Evangelos P. Markatos

TL;DR: An intrusion detection system based on the Snort open-source NIDS that exploits the underutilized computational power of modern graphics cards to offload the costly pattern matching operations from the CPU, and thus increase the overall processing throughput.

TL;DR: It is shown that despite a considerable overhead in the instrumentation of the shadow honeypot (up to 20% for Apache), the overall impact on the system is diminished by the ability to minimize the rate of false-positives.

TL;DR: The authors propose a new loop scheduling algorithm that attempts to simultaneously balance the workload, minimize synchronization, and co-locate loop iterations with the necessary data and conclude that loop scheduling algorithms for shared-memory multiprocessors cannot afford to ignore the location of data, particularly in light of the increasing disparity between processor and memory speeds.

TL;DR: This paper examines a new proactive defense mechanism called Network Address Space Randomization (NASR) whose objective is to harden networks specifically against hitlist worms and forces them to exhibit features that make them easier to contain at the perimeter.

TL;DR: A set of kernel mechanisms and conventions designed to accord first-class status to user-level threads are described, allowing them to be used in any reasonable way that traditional kernel-provided processes can be used, while leaving the details of their implementation touser-level code.