29 citations · 82 across the 10 of their papers we have counts for
6 papers · 1 filter
Build It, Break It, Fix It: Contesting Secure Development
James Parker, Michael Hicks, Andrew Ruef +5
Typical security contests focus on breaking or mitigating the impact of buggy systems. We present the Build-it, Break-it, Fix-it (BIBIFI) contest, which aims to assess the ability…
Evaluating Fuzz Testing
George Klees, Andrew Ruef, Benji Cooper +2
Fuzz testing has enjoyed great success at discovering security critical bugs in real software. Recently, researchers have devoted significant effort to devising new fuzzing techniq…
Summoning Demons: The Pursuit of Exploitable Bugs in Machine Learning
Rock Stevens, Octavian Suciu, Andrew Ruef +3
Governments and businesses increasingly rely on data analytics and machine learning (ML) for improving their competitive edge in areas such as consumer satisfaction, threat intelli…
Build It, Break It, Fix It: Contesting Secure Development
Andrew Ruef, Michael Hicks, James Parker +3
Typical security contests focus on breaking or mitigating the impact of buggy systems. We present the Build-it Break-it Fix-it BIBIFI contest which aims to assess the ability to se…
Cyber-Deception and Attribution in Capture-the-Flag Exercises
Eric Nunes, Nimish Kulkarni, Paulo Shakarian +2
Attributing the culprit of a cyber-attack is widely considered one of the major technical and policy challenges of cyber-security. The lack of ground truth for an individual respon…
The Dragon and the Computer: Why Intellectual Property Theft is Compatible with Chinese Cyber-Warfare Doctrine
Paulo Shakarian, Jana Shakarian, Andrew Ruef
Along with the USA and Russia, China is often considered one of the leading cyber-powers in the world. In this excerpt, we explore how Chinese military thought, developed in the 19…