29 citations · 82 across the 10 of their papers we have counts for
10 papers
Build It, Break It, Fix It: Contesting Secure Development
James Parker, Michael Hicks, Andrew Ruef +5
Typical security contests focus on breaking or mitigating the impact of buggy systems. We present the Build-it, Break-it, Fix-it (BIBIFI) contest, which aims to assess the ability…
A Counterexample-guided Approach to Finding Numerical Invariants
ThanhVu Nguyen, Timos Antopoulos, Andrew Ruef +1
Numerical invariants, e.g., relationships among numerical variables in a program, represent a useful class of properties to analyze programs. General polynomial invariants represen…
Evaluating Fuzz Testing
George Klees, Andrew Ruef, Benji Cooper +2
Fuzz testing has enjoyed great success at discovering security critical bugs in real software. Recently, researchers have devoted significant effort to devising new fuzzing techniq…
Evaluating Design Tradeoffs in Numeric Static Analysis for Java
Shiyi Wei, Piotr Mardziel, Andrew Ruef +2
Numeric static analysis for Java has a broad range of potentially useful applications, including array bounds checking and resource usage estimation. However, designing a scalable…
Summoning Demons: The Pursuit of Exploitable Bugs in Machine Learning
Rock Stevens, Octavian Suciu, Andrew Ruef +3
Governments and businesses increasingly rely on data analytics and machine learning (ML) for improving their competitive edge in areas such as consumer satisfaction, threat intelli…
Argumentation Models for Cyber Attribution
Eric Nunes, Paulo Shakarian, Gerardo I. Simari +1
A major challenge in cyber-threat analysis is combining information from different sources to find the person or the group responsible for the cyber-attack. It is one of the most i…