@inproceedings {291092,
	author = {Julien Piet and Aashish Sharma and Vern Paxson and David Wagner},
	title = {Network Detection of Interactive {SSH} Impostors Using Deep Learning},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {4283--4300},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/piet},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {274594,
	author = {Grant Ho and Mayank Dhiman and Devdatta Akhawe and Vern Paxson and Stefan Savage and Geoffrey M. Voelker and David Wagner},
	title = {Hopper: Modeling and Detecting Lateral Movement},
	booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
	year = {2021},
	isbn = {978-1-939133-24-3},
	pages = {3093--3110},
	url = {https://www.usenix.org/conference/usenixsecurity21/presentation/ho},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {251524,
	author = {Jianjun Chen and Vern Paxson and Jian Jiang},
	title = {Composition Kills: A Case Study of Email Sender Authentication},
	booktitle = {29th USENIX Security Symposium (USENIX Security 20)},
	year = {2020},
	isbn = {978-1-939133-17-5},
	pages = {2183--2199},
	url = {https://www.usenix.org/conference/usenixsecurity20/presentation/chen-jianjun},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {236246,
	author = {Grant Ho and Asaf Cidon and Lior Gavish and Marco Schweighauser and Vern Paxson and Stefan Savage and Geoffrey M. Voelker and David Wagner},
	title = {Detecting and Characterizing Lateral Phishing at Scale},
	booktitle = {28th USENIX Security Symposium (USENIX Security 19)},
	year = {2019},
	isbn = {978-1-939133-06-9},
	address = {Santa Clara, CA},
	pages = {1273--1290},
	url = {https://www.usenix.org/conference/usenixsecurity19/presentation/ho},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {220223,
	author = {Michael Carl Tschantz and Sadia Afroz and Shaarif Sajid and Shoaib Asif Qazi and Mobin Javed and Vern Paxson},
	title = {A Bestiary of Blocking: The Motivations and Modes behind Website Unavailability},
	booktitle = {8th USENIX Workshop on Free and Open Communications on the Internet (FOCI 18)},
	year = {2018},
	address = {Baltimore, MD},
	url = {https://www.usenix.org/conference/foci18/presentation/tschantz},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {217597,
	author = {Jianjun Chen and Jian Jiang and Haixin Duan and Tao Wan and Shuo Chen and Vern Paxson and Min Yang},
	title = {We Still {Don{\textquoteright}t} Have Secure {Cross-Domain} Requests: an Empirical Study of {CORS}},
	booktitle = {27th USENIX Security Symposium (USENIX Security 18)},
	year = {2018},
	isbn = {978-1-939133-04-5},
	address = {Baltimore, MD},
	pages = {1079--1093},
	url = {https://www.usenix.org/conference/usenixsecurity18/presentation/chen-jianjun},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {203856,
	author = {Rachee Singh and Rishab Nithyanand and Sadia Afroz and Paul Pearce and Michael Carl Tschantz and Phillipa Gill and Vern Paxson},
	title = {Characterizing the Nature and Dynamics of Tor Exit Blocking},
	booktitle = {26th USENIX Security Symposium (USENIX Security 17)},
	year = {2017},
	isbn = {978-1-931971-40-9},
	address = {Vancouver, BC},
	pages = {325--341},
	url = {https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/singh},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {203674,
	author = {Grant Ho and Aashish Sharma and Mobin Javed and Vern Paxson and David Wagner},
	title = {Detecting Credential Spearphishing in Enterprise Settings},
	booktitle = {26th USENIX Security Symposium (USENIX Security 17)},
	year = {2017},
	isbn = {978-1-931971-40-9},
	address = {Vancouver, BC},
	pages = {469--485},
	url = {https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/ho},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {203832,
	author = {Paul Pearce and Ben Jones and Frank Li and Roya Ensafi and Nick Feamster and Nick Weaver and Vern Paxson},
	title = {Global Measurement of {DNS} Manipulation},
	booktitle = {26th USENIX Security Symposium (USENIX Security 17)},
	year = {2017},
	isbn = {978-1-931971-40-9},
	address = {Vancouver, BC},
	pages = {307--323},
	url = {https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/pearce},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {194944,
	author = {Matthias Vallentin and Vern Paxson and Robin Sommer},
	title = {{VAST}: A Unified Platform for Interactive Network Forensics},
	booktitle = {13th USENIX Symposium on Networked Systems Design and Implementation (NSDI 16)},
	year = {2016},
	isbn = {978-1-931971-29-4},
	address = {Santa Clara, CA},
	pages = {345--362},
	url = {https://www.usenix.org/conference/nsdi16/technical-sessions/presentation/vallentin},
	publisher = {USENIX Association},
	month = mar
}
@inproceedings {197270,
	author = {Frank Li and Zakir Durumeric and Jakub Czyz and Mohammad Karami and Michael Bailey and Damon McCoy and Stefan Savage and Vern Paxson},
	title = {You{\textquoteright}ve Got Vulnerability: Exploring Effective Vulnerability Notifications},
	booktitle = {25th USENIX Security Symposium (USENIX Security 16)},
	year = {2016},
	isbn = {978-1-931971-32-4},
	address = {Austin, TX},
	pages = {1033--1050},
	url = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/li},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {191996,
	author = {Bill Marczak and Nicholas Weaver and Jakub Dalek and Roya Ensafi and David Fifield and Sarah McKune and Arn Rey and John Scott-Railton and Ron Deibert and Vern Paxson},
	title = {An Analysis of {China{\textquoteright}s} {{\textquotedblleft}Great} {Cannon{\textquotedblright}}},
	booktitle = {5th USENIX Workshop on Free and Open Communications on the Internet (FOCI 15)},
	year = {2015},
	address = {Washington, D.C.},
	url = {https://www.usenix.org/conference/foci15/workshop-program/presentation/marczak},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {184485,
	author = {Alexandros Kapravelos and Chris Grier and Neha Chachra and Christopher Kruegel and Giovanni Vigna and Vern Paxson},
	title = {Hulk: Eliciting Malicious Behavior in Browser Extensions},
	booktitle = {23rd USENIX Security Symposium (USENIX Security 14)},
	year = {2014},
	isbn = {978-1-931971-15-7},
	address = {San Diego, CA},
	pages = {641--654},
	url = {https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/kapravelos},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {184469,
	author = {William R. Marczak and John Scott-Railton and Morgan Marquis-Boire and Vern Paxson},
	title = {When Governments Hack Opponents: A Look at Actors and Technology},
	booktitle = {23rd USENIX Security Symposium (USENIX Security 14)},
	year = {2014},
	isbn = {978-1-931971-15-7},
	address = {San Diego, CA},
	pages = {511--525},
	url = {https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/marczak},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {180362,
	author = {Vern Paxson and Mihai Christodorescu and Mobin Javed and Josyula Rao and Reiner Sailer and Douglas Lee Schales and Mark Stoecklin and Kurt Thomas and Wietse Venema and Nicholas Weaver},
	title = {Practical Comprehensive Bounds on Surreptitious Communication over {DNS}},
	booktitle = {22nd USENIX Security Symposium (USENIX Security 13)},
	year = {2013},
	isbn = {978-1-931971-03-4},
	address = {Washington, D.C.},
	pages = {17--32},
	url = {https://www.usenix.org/conference/usenixsecurity13/technical-sessions/presentation/paxson},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {179185,
	author = {Sheharbano Khattak and Mobin Javed and Philip D. Anderson and Vern Paxson},
	title = {Towards Illuminating a Censorship Monitor{\textquoteright}s Model to Facilitate Evasion},
	booktitle = {3rd USENIX Workshop on Free and Open Communications on the Internet (FOCI 13)},
	year = {2013},
	address = {Washington, D.C.},
	url = {https://www.usenix.org/conference/foci13/workshop-program/presentation/khattak},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {182939,
	author = {Kurt Thomas and Damon McCoy and Chris Grier and Alek Kolcz and Vern Paxson},
	title = {{Trafficking} Fraudulent Accounts: The Role of the Underground Market in Twitter Spam and Abuse},
	booktitle = {22nd USENIX Security Symposium (USENIX Security 13)},
	year = {2013},
	isbn = {978-1-931971-03-4},
	address = {Washington, D.C.},
	pages = {195--210},
	url = {https://www.usenix.org/conference/usenixsecurity13/technical-sessions/paper/thomas},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {181313,
	author = {Kurt Thomas and Chris Grier and Vern Paxson},
	title = {Adapting Social Spam Infrastructure for Political Censorship},
	booktitle = {5th USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 12)},
	year = {2012},
	address = {San Jose, CA},
	url = {https://www.usenix.org/conference/leet12/workshop-program/presentation/thomas},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {180890,
	author = {Lorenzo Martignoni and Pongsin Poosankam and Matei Zaharia and Jun Han and Stephen McCamant and Dawn Song and Vern Paxson and Adrian Perrig and Scott Shenker and Ion Stoica},
	title = {Cloud Terminal: Secure Access to Sensitive Applications from Untrusted Systems},
	booktitle = {2012 USENIX Annual Technical Conference (USENIX ATC 12)},
	year = {2012},
	isbn = {978-931971-93-5},
	address = {Boston, MA},
	pages = {165--182},
	url = {https://www.usenix.org/conference/atc12/technical-sessions/presentation/martignoni},
	publisher = {USENIX Association},
	month = jun
}
@inproceedings {266523,
	author = {Juan Caballero and Chris Grier and Christian Kreibich and Vern Paxson},
	title = {Measuring {Pay-per-Install}: The Commoditization of Malware Distribution},
	booktitle = {20th USENIX Security Symposium (USENIX Security 11)},
	year = {2011},
	address = {San Francisco, CA},
	url = {https://www.usenix.org/conference/usenix-security-11/measuring-pay-install-commoditization-malware-distribution},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {266615,
	author = {Nicholas Weaver and Christian Kreibich and Vern Paxson},
	title = {Redirecting {DNS} for Ads and Profit},
	booktitle = {USENIX Workshop on Free and Open Communications on the Internet (FOCI 11)},
	year = {2011},
	address = {San Francisco, CA},
	url = {https://www.usenix.org/conference/foci11/redirecting-dns-ads-and-profit},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {266525,
	author = {Chris Kanich and Nicholas Weaver and Damon McCoy and Tristan Halvorson and Christian Kreibich and Kirill Levchenko and Vern Paxson and Geoffrey M. Voelker and Stefan Savage},
	title = {Show Me the Money: Characterizing Spam-advertised Revenue},
	booktitle = {20th USENIX Security Symposium (USENIX Security 11)},
	year = {2011},
	address = {San Francisco, CA},
	url = {https://www.usenix.org/conference/usenix-security-11/show-me-money-characterizing-spam-advertised-revenue},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {267477,
	author = {Chia Yuan Cho and Juan Caballero and Chris Grier and Vern Paxson and Dawn Song},
	title = {Insights from the Inside: A View of Botnet Management from Infiltration},
	booktitle = {3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 10)},
	year = {2010},
	address = {San Jose, CA },
	url = {https://www.usenix.org/conference/leet-10/insights-inside-view-botnet-management-infiltration},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {267458,
	author = {Mark Felegyhazi and Christian Kreibich and Vern Paxson},
	title = {On the Potential of Proactive Domain Blacklisting},
	booktitle = {3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 10)},
	year = {2010},
	address = {San Jose, CA },
	url = {https://www.usenix.org/conference/leet-10/potential-proactive-domain-blacklisting},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {267465,
	author = {Boris Nechaev and Mark Allman and Vern Paxson and Andrei Gurtov},
	title = {A Preliminary Analysis of {TCP} Performance in an Enterprise Network},
	booktitle = {2010 Internet Network Management Workshop/Workshop on Research on Enterprise Networking (INM/WREN 10)},
	year = {2010},
	address = {San Jose, CA },
	url = {https://www.usenix.org/conference/inmwren-10/preliminary-analysis-tcp-performance-enterprise-network},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {267817,
	author = {Christian Kreibich and Chris Kanich and Kirill Levchenko and Brandon Enright and Geoffrey M. Voelker and Vern Paxson and Stefan Savage},
	title = {Spamcraft: An Inside Look At Spam Campaign Orchestration},
	booktitle = {2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 09)},
	year = {2009},
	address = {Boston, MA},
	url = {https://www.usenix.org/conference/leet-09/spamcraft-inside-look-spam-campaign-orchestration},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {268121,
	author = {Mark Allman and Christian Kreibich and Vern Paxson and Robin Sommer and Nicholas Weaver},
	title = {Principles for Developing Comprehensive Network Visibility},
	booktitle = {3rd USENIX Workshop on Hot Topics in Security (HotSec 08)},
	year = {2008},
	address = {San Jose, CA},
	url = {https://www.usenix.org/conference/hotsec-08/principles-developing-comprehensive-network-visibility},
	publisher = {USENIX Association},
	month = jul
}
@inproceedings {268321,
	author = {Christian Kreibich and Chris Kanich and Kirill Levchenko and Brandon Enright and Geoffrey M. Voelker and Vern Paxson and Stefan Savage},
	title = {On the Spam Campaign Trail},
	booktitle = {First USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 08)},
	year = {2008},
	address = {San Francisco, CA},
	url = {https://www.usenix.org/conference/leet-08/spam-campaign-trail},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {268507,
	author = {Mark Allman and Christian Kreibich and Vern Paxson and Robin Sommer and Nicholas Weaver},
	title = {The Strengths of Weaker Identities: Opportunistic Personas},
	booktitle = {2nd USENIX Workshop on Hot Topics in Security (HotSec 07)},
	year = {2007},
	address = {Boston, MA},
	url = {https://www.usenix.org/conference/hotsec-07/strengths-weaker-identities-opportunistic-personas},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {269198,
	author = {Stefan Kornexl and Vern Paxson and Holger Dreger and Anja Feldmann and Robin Sommer},
	title = {Building a Time Machine for Efficient Recording and Retrieval of {High-Volume} Network Traffic },
	booktitle = {Internet Measurement Conference 2005 (IMC 05)},
	year = {2005},
	address = {Berkeley, CA},
	url = {https://www.usenix.org/conference/imc-05/building-time-machine-efficient-recording-and-retrieval-high-volume-network},
	publisher = {USENIX Association},
	month = oct
}
@inproceedings {269177,
	author = {Vern Paxson and Nicholas Weaver},
	title = {Exploiting Underlying Structure for Detailed Reconstruction of an Internet-scale Event},
	booktitle = {Internet Measurement Conference 2005 (IMC 05)},
	year = {2005},
	address = {Berkeley, CA},
	url = {https://www.usenix.org/conference/imc-05/exploiting-underlying-structure-detailed-reconstruction-internet-scale-event},
	publisher = {USENIX Association},
	month = oct
}
@inproceedings {269219,
	author = {Ruoming Pang and Mark Allman, International Computer Science Institute and Mike Bennett and Jason Lee and Vern Paxson and Brian Tierney},
	title = {A First Look at Modern Enterprise Traffic},
	booktitle = {Internet Measurement Conference 2005 (IMC 05)},
	year = {2005},
	address = {Berkeley, CA},
	url = {https://www.usenix.org/conference/imc-05/first-look-modern-enterprise-traffic},
	publisher = {USENIX Association},
	month = oct
}
@inproceedings {269260,
	author = {Sarang Dharmapurikar and Vern Paxson},
	title = {Robust {TCP} Stream Reassembly in the Presence of Adversaries},
	booktitle = {14th USENIX Security Symposium (USENIX Security 05)},
	year = {2005},
	address = {Baltimore, MD},
	url = {https://www.usenix.org/conference/14th-usenix-security-symposium/robust-tcp-stream-reassembly-presence-adversaries},
	publisher = {USENIX Association},
	month = jul
}
@inproceedings {269620,
	author = {Nicholas Weaver and Stuart Staniford and Vern Paxson},
	title = {Very Fast Containment of Scanning Worms},
	booktitle = {13th USENIX Security Symposium (USENIX Security 04)},
	year = {2004},
	address = {San Diego, CA},
	url = {https://www.usenix.org/conference/13th-usenix-security-symposium/very-fast-containment-scanning-worms},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {270572,
	author = {Stuart Staniford and Vern Paxson and Nicholas Weaver},
	title = {How to Own the Internet in Your Spare Time},
	booktitle = {11th USENIX Security Symposium (USENIX Security 02)},
	year = {2002},
	address = {San Francisco, CA},
	url = {https://www.usenix.org/conference/11th-usenix-security-symposium/how-own-internet-your-spare-time},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {270920,
	author = {Mark Handley and Vern Paxson and Christian Kreibich},
	title = {Network Intrusion Detection: Evasion, Traffic Normalization, and {End-to-End} Protocol Semantics},
	booktitle = {10th USENIX Security Symposium (USENIX Security 01)},
	year = {2001},
	address = {Washington, D.C.},
	url = {https://www.usenix.org/conference/10th-usenix-security-symposium/network-intrusion-detection-evasion-traffic-normalization},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {271268,
	author = {Yin Zhang and Vern Paxson},
	title = {Detecting Backdoors},
	booktitle = {9th USENIX Security Symposium (USENIX Security 00)},
	year = {2000},
	address = {Denver, CO},
	url = {https://www.usenix.org/conference/9th-usenix-security-symposium/detecting-backdoors},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {271733,
	author = {Vern Paxson},
	title = {Experiences Learned from Bro},
	booktitle = {1st Workshop on Intrusion Detection and Network Monitoring (ID 99)},
	year = {1999},
	address = {Santa Clara, CA},
	url = {https://www.usenix.org/conference/id-99/experiences-learned-bro},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {261391,
	author = {Vern Paxson},
	title = {Bro: A System for Detecting Network Intruders in {Real-Time}},
	booktitle = {7th USENIX Security Symposium (USENIX Security 98)},
	year = {1998},
	address = {San Antonio, TX},
	url = {https://www.usenix.org/conference/7th-usenix-security-symposium/bro-system-detecting-network-intruders-real-time},
	publisher = {USENIX Association},
	month = jan
}
@inproceedings {260299,
	author = {Vern Paxson and Chris Saltmarsh},
	title = {Glish: A {User-Level} Software Bus for {Loosely-Coupled} Distributed Systems},
	booktitle = {USENIX Winter 1993 Conference (USENIX Winter 1993 Conference)},
	year = {1993},
	address = {San Diego, CA},
	url = {https://www.usenix.org/conference/usenix-winter-1993-conference/glish-user-level-software-bus-loosely-coupled-distributed},
	publisher = {USENIX Association},
	month = jan
}
