Source: https://angelosk.github.io/cv.html
Timestamp: 2019-04-20 03:07:57+00:00

Document:
DARPA Superior Public Service Medal, December 2018.
DARPA Results Matter award, October 2018.
ACM Distinguished Scientist, 2012 onward.
Associate Editor, Encyclopedia of Cryptography and Security (2nd Edition), Springer, 2010 - 2011.
Associate Editor, IET (formerly IEE) Proceedings Information Security, 2005 - 2010.
Steering Committee, ISOC Symposium on Network and Distributed System Security (SNDSS), 2006 - 2009.
Steering Committee, New Security Paradigms Workshop (NSPW), 2007 onward.
Associate Editor, ACM Transactions on Information and System Security (TISSEC), 2004 - 2010.
Steering Committee, USENIX Workshop on Hot Topics in Security (HotSec), 2006 - 2009.
Steering Committee, Computer Security Architecture Workshop (CSAW), 2007 - 2009.
Program co-Chair, 8th International ICST Conference on Security and Privacy in Communication Networks (SecureComm), 2012.
Program Chair, 16th International Conference on Financial Cryptography and Data Security (FC), 2012.
Program co-Chair, 17th ACM Computer and Communication Security (CCS), 2010.
Program co-Chair, 16th ACM Computer and Communication Security (CCS), 2009.
Program co-Chair, New Security Paradigms Workshop (NSPW), 2008.
Program co-Chair, New Security Paradigms Workshop (NSPW), 2007.
Chair, 27th International Conference on Distributed Computing Systems (ICDCS), Security Track, 2007.
Chair, 16th World Wide Web (WWW) Conference, Security, Privacy, Reliability and Ethics Track, 2007.
Chair, 15th USENIX Security Symposium, 2006.
Deputy Chair, 15th World Wide Web (WWW) Conference, Security, Privacy and Ethics Track, 2006.
Chair, 3rd Workshop on Rapid Malcode (WORM), 2005.
Program co-Chair, 3rd Applied Cryptography and Network Security (ACNS) Conference, 2005.
Program co-Chair, OpenSig Workshop, 2003.
General Chair, New Security Paradigms Workshop (NSPW), 2010.
General Vice Chair, New Security Paradigms Workshop (NSPW), 2009.
Co-chair, Invited Talks, 17th USENIX Security Symposium, 2008.
General co-chair, Applied Cryptography and Network Security (ACNS) Conference, 2008.
Co-chair, Invited Talks, 16th USENIX Security Symposium, 2007.
Organizing Committee, Columbia/IBM/Stevens Security & Privacy Day (bi-annual event).
Organizer, Columbia/IBM/Stevens Security & Privacy Day, December 2010.
Organizer, Columbia/IBM/Stevens Security & Privacy Day, June 2007.
Co-organizer, ARO/FSTC Workshop on Insider Attack and Cyber Security, 2007.
Publicity co-Chair, ACM Conference on Computer and Communications Security, 2006.
General co-Chair, OpenSig Workshop, 2003.
Program Committee, International Workshop on Security (IWSEC), 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014.
Program Committee, ACM Conference on Computer and Communications Security (CCS), 2005, 2007, 2008, 2009, 2010, 2012, 2013, 2014.
Program Committee, ISOC Symposium on Network and Distributed Systems Security (SNDSS), 2003, 2004, 2006, 2007, 2008, 2012.
Program Committee, Applied Cryptography and Network Security (ACNS) Conference, 2005, 2006, 2010, 2011, 2012, 2013.
Program Committee, Information Security Conference (ISC), 2005, 2007, 2009, 2011, 2012, 2014.
Program Committee, Financial Cryptography (FC) Conference, 2002, 2010, 2011, 2012, 2013.
Program Committee, European Workshop on Systems Security (EuroSec), 2009, 2010, 2011, 2012, 2013.
Program Committee, USENIX Security Symposium, 2004, 2005, 2006, 2008.
Program Committee, International Conference on Distributed Computing Systems (ICDCS), Security Track, 2005, 2006, 2007, 2008.
Program Committee, Workshop on Rapid Malcode (WORM), 2004, 2005, 2006, 2007.
Program Committee, World Wide Web Conference (WWW), 2005, 2006, 2007.
Program Committee, USENIX Workshop on Hot Topics in Security (HotSec), 2006, 2007, 2010.
Program Committee, Annual Computer Security Applications Conference (ACSAC), 2006, 2007, 2011.
Program Committee, USENIX Technical Conference, Freely Distributable Software (Freenix) Track, 1998, 1999, 2003.
Program Committee, International Conference on Mathematical Methods, Models and Architectures for Computer Network Security (MMM-ACNS), 2007, 2010, 2012.
Program Committee, IEEE Security & Privacy Symposium, 2006, 2008.
Program Committee, ACM SIGCOMM Workshop on Large Scale Attack Defense (LSAD), 2006, 2007.
Program Committee, New Security Paradigms Workshop (NSPW), 2007, 2008.
Program Committee, IEEE WETICE Workshop on Enterprise Security, 2002, 2003.
Program Committee, USENIX Annual Technical Conference (ATC), 2008, 2011.
Program Committee, 6th International Conference on Cryptology and Network Security (CANS), 2007, 2012.
Program Committee, Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Dependable Computing and Communication Symposium (DCCS), 2010, 2013.
Program Committee, 1st International Conference on Human Aspects of Information Security, Privacy and Trust (HAS), 2013.
Program Committee, ACM Workshop on Moving Target Defense (MTD), 2014, 2015.
Program Committee, Workshop on Information Security Theory and Practice (WISTP), 2012.
Program Committee, European Sumposium on Research in Computer Security (ESORICS), 2011.
Program Committee, International Workshop on Mobile Security (WMS), 2010.
Program Committee, Computer Forensics in Software Engineering Workshop, 2009.
Program Committee, USENIX Workshop on Large-scale Exploits and Emergent Threats (LEET), 2008.
Program Committee, 23rd International Information Security Conference (IFIP SEC), 2008.
Program Committee, Joint iTrust and PST Conferences on Privacy, Trust Management and Security (IFIPTM), 2008.
Program Committee, 1st Computer Security Architecture Workshop (CSAW), 2007.
Program Committee, 8th IEEE Information Assurance Workshop (IAW), 2007.
Program Committee, Anti-Phishing Working Group (APWG) eCrime Researchers Summit, 2007.
Program Committee, 4th GI International Conference on Detection of Intrusions & Malware, and Vulnerability Assessment (DIMVA), 2007.
Program Committee, 2nd ACM Symposium on InformAtion, Computer and Communications Security (AsiaCCS), 2007.
Program Committee, 2nd Workshop on Advances in Trusted Computing (WATC), 2006.
Program Committee, International Conference on Information and Communications Security (ICICS), 2006.
Program Committee, 2nd Workshop on Secure Network Protocols (NPSec), 2006.
Program Committee, 1st Workshop on Hot Topics in System Dependability (HotDep), 2005.
Program Committee, 20th ACM Symposium on Applied Computing (SAC), Trust, Recommendations, Evidence and other Collaboration Know-how (TRECK) Track, 2005.
Program Committee, 1st Workshop on Operating System and Architecture Support for the on demand IT Infrastructure (OASIS), 2004.
Program Committee, Workshop on Information Security Applications (WISA), 2004.
Program Committee, Workshop on Logical Foundations of an Adaptive Security Infrastructure (WOLFASI), 2004.
Program Committee, 29th IEEE Conference on Local Computer Networks (LCN), 2004.
Program Committee, 2nd International Conference on Trust Management, 2004.
Program Committee, Asia BSD Conference, 2004.
Program Committee, 2nd Annual New York Metro Area Networking Workshop (NYMAN), 2002.
Program Committee, Cloud Computing Security Workshop (CCSW), 2009.
Program Committee, Workshop on Grid and Cloud Security (WGC-Sec), 2011.
Program Committee, Workshop on Cyber Security Experimentation and Test (CSET), 2011.
Program Committee, OWASP AppSec EU, 2012.
Program Committee, 1st International Workshop on Cyber Crime (IWCC), 2012.
Program Committee, 8th China International Conference on Information Security and Cryptology (INSCRYPT), 2012.
Program Committee, NDSS Workshop on Security of Emerging Networking Technologies (SENT), 2014.
ODNI/NSA Invitational Workshop on Computational Cybersecurity in Compromised Environments (C3E), West Point, NY, January 2013.
DARPA ISAT Summer Meeting, Arlington, VA, August 2013.
NITRD/SCORE Invitational Workshop on Designing-in Security: Current Practices and Research Needs, Arlington, VA, July 2013.
MITRE/NSA Invitational Annual Secure and Resilient Cyber Architectures Workshop, McLean, VA, June 2013.
ONR Workshop on Automated Software Complexity Reduction for Retaining Software Execution Efficiency and Increasing Security, McLean, VA, June 2013.
ARO Cloud Security Workshop, Fairfax, VA, March 2013.
ODNI/NSA Invitational Workshop on Computational Cybersecurity in Compromised Environments (C3E), West Point, NY, September 2012.
Cyber Security Research Institute (CSRI) Invitational Workshop, Arlington, VA, April 2012.
ODNI/NSA Invitational Workshop on Computational Cybersecurity in Compromised Environments (C3E), Keystone, CO, September 2011.
ONR Workshop on Host Computer Security, Chicago, IL, October 2010.
Intel Workshop on Trust Evidence and End-to-end Trust in Heterogeneous Environments, Santa Clara, CA, May 2010.
Intelligence Community Technical Exchange on Moving Target, Washington, DC, April 2010.
Lockheed Martin Future Security Threats Workshop, New York, NY, November 2009.
Air Force Office for Scientific Research (AFOSR) Invitational Workshop on Homogeneous Enclave Software vs Heterogeneous Enclave Software, Arlington, VA, October 2007.
NSF Future Internet Network Design Working Meeting, Arlington, VA, June 2007.
ARO/FSTC Workshop on Insider Attack and Cyber Security, Arlington, VA, June 2007.
NSF Invitational Workshop on Future Directions for the CyberTrust Program, Pittsburgh, PA, October 2006.
ARO/HSARPA Invitational Workshop on Malware Detection, Arlington, VA, August 2005.
Department of Defense Invitational Workshop on the Complex Behavior of Adaptive, Network-Centric Systems, College Park, MD, July 2005.
ARDA Next Generation Malware Invitational Workshop, Annapolis Junction, MD, March 2005.
Co-leader of session on "Securing software environments", joint NSF and Department of Treasury Invitational Workshop on Resilient Financial Information Systems, Washington, DC, March 2005.
DARPA Application Communities Invitational Workshop, Arlington, VA, October 2004.
DARPA APNets Invitational Workshop, Philadelphia, PA, December 2003.
NSF/NIST Invitational Workshop on Cybersecurity Workforce Needs Assessment and Educational Innovation, Arlington, VA, August 2003.
NSF Invitational Workshop on Large Scale Cyber-Security, Lansdowne, VA, March 2003.
IP Security Working Group Secretary, Internet Engineering Task Force (IETF), 2003 - 2008.
Session moderator, Workshop on Intelligence and Research, Florham Park, NJ, October 2001.
DARPA Composable High Assurance Trusted Systems #2 (CHATS2) Invitational Workshop, Napa, CA, November 2000.
IEEE Computer Society Fellows Evaluation Committee, 2018.
Member, IEEE Security & Magazine Editor-in-Chief Search Committee, 2017.
Advisory Board, Aponix Financial Technologists, 2014 onward.
Member, Executive Committee for the Institute for Data Sciences and Engineering (IDSE), Columbia University, 2012 - 2013.
Co-chair, ACM Computing Classification System Update Committee ("Security and Privacy" top-level node), 2011.
Founder, Allure Security Technology Inc., 2010 - present.
Member, ACM Computing Classification System Update Committee (top two levels), 2010.
External Advisory Board member, "i-code: Real-time Malicious Code Identification", EU project, 2010 - 2012.
Reviewer (grant applications), Greek Ministry of Education, 2010.
Reviewer (grant applications), Danish National Research Foundation, 2010.
Member of the Scientific Advisory Board, Centre for Research and Technology, Hellas (CERTH), 2008 - 2011.
Senior Member of the ACM, 2008 onward.
Senior Member of the IEEE, 2009 onward.
Visiting Scientist, Institute for Infocomm Research (I2R), Singapore, February - May 2007.
Columbia Representative to the Institute for Information Infrastructure Protection (I3P), 2006 - 2008.
Technical Advisory Board, StackSafe Inc. (formerly Revive Systems Inc.), 2006 - 2009.
Technical Advisory Board, Radiuz Inc., 2006.
Reviewer (grant applications), Institute for Security Technology Studies (ISTS), Dartmouth College, 2006.
Reviewer, Singapore National Science and Technology Awards (NSTA), 2006.
Board of Directors, StackSafe Inc. (formerly Revive Systems Inc.), 2005 - 2009.
Founder, StackSafe Inc. (formerly Revive Systems Inc.), 2005 - 2009.
Expert witness in criminal and intellectual property litigation cases, 2005, 2006, 2007, 2009, 2010, 2011, 2012, 2013.
Science Fair Judge, Middle School for Democracy and Leadership, Brooklyn, NY, 2005, 2006.
Reviewer (grant applications), Swiss National Science Foundation, 2007.
Reviewer (grant applications), Netherlands Organisation for Scientific Research, 2005, 2006.
Reviewer (grant applications), US/Israel Binational Science Foundation, 2003, 2005.
NSF reviewer & panelist, 2002, 2003, 2006, 2008, 2009, 2011, 2012, 2013, 2015, 2017.
Internet Engineering Task Force (IETF) Security Area Advisor, 2001 - 2008.
Nathaniel Boggs, "Empirical Measurement of Defense in Depth", Department of Computer Science, Columbia University, March 2015.
Ang Cui, "Embedded System Security: A Software-based Approach", Department of Computer Science, Columbia University, March 2015.
Binh Vo, "Private, Distributed, and Searchable Content Probiders", Department of Computer Science, Columbia University, December 2014.
Jingyue Wu, "Sound and Precise Analysis of Multithreaded Programs through Schedule Specialization", Department of Computer Science, Columbia University, May 2014.
Dimitris Mitropoulos, "Secure Software Development Technologies", Department of Management Science and Technology, Athens University of Economics and Business, March 2014.
Iasonas Polakis, "Online Social Networks From A Malicious Perspective: Novel Attack Techniques and Defense Mechanisms", Computer Science Department, University of Crete, February 2014.
Kapil Anand, "Binary Analysis Based on a Compiler-level Intermediate Representation", Electrical and Computer Engineering Department, University of Maryland, July 2013.
Theodoor Scholte, "Securing Web Applications by Design", Computer Science Group, Communications and Electronics Department, Ecole Nationale Superieure des Telecommunications, May 2012.
Maritza Johnson, "Toward Usable Access Control for End-Users: A Case Study of Facebook Privacy Settings", Department of Computer Science, Columbia University, April 2012.
Collin R. Mulliner, "On the Impact of the Cellular Modem on the Security of Mobile Phones", Technische Universitat Berlin, December 2011.
Malek Ben Salem, "Towards Effective Masquerade Attack Detection", Department of Computer Science, Columbia University, October 2011.
Michalis Polychronakis, "Generic Code Injection Attack Detection using Code Emulation", Computer Science Department, University of Crete, October 2009.
Spyros Antonatos, "Defending against Known and Unknown Attacks using a Network of Affined Honeypots", Computer Science Department, University of Crete, October 2009.
Van-Hau Pham, "Honeypot Traces Forensics by Means of Attack Event Identification", Computer Science Group, Communications and Electronics Department, Ecole Nationale Superieure des Telecommunications, September 2009.
Gabriela F. Ciocarlie, "Towards Self-Adaptive Anomaly Detection Sensors", Department of Computer Science, Columbia University, September 2009.
Wei-Jen Li, "SPARSE: A Hybrid System for Malcode-Bearing Document Detection", Department of Computer Science, Columbia University, June 2008.
Raj Kumar Rajendran, "The Method for Strong Detection for Distributed Routing", Electrical Engineering Department, Columbia University, March 2008.
Constantin Serban, "Advances in Decentralized and Stateful Access Control", Computer Science Department, Rutgers University, December 2007.
Ricardo A. Baratto, "THINC: A Virtual and Remote Display Architecture for Desktop Computing", Computer Science Department, Columbia University, October 2007.
Zhenkai Liang, "Techniques in Automated Cyber-Attack Response and Recovery", Computer Science Department, Stony Brook University, November 2006.
Ke Wang, "Network Payload-based Anomaly Detection and Content-based Alert Correlation", Computer Science Department, Columbia University, August 2006.
Seoung-Bum Lee, "Adaptive Quality of Service for Wireless Ad hoc Networks", Electrical Engineering Department, Columbia University, June 2006.
Shlomo Hershkop, "Behavior-based Email Analysis with Application to Spam Detection", Computer Science Department, Columbia University, August 2005.
Gaurav S. Kc, "Defending Software Against Process-subversion Attacks", Computer Science Department, Columbia University, April 2005.
Gong Su, "MOVE: A New Virtualization Approach to Mobile Communication", Computer Science Department, Columbia University, May 2004.
Jonathan M. Lennox, "Services for Internet Telephony", Computer Science Department, Columbia University, December 2003.
Michael E. Kounavis, "Programming Network Architectures", Electrical Engineering Department, Columbia University, June 2003.
Wenyu Jiang, "QoS Measurement and Management for Internet Real-time Multimedia Services", Computer Science Department, Columbia University, April 2003.
Thesis title: "Elastic Block Ciphers"
Thesis title: "Software Self-healing Using Error Virtualization"
Thesis title: "Behavior-Based Admission and Access Control for Network Security"
Thesis title: "A Distributed Policy Enforcement Architecture for Mobile Ad Hoc Networks"
Thesis title: "Design and Analysis of Decoy Systems for Computer Security"
Thesis title: "Information Flow Auditing in the Cloud"
Thesis title: "Defending against Return-Oriented Programming"
Post-graduation: Senior Research Scientist, Appthority Inc.
Currently: Senior Research Scientist, Appthority Inc.
Thesis title: "On Efficiency and Accuracy of Data Flow Tracking Systems"
Thesis title: "Protecting Commodity Operating Systems through Strong Kernel Isolation"
Thesis title: "Reducing Third Parties in the Network through Client-side Intelligence"
Post-graduation: Privacy Engineer, Apple Inc.
Currently: Privacy Engineer, Apple Inc.
Thesis title: "Compiler-assisted Adaptive Software Testing"
Post-graduation: Research Scientist, Capsule8 Inc.
Currently: Research Scientist, Capsule8 Inc.
Thesis title: "Understanding Flaws in the Deployment and Implementation of Web Encryption"
Thesis title: "Symbolic Model Learning: New Algorithms and Applications"
"Diversified instruction set processing to enhance security"
Lakshminarasimhan Sethumadhavan, Kanad Sinha, Angelos D. Keromytis, Vasileios Pappas, and Vasileios Kemerlis. U.S. Patent 10,237,059. Issued on March 19, 2019.
"Detecting return-oriented programming payloads by evaluating data for a gadget address space address and determining whether operations associated with instructions beginning at the address indicate a return-oriented programming payload"
Michalis Polychronakis and Angelos D. Keromytis. U.S. Patent 10,192,049. Issued on January 29, 2019.
"Methods, media, and systems for detecting attack on a digital processing device"
Salvatore J. Stolfo, Wei-Jen Li, Angelos D. Keromytis, and Elli Androulaki. U.S. Patent 10,181,026. Issued on January 15, 2019.
"Systems, methods, and media for generating sanitized data, sanitizing anomaly detection models, and/or generating sanitized anomaly detection models"
Gabriela F. Ciocarlie, Angelos Stavrou, Salvatore J. Stolfo and Angelos D. Keromytis. U.S. Patent 10,178,113. Issued on January 8, 2019.
"Methods, media, and systems for securing communications between a first node and a second node"
Salvatore J. Stolfo, Gabriela F. Ciocarlie, Vanessa Frias-Martinez, Janak Parekh, Angelos D. Keromytis, and Joseph Sherrick. U.S. Patent 10178,104. Issued on January 8, 2019.
"Detecting network anomalies by probabilistic modeling of argument strings with markov chains"
Yingbo Song, Angelos D. Keromytis, and Salvatore J. Stolfo. U.S. Patent 10,063,576. Issued on August 28, 2018.
"Systems and methods for correlating and distributing intrusion alert information among collaborating computer systems"
Salvatore J. Stolfo, Tal Malkin, Angelos D. Keromytis, , Michael Locasto, and Janak Parekh. U.S. Patent 10,038,704. Issued on July 31, 2018.
"Systems and methods for inhibiting attacks with a network"
Angelos Stavrou and Angelos D. Keromytis. U.S. Patent 9,992,222. Issued on June 5, 2018.
"Methods, systems, and media for detecting covert malware"
Brian M. Bowen, Pratap V. Prabhu, Vasileios P. Kemerlis, Stylianos Sidiroglou, Salvatore J. Stolfo, and Angelos D. Keromytis. U.S. Patent 9,971,891. Issued on May 15, 2018.
Salvatore J. Stolfo, Gabriela F. Ciocarlie, Vanessa Frias-Martinez, Janak Parekh, Angelos D. Keromytis, and Joseph Sherrick. U.S. Patent 9,654,478. Issued on May 16, 2017.
"Systems, methods, and media for testing software patches"
Angelos D. Keromytis and Stylianos Sidiroglou. U.S. Patent 9,606,906. Issued on March 28, 2017.
Salvatore J. Stolfo, Wei-Jen Li, Angelos D. Keromytis, and Elli Androulaki. U.S. Patent 9,576,127. Issued on February 21, 2017.
"Systems, methods, and media protecting a digital data processing device from attack"
Stylianos Sidiroglou, Angelos D. Keromytis, and Salvatore J. Stolfo. U.S. Patent 9,544,322. Issued on January 10, 2017.
"Methods, systems, and media for baiting inside attackers"
Salvatore J. Stolfo, Angelos D. Keromytis, Brian M. Bowen, Shlomo Hershkop, Vasileios P. Kemerlis, Pratap V. Prabhu, and Malek Ben Salem. U.S. Patent 9,501,639. Issued on November 22, 2016.
Michalis Polychronakis and Angelos D. Keromytis. U.S. Patent 9,495,541. Issued on November 15, 2016.
"Methods, media, and systems for detecting an anomalous sequence of function calls"
Angelos D. Keromytis and Salvatore J. Stolfo. U.S. Patent 9,450,979. Issued on September 20, 2016.
Salvatore J. Stolfo, Gabriela F. Ciocarlie, Vanessa Frias-Martinez, Janak Parekh, Angelos D. Keromytis, and Joseph Sherrick. U.S. Patent 9,419,981. Issued on August 16, 2016.
"Systems, methods, and media for generating bait information for trap-based defenses"
Angelos D. Keromytis and Salvatore J. Stolfo. U.S. Patent 9,356,957. Issued on May 31, 2016.
Angelos Stavrou and Angelos D. Keromytis. U.S. Patent 9,344,418. Issued on May 17, 2016.
"Systems and methods for inhibiting attacks on applications"
Michael E. Locasto, Salvatore J. Stolfo, Angelos D. Keromytis, and Ke Wang. U.S. Patent 9,338,174. Issued on May 10, 2016.
Yingbo Song, Angelos D. Keromytis, and Salvatore J. Stolfo. U.S. Patent 9,253,201. Issued on February 2, 2016.
"Systems, methods, and media for recovering an application from a fault or attack"
Michael E. Locasto, Angelos D. Keromytis, Angelos Stavrou, and Gabriela F. Ciocarlie. U.S. Patent 9,218,254. Issued on December 22, 2015.
Stylianos Sidiroglou, Angelos D. Keromytis, and Salvatore J. Stolfo. U.S. Patent 9,143,518. Issued on September 22, 2015.
Salvatore J. Stolfo, Tal Malkin, Angelos D. Keromytis, Vishal Misra, Michael Locasto, and Janak Parekh. U.S. Patent 9,135,438. Issued on September 15, 2015.
Gabriela F. Ciocarlie, Angelos Stavrou, Salvatore J. Stolfo and Angelos D. Keromytis. U.S. Patent 9,088,596. Issued on July 21, 2015.
Salvatore J. Stolfo, Angelos D. Keromytis, Brian M. Bowen, Shlomo Herhskop, Vasileios P. Kemerlis, Pratap V. Prabhu, and Malek Ben Salem. U.S. Patent 9,009,829. Issued on April 14, 2015.
Michael E. Locasto, Angelos D. Keromytis, Angelos Stavrou, and Gabriela F. Ciocarlie. U.S. Patent 8,924,782. Issued on December 30, 2014.
"Systems, methods, and media for detecting network anomalies using a trained probabilistic model"
Yingbo Song, Angelos D. Keromytis, and Salvatore J. Stolfo. U.S. Patent 8,844,033. Issued on September 23, 2014.
Angelos D. Keromytis and Salvatore J. Stolfo. U.S. Patent 8,819,825. Issued on August 26, 2014.
Michael E. Locasto, Salvatore J. Stolfo, Angelos D. Keromytis, and Ke Wang. U.S. Patent Numnber 8,763,103. Issued on June 24, 2014.
Angelos D. Keromytis and Salvatore J. Stolfo. U.S. Patent 8,694,833. Issued on April 8, 2014.
Angelos D. Keromytis and Stylianos Sidiroglou. U.S. Patent Number 8,683,450. Issued on March 25, 2014.
Salvatore J. Stolfo, Angelos D. Keromytis, Vishal Misra, Michael Locasto, and Janak Parekh. U.S. Patent 8,667,588. Issued on March 4, 2014.
Angelos Stavrou and Angelos D. Keromytis. U.S. Patent 8,631,484. Issued on January 14, 2014.
"Methods, media and systems for detecting anomalous program executions"
Salvatore J. Stolfo, Angelos D. Keromytis, and Stylianos Sidiroglou. U.S. Patent 8,601,322. Issued on December 3, 2013.
"Methods, media and systems for responding to a denial of service attack"
Angelos Stavrou, Angelos D. Keromytis, Jason Nieh, Vishal Misra, and Daniel Rubenstein. U.S. Patent 8,549,646. Issued on October 1, 2013.
Brian M. Bowen, Pratap V. Prabhu, Vasileios P. Kemerlis, Stylianos Sidiroglou, Salvatore J. Stolfo, and Angelos D. Keromytis. U.S. Patent 8,528,091. Issued on September 3, 2013.
"Systems, methods, and media for enforcing a security policy in a network including a plurality of components"
Matthew Burnside and Angelos D. Keromytis. U.S. Patent 8,516,575. Issued on August 20, 2013.
Angelos D. Keromytis and Salvatore J. Stolfo. U.S. Patent 8,489,931. Issued on July 16, 2013.
Stylianos Sidiroglou, Angelos D. Keromytis, and Salvatore J. Stolfo. U.S. Patent 8,407,785. Issued on March 26, 2013.
Gabriela Cretu, Angelos Stavrou, Salvatore J. Stolfo, Angelos D. Keromytis, and Michael E. Locasto. U.S. Patent Number 8,407,160. Issued on March 26, 2013.
Salvatore J. Stolfo, Tal Malkin, Angelos D. Keromytis, Vishal Misra, Michael Locasto, and Janak Parekh. U.S. Patent 8,381,295. Issued on February 19, 2013.
"Systems and methods for computing data transmission characteristics of a network path based on single-ended measurements"
Angelos D. Keromytis, Sambuddho Chakravarty, and Angelos Stavrou. U.S. Patent 8,228,815. Issued on July 24, 2012.
Angelos D. Keromytis and Salvatore J. Stolfo. U.S. Patent 8,135,994. Issued on March 13, 2012.
Salvatore J. Stolfo, Angelos D. Keromytis, and Stelios Sidiroglou. U.S. Patent 8,074,115. Issued on December 6, 2011.
"Microbilling using a trust management system"
Matthew A. Blaze, John Ioannidis, and Angelos D. Keromytis. U.S. Patent Number 7,996,325. Issued on August 9, 2011.
"Methods, systems and media for software self-healing"
Michael E. Locasto, Angelos D. Keromytis, Salvatore J. Stolfo, Angelos Stavrou, Gabriela Cretu, Stylianos Sidiroglou, Jason Nieh, and Oren Laadan. U.S. Patent Number 7,962,798. Issued on June 14, 2011.
"Systems and methods for detecting and inhibiting attacks using honeypots"
Stylianos Sidiroglou, Angelos D. Keromytis, and Kostas G. Anagnostakis. U.S. Patent 7,904,959. Issued on March 8, 2011.
Salvatore J. Stolfo, Angelos D. Keromytis, Vishal Misra, Michael Locasto, and Janak Parekh. U.S. Patent Number 7,784,097. Issued on August 24, 2010.
Salvatore J. Stolfo, Tal Malkin, Angelos D. Keromytis, Vishal Misra, Michael Locasto, and Janak Parekh. U.S. Patent Number 7,779,463. Issued on August 17, 2010.
Angelos D. Keromytis, Sambuddho Chakravarty, and Angelos Stavrou. U.S. Patent 7,660,261. Issued on February 9, 2010.
Matthew A. Blaze, John Ioannidis, and Angelos D. Keromytis. U.S. Patent Number 7,650,313. Issued on January 19, 2010.
"Methods and systems for repairing applications"
Angelos D. Keromytis, Michael E. Locasto, and Stylianos Sidiroglou. U.S. Patent 7,490,268. Issued on February 10, 2009.
"System and method for microbilling using a trust management system"
Matthew A. Blaze, John Ioannidis, and Angelos D. Keromytis. U.S. Patent 6,789,068. Issued on September 7, 2004.
"Secure and reliable bootstrap architecture"
William A. Arbaugh, David J. Farber, Angelos D. Keromytis, and Jonathan M. Smith. U.S. Patent 6,185,678. Issued on February 6, 2001.
"Defending Against Web Application Attacks: Approaches, Challenges and Implications"
Dimitris Mitropoulos, Angelos D. Keromytis, Panagiotis Louridas, and Michalis Polychronakis. In IEEE Transactions on Dependable and Secure Computing (TDSC), vol. 5, no. 2, pp. 188 - 203, March/April 2019.
"Kernel Protection against Just-In-Time Code Reuse"
Marios Pomonis, Theofilos Petsios, Angelos D. Keromytis, Michalis Polychronakis, and Vasileios P. Kemerlis. In ACM Transactions on Privacy and Security (TOPS), vol. 22, no. 1, January 2018.
"Evaluating the Privacy Guarantees of Location Proximity Services"
George Argyros, Theofilos Petsios, Suphannee Sivakorn, Angelos D. Keromytis, and Iasonas Polakis. In ACM Transactions on Privacy and Security (TOPS), vol. 19, no. 4, pp. 12:1 - 12:31, February 2017.
"How to Train your Browser: Preventing XSS Attacks Using Contextual Script Fingerprints"
Dimitris Mitropoulos, Konstantinos Stroggylos, Diomidis Spinellis, and Angelos D. Keromytis. In ACM Transactions on Privacy and Security (TOPS), vol. 19, no. 1, pp. 2:1 - 2:31, July 2016.
"A Stack Memory Abstraction and Symbolic Analysis Framework for Executables"
Kapil Anand, Khaled Elwazeer, Matthew Smithson, Rajeev Barua, and Angelos D. Keromytis. In ACM Transactions on Software Engineering and Methodology (TOSEM), vol. 25, no. 2, pp. 19:1 - 19:38, May 2016.
"An efficient and easily deployable method for dealing with DoS in SIP services"
Zisis Tsiatsikas, Dimitris Geneiatakis, Georgios Kambourakis, and Angelos D. Keromytis. In the Journal of Computer Communications, vol. 57, pp. 50 - 63, 2015.
"Detection and Analysis of Eavesdropping in Anonymous Communication Networks"
Sambuddho Chakravarty, Michalis Polychronakis, Georgios Portokalidis, and Angelos D. Keromytis. In the International Journal of Information Security (IJIS), vol. 14, no. 3, pp. 205 - 220. June 2015.
"Attacking the Internet using Broadcast Digital Television"
Yossef Oren and Angelos D. Keromytis. Inn the ACM Transactions on Information and Systems Security (TISSEC), vol. 17, no. 4. April 2015.
Soon Ae Chun, Janice Warner, and Angelos D. Keromytis. In the International Journal of Business Continuity and Risk Management (IJBCRM), vol. 4, no. 4, pp. 344 - 370. 2013.
Vasileios P. Kemerlis, Georgios Portokalidis, Elias Athanasopoulos, and Angelos D. Keromytis. In the USENIX ;login: Magazine, vol. 37, no. 6, pp. 7 - 14. December 2012.
"A System for Generating and Injecting Indistinguishable Network Decoys"
Brian M. Bowen, Vasileios P. Kemerlis, Pratap Prabhu, Angelos D. Keromytis, and Salvatore J. Stolfo. In the Journal of Computer Security (JCS), vol. 20, no. 2 - 3, pp. 199 - 221, June 2012.
"A Comprehensive Survey of Voice over IP Security Research"
Angelos D. Keromytis. In the IEEE Communications Surveys and Tutorials, vol. 14, no. 2, pp. 514 - 537, May 2012.
"The Efficient Dual Receiver Cryptosystem and Its Applications"
Ted Diament, Homin K. Lee, Angelos D. Keromytis, and Moti Yung. In the International Journal of Network Security (IJNS), vol. 13, no. 3, pp. 135 - 151, November 2011.
"On the Infeasibility of Modeling Polymorphic Shellcode: Re-thinking the Role of Learning in Intrusion Detection Systems"
Yingbo Song, Michael E. Locasto, Angelos Stavrou, Angelos D. Keromytis, and Salvatore J. Stolfo. In the Machine Learning Journal (MLJ), vol. 81, no. 2, pp. 179 - 205, November 2010.
"On The General Applicability of Instruction-Set Randomization"
Stephen W. Boyd, Gaurav S. Kc, Michael E. Locasto, Angelos D. Keromytis, and Vassilis Prevelakis. In the IEEE Transactions on Dependable and Secure Computing (TDSC), vol. 7, no. 3, pp. 255 - 270, July - September 2010.
Michalis Polychronakis, Periklis Akritidis, Stelios Sidiroglou, Kostas G. Anagnostakis, Angelos D. Keromytis, and Evangelos P. Markatos. In the International Journal of Computer and Network Security (IJCNS), vol. 2, no. 9, pp. 1 - 15, September 2010.
"Ethics in Security Vulnerability Research"
Andrea M. Matwyshyn, Ang Cui, Salvatore J. Stolfo, and Angelos D. Keromytis. In the IEEE Security & Privacy Magazine, vol. 8, no. 2, pp. 67 - 72, March/April 2010.
"Voice over IP Security: Research and Practice"
Angelos D. Keromytis. In the IEEE Security & Privacy Magazine, vol. 8, no. 2, pp. 76 - 78, March/April 2010.
"A Market-based Bandwidth Charging Framework"
David Michael Turner, Vassilis Prevelakis, and Angelos D. Keromytis. In the ACM Transactions on Internet Technology (ToIT), vol. 10, no. 1, pp. 1 - 30, February 2010.
"A Look at VoIP Vulnerabilities"
Angelos D. Keromytis. In the USENIX ;login: Magazine, vol. 35, no. 1, pp. 41 - 50, February 2010.
"Designing Host and Network Sensors to Mitigate the Insider Threat"
Brian M. Bowen, Malek Ben Salem, Shlomo Hershkop, Angelos D. Keromytis, and Salvatore J. Stolfo. In the IEEE Security & Privacy Magazine, vol. 7, no. 6, pp. 22 - 29, November/December 2009.
"Elastic Block Ciphers: Method, Security and Instantiations"
Debra L. Cook, Moti Yung, and Angelos D. Keromytis. In the Springer International Journal of Information Security (IJIS), vol 8, no. 3, pp. 211 - 231, June 2009.
"On the Deployment of Dynamic Taint Analysis for Application Communities"
Hyung Chan Kim and Angelos D. Keromytis. In the IEICE Transactions, vol. E92-D, no. 3, pp. 548 - 551, March 2009.
Matt Blaze, Sampath Kannan, Insup Lee, Oleg Sokolsky, Jonathan M. Smith, Angelos D. Keromytis, and Wenke Lee. In the IEEE Computer Magazine, vol. 42, no. 2, pp. 44 - 52, February 2009.
"Randomized Instruction Sets and Runtime Environments: Past Research and Future Directions"
Angelos D. Keromytis. In the IEEE Security & Privacy Magazine, vol. 7, no. 1, pp. 18 - 25, January/February 2009.
"Anonymity in Wireless Broadcast Networks"
Matt Blaze, John Ioannidis, Angelos D. Keromytis, Tal Malkin, and Avi Rubin. In the International Journal of Network Security (IJNS), vol. 8, no. 1, pp. 37 - 51, January 2009.
"Decentralized Access Control in Networked File Systems"
Stefan Miltchev, Jonathan M. Smith, Vassilis Prevelakis, Angelos D. Keromytis, and Sotiris Ioannidis. In the ACM Computing Surveys, vol. 40, no. 3, pp. 10:1 - 10:30, August 2008.
"Robust Reactions to Potential Day-Zero Worms through Cooperation and Validation"
"Requirements for Scalable Access Control and Security Management Architectures"
Angelos D. Keromytis and Jonathan M. Smith. In the ACM Transactions on Internet Technology (ToIT), vol. 7, no. 2, pp. 1 - 22, May 2007.
"Virtual Private Services: Coordinated Policy Enforcement for Distributed Applications"
Sotiris Ioannidis, Steven M. Bellovin, John Ioannidis, Angelos D. Keromytis, Kostas G. Anagnostakis, and Jonathan M. Smith. In the International Journal of Network Security (IJNS), vol. 4, no. 1, pp. 69 - 80, January 2007.
"Countering DDoS Attacks with Multi-path Overlay Networks"
"Conversion Functions for Symmetric Key Ciphers"
"Execution Transactions for Defending Against Software Failures: Use and Evaluation"
"Worm Propagation Strategies in an IPv6 Internet"
Steven M. Bellovin, Bill Cheswick, and Angelos D. Keromytis. In the USENIX ;login, vol. 31, no. 1, pp. 70 - 76, February 2006.
"Cryptography As An Operating System Service: A Case Study"
"Countering Network Worms Through Automatic Patch Generation"
Stelios Sidiroglou and Angelos D. Keromytis. In the IEEE Security & Privacy Magazine, vol. 3, no. 6, pp. 41 - 49, November/December 2005.
"WebSOS: An Overlay-based System For Protecting Web Servers From Denial of Service Attacks"
"Hardware Support For Self-Healing Software Services"
Stelios Sidiroglou, Michael E. Locasto, and Angelos D. Keromytis. In the ACM SIGARCH Computer Architecture News, Special Issue on Workshop on Architectural Support for Security and Anti-Virus (WASSA), vol. 33, no. 1, pp. 42 - 47, March 2005. Also appeared in the Proceedings of the Workshop on Architectural Support for Security and Anti-Virus (WASSA), held in conjunction with the 11th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS-XI), pp. 37 - 43. October 2004, Boston, MA.
"The Case For Crypto Protocol Awareness Inside The OS Kernel"
Matthew Burnside and Angelos D. Keromytis. In the ACM SIGARCH Computer Architecture News, Special Issue on Workshop on Architectural Support for Security and Anti-Virus (WASSA), vol. 33, no. 1, pp. 58 - 64, March 2005. Also appeared in the Proceedings of the Workshop on Architectural Support for Security and Anti-Virus (WASSA), held in conjunction with the 11th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS-XI), pp. 54 - 60. October 2004, Boston, MA.
"Patch-on-Demand Saves Even More Time?"
Angelos D. Keromytis. In the IEEE Computer, vol. 37, no. 8, pp. 94 - 96, August 2004.
"Just Fast Keying: Key Agreement In A Hostile Internet"
"SOS: An Architecture for Mitigating DDoS Attacks"
"Drop-in Security for Distributed and Portable Computing Elements"
"The Price of Safety in an Active Network"
D. Scott Alexander, Paul B. Menage, Angelos D. Keromytis, William A. Arbaugh, Kostas G. Anagnostakis, and Jonathan M. Smith. In the Journal of Communications and Networks (JCN), special issue on programmable switches and routers, vol. 3, no. 1, pp. 4 - 18, March 2001. Older versions are available as University of Pennsylvania Technical Report MS-CIS-99-04 and University of Pennsylvania Technical Report MS-CIS-98-02.
"Secure Quality of Service Handling (SQoSH)"
D. Scott Alexander, William A. Arbaugh, Angelos D. Keromytis, Steve Muir, and Jonathan M. Smith. In the IEEE Communications Magazine, vol. 38, no. 4, pp. 106 - 112, April 2000. An older version is available as University of Pennsylvania Technical Report MS-CIS-99-05.
"Safety and Security of Programmable Network Infrastructures"
D. Scott Alexander, William A. Arbaugh, Angelos D. Keromytis, and Jonathan M. Smith. In the IEEE Communications Magazine, issue on Programmable Networks, vol. 36, no. 10, pp. 84 - 92, October 1998.
"A Secure Active Network Environment Architecture"
D. Scott Alexander, William A. Arbaugh, Angelos D. Keromytis, and Jonathan M. Smith. In the IEEE Network Magazine, special issue on Active and Controllable Networks, vol. 12, no. 3, pp. 37 - 45, May/June 1998.
"The SwitchWare Active Network Architecture"
D. Scott Alexander, William A. Arbaugh, Michael Hicks, Pankaj Kakkar, Angelos D. Keromytis, Jonathan T. Moore, Carl A. Gunter, Scott M. Nettles, and Jonathan M. Smith. In the IEEE Network Magazine, special issue on Active and Programmable Networks, vol. 12, no. 3, pp. 29 - 36, May/June 1998.
Privacy in E-Shopping Transactions: Exploring and Addressing the Trade-Offs"
Jesus Diaz, Seung Geol Choi, David Arroyo, Angelos D. Keromytis, Francisco B. Rodriguez, and Moti Yung. In Proceedings of the 2nd International Symposium on Cyber Security Cryptography and Machine Learning (CSCML), pp. 206 - 226. June 2018, Be'er Sheva, Israel.
"SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities"
"HVLearn: Automated Black-box Analysis of Hostname Verification in SSL/TLS Implementations"
"NEZHA: Efficient Domain-independent Differential Testing"
"kR^X: Comprehensive Kernel Protection against Just-In-Time Code Reuse"
Marios Pomonis, Theofilos Petsios, Angelos D. Keromytis, Michalis Polychronakis, and Vasileios P. Kemerlis. In Proceedings of the 12th European Conference on Computer Systems (EuroSys), pp. 420 - 436. April 2017, Belgrade, Serbia.
"Protecting Insecure Communications with Topology-aware Network Tunnels"
"SFADiff: Automated Evasion Attacks and Fingerprinting Using Blackbox Differential Automata Learning"
"Provable Network Activity for Protecting Users against False Accusation"
Panagiotis Papadopoulos, Elias Athanasopoulos, Eleni Kosta, George Siganos, Angelos D. Keromytis, and Evangelos P. Markatos. In Proceedings of the 10th WISTP Conference in Information Security Theory and Practice (WISTP), pp. 254 - 261. September 2016, Heraclion, Crete, Greece.
"NaClDroid: Native Code Isolation for Android Applications"
"The Cracked Cookie Jar: HTTP Cookie Hijacking and the Exposure of Private Information"
"Back in Black: Towards Formal, Black Box Analysis of Sanitizers and Filters"
"I am Robot: (Deep) Learning to Break Semantic Image CAPTCHAs"
"DynaGuard: Armoring Canary-based Protections against Brute-force Attacks"
"Where’s Wally? Precise User Discovery Attacks in Location Proximity Services"
"IntFlow: Improving the Accuracy of Arithmetic Error Detection Using Information Flow Tracking"
"Faces in the Distorting Mirror: Revisiting Photo-based Social Authentication"
"Dynamic Reconstruction of Relocation Information for Stripped Binaries"
"From the Aether to the Ethernet - Attacking the Internet using Broadcast Digital Television"
"Blind Seer: A Scalable Private DBMS"
"On the Effectiveness of Traffic Analysis Against Anonymity Networks Using Flow Records"
"SAuth: Protecting User Accounts from Password Database Leaks"
"ShadowReplica: Efficient Parallelization of Dynamic Data Flow Tracking"
"CloudFence: Data Flow Tracking as a Cloud Service"
"An Accurate Stack Memory Abstraction and Symbolic Analysis Framework for Executables"
"CellFlood: Attacking Tor Onion Routers on the Cheap"
"A Privacy-Preserving Entropy-Driven Framework for Tracing DoS Attacks in VoIP"
Zisis Tsiatsikas, Dimitris Geneiatakis, Georgios Kambourakis, and Angelos D. Keromytis. In Proceedings of the 8th International Conference on Availability, Reliability and Security (ARES), pp. 224- 229. September 2013, Regensburg, Germany.
"Transparent ROP Exploit Mitigation using Indirect Branch Tracing"
"Cloudopsy: an Autopsy of Data Flows in the Cloud"
Angeliki Zavou, Vasilis Pappas, Vasileios P. Kemerlis, Michalis Polychronakis, Georgios Portokalidis, and Angelos D. Keromytis. In Proceedings of the 15th International Conference on Human-Computer Interaction (HCI), pp. 366 - 375. July 2013, Las Vegas, NV.
"SecureGov: Secure Government Data Sharing"
Jong Uk Choi, Soon Ae Chun, Dong Hwa Kim, and Angelos D. Keromytis. In Proceedings of the 14th Annual International Conference on Digital Government Research (dg.o), pp. 127 - 135. June 2013, Quebec City, Canada.
"Bait and Snitch: Defending Computer Systems with Decoys"
"All Your Face Are Belong to Us: Breaking Facebook's Social Authentication"
"Self-healing Multitier Architectures Using Cascading Rescue Points"
"Adaptive Defenses for Commodity Software Through Virtual Application Partitioning"
"kGuard: Lightweight Kernel Protection against Return-to-user Attacks"
"Towards a Universal Data Provenance Framework using Dynamic Instrumentation"
"Smashing the Gadgets: Hindering Return-Oriented Programming Using In-Place Code Randomization"
Vasileios P. Kemerlis, Georgios Portokalidis, Kangkook Jee, and Angelos D. Keromytis. In Proceedings of the 8th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments (VEE), pp. 121 - 132. March 2012, London, UK.
"A Multilayer Overlay Network Architecture for Enhancing IP Services Availability Against DoS"
"ROP Payload Detection Using Speculative Code Execution"
"Detecting Traffic Snooping in Tor Using Decoys"
"Measuring the Deployment Hiccups of DNSSEC"
"Misuse Detection in Consent-based Networks"
"Retrofitting Security in COTS Software with Binary Rewriting"
"Fast and Practical Instruction-Set Randomization for Commodity Systems"
"An Adversarial Evaluation of Network Signaling and Control Mechanisms"
Kangkook Jee, Stelios Sidiroglou-Douskos, Angelos Stavrou, and Angelos D. Keromytis. In Proceedings of the 13th International Conference on Information Security and Cryptology (ICISC). December 2010, Seoul, Korea.
"Evaluation of a Spyware Detection System using Thin Client Computing"
Vasilis Pappas, Brian M. Bowen, and Angelos D. Keromytis. In Proceedings of the 13th International Conference on Information Security and Cryptology (ICISC), pp. 222 - 232. December 2010, Seoul, Korea.
"Crimeware Swindling without Virtual Machines"
"iLeak: A Lightweight System for Detecting Inadvertent Information Leaks"
Vasileios P. Kemerlis, Vasilis Pappas, Georgios Portokalidis, and Angelos D. Keromytis. In Proceedings of the 6th European Conference on Computer Network Defense (EC2ND), pp. 21 - 28. October 2010, Berlin, Germany.
"Traffic Analysis Against Low-Latency Anonymity Networks Using Available Bandwidth Estimation"
"BotSwindler: Tamper Resistant Injection of Believable Decoys in VM-Based Hosts for Crimeware Detection"
"An Analysis of Rogue AV Campaigns"
"DIPLOMA: Distributed Policy Enforcement Architecture for MANETs"
"BARTER: Behavior Profile Exchange for Behavior-Based Admission and Access Control in MANETs"
"A Survey of Voice Over IP Security Research"
"A Network Access Control Mechanism Based on Behavior Profiles"
"Gone Rogue: An Analysis of Rogue Security Software Campaigns"
"Baiting Inside Attackers Using Decoy Documents"
"Deny-by-Default Distributed Security Policy Enforcement in Mobile Ad Hoc Networks (Short Paper)"
"Adding Trust to P2P Distribution of Paid Content"
"A2M: Access-Assured Mobile Desktop Computing"
"F3ildCrypt: End-to-End Protection of Sensitive Information in Web Services"
"DoubleCheck: Multi-path Verification Against Man-in-the-Middle Attacks"
"Voice over IP: Risks, Threats and Vulnerabilities"
"Capturing Information Flow with Concatenated Dynamic Taint Analysis"
"ASSURE: Automatic Software Self-healing Using REscue points"
"Spectrogram: A Mixture-of-Markov-Chains Model for Anomaly Detection in Web Traffic"
"Constructing Variable-Length PRPs and SPRPs from Fixed-Length PRPs"
"Behavior-Profile Clustering for False Alert Reduction in Anomaly Detection Sensors"
"Authentication on Untrusted Remote Hosts with Public-key Sudo"
Matthew Burnside, Mack Lu, and Angelos D. Keromytis. In Proceedings of the 22nd USENIX Large Installation Systems Administration (LISA) Conference, pp. 103 - 107. November 2008, San Diego, CA.
"Behavior-Based Network Access Control: A Proof-of-Concept"
"Path-based Access Control for Enterprise Networks"
"Methods for Linear and Differential Cryptanalysis of Elastic Block Ciphers"
"Pushback for Overlay Networks: Protecting against Malicious Insiders"
"Casting out Demons: Sanitizing Training Data for Anomaly Sensors"
"Taming the Devil: Techniques for Evaluating Anonymized Network Data"
"SSARES: Secure Searchable Automated Remote Email Storage"
"On the Infeasibility of Modeling Polymorphic Shellcode"
"Defending Against Next Generation Attacks Through Network/Endpoint Collaboration and Interaction"
"Elastic Block Ciphers in Practice: Constructions and Modes of Encryption"
Debra L. Cook, Moti Yung, and Angelos D. Keromytis. In Proceedings of the 3rd European Conference on Computer Network Defense (EC2ND). October 2007, Heraclion, Greece.
"The Security of Elastic Block Ciphers Against Key-Recovery Attacks"
"A Study of Malcode-Bearing Documents"
"From STEM to SEAD: Speculative Execution for Automated Defense"
"Using Rescue Points to Navigate Software Recovery (Short Paper)"
"Mediated Overlay Services (MOSES): Network Security as a Composable Service"
"Elastic Block Ciphers: The Basic Design"
Debra L. Cook, Moti Yung, and Angelos D. Keromytis. In Proceedings of the 2nd ACM Symposium on InformAtion, Computer and Communications Security (ASIACCS), pp. 350 - 355. March 2007, Singapore.
"Low Latency Anonymity with Mix Rings"
"W3Bcrypt: Encryption as a Stylesheet"
Angelos Stavrou, Michael E. Locasto, and Angelos D. Keromytis. In Proceedings of the 4th International Conference on Applied Cryptography and Network Security (ACNS), pp. 349 - 364. June 2006, Singapore.
"Software Self-Healing Using Collaborative Application Communities"
"Remotely Keyed Cryptographics: Secure Remote Display Access Using (Mostly) Untrusted Hardware"
"e-NeXSh: Achieving an Effectively Non-Executable Stack and Heap via System-Call Policing"
"Action Amplification: A New Approach To Scalable Administration"
Kostas G. Anagnostakis and Angelos D. Keromytis. In Proceedings of the 13th IEEE International Conference on Networks (ICON), vol. 2, pp. 862 - 867. November 2005, Kuala Lumpur, Malaysia.
"A Repeater Encryption Unit for IPv4 and IPv6"
Norimitsu Nagashima and Angelos D. Keromytis. In Proceedings of the 13th IEEE International Conference on Networks (ICON), vol. 1, pp. 335 - 340. November 2005, Kuala Lumpur, Malaysia.
"Countering DoS Attacks With Stateless Multipath Overlays"
"A Dynamic Mechanism for Recovering from Buffer Overflow Attacks"
"gore: Routing-Assisted Defense Against DDoS Attacks"
"FLIPS: Hybrid Adaptive Intrusion Prevention"
"Detecting Targeted Attacks Using Shadow Honeypots"
David Michael Turner, Vassilis Prevelakis, and Angelos D. Keromytis. In Proceedings of the 10th IEEE Symposium on Computers and Communications (ISCC), pp. 939 - 944. June 2005, Cartagena, Spain.
"An Email Worm Vaccine Architecture"
Stelios Sidiroglou, John Ioannidis, Angelos D. Keromytis, and Salvatore J. Stolfo. In Proceedings of the 1st Information Security Practice and Experience Conference (ISPEC), pp. 97 - 108. April 2005, Singapore.
"Building a Reactive Immune System for Software Services"
"Conversion and Proxy Functions for Symmetric Key Ciphers"
Debra L. Cook and Angelos D. Keromytis. In Proceedings of the IEEE International Conference on Information Technology: Coding and Computing (ITCC), Information and Security (IAS) Track, pp. 662 - 667. April 2005, Las Vegas, NV.
"The Effect of DNS Delays on Worm Propagation in an IPv6 Internet"
"MOVE: An End-to-End Solution To Network Denial of Service"
"CryptoGraphics: Secret Key Cryptography Using Graphics Cards"
Debra L. Cook, John Ioannidis, Angelos D. Keromytis, and Jake Luck. In Proceedings of the RSA Conference, Cryptographer's Track (CT-RSA), pp. 334 - 350. February 2005, San Francisco, CA.
"The Dual Receiver Cryptogram and Its Applications"
"Hydan: Hiding Information in Program Binaries"
"Recursive Sandboxes: Extending Systrace To Empower Applications"
"SQLrand: Preventing SQL Injection Attacks"
"CamouflageFS: Increasing the Effective Key Length in Cryptographic Filesystems on the Cheap"
"A Pay-per-Use DoS Protection Mechanism For The Web"
Angelos D. Keromytis and Vassilis Prevelakis. In Proceedings (electronic) of the NATO Information Systems Technology (IST) Panel Symposium on Adaptive Defense in Unclassified Networks. April 2004, Toulouse, France.
"Managing Access Control in Large Scale Heterogeneous Networks"
Angelos D. Keromytis, Kostas G. Anagnostakis, Sotiris Ioannidis, Michael Greenwald, and Jonathan M. Smith. In Proceedings (electronic) of the NATO NC3A Symposium on Interoperable Networks for Secure Communications (INSC). November 2003, The Hague, Netherlands.
"Countering Code-Injection Attacks With Instruction-Set Randomization"
"Using Graphic Turing Tests to Counter Automated DDoS Attacks Against Web Servers"
"EasyVPN: IPsec Remote Access Made Easy"
"A Cooperative Immunization System for an Untrusting Internet"
Kostas G. Anagnostakis, Michael B. Greenwald, Sotiris Ioannidis, Angelos D. Keromytis, and Dekai Li. In Proceedings of the 11th IEEE International Conference on Networks (ICON), pp. 403 - 408. September/October 2003, Sydney, Australia.
Matthew Burnside and Angelos D. Keromytis. In Proceedings of the 11th IEEE International Conference on Networks (ICON), pp. 313 - 318. September/October 2003, Sydney, Australia.
"WebSOS: Protecting Web Servers From DDoS Attacks"
Debra L. Cook, William G. Morein, Angelos D. Keromytis, Vishal Misra, and Dan Rubenstein. In Proceedings of the 11th IEEE International Conference on Networks (ICON), pp. 455 - 460. September/October 2003, Sydney, Australia.
"TAPI: Transactions for Accessing Public Infrastructure"
Matt Blaze, John Ioannidis, Sotiris Ioannidis, Angelos D. Keromytis, Pekka Nikander, and Vassilis Prevelakis. In Proceedings of the 8th IFIP Personal Wireless Communications (PWC) Conference, pp. 90 - 100. September 2003, Venice, Italy.
"Tagging Data In The Network Stack: mbuf_tags"
Angelos D. Keromytis. In Proceedings of the USENIX BSD Conference (BSDCon), pp. 125 - 131. September 2003, San Mateo, CA.
"The Design of the OpenBSD Cryptographic Framework"
"Secure and Flexible Global File Sharing"
Stefan Miltchev, Vassilis Prevelakis, Sotiris Ioannidis, John Ioannidis, Angelos D. Keromytis, and Jonathan M. Smith. In Proceedings of the USENIX Annual Technical Conference, Freenix Track, pp. 165 - 178. June 2003, San Antonio, TX.
"Experience with the KeyNote Trust Management System: Applications and Future Directions"
Matt Blaze, John Ioannidis, and Angelos D. Keromytis. In Proceedings of the 1st International Conference on Trust Management, pp. 284 - 300. May 2003, Heraclion, Greece.
Angelos D. Keromytis, Sotiris Ioannidis, Michael B. Greenwald, and Jonathan M. Smith. In Proceedings of the 3rd DARPA Information Survivability Conference and Exposition (DISCEX III), volume 1, pp. 178 - 188. April 2003, Washington, DC.
"Efficient, DoS-Resistant, Secure Key Exchange for Internet Protocols"
"Using Overlays to Improve Network Security"
"Designing an Embedded Firewall/VPN Gateway"
"A Study of the Relative Costs of Network Security Protocols"
Stefan Miltchev, Sotiris Ioannidis, and Angelos D. Keromytis. In Proceedings of the USENIX Annual Technical Conference, Freenix Track, pp. 41 - 48. June 2002, Monterey, CA.
"A Secure Plan (Extended Version)"
"Fileteller: Paying and Getting Paid for File Storage"
"Offline Micropayments without Trusted Hardware"
Matt Blaze, John Ioannidis, and Angelos D. Keromytis. In Proceedings of the 5th Financial Cryptography (FC) Conference, pp. 21 - 40. February 2001, Cayman Islands.
"Implementing Internet Key Exchange (IKE)"
Niklas Hallqvist and Angelos D. Keromytis. In Proceedings of the USENIX Annual Technical Conference, Freenix Track, pp. 201 - 214. June 2000, San Diego, CA.
"Transparent Network Security Policy Enforcement"
Angelos D. Keromytis and Jason Wright. In Proceedings of the USENIX Annual Technical Conference, Freenix Track, pp. 215 - 226. June 2000, San Diego, CA.
"Cryptography in OpenBSD: An Overview"
Theo de Raadt, Niklas Hallqvist, Artur Grabowski, Angelos D. Keromytis, and Niels Provos. In Proceedings of the USENIX Annual Technical Conference, Freenix Track, pp. 93 - 101. June 1999, Monterey, CA.
"DHCP++: Applying an efficient implementation method for fail-stop cryptographic protocols"
William A. Arbaugh, Angelos D. Keromytis, and Jonathan M. Smith. In Proceedings of the IEEE Global Internet (GlobeCom), pp. 59 - 65. November 1998, Sydney, Australia.
"Automated Recovery in a Secure Bootstrap Process"
William A. Arbaugh, Angelos D. Keromytis, David J. Farber, and Jonathan M. Smith. In Proceedings of the 5th Internet Society (ISOC) Symposium on Network and Distributed System Security (SNDSS), pp. 155 - 167. March 1998, San Diego, CA. An older version is available as University of Pennsylvania Technical Report MS-CIS-97-13.
Angelos D. Keromytis, John Ioannidis, and Jonathan M. Smith. In Proceedings of the IEEE Global Internet (GlobeCom), pp. 1948 - 1952. November 1997, Phoenix, AZ.
"Practical Software Diversification Using In-Place Code Randomization"
Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis. In "Moving Target Defense II: Application of Game Theory and Adversarial Modeling", Sushil Jajodia, Anup K. Ghosh, V. S. Subrahmanian, Vipin Swarup, Cliff Wang, and X. Sean Wang (editors), pp. 169 - 196. Springer, 2012.
Angelos D. Keromytis (editor). Lecture Notes in Computer Science (LNCS) 7397. Springer, 2012.
"Voice over IP Security: A Comprehensive Survey of Vulnerabilities and Academic Research"
Angelos D. Keromytis. Springer Briefs, ISBN 978-1-4419-9865-1, April 2011.
Angelos D. Keromytis. In Encyclopedia of Cryptography and Security, 2nd Edition, pp. 174 - 177. Springer, 2011.
"Network Bandwidth Denial of Service (DoS)"
Angelos D. Keromytis. In Encyclopedia of Cryptography and Security, 2nd Edition, pp. 836 - 838. Springer, 2011.
"Monitoring Technologies for Mitigating Insider Threats"
Brian M. Bowen, Malek Ben Salem, Angelos D. Keromytis, and Salvatore J. Stolfo. In Insider Threats in Cyber Security and Beyond, Matt Bishop, Dieter Gollman, Jeffrey Hunker, and Christian Probst (editors), pp. 197 - 218. Springer, 2010.
"Voice over IP: Risks, Threats, and Vulnerabilities"
Angelos D. Keromytis. In Cyber Infrastructure Security, Tarek Saadawi and Louis Jordan (editors). Strategic Study Institute (SSI), 2010.
Angelos D. Keromytis, Anil Somayaji, and M. Hossain Heydari (editors).
Steven M. Bellovin, Rosario Gennaro, Angelos D. Keromytis, and Moti Yung (editors). Lecture Notes in Computer Science (LNCS). Springer, 2008.
"Insider Attack and Cyber Security: Beyond the Hacker"
Salvatore J. Stolfo, Steven M. Bellovin, Angelos D. Keromytis, Sara Sinclair, and Sean W. Smith (editors). Advances in Information Security Series, ISBN 978-0387773216. Springer, 2008.
Kostantin Beznosov (Editor), Angelos D. Keromytis (editor), and M. Hossain Heydari (Editor).
"The Case for Self-Healing Software"
Angelos D. Keromytis and Vassilis Prevelakis. In Network Security: Current Status and Future Directions, Christos Douligeris and Dimitrios N. Serpanos (editors), pp. 33 - 49. Wiley - IEEE Press, April 2007.
"Composite Hybrid Techniques for Defending against Targeted Attacks"
"Trusted computing platforms and secure Operating Systems"
Angelos D. Keromytis. In Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft, Markus Jakobsson and Steven Myers (editors), pp. 387 - 405. Wiley, 2006.
"CryptoGraphics: Exploiting Graphics Cards for Security"
Debra Cook and Angelos D. Keromytis. Advances in Information Security Series, ISBN 0-387-29015-X. Springer, 2006.
Angelos D. Keromytis (editor). ACM Press, 2005.
John Ioannidis, Angelos D. Keromytis, and Moti Yung (editors). Lecture Notes in Computer Science (LNCS) 3531. Springer, 2005.
John Ioannidis and Angelos D. Keromytis. In Practical Handbook of Internet Computing, Munindar Singh (editor), pp. 47/1 - 47/16. CRC Press, 2004.
"Experiences Enhancing Open Source Security in the POSSE Project"
Jonathan M. Smith, Michael B. Greenwald, Sotiris Ioannidis, Angelos D. Keromytis, Ben Laurie, Douglas Maughan, Dale Rahn, and Jason L. Wright. In Free/Open Source Software Development, Stefan Koch (editor), pp. 242 - 257. Idea Group Publishing, 2004. Also re-published in Global Information Technologies: Concepts, Methodologies, Tools, and Applications, Felix B. Tan (editor), pp. 1587 - 1598. Idea Group Publishing, 2007.
"STRONGMAN: A Scalable Solution to Trust Management in Networks"
Angelos D. Keromytis. Ph.D. Thesis, University of Pennsylvania, November 2001.
"The Role of Trust Management in Distributed Systems Security"
Matt Blaze, Joan Feigenbaum, John Ioannidis, and Angelos D. Keromytis. In Secure Internet Programming: Issues in Distributed and Mobile Object Systems, Jan Vitek and Christian Jensen (editors), pp. 185 - 210. Springer-Verlag Lecture Notes in Computer Science State-of-the-Art series, 1999.
D. Scott Alexander, William A. Arbaugh, Angelos D. Keromytis, and Jonathan M. Smith. In Secure Internet Programming: Issues in Distributed and Mobile Object Systems, Jan Vitek and Christian Jensen (editors), pp. 433 - 451. Springer-Verlag Lecture Notes in Computer Science State-of-the-Art series, 1999.
"That’s the Way the Cookie Crumbles: Evaluating HTTPS Enforcing Mechanisms"
"Privacy Threats in E-Shopping (Position Paper)"
Jesus Diaz, Seung Geol Choi, David Arroyo, Angelos D. Keromytis, Fb Rodriguez, and Moti Yung. In Proceedings of the 10th Data Privacy Management International Workshop (DPM), pp. 217 - 225. September 2015, Vienna, Austria.
"Security and Privacy Measurements on Social Networks: Experiences and Lessons Learned"
Iasonas Polakis, Federico Maggi, Stefano Zanero, and Angelos D. Keromytis. In Proceedings of the 3rd International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS). September 2014, Wroclaw, Poland.
"Computational Decoys for Cloud Security"
George Kontaxis, Michalis Polychronakis, and Angelos D. Keromytis. In Proceedings of the ARO Workshop on Cloud Security, pp. 261 - 270. March 2013, Fairfax, VA.
"Exploiting Split Browsers for Efficiently Protecting User Data"
Angelika Zavou, Elias Athanasopoulos, Georgios Portokalidis, and Angelos D. Keromytis. In Proceedings of the ACM Cloud Computing Security Workshop (CCSW), pp. 37 - 42. October 2012, Raleigh, NC.
"The MEERKATS Cloud Security Architecture"
Angelos D. Keromytis, Roxana Geambasu, Simha Sethumadhavan, Salvatore J. Stolfo, Junfeng Yang, Azzedine Benameur, Marc Dacier, Matthew Elder, Darrell Kienzle, and Angelos Stavrou. In Proceedings of the 3rd International Workshop on Security and Privacy in Cloud Computing (ICDCS-SPCC), pp. 446 - 450. June 2012, Macao, China.
"Fog Computing: Mitigating Insider Data Theft Attacks in the Cloud"
Salvatore J. Stolfo, Malek Ben Salem, and Angelos D. Keromytis. In Proceedings of the Workshop on Research for Insider Threat (WRIT). May 2012, San Francisco, CA.
"REASSURE: A Self-contained Mechanism for Healing Software Using Rescue Points"
"Taint-Exchange: a Generic System for Cross-process and Cross-host Taint Tracking"
Angeliki Zavou, Georgios Portokalidis, and Angelos D. Keromytis. In Proceedings of the 6th International Workshop on Security (IWSEC), pp. 113 - 128. November 2011, Tokyo, Japan.
"The MINESTRONE Architecture: Combining Static and Dynamic Analysis Techniques for Software Security"
Angelos D. Keromytis, Salvatore J. Stolfo, Junfeng Yang, Angelos Stavrou, Anup Ghosh, Dawson Engler, Marc Dacier, Matthew Elder, and Darrell Kienzle. In Proceedings of the 1st Workshop on Systems Security (SysSec). July 2011, Amsterdam, Netherlands.
"The SPARCHS Project: Hardware Support for Software Security"
Simha Sethumadhavan, Salvatore J. Stolfo, David August, Angelos D. Keromytis, and Junfeng Yang. In Proceedings of the 1st Workshop on Systems Security (SysSec). July 2011, Amsterdam, Netherlands.
"Towards a Forensic Analysis for Multimedia Communication Services"
Dimitris Geneiatakis and Angelos D. Keromytis. In Proceedings of the 7th International Symposium on Frontiers in Networking with Applications (FINA), pp. 424 - 429. March 2011, Biopolis, Singapore.
"Security Research with Human Subjects: Informed Consent, Risk, and Benefits"
Maritza Johnson, Steven M. Bellovin, and Angelos D. Keromytis. In Proceedings of the 2nd Workshop on Ethics in Computer Security Research (WECSR). March 2011, Saint Lucia.
"Global ISR: Toward a Comprehensive Defense Against Unauthorized Code Execution"
Georgios Portokalidis and Angelos D. Keromytis. In Proceedings of the ARO Workshop on Moving Target Defense, pp. 49 - 76. October 2010, Fairfax, VA.
"Securing MANET Multicast Using DIPLOMA"
"Evaluating a Collaborative Defense Architecture for MANETs"
"Identifying Proxy Nodes in a Tor Anonymization Circuit"
"Online Network Forensics for Automatic Repair Validation"
"Return Value Predictability for Self-Healing"
"Asynchronous Policy Evaluation and Enforcement"
Matthew Burnside and Angelos D. Keromytis. In Proceedings of the 2nd Computer Security Architecture Workshop (CSAW), pp. 45 - 50. October 2008, Fairfax, VA.
"Race to the bottom: Malicious Hardware"
"Arachne: Integrated Enterprise Security Management"
Matthew Burnside and Angelos D. Keromytis. In Proceedings of the 8th Annual IEEE SMC Information Assurance Workshop (IAW), pp. 214 - 220. June 2007, West Point, NY.
Stelios Sidiroglou, Sotiris Ioannidis, and Angelos D. Keromytis. In Proceedings of the 3rd Workshop on Hot Topics in System Dependability (HotDep), pp. 102 - 106. June 2007, Edinburgh, UK.
"Data Sanitization: Improving the Forensic Utility of Anomaly Detection Systems"
Gabriela F. Cretu, Angelos Stavrou, Salvatore J. Stolfo, and Angelos D. Keromytis. In Proceedings of the 3rd Workshop on Hot Topics in System Dependability (HotDep), pp. 64 - 70. June 2007, Edinburgh, UK.
"Bridging the Network Reservation Gap Using Overlays"
Angelos Stavrou, David Michael Turner, Angelos D. Keromytis, and Vassilis Prevelakis. In Proceedings of the 1st Workshop on Information Assurance for Middleware Communications (IAMCOM), pp. 1 - 6. January 2007, Bangalore, India.
"Next Generation Attacks on the Internet"
Michael E. Locasto, Angelos Stavrou, and Angelos D. Keromytis. In Proceedings of the New Security Paradigms Workshop (NSPW), pp. 11 - 18. September 2006, Schloss Dagstuhl, Germany.
"Privacy as an Operating System Service"
Sotiris Ioannidis, Stelios Sidiroglou, and Angelos D. Keromytis. In Proceedings (electronic) of the 1st Workshop on Hot Topics in Security (HotSec). July 2006, Vancouver, Canada.
"PalProtect: A Collaborative Security Approach to Comment Spam"
Benny Wong, Michael E. Locasto, and Angelos D. Keromytis. In Proceedings of the 7th Annual IEEE SMC Information Assurance Workshop (IAW), pp. 170 - 175. June 2006, West Point, NY.
"Adding a Flow-Oriented Paradigm to Commodity Operating Systems"
Christian Soviani, Stephen A. Edwards, and Angelos D. Keromytis. In Proceedings of the Workshop on Interaction between Operating System and Computer Architecture (IOSCA), held in conjunction with the IEEE International Symposium on Workload Characterization, pp. 1 - 6. October 2005, Austin, TX.
"Speculative Virtual Verification: Policy-Constrained Speculative Execution"
Michael E. Locasto, Stelios Sidiroglou, and Angelos D. Keromytis. In Proceedings of the New Security Paradigms Workshop (NSPW), pp. 119 - 124. September 2005, Lake Arrowhead, CA.
"Application Communities: Using Monoculture for Dependability"
Michael E. Locasto, Stelios Sidiroglou, and Angelos D. Keromytis. In Proceedings of the 1st Workshop on Hot Topics in System Dependability (HotDep), held in conjunction with the International Conference on Dependable Systems and Networks (DSN), pp. 288 - 292. June 2005, Yokohama, Japan.
"Towards Collaborative Security and P2P Intrusion Detection"
Michael E. Locasto, Janak Parekh, Angelos D. Keromytis, and Salvatore J. Stolfo. In Proceedings of the 6th Annual IEEE SMC Information Assurance Workshop (IAW), pp. 333 - 339. June 2005, West Point, NY.
"FlowPuter: A Cluster Architecture Unifying Switch, Server and Storage Processing"
Alfred V. Aho, Angelos D. Keromytis, Vishal Misra, Jason Nieh, Kenneth A. Ross, and Yechiam Yemini. In Proceedings of the 1st International Workshop on Data Processing and Storage Networking: towards Grid Computing (DPSN), pp. 2/1 - 2/7. May 2004, Athens, Greece.
"One Class Support Vector Machines for Detecting Anomalous Windows Registry Accesses"
Katherine Heller, Krysta Svore, Angelos D. Keromytis, and Salvatore J. Stolfo. In Proceedings of the ICDM Workshop on Data Mining for Computer Security, held in conjunction with the 3rd International IEEE Conference on Data Mining, pp. 2 - 9. November 2003, Melbourn, FL.
"A Holistic Approach to Service Survivability"
Angelos D. Keromytis, Janak Parekh, Philip N. Gross, Gail Kaiser, Vishal Misra, Jason Nieh, Dan Rubenstein, and Salvatore J. Stolfo. In Proceedings of the 1st ACM Workshop on Survivable and Self-Regenerative Systems (SSRS), held in conjunction with the 10th ACM International Conference on Computer and Communications Security (CCS), pp. 11 - 22. October 2003, Fairfax, VA.
"High-Speed I/O: The Operating System As A Signalling Mechanism"
Matthew Burnside and Angelos D. Keromytis. In Proceedings of the ACM SIGCOMM Workshop on Network-I/O Convergence: Experience, Lessons, Implications (NICELI), held in conjunction with the ACM SIGCOMM Conference, pp. 220 - 227. August 2003, Karlsruhe, Germany.
"A Network Worm Vaccine Architecture"
Stelios Sidiroglou and Angelos D. Keromytis. In Proceedings of the 12th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), Workshop on Enterprise Security, pp. 220 - 225. June 2003, Linz, Austria.
"Design and Implementation of Virtual Private Services"
Sotiris Ioannidis, Steven M. Bellovin, John Ioannidis, Angelos D. Keromytis, and Jonathan M. Smith. In Proceedings of the 12th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), Workshop on Enterprise Security, Special Session on Trust Management in Collaborative Global Computing, pp. 269 - 274. June 2003, Linz, Austria.
"WebDAVA: An Administrator-Free Approach To Web File-Sharing"
Alexander Levine, Vassilis Prevelakis, John Ioannidis, Sotiris Ioannidis, and Angelos D. Keromytis. In Proceedings of the 12th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), Workshop on Distributed and Mobile Collaboration, pp. 59 - 64. June 2003, Linz, Austria.
"Protocols for Anonymity in Wireless Networks"
Matt Blaze, John Ioannidis, Angelos D. Keromytis, Tal Malkin, and Avi Rubin. In Proceedings of the 11th International Workshop on Security Protocols. April 2003, Cambridge, England.
"xPF: Packet Filtering for Low-Cost Network Monitoring"
Sotiris Ioannidis, Kostas G. Anagnostakis, John Ioannidis, and Angelos D. Keromytis. In Proceedings of the Workshop on High Performance Switching and Routing (HPSR), pp. 121 - 126. May 2002, Kobe, Japan.
"Toward Understanding the Limits of DDoS Defenses"
Matt Blaze, John Ioannidis, and Angelos D. Keromytis. In Proceedings of the 10th International Workshop on Security Protocols, Springer-Verlag Lecture Notes in Computer Science, vol. 2467. April 2002, Cambridge, England.
"Toward A Unified View of Intrusion Detection and Security Policy"
Matt Blaze, Angelos D. Keromytis, and Salvatore J. Stolfo. In Proceedings of the 10th International Workshop on Security Protocols, Springer-Verlag Lecture Notes in Computer Science, vol. 2467. April 2002, Cambridge, England.
William Aiello, Steven M. Bellovin, Matt Blaze, Ran Canetti, John Ioannidis, Angelos D. Keromytis, and Omer Reingold. In Proceedings of the 9th International Workshop on Security Protocols, Springer-Verlag Lecture Notes in Computer Science, vol. 2133, pp. 40 - 48. April 2001, Cambridge, England.
"Scalable Resource Control in Active Networks"
Kostas G. Anagnostakis, Michael W. Hicks, Sotiris Ioannidis, Angelos D. Keromytis, and Jonathan M. Smith. In Proceedings of the 2nd International Workshop for Active Networks (IWAN), pp. 343 - 357. October 2000, Tokyo, Japan.
Michael W. Hicks and Angelos D. Keromytis. In Proceedings of the 1st International Workshop for Active Networks (IWAN), pp. 307 - 314. June - July 1999, Berlin, Germany. An extended version is available as University of Pennsylvania Technical Report MS-CIS-99-14, and was also published in the Proceedings of the DARPA Active Networks Conference and Exposition (DANCE), May 2002.
"Trust Management and Network Layer Security Protocols"
Matt Blaze, John Ioannidis, and Angelos D. Keromytis. In Proceedings of the 7th International Workshop on Security Protocols, Springer-Verlag Lecture Notes in Computer Science, vol. 1796, pp. 103 - 108. April 1999, Cambridge, England.
"The SwitchWare Active Network Implementation"
D. Scott Alexander, Michael W. Hicks, Pankaj Kakkar, Angelos D. Keromytis, Marianne Shaw, Jonathan T. Moore, Carl A. Gunter, Trevor Jim, Scott M. Nettles, and Jonathan M. Smith. In Proceedings of the ACM SIGPLAN Workshop on ML, held in conjunction with the International Conference on Functional Programming (ICFP), pp. 67 - 76. September 1998, Baltimore, MD.
"KeyNote: Trust Management for Public-Key Infrastructures"
Matt Blaze, Joan Feigenbaum, and Angelos D. Keromytis. In Proceedings of the 6th International Workshop on Security Protocols, Springer-Verlag Lecture Notes in Computer Science, vol. 1550, pp. 59 - 63. April 1998, Cambridge, England. Also available as AT&T Technical Report 98.11.1.
"Transport Layer Security (TLS) Authorization Using KeyNote"
Angelos D. Keromytis. Request For Comments (RFC) 6042, October 2010.
"X.509 Key and Signature Encoding for the KeyNote Trust Management System"
Angelos D. Keromytis. Request For Comments (RFC) 5708, January 2010.
Adam J. Aviv, Michael E. Locasto, Shaya Potter, and Angelos D. Keromytis. In the Columbia Computer Science Student Research Symposium, Fall 2006.
Matt Blaze, Angelos D. Keromytis, Michael Richardson, and Luis Sanchez. Request For Comments (RFC) 3586, August 2003.
"On the Use of Stream Control Transmission Protocol (SCTP) with IPsec"
Steven M. Bellovin, John Ioannidis, Angelos D. Keromytis, and Randal R. Stewart. Request For Comments (RFC) 3554, June 2003.
"The Use of HMAC-RIPEMD-160-96 within ESP and AH"
Angelos D. Keromytis and Niels Provos. Request For Comments (RFC) 2857, June 2000.
"DSA and RSA Key and Signature Encoding for the KeyNote Trust Management System"
Matt Blaze, John Ioannidis, and Angelos D. Keromytis. Request For Comments (RFC) 2792, March 2000.
"The KeyNote Trust-Management System, Version 2"
Matt Blaze, Joan Feigenbaum, John Ioannidis, and Angelos D. Keromytis. Request For Comments (RFC) 2704, September 1999.
"Symantec Report on Rogue Security Software, July 2008 - June 2009"
Marc Fossi, Dean Turner, Eric Johnson, Trevor Mack, Teo Adams, Joseph Blackbird, Mo King Low, David McKinney, Marc Dacier, Angelos D. Keromytis, Corrado Leita, Marco Cova, Jon Orbeton, and Olivier Thonnard. Symantec Technical Report, October 2009.
"LinkWidth: A Method to Measure Link Capacity and Available Bandwidth using Single-End Probes"
Sambuddho Chakravarty, Angelos Stavrou, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-002-08, January 2008.
"Can P2P Replace Direct Download for Content Distribution?"
Alex Sherman, Angelos Stavrou, Jason Nieh, Cliff Stein, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-020-07, March 2007.
"A Model for Automatically Repairing Execution Integrity"
Michael E. Locasto, Gabriela F. Cretu, Angelos Stavrou, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-005-07, January 2007.
"Speculative Execution as an Operating System Service"
Michael E. Locasto and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-024-06, May 2006.
"Quantifying Application Behavior Space for Detection and Self-Healing"
Michael E. Locasto, Angelos Stavrou, Gabriela F. Cretu, Angelos D. Keromytis, and Salvatore J. Stolfo. Columbia University Computer Science Department Technical Report CUCS-017-06, April 2006.
"Bloodhound: Searching Out Malicious Input in Network Flows for Automatic Repair Validation"
Michael E. Locasto, Matthew Burnside, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-016-06, April 2006.
"Binary-level Function Profiling for Intrusion Detection and Smart Error Virtualization"
Michael E. Locasto and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-002-06, January 2006.
"A General Analysis of the Security of Elastic Block Ciphers"
Debra Cook, Moti Yung, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-038-05, September 2005.
"The Pseudorandomness of Elastic Block Ciphers"
Debra Cook, Moti Yung, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-037-05, September 2005.
"PachyRand: SQL Randomization for the PostgreSQL JDBC Driver"
Michael E. Locasto and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-033-05, August 2005.
"Elastic Block Ciphers: The Feistel Cipher Case"
Debra L. Cook, Moti Yung, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-021-04, May 2004.
Michael E. Locasto, Janak J. Parekh, Salvatore J. Stolfo, Angelos D. Keromytis, Tal Malkin, and Vishal Misra. Columbia University Computer Science Department Technical Report CUCS-012-04, March 2004.
Debra L. Cook, Moti Yung, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-010-04, February 2004.
William Aiello, Steven M. Bellovin, Matt Blaze, Ran Canetti, John Ioannidis, Angelos D. Keromytis, and Omer Reingold. IETF IPsec Working Group, April 2002,.
"CASPER: Compiler-Assisted Securing of Programs at Runtime"
Gaurav S. Kc, Stephen A. Edwards, Gail E. Kaiser, and Angelos D. Keromytis. Columbia University Computer Science Department Technical Report CUCS-025-02, 2002.
"The 'suggested ID' extension for IKE"
Angelos D. Keromytis and William Sommerfeld. IETF IPsec Working Group, November 2001.
Angelos D. Keromytis and William A. Simpson. IETF SPKI Working Group, September 1997.
"Active Network Encapsulation Protocol (ANEP)"
D. Scott Alexander, Bob Braden, Carl A. Gunter, Alden W. Jackson, Angelos D. Keromytis, Gary J. Minden, and David Wetherall. Active Networks Group, DARPA Active Networks Project, August 1997.
"Creating Efficient Fail-Stop Cryptographic Protocols"
Angelos D. Keromytis and Jonathan M. Smith. University of Pennsylvania Technical Report MS-CIS-96-32, December 1996.

References: V. 
 V. 
 V. 
 V. 
 V. 
 V.