Hao Wang

TL;DR: The work departs from previous approaches by focusing on the semantics of the program and vulnerability exercised by a sample exploit instead of the semantics or syntax of the exploit itself, and can automatically generate a vulnerability signature using a single exploit of much higher quality than previous exploit-based signatures.

TL;DR: This work investigates new techniques for automatically generating sound vulnerability signatures with fewer false negatives than previous research using program binary analysis and creates algorithms for generating vulnerability signatures that are based on computing weakest preconditions (WP).

TL;DR: A tool to automatically generate network-level signatures for spyware by correlating user input with network traffic generated by the untrusted program, which generates a signature characterizing the malicious substrate of the spyware's network behavior.

TL;DR: The authors developed a reputation system to help buyers identify sellers whose auctions seem price-inflated, based upon models that characterize sellers according to statistical metrics related to price inflation. But their reputation system does not address the concern of a buyer shopping for commodities, finding a good bargain.

TL;DR: This paper creates vulnerability signatures which are guaranteed to have zero false positives, and shows how to automate signature creation for any vulnerability that can be detected by a runtime monitor.