab-seminar mail list will let you know each week what time the talk will start.
We are currently working on the fall seminar schedule. Please contact us if you would like to give a talk.
Previous Seminars
2004
Sept.
22 , 2004 |
Senthil Cheetancheri |
"Automated reasoning in co-operated cyber defense" | |
July
27 , 2004 |
"NVisionIP and VisFlowConnect: Two Interactive Tools for Visualizing Network Flow for Security" | ||
July
9, 2004 |
Dipanker Dasgupta |
"Biological Immune System as a Defense System: Lessons Learned" | [abstract] |
July
7, 2004 |
Matt Bishop |
"Teaching Context in Information Security" | [abstract] |
June
9, 2004 |
Terry Brugger |
"Data Mining for Network Intrusion Detection" | |
May
21 , 2004 |
Philip Chan,
F.I.T. |
"Learning Models for Anomaly Detection" | [abstract] |
May
12 , 2004 |
Yihua Liao |
"Intrusion Detection and Response: A Game Theoretic Perspective" | |
May
5 , 2004 |
Greg Witttel |
"Attacking Statistical Spam Filters" | |
April
28 , 2004 |
Adam Carlson |
"The UCD/Promia Honeynet Project" | [slides] |
April
21 , 2004 |
Jimmy Zhou |
"Using Capability Attack Model for Correlating IDS Alerts" | [slides] |
April
7 , 2004 |
Tom Ristenpart |
"Time Synchronization of Aggregated Heterogeneous Logs" | [slides] |
Mar.
24 , 2004 |
Tye Stallard |
"Fault Tolerance" | [slides] |
Mar.
10 , 2004 |
Todd Heberlein |
"Attack Graphs: Identifying Critical Vulnerabilities Within an Organization" | [slides] |
Feb.
25 , 2004 |
Soon Tee Teoh |
"Three visual ways to improve security" | |
Feb.
11 , 2004 |
Jed Crandall |
"Minos: Architectural Support for Securing Commodity Software" | |
Feb.
4 , 2004 |
Matt Bishop |
"Using Computers to Vote in Elections" | [slides] |
Jan.
21, 2004 |
Ood Limprasittiporn |
"Knowledge Based Route Flap Damping Analysis Tool" | [slides] |
Jan
13, 2004 |
Hervé
Debar |
"Intrusion Alert Correlation and Sensor Architecture" |
2003
Dec.
3 , 2003 |
Brian Toone |
"Trust Models for Distributed Information Systems" | |
Nov.
12, 2003 |
Ebrima Ceesay Melissa Danforth DDai Nojiri |
Discussion of 3 papers | |
Nov.
5 , 2003 |
Dimitri DeFigueiredo |
"MagicThanks - Linking Musicians to their Songs" | |
Oct.
29, 2003 |
Prof. Kyesang Lee |
"An Overview of IKEv2" | [slides] |
Oct.
15, 2003 |
Ivan Balepin |
"Summer Internship at Microsoft" | |
Oct.
8, 2003 |
Raymond Centeno &
Dai Nojiri |
"What I Did This Summer" (internships) |
|
Oct.
1 , 2003 |
Matt Bishop & Jeff
Rowe |
"Securing the Security Lab" | [slides] |
Sept.
24 , 2003 |
Melissa Danforth |
"Adaptive Intrusion Detection" | [abstract] |
Sept.
17 , 2003 |
Matt Bishop |
"Vulnerabilities Analysis" | [abstract] |
Sept.
10 , 2003 |
1. Jimmy Zhou 2. Tao Song |
1. "A Knowledge/Capability Attack Model and its
Application in NIDS Alert Correlation" 2. "Reasoning about Network Intrusion Detection Systems" |
|
Aug.
20 , 2003 |
1. Akshay Aggarwal 2. Na Tang |
1. "EarlyBird : A worm detection system" |
|
July
30, 2003 |
1. Poornima Balasubramanyam
& 2. Henry Tseng |
1. "An Overview of Security Challenges in Mobile
Adhoc Networks" 2. "A Specification-Based Intrusion Detection System for AODV" |
[slides] [slides] |
July
23, 2003 |
Todd Heberlein |
||
July
9, 2003 |
Tao Song |
"Formal reasoning detection rules of specification-based IDS" | |
May
28 , 2003 |
Souhwan Jung |
"Security standards for Internet multimedia communications and their impact on QoS" | [abstract] |
May
7 , 2003 |
Mark Heckman |
"Requires/Provides Predicates for Clustering Alerts in a Commercial IDS" | |
April
17, 2003 |
Dan Massey |
"Securing the Domain Name System: Protocol Design and Lessons Learned" | |
April
2, 2003 |
Fan Zhao |
"RBWA: An Efficient Random-Bit Window-based Authentication Protocol" | |
Mar.
12 , 2003 |
Soon Tee Teoh |
"Visualization Tools for BGP Stability Analysis" | [abstract] |
Mar.
5 , 2003 |
Tao Song |
"Verification of Intrusion Detection Systems" | [slides] |
| Feb.
26 , 2003 |
Nick Weaver -
Silicon Defense |
"How Many Ways to Own the Internet: Towards Viable Worm Defenses" |
|
| Feb.
19 , 2003 |
Ke Zhang |
"On Detection of Anomalous Routing Dynamics in BGP" | |
| Feb.
12 , 2003 |
Fiona Wong |
"TCPopera" | |
| Jan.
29, 2003 |
Eric Haugh |
"Testing C Programs for Buffer Overflow Vulnerabilities" | |
| Jan.
22, 2003 |
Harald Held |
"A Decomposition Algorithm for Planning the Interdiction of Stochastic Networks" | |
| Jan.
15, 2003 |
Vicentiu Neagoe |
"Using Deception for Computer Information Security" | [slides] |
2002
| Dec.
4, 2002 |
Steven Templeton |
"Anomaly Assessment of IDS Alerts" | [abstract] |
| Nov.
20 , 2002 |
Wes Hygaki - Symantec |
"Internet Security – An Industry Perspective" | |
| Nov.
13 , 2002 |
Glen Nuckolls |
"Certifying Data from Multiple Sources: Making Price Comparison Honest" | [abstract]
[slides pdf] |
| Nov.
6 , 2002 |
Jedidiah Crandall |
"Hiding Patterns in IP Address Allocation to Prevent the Rapid Spread of Internet Worms" | |
| Oct.
30, 2002 |
Matt Bishop |
"Electronic Recordation" | [slides] |
| Oct.
23, 2002 |
Marcus Tylutki |
"Mitigating Distributed Denial of Service Attacks Using a Proportional-Integral-Derivative Controller" | |
| Oct.
16, 2002 |
Guillermo Marro |
"Vulnerabilities in Some Data Link Layer Protocols" | |
| Oct.
9, 2002 |
Tye Stallard |
"Automated Analysis for Computer Forensics" | [abstract] [pdf] [sxi slides] |
| Oct.
2, 2002 |
Jeff Rowe &
Felix Wu |
Overview of research topics and projects in security lab | |
| Sept.
4, 2002 |
Yihua Liao |
"Machine Learning Techniques for Mitigating Insider Threat" | |
| July
17, 2002 |
Brennen Reynolds |
"Deploying IP Telephony in an Enterprise
and the Vulnerabilities that Come With It" |
|
| June
19, 2002 |
Dennis Heimbigner |
"A Pie of P-Baked Security Ideas" | |
| May
29 , 2002 |
Steven Templeton |
"Detecting Spoofed Packets" | [slides] |
| May
15 , 2002 |
Marcus Tylutki |
"A Model to Determine and Configure Sensor Coverage" | |
| May
8 , 2002 |
David Peterson |
"A Flexible Containment Mechanism for Executing Untrusted Code" | |
| Apr.
24, 2002 |
Dennis Heimbigner |
A Tamper-Resistant Programming Language | |
| Apr.
17, 2002 |
Melissa Danforth |
"Immune System Model for Detecting Web Server Attacks" | [slides] |
| Apr.
10, 2002 |
Felix Wu |
"MOAS Attacks on BGP" | |
| Mar.
13, 2002 |
Edouard Bugnion
(VMWare) |
"Building Security Solutions Using Virtual Machines" | [abstract.pdf]
[slides] |
| Mar.
6, 2002 |
Jeff Rowe |
"An Overview of Intrusion Detection" | [slides] |
| Feb.
27, 2002 |
David Blank,
Christina Chung (Verity) |
"Knowledge Management Tools for Intrusion Detection" | [slides] |
| Feb.
20, 2002 |
Yihua Liao |
"Learning Program Behavior for Intrusion Detection" | [abstract.pdf]
[slides] |
| Feb.
13, 2002 |
Dennis Heimbigner |
"Intrusion Management Using Architecture and Configuration Models". | [slides] |
| Feb.
6, 2002 |
Karl
Levitt |
"Initial Thoughts Toward a Major R&D Effort for Critical Infrastructure Protection" | |
| Jan.
30, 2002 |
Khaled
Labib |
"Real-Time Network-Based Intrusion Detection Using Self-Organizing Maps" | |
| Jan.
23, 2002 |
Mark
Heckman |
'Formal Methods in Computer Security? The Very Idea!" | |
| Jan.
9, 2002 |
Todd
Heberlein |
Storyteller |
2001
| Dec.
5, 2001 |
Dennis
Heimbigner |
Bend, Don't Break: Using Reconfiguration to Achieve Survivability | [abstract
pdf] [slides] |
| Nov.
14, 2001 |
Steven Templeton |
A "Jigsaw" based distributed IDS |
|
| Nov.
7, 2001 |
Tye
Stallard |
Data Forensics: Analyzing the Tracks of an Intruder | |
| Oct.
31, 2001 |
Matt
Bishop |
Security Properties, Vulnerabilities and Sanitization | |
| Oct.
24, 2001 |
Ricardo Anguiano
|
A Static Analysis Technique for the Detection of TOCTTOU Vulnerabilities | |
| Oct.
17, 2001 |
Jim
Alves-Foss |
A Distributed Firewall Architecture | |
| Oct.
3, 2001 |
|
Organization Meeting |
2000
| April
12, 2000 |
Karl Levitt |
Organization Meeting | Notes |
1999
| Sept.
1, 1999 |
Matt Bishop |
Vulnerabilities Analysis |
PowerPoint me/wwwresearch/seclab/images File |
| June
30, 1999 |
Round Robin |
Seclab Research Update |
|
| June
9, 1999 |
|
TBA |
|
| June
2, 1999 |
|
Corporate Network Security Policies
|
|
| May
26, 1999 |
|
Automated Response |
|
| May
19, 1999 |
|
The Eternity Service |
|
| THURSDAY
May 13, 1999 |
|
Protecting Domain Name Systems
(DNS) |
Slides PS/PDF) |
| May
5, 1999 |
|
User Profiling in Relational Database
Systems |
|
| April
28, 1999 |
|
SCIPAD |
|
| April
21, 1999 |
|
Future of Security Lab |
|
| April
14, 1999 |
|
Models for User Profiling |
|
| March
17, 1999 |
|
Organizational Seminar for Spring
Quarter |
|
| March
10, 1999 |
|
|
|
| March
3, 1999 |
|
Linden Paper: "Operating
System Structures to Support Security and Reliable Software"
(Paper) |
(Slides) |
| February
3, 1999 |
|
Stacks and Queues on Hostile Platforms |
|
| January
27, 1999 |
|
Karger Paper: "MULTICS
Security Evaluation: Vulnerability Analysis" (Paper) |
|
| January
20, 1999 |
|
ADAGE |
(Slides) |
| January
13, 1999 |
|
Organizational Meeting |
|
1998
| |
|
Malicious Code | |
| |
|
Discussion of recruiting efforts for the Security Lab | |
| |
|
Response to Attacks | |
| |
|
Firewalls-Do they really work? | |
| |
|
Mobile Code | |
| |
|
Authentication Schemes | |
| |
|
Key Management | |
| |
|
- | |
| |
|
Policy | |
| |
|
green eggs and SPAM | |
| |
|
"Do Intrusion Detection Systems really work?" | |
| |
|
SSH - Secure Shell along with S/Key | |
| |
|
Computer Security Game Show | |
| |
|
Discussion of Commercial Intrusion Detection Systems | |
| |
|
Discussion of Mobile Programs | |
| |
|
"Is monitoring ethical?" | |
| |
|
Take-Grant Protection Model | |
| |
|
Current Events | |
| |
|
Medical Informatics | |
| |
|
Organizational Meeting | |
| |
|
WATCHERS - Detecting Disruptive Routers: A Distributed Network | |
| |
|
Anderson Reports: "Computer Security Technology Planning Study" (Paper) and "Computer Security Threat Monitoring and Surveillance" (Paper) | |
| |
|
Bell Paper: "Secure Computer System: Unified Exposition and Multics Interpretation" (Paper) | |
| |
|
Myers Paper: "Subversion: The Neglected Aspect of Computer Security" (Paper) | |
| |
|
The Solar Trust Model: Authentication without Limitation | |
| |
|
Delegation of Certificates | |
General Principal of Security: Be paranoid!