Research Overview: 

Software Security

  X. Wang, C. Pan, P. Liu, S. Zhu.
SigFree: A Signature-free Buffer Overflow Attack Blocker. 
Proceedings of  USENIX Security'06, Aug. 2006. (Patented)
The full version to appear in IEEE Transactions on Dependable and Secure Computing (TDSC), 2008.

X. Wang, Y-C Jhi, S. Zhu, P. Liu.
STILL: Exploit Code Detection via Static Taint and Initialization Analyses
Proceedings of 24th Annual Computer Security Applications Conference (ACSAC), 2008.

X. Wang, Y. Jhi, S. Zhu, P. Liu.
Protecting Web Services from Remote Exploit code: A Static Analysis Approach
Poster paper, Proc. 17th International World Wide Web Conference (WWW 2008), Beijing, China, April 2008.

 

  M. Masud, L. Khan, B. Thuraisingham, X. Wang, P. Liu and S. Zhu
A Data Mining Technique to Detect Remote Exploits
The Fourth IFIP WG 11.9 International Conference on Digital Forensics, 2008.

P2P Security

  Liang Xie, Hui Song, and Sencun Zhu
On the Effectiveness of Internal Patch Dissemination against File-sharing Worms
Proceedings of Applied Cryptography and Network Security (ACNS), June, 2008. (best student paper award)
  Liang Xie and Sencun Zhu
A Feasibility Study on Defending Against Ultra-Fast Topological Worms
Proceedings of The Seventh IEEE International Conference on Peer-to-Peer Computing (P2P'07), Galway, Ireland, Sep. 2007.
  Liang Xie and Sencun Zhu
Message Dropping Attacks in Overlay Networks: Attack Detection and Attacker Identification
Proceedings of International Conference on Security and Privacy in Communication Networks (SecureComm), Aug., 2006. 
The full version appeared in ACM Transactions on Information and System Security (TISSEC), 2008.
  Sencun Zhu, Cao Yao, Donggang Liu, Sanjeev Setia, and Sushil Jajodia
Efficient Security Mechanisms for Overlay Multicast-based Content Distribution.
In Proc. of Applied Cryptography and Network Security (ACNS) conference, New York, June, 2005. 
A full version appeared in Elsevier Journal of Computer Communications.

Sensor Network Security

Y. Yang, S. Zhu, and G. Cao. 
Improving Sensor Network Immunity under Worm Attacks: A Software Diversity Approach.
Proceedings of ACM Mobihoc 2008.  
Y. Yang, M. Shao, S. Zhu, B. Urgaonkar, and G. Cao. 
Towards Event Source Unobservability with Minimum Network Traffic in Sensor Networks.
Proceedings of The ACM Conference on Wireless Network Security (WiSec), 2008.  
M. Shao, Y. Yang, S. Zhu, and G. Cao. 
Towards Statistically Strong Source Anonymity for Sensor Networks.
Proceedings of IEEE Infocom 2008.
H. Song, S. Zhu and G. Cao. 
SVATS: A Sensor-network-based Vehicle Anti-Theft System.
Proceedings of IEEE Infocom mini-conference 2008.  
Y. Yang, X. Wang, S. Zhu, and G. Cao. 
 Distributed Software-based Attestation for Node Compromise Detection in Sensor Networks
Proceedings of  26th IEEE International Symposium on Reliable Distributed Systems (SRDS), Oct. 2007. 
W. Zhang, M. Tran, S. Zhu, and G. Cao. 
A Random Perturbation-Based Scheme for Pairwise Key Establishment in Sensor Networks.
Proceedings of  ACM Mobihoc'07, Sept. 2007. 
  H. Song, L. Xie, S. Zhu, and G. Cao. 
Sensor Node Compromise Detection: The Location Perspective.
in Proc. of International Wireless Communications and Mobile Computing Conference (IWCMC), Aug. 2007.
H. Choi, S. Zhu, and T. Laporta. 
SET: Detecting node clones in Sensor Networks.
Proceedings of  International Conference on Security and Privacy in Communication Networks (SecureComm), Sept. 2007. 
  M. Shao, S. Zhu, W. Zhang, and G. Cao. 
pDCS: Security and Privacy Support for Data-Centric Sensor Networks.
In Proc. of  IEEE Infocom'07, May 2007. 
  Y. Yang, X. Wang, S. Zhu, and G. Cao. 
SDAP: A Secure Hop-by-Hop Data Aggregation Protocol for Sensor Networks. 
In Proc. of  ACM MOBIHOC'06, May 2006. 
The full version to appear in ACM Transactions on Information and System Security (TISSEC)
  P. Traynor, H. Choi, G. Cao, S. Zhu, and T. La Porta. 
Establishing Pair-Wise Keys In Heterogeneous Sensor Networks. 
Proceedings of the 25th Annual IEEE Conference on Computer Communications (INFOCOM'06), April 2006.
  P. Traynor, R. Kumar, H. Choi, G. Cao, S. Zhu, and T. La Porta,
Efficient Hybrid Security Mechanisms for Heterogeneous Sensor Networks,
In IEEE Transactions on Mobile Computing (TMC), Vol. 6, No. 6, pp. 663-677, June 2007.
  Pirretti, M., S. Zhu, V. Narayanan, P. McDaniel, M. Kandemir, R. Brooks.
The Sleep Deprivation Attack in Sensor Networks: Analysis and Methods of Defense.
In Proc. of the Innovations and Commercial Applications of Distributed Sensor Networks Symposium (ICA DSN 2005). Washington, D.C. (Best paper) October 18-19, 2005.  A journal version appeared in International Journal of Distributed Sensor Networks, 2(3):267–287, 2006.
  Hui Song, Sencun Zhu, and Guohong Cao. 
Attack-Resilient Time  Synchronization for Wireless Sensor Networks.
In Proc. of  IEEE International Conference on Mobile Ad-hoc and Sensor Systems (MASS'05), 2005. 
(The full version appeared in Elsevier Journal of Ad Hoc Networks Special Issue on Security in Ad hoc and Sensor Networks)
  Wensheng Zhang, Hui Song, Sencun Zhu, and Guohong Cao. 
Least Privilege and Privilege Deprivation: Towards Tolerating Mobile Sink Compromises in Wireless Sensor Networks. 
In Proc. of  ACM Mobihoc'05,  May 2005. (The full version to appear in ACM Transaction on Sensor Networks (TOSN), Vol.4-4, Nov. 2008, with Hui Song being the first author.)
  Sencun Zhu, Sanjeev Setia, Sushil Jajodia, and Peng Ning
An Interleaved Hop-by-Hop Authentication Scheme for Filtering of Injected False Data in Sensor Networks.
In Proc. of IEEE Symposium on Security and Privacy, Oakland, California, May 2004. 
(The TinyOS implementation of Scheme II  is available)
(The full version appeared in ACM Transaction on Sensor Networks (TOSN), Aug. 2007 )
  Sencun Zhu, Sanjeev Setia, and Sushil Jajodia. 
LEAP: Efficient Security Mechanisms for Large-Scale Distributed Sensor Networks.
In Proc. of the 10th ACM Conference on Computer and Communications Security (CCS '03), Washington D.C., October, 2003.  (The full version appeared in ACM Transaction on Sensor Networks (TOSN), Nov. 2006 )
  D. Liu, P. Ning, S. Zhu, and S. Jajodia.
Practical Broadcast Authentication in Sensor Networks.
In Proc. of the 2nd International Conference on Mobile and Ubiquitous Systems (Mobiquitous'05), San Diego, Jul, 2005. 

Ad-hoc Network Security

  M. Shao, S. Zhu, G. Cao, T. La Porta and P. Mohapatra.
A Cross-layer Dropping Attack in Video Streaming over Ad Hoc Networks.
In Proc. of International Conference on Security and Privacy in Communication Networks (Securecomm), 2008.
  Qijun Gu, Peng Liu, Sencun Zhu, and Chao-Chien Chu. 
Defending against Packet Injection Attacks in Unreliable Ad Hoc Networks.
In Proc. of  IEEE Globecom 2005. (The full version to appear in International Journal of Security and Networks (IJSN) Special Issue on "Computer & Network Security").

 

Qijun Gu, Chao Chu, Peng Liu, Sencun Zhu. 
Slander Resistant Attacker Isolation in Ad Hoc Networks. 
To appear in Proceedings of the International Conference on Telecommunication Systems, Modeling and Analysis (ICTSM 2005).  Dallas, TX, November 17-20, 2005.
A journal version appeared in Int. J. Mobile Network Design and Innovation, Vol. 1, Nos. 3/4, 2006.

  Sencun Zhu, Sanjeev Setia, Shouhuai Xu, and Sushil Jajodia. 
GKMPAN: An Efficient Group Rekeying Scheme for Secure Multicast in Ad-Hoc Networks.
In Proc. of the 1st ACM International Conference on Mobile and Ubiquitous Systems (Mobiquitous'04), Boston, Massachusetts, August 22-25, 2004. (The full version to appear in Journal of Computer Security (JCS) ).
  Sencun Zhu, Shouhuai Xu, Sanjeev Setia, and Sushil Jajodia. 
Establishing Pair-wise Keys For Secure Communication in Ad Hoc Networks: A Probabilistic Approach.
In Proc. of the 11th IEEE International Conference on Network Protocols (ICNP'03), Atlanta, Georgia, November 4-7, 2003. 
  Sencun Zhu, Shouhuai Xu, Sanjeev Setia and Sushil Jajodia. 
LHAP: A Lightweight Hop-by-Hop Authentication Protocol For Ad-Hoc Networks.
In Proc. of ICDCS 2003 International Workshop on Mobile and Wireless Network (MWN 2003), May 2003
(The full version appeared in Elsevier Ad Hoc Networks Journal) .

Hungyuan Hsu, Sencun Zhu, and Ali Hurson.
LIP: A Lightweight Inter-layer Protocol for Preventing Packet Injection Attacks in Mobile Ad Hoc Networks.
In International Journal of Security and Networks (IJSN) Special Issue on "Cryptography in Networks".

Multicast Security

  Sanjeev Setia, Sencun Zhu, and Sushil Jajodia. 
A Comparative Performance Analysis of Reliable Group Rekey Transport Protocols for Secure Multicast.
In Performance Evaluation, special issue Proceedings of Performance 2002 , Rome, Italy, Sep., 2002. 
  Sencun Zhu, Sanjeev Setia, and Sushil Jajodia. 
Performance Optimizations for Group Key Management Schemes for Secure Multicast. 
In Proc. of the 23rd IEEE International Conference on Distributed Computing Systems (ICDCS 2003), May 2003
  Sencun Zhu, Sanjeev Setia and Sushil Jajodia. 
Adding Reliable and Self-Healing Key Distribution to the Subset Difference Group Rekeying Method for Secure Multicast.
In Proc. of Networked Group Communications (NGC 2003), Germany, Sep. 2003. 

Other Work

         Y. Li, S. Zhu, L. Wang and S. Jajodia.
A Privacy Enhanced Microaggregation Method. 
In Proc. FoIKS 2002, pages 148-159, Salzau Castle, Germany, February 20-23, 2002.
         Sencun Zhu, Sushil Jajodia.
Scalable group rekeying for secure multicast: A survey 
In Proc. 5th International Workshop on Distributed Computing, Springer Lecture Notes in Computer Science, Vol. 2918 (Samir R. Das and Sajal K. Das editors), 2004, pages 1-10.
         Yingjiu Li, Sencun Zhu, X. Sean Wang, Sushil Jajodia.
Looking into the Seeds of Time: Discovering Temporal Patterns in Large Transaction Sets 
Elsevier Journal Information Sciences, to appear.