@inproceedings {267811,
	author = {Phillip Porras and Hassen Sa{\"\i}di},
	title = {A Foray into Conficker{\textquoteright}s Logic and Rendezvous Points},
	booktitle = {2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET 09)},
	year = {2009},
	address = {Boston, MA},
	url = {https://www.usenix.org/conference/leet-09/foray-confickers-logic-and-rendezvous-points},
	publisher = {USENIX Association},
	month = apr
}
@inproceedings {268109,
	author = {Jian Zhang and Phillip Porras and Johannes Ullrich},
	title = {Highly Predictive Blacklisting},
	booktitle = {17th USENIX Security Symposium (USENIX Security 08)},
	year = {2008},
	address = {San Jose, CA},
	url = {https://www.usenix.org/conference/17th-usenix-security-symposium/highly-predictive-blacklisting},
	publisher = {USENIX Association},
	month = jul
}
@inproceedings {203508,
	author = {Guofei Gu and Phillip Porras and Vinod Yegneswaran and Martin Fong},
	title = {{BotHunter}: Detecting Malware Infection Through {IDS-Driven} Dialog Correlation},
	booktitle = {16th USENIX Security Symposium (USENIX Security 07)},
	year = {2007},
	address = {Boston, MA },
	url = {https://www.usenix.org/conference/16th-usenix-security-symposium/bothunter-detecting-malware-infection-through-ids-driven},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {268624,
	author = {Jian Zhang and Phillip Porras and Johannes Ullrich},
	title = {A New Service for Increasing the Effectiveness of Network Address Blacklists},
	booktitle = {3rd Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI 07)},
	year = {2007},
	address = {Santa Clara, CA},
	url = {https://www.usenix.org/conference/sruti-07/new-service-increasing-effectiveness-network-address-blacklists},
	publisher = {USENIX Association},
	month = jun
}
@inproceedings {269585,
	author = {Patrick Lincoln and Phillip Porras and Vitaly Shmatikov},
	title = {{Privacy-Preserving} Sharing and Correlation of Security Alerts},
	booktitle = {13th USENIX Security Symposium (USENIX Security 04)},
	year = {2004},
	address = {San Diego, CA},
	url = {https://www.usenix.org/conference/13th-usenix-security-symposium/privacy-preserving-sharing-and-correlation-security-alerts},
	publisher = {USENIX Association},
	month = aug
}
