Mailing Address Computer Science Laboratory SRI International 333 Ravenswood Ave Menlo Park, CA 94025 email: my first name @ csl.sri.com

I am a Senior Computer Scientist in the Computer Science Laborary at SRI International. I completed my Ph.D. in 2006 from the University of Wisconsin. My advisor was Dr. Paul Barford. I also spent two summers at ICSI working with Dr. Vern Paxson.

I am broadly interested in all aspects of network, system and software security including intrusion detection, honeynets, network measurements, software-defined networking, malware analysis, circumvention tehnologies, program analysis, network protocol design and distributed systems.

My current research focuses on anti-censorship systems, SDN security, cloud security, DNS analysis and Android platform security.

2013

• Sooel Son, Seungwon Shin, Vinod Yegneswaran, Phillip Porras, Guofei Gu. Model Checking Invariant Security Properties in OpenFlow Proceedings of IEEE International Conference on Communications (ICC), June 2013 ( )
• Seungwon Shin, Phillip Porras, Vinod Yegneswaran, Martin Fong, Guofei Gu, Mabry Tyson. FRESCO: Modular Composable Security Services for Software-Defined Networks. Proceedings of the Network and Distributed Security Symposium (NDSS), February 2013 ( pdf )

2012

• Phillip Porras, Seungwon Shin, Vinod Yegneswaran, Martin Fong, Mabry Tyson, Guofei Gu. A Security Enforcement Kernel for Openflow Networks. Proceedings of the ACM Sigcomm Workshop on Hot Topics in Software-Defined Networking (HotSDN), August 2012. ( pdf )
• Zachary Weinberg, Jeffrey Wang, Vinod Yegneswaran, Linda Briesemeister, Steven Cheung, Frank Wang, Dan Boneh. StegoTorus: A Camouflage Proxy for Tor Transport. Proceedings of the ACM Conference on Computer Communications Security (CCS), October 2012. ( pdf )
• Patrick Lincoln, Ian Mason, Phillip Porras, Vinod Yegneswaran, Zachary Weinberg, Jeroen Massar, William Allen Simpson, Paul Vixie, Dan Boneh. Bootstrapping Communications into an Anti-Censorship System. Proceedings of the USENIX Workshop on Free and Open Communications in the Internet (FOCI), August 2012. ( pdf )
• Matt Fredrikson, Richard Joiner, Somesh Jha, Thomas Reps, Phillip Porras, Hassen Saidi, Vinod Yegneswaran. Efficient Runtime Policy Enforcement Using Counterexample-Guided Abstraction Refinement. Proceedings of the 24th International Conference on Computer Aided Verification (CAV), July 2012. ( pdf )
• Yinzhi Cao, Vinod Yegneswaran, Phillip Porras, Yan Chen. PathCutter: Severing the Self-Propagation Path of XSS JavaScript Worms in Social Web Networks. Proceedings of the ISOC Network and Distributed Systems Security Conference (NDSS), February 2012. ( pdf )

2011

• Lakshman Nataraj, Vinod Yegneswaran, Phil Porras, Jian Zhang. A Comparative Assessment of Malware Classification using Binary Texture Analysis and Dynamic Analysis. Proceedings of ACM CCS Wokshop on Artificial Intelligence and Security (AISEC), October 2011. ( pdf )
• Yinzhi Cao, Vinod Yegneswaran, Phil Porras, Yan Chen. Poster: A Path-cutting Approach to Blocking XSS worms in Social Web Networks, ACM Workshop on Computer Commmunications Security (CCS), October 2011. ( pdf )

2010

• Jin-Yi Cai, Vinod Yegneswaran, Chris Alfeld, Paul Barford. Honeynet Games: A Game Theoretic Approach, Journal of Combinatorial Optimization (JOCO) 2010. (earlier version appeared in COCOON 2009)
• Long Lu, Vinod Yegneswaran , Phil Porras, Wenke Lee. BLADE: An Attack Agnostic Approach for Preventing Drive-By Exploits Proceedings of ACM Conference of Computer and Communications Security (CCS), October 2010. ( pdf )
• Hassen Saidi, Phillip Porras, Vinod Yegneswaran. Experiences in Malware Binary Deobfuscation. Proceedings of Virus Bulletin Conference (VB). 2010. ( pdf )
• Hassen Saidi, Phillip Porras, Vinod Yegneswaran. An Analysis of the ikee.B iPhone Botnet. Proceedings of MOBISEC, 2010. ( pdf )

2009

• Paul Barford, Yan Chen, Anup Goyal, Zhichun Li, Vern Paxson, Vinod Yegneswaran. Employing Honeynets for Network Situational Awareness, Series: Advances in Information Security Springer. 2009. ( link ) (earlier version appeared in Hotnets 2006)
• Jin-Yi Cai, Vinod Yegneswaran, Chris, Alfeld, Paul Barford. An Attacker Defender Game for Honeynets. Proceedings of 15th International Computing and Combinatorics Conference (COCOON). June 2009. ( pdf )
• Ikpeme Erete, Vinod Yegneswaran, Phillip Porras. ALICE@home: Distributed Framework for Detecting Malicious Sites. Proceedings of Recent Advances in Intrusion Detection (RAID). September 2009. (extended abstract). ( pdf )
• Long Lu, Vinod Yegneswaran, Phillip Porras, Wenke Lee. BLADE: Slashing the Invisible Channel of Drive-by Download Malware. Proceedings of Recent Advances in Intrusion Detection (RAID). September 2009. (extended abstract). ( pdf )
• Guofei Gu, Vinod Yegneswaran, Phillip Porras, Jennifer Stoll, Wenke Lee. Active Botnet Probing to Identify Obscure Command and Control Channels, Proceedings of ACSAC. December 2009. ( pdf )
• Phillip Porras, Hassen Saidi, Vinod Yegneswaran. A Foray into Conficker's Logic and Rendezvous Points. Proceedings of the USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET). August 2009. ( pdf )
• Phillip Porras, Hassen Saidi, Vinod Yegneswaran. Conficker C Analysis. SRI Technical Report. 2009. ( pdf )
• Phillip Porras, Hassen Saidi, Vinod Yegneswaran. Conficker C P2P Protocol and Implementation. SRI Technical Report. 2009. ( pdf )
• Zhaosheng Zhu, Vinod Yegneswaran, Yan Chen. Using Failure Information Analysis to Identify Enterprise Zombies. Proceedings of SECURECOMM. September 2009. ( pdf )

2008

• Monirul Sharif, Vinod Yegneswaran, Hassen Saidi, Phillip Porras, Wenke Lee. Eureka: A Framework for Enabling Static Malware Analysis. European Symposium on Research in Computer Security (ESORICS). September 2008. ( pdf )

2007

• Guofei Gu, Phillip Porras, Vinod Yegneswaran, Martin Fong, Wenke Lee. BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation. Usenix Security Symposium. August 2007. ( pdf )
• Phillip Porras; Hassen Saidi; Vinod Yegneswaran. A Multi-perspective Analysis of the Storm Worm. SRI Technical Report. November 2007. ( pdf )
• Vinod Yegneswaran, Chris, Alfeld, Paul Barford, Jin-Yi Cai. Camoflauging Honeynets. IEEE Infocom Global Internet Symposium. May 2007. ( pdf )

2003-2006

• Vikas Garg, Vinod Yegneswaran, Paul Barford. Improving NIDS Performance Through Hardware Based Connection Filtering. Proceedings of the IEEE International Conference on Communications. (ICC 2006). ( pdf ).
• Chen, Beechung, Vinod Yegneswaran, Paul Barford, Ramakrishnan, Raghu. Toward a Query Language for Network Attack Data. Proceedings of the Second IEEE Workshop on Networks Meets Databases. (NetDB 2006). ( pdf ).
• Paul Barford, Rob Nowak, Rebecca Willett Vinod Yegneswaran. Toward a Model for Sources of Internet Background Radiation, To appear in the Proceedings of Passive and Active Measurements Conference (PAM 2006). ( pdf ).
• Paul Barford, Vinod Yegneswaran. An Inside Look at Botnets . Special Workshop on Malware Detection. Advances in Information Security. Springer Verlag. 2006 ( pdf ).
• Vinod Yegneswaran, Paul Barford, Vern Paxson. Using Honeynets for Internet Situational Awareness. Proceedings of the Fourth ACM Sigcomm Workshop on Hot Topics in Networking (Hotnets IV). ( pdf )
• Vinod Yegneswaran, Jonathon T. Giffin, Paul Barford, Somesh Jha. An Architecture for Generating Semantics-Aware Signatures . Proceedings of the USENIX Security Symposium. August 2005. ( pdf )
• Joel Sommers, Vinod Yegneswaran, Paul Barford. A Framework for Malicious Workload Generation. Proceedings of ACM SIGCOMM/USENIX Internet Measurement Conference. October 2004 ( pdf )
• Ruoming Pang, Vinod Yegneswaran, Paul Barford, Paxson, Vern, Larry Peterson. Characteristics of Internet Background Radiation . Proceedings of the ACM SIGCOMM/USENIX Internet Measurement Conference. October 2004 ( pdf )
• Paul Barford, Somesh Jha, Vinod Yegneswaran. Fusion and Filtering in Distributed Intrusion Detection Systems. In Proceedings of the 42nd Annual Allerton Conference on Communication, Control and Computing. September 2004. ( pdf )
• Vinod Yegneswaran, Paul Barford, Dave Plonka. On the Design and Utility of Internet Sinks for Network Abuse Monitoring . In Proceedings of the Symposium on Recent Advances in Intrusion Detection (RAID). September 2004 ( pdf )
• Vinod Yegneswaran, Paul Barford, Somesh Jha. Global Intrusion Detection in the DOMINO Overlay System> In Proceedings of Network and Distributed Security Symposium (NDSS). February 2004. ( pdf )
• Vinod Yegneswaran, Paul Barford, Johannes Ullrich. Internet Intrusions: Global Characteristics and Prevalence. In Proceedings of ACM SIGMETRICS, June 2003. ( pdf )

• PC Member WWW 2012;
• PC Member Securecomm 2009, 2011, 2012;
• PC Member ICISS 2012;
• PC Member RAID 2010;
• PC Member LEET 2010;
• PC Member CSET 2008, 2009, 2010;
• PC Member Malware 2008, 2009;
• PC Member Worm 2007;

• Cyber-TA
• Logic and Data Flow Extraction for Live and Informed Malware Execution
• CLEANSE: Cross-Layer Large-Scale Efficient Analysis of Network Activities to SEcure the Internet
• Host-Rx: An Expert System for Automated Malware Diagnosis
• MRC^2

I have had the pleasure of collaborating with the following summer students at SRI:

• 2012: Hongyu Gao; Seungwon Shin; Lei Wei; Chao Yang
• 2011: Yinzhi Cao; Lakshmanan Nataraj; Seungwon Shin; Samuel Son; Zachary Weinberg
• 2010: Prithvi Bisht; Andrew White
• 2009: Drew Davidson; Long Lu; Matt Fredrickson
• 2008: Ikpeme Erete; Zhiqiang Lin; Zhaosheng Zhu
• 2007: Guofei Gu; Aravind Naraynan; Monirul Sharif