Jim Newsome

 
Email: jnewsome@ece.cmu.edu
   
Office: CIC, Cubicle 2127C

I am a graduate student pursuing a PhD under the advisement of Dawn Song. I am currently researching defenses against software exploits and worms. I have also done research in wireless sensor networks.

Publications

James Newsome, David Brumley, Jason Franklin, and Dawn Song. Replayer: Automatic Protocol Replay by Binary Analysis. In Proceedings of the 13th ACM Conference on Computer and Communications Security (CCS), October 2006. [pdf]

James Newsome, Brad Karp, and Dawn Song. Paragraph: Thwarting signature learning by training maliciously. In Proceedings of the 9th International Symposium On Recent Advances In Intrusion Detection (RAID 2006), September 2006. [pdf]

James Newsome, David Brumley, and Dawn Song. Vulnerability-Specific Execution Filtering for Exploit Prevention on Commodity Software. In Proceedings of the 13th Annual Network and Distributed System Security Symposium (NDSS '06), February 2006. [pdf]

David Brumley, James Newsome, Dawn Song, Hao Wang, and Somesh Jha. Towards Automatic Generation of Vulnerability-Based Signatures. In Proceedings of the IEEE Symposium on Security and Privacy, May 2006. [pdf]

James Newsome, Brad Karp, and Dawn Song. Polygraph: Automatically generating signatures for polymorphic worms. In Proceedings of the IEEE Symposium on Security and Privacy, May 2005. [pdf] [source code]

James Newsome and Dawn Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS ’05), February 2005. [pdf]

James Newsome, Elaine Shi, Dawn Song, and Adrian Perrig. The Sybil attack in sensor networks: analysis & defenses. In Proceedings of 3rd International Symposium on Information Processing in Sensor Networks (IPSN ’04), April 2004. [pdf]

James Newsome and Dawn Song. GEM: Graph EMbedding for routing and data-centric storage in wireless sensor networks. In Proceedings of ACM SenSys, November 2003. [pdf]

Source code

polygraph-0.1.0. This is an implementation of the signature generation algorithms in the Polygraph paper. It is intended for research purposes only, and not for any type of production use.