S. Cheung

Publications
Influence

Securing the Software Defined Network Control Layer

Phillip A. Porras, S. Cheung, M. Fong, K. Skinner, V. Yegneswaran
Computer Science
NDSS
2015

We propose the design of security extensions at the control layer to provide the security management and arbitration of conflicting flow rules that arise when multiple applications are deployed within the same network. Expand

StegoTorus: a camouflage proxy for the Tor anonymity system

Zachary Weinberg, J. Wang, +4 authors D. Boneh
Computer Science
CCS '12
16 October 2012

We present StegoTorus, a tool that comprehensively disguises Tor from protocol analysis. Expand

Detecting disruptive routers: a distributed network monitoring approach

K. A. Bradley, S. Cheung, N. Puketza, B. Mukherjee, R. Olsson
Computer Science
Proceedings. IEEE Symposium on Security and…
3 May 1998

We present a protocol called WATCHERS that detects and reacts to routers that drop or misroute packets. Expand

Modeling multistep cyber attacks for scenario recognition

S. Cheung, U. Lindqvist, M. Fong
Computer Science
Proceedings DARPA Information Survivability…
22 April 2003

Efforts toward automated detection and identification of multistep cyber attack scenarios would benefit significantly from a methodology and language for modeling such scenarios. Expand

Communication pattern anomaly detection in process control systems

A. Valdes, S. Cheung
Computer Science
IEEE Conference on Technologies for Homeland…
11 May 2009

We present a learning-based approach for detecting anomalous network traffic patterns in process control networks at much lower false alarm rates. Expand

Protecting routing infrastructures from denial of service using cooperative intrusion detection

S. Cheung, K. Levitt
Computer Science
NSPW '97
1998

We present a solution to the denial of service problem for routing infrastructures. Expand

Automatic analysis of firewall and network intrusion detection system configurations

T. Uribe, S. Cheung
Computer Science
FMSE '04
29 October 2004

This paper presents an integrated, constraint-based approach for modeling and reasoning about multiple firewalls and network intrusion detection systems (NIDSs), which can reason automatically about their combined behavior. Expand

Intrusion Monitoring in Process Control Systems

A. Valdes, S. Cheung
Computer Science
42nd Hawaii International Conference on System…
2009

This paper presents a multilayer security architecture that addresses the challenges of PCS monitoring, providing timely and accurate reporting of security-relevant events. Expand

Denial of service against the Domain Name System

S. Cheung
Computer Science
IEEE Security & Privacy Magazine
2006

Proposed countermeasures for Domain Name System denial-of-service attacks against network services . Expand

An Architecture for an Adaptive Intrusion-Tolerant Server

A. Valdes, M. Almgren, +6 authors T. Uribe
Computer Science
Security Protocols Workshop
17 April 2002

We describe a general architecture for intrusion-tolerant enterprise systems and the implementation of an intrusion tolerant Web server as a specific instance. Expand

Recommended Authors