Publications

Conference, journal, and workshop papers

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks

• William Robertson, Giovanni Vigna, Christopher Kruegel, Richard Kemmerer
• Proceedings of the ISOC Network and Distributed System Security Symposium (NDSS)
• February 2006
PDF

Polymorphic Worm Detection Using Structural Information of Executables

• Christopher Kruegel, Engin Kirda, Darren Mutz, William Robertson, Giovanni Vigna
• Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID)
• September 2005
PDF

A Multi-Model Approach to the Detection of Web-based Attacks

• Christopher Kruegel, William Robertson, Giovanni Vigna
• Journal of Computers and Networks 48 (5)
• July 2005
PDF

Automating Mimicry Attacks Using Static Binary Analysis

• Christopher Kruegel, Engin Kirda, Darren Mutz, William Robertson, Giovanni Vigna
• Proceedings of the USENIX Security Symposium
• July 2005
PDF

Reverse Engineering of Network Signatures

• Darren Mutz, Christopher Kruegel, William Robertson, Giovanni Vigna, Richard Kemmerer
• Proceedings of the AusCERT Conference
• May 2005
PDF

Detecting Kernel-Level Rootkits Through Binary Analysis

• Christopher Kruegel, William Robertson, Giovanni Vigna
• Proceedings of the Annual Computer Security Applications Conference (ACSAC)
• December 2004
PDF

Testing Network-based Intrusion Detection Signatures Using Mutant Exploits

• Giovanni Vigna, Davide Balzarotti, William Robertson
• Proceedings of the ACM Conference on Computer and Communications Security (CCS)
• October 2004
PDF

Static Disassembly of Obfuscated Binaries

• Christopher Kruegel, William Robertson, Fredrik Valuer, Giovanni Vigna
• Proceedings of the USENIX Security Symposium
• August 2004
PDF

Using Alert Verification to Identify Successful Intrusion Attempts

• Christopher Kruegel, Giovanni Vigna, William Robertson
• Journal of Practice in Information Processing and Communication 27 (4)
• August 2004
PDF

Alert Verification: Determining the Success of Intrusion Attempts

• Christopher Kruegel, William Robertson
• Proceedings of the Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA)
• July 2004
PDF