Journal Publications

An Experience in Testing the Security of Real-World Electronic Voting Systems.

D. Balzarotti, M. Cova, V. Felmetsger, R. Kemmerer, W. Robertson, F. Valeur, G. Vigna.

IEEE Transactions on Software Engineering, 0(0), IEEE.
 2010.

Reducing Errors in the Anomaly-based Detection of Web-based Attacks Through the Combined Analysis of Web Requests and SQL Queries.

G. Vigna, F. Valeur, D. Balzarotti, W. Robertson, C. Kruegel, E. Kirda.

Journal of Computer Security, 17(3), IOS Press.
May 2009.

A Multi-model Approach to the Detection of Web-based Attacks.

C. Kruegel, W. Robertson, G. Vigna.

Journal of Computer Networks, 48(5), Elsevier.
July 2005.

Using Alert Verification to Identify Successful Intrusion Attempts.

C. Kruegel, G. Vigna, W. Robertson.

Journal of Practice in Information Processing and Communication (PIK), 27(4), K.G. Saur Verlag.
August 2004.

Conference Publications

Protecting a Moving Target: Addressing Web Application Concept Drift.

F. Maggi, W. Robertson, C. Kruegel, G. Vigna.

Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID).
Saint-Malo, Brittany FR, September 2009.

Static Enforcement of Web Application Integrity Through Strong Typing.

W. Robertson, G. Vigna.

Proceedings of the USENIX Security Symposium.
Montreal, Quebec CA, August 2009.

Are Your Votes Really Counted?  Testing the Security of Real-world Voting Systems.

D. Balzarotti, G. Banks, M. Cova, V. Felmetsger, W. Robertson, F. Valeur, G. Vigna, R. Kemmerer.

Proceedings of the International Symposium on Software Testing and Analysis (ISSTA).
Seattle, WA USA, July 2008.

Improving Signature Testing Through Dynamic Data Flow Analysis.

D. Balzarotti, W. Robertson, C. Kruegel, G. Vigna.

Proceedings of the Annual Computer Security Applications Conference (ACSAC).
Miami Beach, FL USA, December 2007.

Exploiting Execution Context for the Detection of Anomalous System Calls.

D. Mutz, W. Robertson, G. Vigna, R. Kemmerer.

Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID).
Gold Coast, Queensland AUS, September 2007.

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks.

W. Robertson, G. Vigna, C. Kruegel, R. Kemmerer.

Proceedings of the Network and Distributed System Security Symposium (NDSS).
San Diego, CA USA, February 2006.

Polymorphic Worm Detection Using Structural Information of Executables.

C. Kruegel, E. Kirda, D. Mutz, W. Robertson, G. Vigna.

Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID).
Seattle, WA USA, September 2005.

Automating Mimicry Attacks Using Static Binary Analysis.

C. Kruegel, E. Kirda, D. Mutz, W. Robertson, G. Vigna.

Proceedings of the USENIX Security Symposium.
Baltimore, MD USA, July 2005.

Reverse Engineering of Network Signatures.

D. Mutz, C. Kruegel, W. Robertson, G. Vigna, R. Kemmerer.

Proceedings of the Annual Asia Pacific Information Technology Security Conference (AusCERT).
Gold Coast, Queensland AUS, May 2005.

Detecting Kernel-Level Rootkits Through Binary Analysis.

C. Kruegel, W. Robertson, G. Vigna.

Proceedings of the Annual Computer Security Applications Conference (ACSAC).
Tuscon, AZ USA, December 2004.

Testing Network-based Intrusion Detection Signatures Using Mutant Exploits.

G. Vigna, W. Robertson, D. Balzarotti.

Proceedings of the ACM Conference on Computer and Communications Security (CCS).
Washington, DC USA, October 2004.

Static Disassembly of Obfuscated Binaries.

C. Kruegel, W. Robertson, F. Valeur, G. Vigna.

Proceedings of the USENIX Security Symposium.
San Diego, CA USA, August 2004.

Bayesian Event Classification for Intrusion Detection.

C. Kruegel, D. Mutz, W. Robertson, F. Valeur.

Proceedings of the Annual Computer Security Applications Conference (ACSAC).
Las Vegas, NV USA, December 2003.

A Stateful Intrusion Detection System for World-Wide Web Servers.

G. Vigna, W. Robertson, V. Kher, R. Kemmerer.

Proceedings of the Annual Computer Security Applications Conference (ACSAC).
Las Vegas, NV USA, December 2003.

Run-time Detection of Heap-based Overflows.

W. Robertson, C. Kruegel, D. Mutz, F. Valeur.

Proceedings of the USENIX Large Installations Systems Administration Conference (LISA).
San Diego, CA USA, October 2003.

Topology-based Detection of Anomalous BGP Messages.

C. Kruegel, D. Mutz, W. Robertson, F. Valeur.

Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID).
Pittsburgh, PA USA, September 2003.

Workshop Publications

Alert Verification: Determining the Success of Intrusion Attempts.

C. Kruegel, W. Robertson.

Proceedings of the Workshop on the Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA).
Dortmund, North Rhine-Westphalia GER, July 2004.

Dissertations

Detecting and Preventing Attacks Against Web Applications.

W. Robertson.

Ph.D. Dissertation, UC Santa Barbara.
Santa Barbara, CA USA, June 2009.