|
Damon McCoyAssistant Professor
|
 |
My research focuses on empirically measuring the security and privacy of technology systems and their intersections with society. Some of my current projects explore the socio-economics of e-crime, censorship evasion, anonymous communication, cyber-physical systems. More generally, I am interested in exploring and improving the security and privacy of large-scale systems.
| Recent Publications |
| Linking Amplification DDoS Attacks to Booter Services
Johannes Krupp, Mohammad Karami, Christian Rossow, Damon McCoy and Michael Backes
International Symposium on Research in Attacks, Intrusions and Defenses (RAID), Atlanta, GA, September 2017 | |
| Backpage and Bitcoin: Uncovering Human Traffickers
Rebecca S. Portnoff, Danny Yuxing Huang, Periwinkle Doerfler, Sadia Afroz and Damon McCoy
Proceedings of the ACM SIGKDD Conference, Halifax, Nova Scotia, Canada, August 2017 | |
| Booted: An Analysis of a Payment Intervention on a DDoS-for-Hire Service
Ryan Brunt, Prakhar Pandey and Damon McCoy
Workshop on the Economics of Information Security, San Diego, CA, June 2017 | |
| Under the Shadow of Sunshine: Understanding and Detecting Bulletproof Hosting on Legitimate Service Provider Networks
Sumayah Alrwais, Xiaojing Liao, Xianghang Mi, Peng Wang, XiaoFeng Wang, Feng Qian, Raheem Beyah, and Damon McCoy
IEEE Symposium on Security & Privacy (Oakland), San Jose, CA, May 2017. | |
| To Catch a Ratter: Monitoring the Behavior of Amateur DarkComet RAT Operators in the Wild
Brown Farinholt, Mohammad Rezaeirad, Paul Pearce, Hitesh Dharmdasani, Haikuo Yin, Stevens Le Blond, Damon McCoy, and Kirill Levchenko
IEEE Symposium on Security & Privacy (Oakland), San Jose, CA, May 2017. | |
| Automated Analysis of Cybercriminal Markets
Rebecca S Portnoff, Sadia Afroz, Greg Durrett, Jonathan K Kummerfeld, Taylor Berg-Kirkpatrick, Damon McCoy, Kirill Levchenko and Vern Paxson
Proceedings of the World Wide Web Conference (WWW), Perth, Australia, April 2017. | |
| Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software Kurt Thomas, Juan A. Elices Crespo, Ryan Rasti, Jean-Michel Picod, Cait Phillips, Marc-Andre Decoste, Chris Sharp, Fabio Tirelo, Ali Tofigh, Marc-Antoine Courteau, Lucas Ballard, Robert Shield, Nav Jagpal, Moheeb Abu Rajab, Panayiotis Mavrommatis, Niels Provos, Elie Bursztein, and Damon McCoy Proceedings of the USENIX Security Symposium, Austin, TX, August 2016. | |
| You've Got Vulnerability: Exploring Effective Vulnerability Notifications Frank Li, Zakir Durumeric, Jakub Czyz, Mohammad Karami, Michael Bailey, Damon McCoy, Stefan Savage, and Vern Paxson Proceedings of the USENIX Security Symposium, Austin, TX, August 2016. | |
| A Security Analysis of an In Vehicle Infotainment and App Platform Sahar Mazloom, Mohammad Rezaeirad, Aaron Hunter, and Damon McCoy 10th USENIX Workshop on Offensive Technologies (WOOT), Austin, TX , August 2016. | |
| Deterring Financially Motivated Cybercrime Zachary K. Goldman and Damon McCoy Journal of National Security Law and Policy, Vol. 8, No. 3, 2016. | |
| Profiling Underground Merchants Based on Network Behavior Srikanth Sundaresan, Damon McCoy, Sadia Afroz, and Vern Paxson Proceedings of the IEEE Symposium on Electronic Crime Research (eCrime), Toronto, Canada, June 2016. | |
| Stress Testing the Booters: Understanding and Undermining the Business of DDoS Services Mohammad Karami, Youngsam Park and Damon McCoy Proceedings of the World Wide Web Conference (WWW), Montreal, Canada, April 2016. | |
| Characterizing Long-tail SEO Spam on Cloud Web Hosting Services Xiaojing Liao, Chang Liu, Damon McCoy, Elaine Shi and Raheem Beyah Proceedings of the World Wide Web Conference (WWW), Montreal, Canada, April 2016. | |
| Understanding Craigslist Rental Scams Youngsam Park, Damon McCoy and Elaine Shi Proceedings of Financial Cryptography and Data Security Conference (FC), Barbados, February 2016. | |
| Stressing Out: Bitcoin "Stress Testing" Khaled Baqer, Danny Yuxing Huang, Damon McCoy and Nicholas Weaver Workshop on Bitcoin and Blockchain Research (BITCOIN), Barbados, February 2016. | |
| Do You See What I See: Differential Treatment of Anonymous Users Sheharbano Khattak, David Fifield, Sadia Afroz, Mobin Javed, Srikanth Sundaresan, Vern Paxson, Steven J. Murdoch, and Damon McCoy Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2016. | |
| Fuzzing E-mail Filters with Generative Grammars and N-Gram Analysis Sean Palka and Damon McCoy 9th USENIX Workshop on Offensive Technologies (WOOT 15), Washington, D.C., August 2015 | |
| Framing Dependencies Introduced by Underground Commoditization Kurt Thomas, Danny Huang, David Wang, Elie Bursztein, Chris Grier, Thomas J. Holt, Christopher Kruegel, Damon McCoy, Stefan Savage, Giovanni Vigna Workshop on the Economics of Information Security, Amsterdam, NL, June 2015 | |
| Ad Injection at Scale: Assessing Deceptive Advertisement Modifications Kurt Thomas, Elie Bursztein, Chris Grier, Grant Ho, Nav Jagpal, Alexandros Kapravelos, Damon McCoy, Antonio Nappa, Vern Paxson, Paul Pearce, Niels Provos, Moheeb Abu Rajab IEEE Symposium on Security & Privacy (Oakland 2014), San Jose, CA, May 2015. | |
| Dynamic Phishing Content Using Generative Grammars Sean Palka and Damon Mccoy Proceedings of the IEEE Workshop on Security Testing, Graz, Austria, April 2015 | |
| "I Saw Images I Didn't Even Know I Had:" Understanding User Perceptions of Cloud Storage Privacy Jason W. Clark, Peter Snyder, Damon McCoy, Chris Kanich Proceedings of the ACM Conference on Computer-Human Interaction, Seoul, Korea, April 2015 | |
| Full Publication List |
| Students |
| PhD | ||
| Ryan Brunt | ||
| Periwinkle Doerfler | ||
| Laura Edelson | ||
| Mohammad Rezaeirad | ||
| Graduated | ||
| Mohammad Karami (PhD 2016) Google | ||
| Sean Palka (PhD 2015) Booz Allen Hamilton | ||
| Jason Clark (PhD 2014) CMU SEI | ||
| Hitesh Dharmdasani (MS 2013) FireEye -> Informant Networks |
| Teaching |
| Program Committees |