Reading List from Spring 2009 (The 2010 session will have a different reading list):

  1. [paxson-ccs08] C. Kanich, C. Kreibich, K. Levchenko, B. Enright, G.M. Voelker, V. Paxson, and S. Savage, Spamalytics: An Empirical Analysis of Spam Marketing Conversion, ACM Conference on Computer Security (CCS), 2008.
  2. [wang-www07] Yi-Min Wang, M. Ma, Y. Niu, and H. Chen, Spam Double-Funnel: Connecting Web Spammers with Advertisers, International World Wide Web Conference (WWW), 2007.
  3. [provos-security08] N. Provos, P. Mavrommatis, M.A. Rajab, and F. Monrose, All Your iFRAMEs Point to Us, USENIX Security Symposium, 2008.
  4. [chen-ccs08] S. Crites, F. Hsu, and H. Chen, OMash: Enabling Secure Web Mashups via Object Abstractions, ACM Conference on Computer and Communications Security (CCS), 2008.
  5. [chen-ups08] Y. Niu, F. Hsu and H. Chen, iPhish: Phishing Vulnerabilities on Consumer Electronics, Usability, Psychology, and Security, 2008.
  6. [bisht-dimva08] P. Bisht and V.N. Venkatakrishnan, XSS-GUARD: Precise Dynamic Prevention of Cross-Site Scripting Attacks, Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), 2008
  7. [passerini-dimva08] E. Passerini, R. Paleari, L. Martignoni, D. Bruschi, FluXOR: Detecting and Monitoring Fast-Flux Service Networks, Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), 2008
  8. [wang-raid08] Z. Wang, X. Jiang, W. Cui, and X. Wang, Countering Persistent Kernel Rootkits Through Systematic Hook Discovery, International Symposium on Recent Advances in Intrusion Detection (RAID), 2008.
  9. [guo-raid08] F. Guo, P. Ferrie, and T.C. Chiueh, A Study of the Packer Problem and Its Solutions, International Symposium on Recent Advances in Intrusion Detection (RAID), 2008.
  10. [ahmed-infocomMini08] M.S. Ahmed, E. Al-Shaer, and L. Khan, A Novel Quantitative Approach For Measuring Network Security, IEEE Infocom Mini Conference, 2008.
  11. [monrose-oakland08] C.V. Wright, L.s Ballard, S.E. Coull, F. Monrose, and G.M. Masson, Spot me if you can: Uncovering spoken phrases in encrypted VoIP conversations, IEEE Security and Privacy Symposium, 2008.
  12. [faloutsos-infocomMini08] A. Banerjee, D. Barman, M. Faloutsos, and L. Bhuyan, Cyber-Fraud is One Typo Away, IEEE Infocom Mini Conference, 2008.
  13. [xie-sigcomm08] Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov, Spamming Botnets: Signatures and Characteristics, ACM SIGCOMM, 2008.
  14. [kuzmanovic-sigcomm08] I. Trestian, S. Ranjan, A. Kuzmanovic, and A. Nucci, Unconstrained Endpoing Profiling (Googling the Internet), ACM SIGCOMM, 2008.
  15. [spring-sigcomm08] R. Sherwood, A. Bender, and N. Spring, DisCarte: A Disjunctive Internet Cartographer, ACM SIGCOMM, 2008.
  16. [feamster-pam09] M. Konte, N. Feamster, and J. Jung, Dynamics of Online Scam Hosting Infrastructure, Passive and Active Measurement Conference (PAM), 2009.
  17. [faloutsos-gi08] Y. Beyene, M. Faloutsos, C. Faloutsos, and P. Chau, The eBay Graph: How Do Online Auction Users Interact?, IEEE Global Internet (GI) Symposium, 2008.
  18. [dagon-ccs08] D. Dagon, M. Antonakakis, P. Vixie, T. Jinmei, and W. Lee, Increased DNS Forgery Resistance Through 0x20-Bit Encoding (SecURItY viA LeET QueRieS), ACM Conference on Computer Communication Security (CCS), 2008.
  19. [feldmann-pam08] F. Schneider, S. Agarwal, T. Alpcan, and A. Feldmann, The New Web: Characterizing AJAX Traffic, Passive and Active Measurement Conference (PAM), 2008.
  20. [gribble-nsdi08] C. Reis, S.D. Gribble, T. Kohno, and N.C. Weaver, Detecting In-Flight Page Changes with Web Tripwires, USENIX Conference on Networked Systems Design and Implementation (NSDI), 2008.
  21. [krishnamurthy-nsdi08] E. Katz-Bassett, H.V. Madhyastha, J.P. John, A. Krishnamurthy, D. Wetherall, and T. Anderson, Studying Black Holes in the Internet with Hubble, USENIX Conference on Networked Systems Design and Implementation (NSDI), 2008.
  22. [lakshmi-nsdi08] S. Surana, R. Patra, S. Nedevschi, M. Ramos, L. Subramanian, Y. Ben-David, and E. Brewer, Beyond Pilots: Keeping Rural Wireless Networks Alive, USENIX Conference on Networked Systems Design and Implementation (NSDI), 2008.
  23. [arlitt-pam08] P. Gill, M. Arlitt, Z. Li, and A. Mahanti, The Flattening Internet Topology: Natural Evolution, Unsightly Barnacles or Contrived Collapse?, Passive and Active Measurement Conference (PAM), 2008.
  24. [herley-nspw08] C. Herley and D. Florencio, A Profitless Endeavor: Phishing as Tragedy of the Commons New Security Paradigms Workshop, 2008.
  25. [singh-sigcomm03] M. Gupta and S. Singh, Greening of the Internet, ACM SIGCOMM, 2003.
  26. [wang-msr09] H.J. Wang, C. Grier, A. Moshchuk, S.T. King, P. Choudhury, and H. Venter, The Multi-Principal OS Construction of the Gazelle Web Browser, Microsoft Research Technical Report, 2009.
  27. [kho-gi08] W. Kho, S. Baset, and H. Schulzrinne, Skype Relay Calls: Measurements and Experiments, IEEE Global Internet (GI) Symposium, 2008.
  28. [halderman-security06] J.A. Halderman and E.W. Felten, Lessons from the Sony CD DRM Episode, USENIX Security, 2006.
  29. [almeroth-pam08] B. Stone-Gross, C. Wilson, K. Almeroth, E. Belding, H. Zheng, and K. Papagiannaki, Malware in IEEE 802.11 Wireless Networks, Passive and Active Measurement Conference (PAM), 2008.
  30. [jindal-gi08] A. Jindal, C. Crutchfield, S. Goel, R. Kolluri, and R. Jain, The Mobile Web Is Structurally Different, IEEE Global Internet (GI) Symposium, 2008.
  31. [ohm-imc07] P. Ohm, D. Sicker, and D. Grunwald, Legal Issues Surrounding Monitoring During Network Research (Invited Paper), ACM SIGCOMM/USENIX Internet Measurement Conference (IMC), 2007.
  32. [dean-osdi04] J. Dean and S. Ghemavat, MapReduce: Simplified Data Processing on Large Clusters, ACM Conference on Operating Systems Design and Implementation (OSDI), 2004.
  33. [paxson-ccs07] J. Franklin, V. Paxson, A. Perrig, and S. Savage, An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants, ACM Conference on Computer Communication Security (CCS) 2007.
  34. [ohm-law09] P. Ohm, The Rise and Fall of Invasive ISP Surveillance, University of Illinois Law Review, 2009.
  35. [shue-icc09] C. Shue and M. Gupta, Sensitive Data Requests: Do Sites Ask Correctly?, IEEE International Conference on Communications (ICC), 2009.
  36. [shue-woot08] C. Shue, A. Kalafut, and M. Gupta, Exploitable Redirects on the Web: Identification, Prevalence, and Defense , USENIX Workshop On Offensive Technologies (WOOT), 2008.
  37. [deibert-tr09] R. Deibert et al, Tracking Ghostnet: Investigating a Cyber-Espionage Network, Information Warfare Monitor Technical Report, 2009.
  38. [zhao-nsdi09] Y. Zhao, Y. Xie, F. Yu, Q. Ke, Y. Yu, Y. Chen, E. Gillum, BotGraph: Large Scale Spamming Botnet Detection, USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2009.
  39. [pai-nsdi09] A. Badam, K. Park, V.S. Pai, L.L. Peterson, HashCache: Cache Storage for the Next Billion, USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2009.