Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Bradley Stephenson

dblp:44/4123 · DBLP profile ↗
← Back
2ranked-venue papers
2as first author
0since 2021 · last 2009
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Systems, architecture and hardware · 1 · 1 first-authorComputer networks · 1 · 1 first-author

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
2 papers
Network security · 59% Malware analysis · 36% Biometric security · 5%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Network security › intrusion detection and prevention
intrusion detection
0.122009
A Quasi-Species Model for the Propagation and Containment of Polymorphic Worms · IEEE Trans. Computers 2009
A Quasi-Species Approach for Modeling the Dynamics of Polymorphic Worms · INFOCOM 2006
Network security › malware propagation
worm propagation
0.112009
A Quasi-Species Model for the Propagation and Containment of Polymorphic Worms · IEEE Trans. Computers 2009
Malware analysis › malware
polymorphic worms
0.112006
A Quasi-Species Approach for Modeling the Dynamics of Polymorphic Worms · INFOCOM 2006
Malware analysis › malware propagation modeling
worm propagation modeling
0.112006
A Quasi-Species Approach for Modeling the Dynamics of Polymorphic Worms · INFOCOM 2006
Biometric security
signature analysis
0.012006
A Quasi-Species Approach for Modeling the Dynamics of Polymorphic Worms · INFOCOM 2006

Methods — techniques the papers use, named apart from their topics

simulation · 0.2quasi-species model · 0.1quasi-species coevolution model · 0.1
YearPublicationVenuePosition
2009 A Quasi-Species Model for the Propagation and Containment of Polymorphic Worms
abstract
Polymorphic computer worms are characterized by their ability to change their byte sequence as they replicate and propagate, thereby aiming to thwart intrusion detection systems (IDSes). In this letter, we propose a model based on coevolution of biological quasi-species to characterize the propagation of polymorphic worms and the effect of IDSes on their dynamics. The model is used to derive the conditions required for the IDS to contain the worm. The model is validated using simulations.
Bradley Stephenson, Biplab Sikdar 0001
IEEE Trans. Computers1
2006 A Quasi-Species Approach for Modeling the Dynamics of Polymorphic Worms
abstract
Polymorphic worms can change their byte sequence as they replicate and propagate, thwarting the traditional signature analysis techniques used by many intrusion detection systems (IDSes). As the incidence of such worms becomes more frequent, it is important to understand their behavior and interaction with the IDSes in order to develop effective strategies to control their propagation. In this paper, we propose a model based on coevolution of biological quasi-species to characterize the propagation of polymorphic worms and the effects of dynamic IDSes which improve their detection capability with time. The model is used to derive the maximum allowable response time of the IDS in order to contain the worm and the optimal mutation rate the worm should use in order to escape an IDS with a given response time. The observations from the model are validated using simulations with the ADMmutate polymorphic engine.
Bradley Stephenson, Biplab Sikdar 0001
INFOCOM1