Ryan Farley

[go here for github projects]

• Currently
  • The MITRE Corporation
• Previously
  • George Mason University for Ph.D.
    • "Toward Automated Forensic Analysis of Obfuscated Malware." [pdf, bib, slides]
  • SRI Intl, IBM Research Zurich
  • GreatWall Systems, BuddyGopher
  • Wake Forest University for B.S. and M.S.
    • "Parallel Firewall Designs for High-Speed Networks." [pdf, bib, slides]
    • "Method, Systems, and Computer Program Products for Implementing Function-Parallel Network Firewall." US Patent 8037517, Oct. 2011; EP 1839188; WO 2006093557. [link]
• Elsewhere:
  • Github projects
  • Google Scholar
  • LinkedIn
  • Email
  • PGP Key

Papers/Presentations

• Academic metrics
• 7 proceedings
• 2 journal articles
• 1 book chapter
• 1 best paper award
• 1 patent

• "CodeXt: Automatic Extraction of Obfuscated Attack Code from Memory Dump." ISC. Hong Kong, Oct 2014. [pdf, bib, slides, src]

• "Exploiting VoIP Softphone Vulnerabilities to Disable Host Computers: Attacks and Mitigation." IJCIP. Elsevier. Jul 2014. [doi].

• "Disabling a Computer by Exploiting Softphone Vulnerabilities: Threat and Mitigation." SecureComm. Sydney, Australia, Sep 2013. Best Paper Award. [pdf, bib, slides]

• "VoIP shield: A Transparent Protection of Deployed VoIP Systems from SIP-based Exploits." NOMS. Maui, Hawaii, Apr 2012. [pdf, bib]

• "Roving Bugnet: Distributed Surveillance Threat and Mitigation." In Computers & Security: Challenges for Security, Privacy and Trust, vol. 29, no. 5, pp. 592-602, Jul 2010. [doi, bib].

  • Shorter version from IFIP SEC. Paphos, Cyprus, May 2009. [pdf, bib, slides]

• "An Empirical Investigation into the Security of Phone Features in SIP-based VoIP Systems." ISPEC, Xi’an, China, Apr 2009. [pdf, bib]

• "On the Feasibility of Launching the Man-In-The-Middle Attacks on VoIP from Remote Attackers." ASIACCS. Sydney, Australia, Mar 2009. [pdf, bib

• "A Function-Parallel Architecture for High-Speed Firewalls." IEEE ICC. Istanbul, Turkey, Jun 2006. [pdf, bib]

• "Effects of Processing Delay on Function-Parallel Firewalls." IASTED PDCN. Innsbruck, Austria, Feb 2006. [pdf, bib, slides]

Other talks

• "Live Malware Forensics with Dynamically Assigned Sense of Self." George Mason University Ph.D. Proposal, Fairfax, Virginia, Jan 2013.

• "How Not to be a Mark: An Introduction to Computer Security." Culpeper County Civilian Law Enforcement Academy Alumni Association Community Seminar, Culpeper, Virginia, May 2010.

• "Deconstructing Exploits for Better Defense: Taxonomy, Toolset, and Origin Tracking." George Mason University Research Workshop, Fairfax, Virginia, Apr 2010.

• "BuddyGopher." Wake Forest University Brown Bag Seminar, Winston-Salem, North Carolina, Apr 2004.

Press

• Paul Marks. "'Bugnets' Eavesdrop on You Wherever You Go." New Scientist issue 2743 (16 Jan 2010). p. 17. [link]

  • Discusses proof of concept roving bugnet through implications of privacy in an era of ubiqitous computing.

• Laura Sessions Stepp. "Posting Their Lives, Moment By Moment." Washington Post (9 Jul 2004). sec. C, pp. 1-2. [link]

  • Provides an introduction to micro-blogging featuring BuddyGopher.

• Mary Beth Marklein. "Students Have 'Away' With Words." USA Today (29 Mar 2004). sec. D, p. 7. [link]

  • Overviews popularity of micro-blogging and presents BuddyGopher.