Return-Oriented Programming: Systems, Languages and Applications, Ryan Roemer, Erik Buchanan, Hovav Shacham, and Stefan Savage, ACM Transactions on Information and System Security 15(1), March 2012.

1

CSCI 690

Computer Networks

Research Project

Select any of the following papers (http://www.ccied.org/) and write a report on your understanding of the

paper.

2013

[1] Juice: A Longitudinal Study of an SEO Campaign, David Wang, Stefan Savage, and Geoffrey M. Voelker,

Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, February

2013.

2012

[2] Taster's Choice: A Comparative Analysis of Spam Feeds, Andreas Pitsillidis, Chris Kanich, Geoffrey M.

Voelker, Kirill Levchenko, and Stefan Savage, Proceedings of the ACM Internet Measurement Conference,

Boston, MA, November 2012.

[3] Priceless: The Role of Payments in Abuse-advertised Goods, Damon McCoy, Hitesh Dharmdasani, Christian

Kreibich, Geoffrey M. Voelker, and Stefan Savage, Proceedings of the ACM Conference on Computer and

Communications Security, Raleigh, NC, October 2012.

[4] Manufacturing Compromise: The Emergence of Exploit-as-a-Service, Chris Grier, Lucas Ballard, Juan

Caballero, Neha Chachra, Christian J. Dietrich, Kirill Levchenko, Panayiotis Mavrommatis, Damon McCoy,

Antonio Nappa, Andreas Pitsillidis, Niels Provos, M. Zubair Rafique, Moheeb Abu Rajab, Christian Rossow,

Kurt Thomas, Vern Paxson, Stefan Savage, and Geoffrey M. Voelker, Proceedings of the ACM Conference

on Computer and Communications Security, Raleigh, NC, October 2012.

[5] PharmaLeaks: Understanding the Business of Online Pharmaceutical Affiliate Programs, Damon McCoy,

Andreas Pitsillidis, Grant Jordan, Nicholas Weaver, Christian Kreibich, Brian Krebs, Geoffrey M. Voelker,

Stefan Savage, and Kirill Levchenko, Proceedings of the USENIX Security Symposium, Bellevue, WA,

August 2012.

[6] When Good Services Go Wild: Reassembling Web Services for Unintended Purposes, Feng Lu, Jiaqi Zhang,

and Stefan Savage, Proceedings of the USENIX Workshop on Hot Topics in Security, Bellevue, WA, August

2012.

[7] Economic Analysis of Cybercrime in Crowdsourced Labor Markets, Vaibhav Garg, Chris Kanich, and L. Jean

Camp, Proceedings of the Workshop on the Economics of Information Security (WEIS), Berlin, Germany,

June 2012.

[8] Measuring the Cost of Cybercrime, Ross Anderson, Chris Barton, Rainer Boehme, Richard Clayton, Michel

J.G. van Eeten, Michael Levi, Tyler Moore, and Stefan Savage, Proceedings of the Workshop on the

Economics of Information Security (WEIS), Berlin, Germany, June 2012.

[9] Prudent Practices for Designing Malware Experiments: Status Quo and Outlook, Christian Rossow, Christian

J. Dietrich, Christian Kreibich, Chris Grier, Vern Paxson, Norbert Pohlmann, Herbert Bos, and Maarten van

Steen, Proceedings of the IEEE Symposium on Security and Privacy, May 2012.

[10] Adapting Social Spam Infrastructure for Political Censorship, Kurt Thomas, Chris Grier, and Vern

2

Paxson, Proceedings of the USENIX Workshop on Large-scale Exploits and Emergent Threats (LEET), April

2012.

[11] Return-Oriented Programming: Systems, Languages and Applications, Ryan Roemer, Erik Buchanan,

Hovav Shacham, and Stefan Savage, ACM Transactions on Information and System Security 15(1), March

2012.

[12] The BIZ Top-Level Domain: Ten Years Later, Tristan Halvorson, Janos Szurdi, Gregor Maier, Mark

Felegyhazi, Christian Kreibich, Nicholas Weaver, Kirill Levchenko, and Vern Paxson, Proceedings of the

Passive and Active Measurement Workshop, Vienna, Austria, March 2012.

[13] Applying Ethical Principles to Information and Communication Technology Research: A Companion to

the Department of Homeland Security Menlo Report, Erin Kenneally, Co-Leader & Author, U.S. Department

of Homeland Working Group on Ethics in Computer Security Research, January 2012.

The report should be organized as you would organize a paper. It should be written in IEEE Proceedings

Manuscripts style: two columns, single-spaced. You may find a template file at URL:

http://www.ieee.org/publications_standards/publications/authors/author_templates.html (Download Template

and Instructions (DOC, 131 KB)). The entire report should be no more than 3 pages, including all figures,

equations, references, tables, and text.

The project report should be neat, readable, and self-contained. Any class member should be able to

understand your report, and benefit from the results you obtain. Therefore, you should include adequate references

and background materials. Also, using figures, diagrams, and tables may be a better way to enhance the readers'

comprehension of your project. Each figure, graph, and table must be directly referenced in the text.

Note that plagiarism is using the materials (ideas or words) of another as one's own and without cred-

iting the source. This behavior is prohibited. Your submission will be passed through a plagiarism

detection automated tool. If you copy any part of your paper, your paper grade will be zero. So, take the time to

properly cite materials written by someone else - include reference. If you have any question about this, ask the

instructor or refer to Student Handbook.

Event Date Project Research Paper Due Wednesday July 10th, 11:59pm