Niels Provos

Google Research

• Home
• Publications
• Tech Talks
• University Relations
• About Google Research
• Work at Google

Other Google Resources

• Google Code
• Google Labs
• Google Scholar

Niels Provos joined Google in 2003 and is currently working as Senior Staff Software Engineer in the Infrastructure group. He received a Ph.D. from the University of Michigan in 2003 where he studied experimental and theoretical aspects of computer and network security at the Center of Information Technology Integration. He is serving on the USENIX Board of Directors. He is a member of the Honeynet project and an active contributor to open source projects.

Publications

• Corrupted DNS Resolution Paths: The Rise of a Malicious Resolution Authority, David Dagon, Chris Lee, Wenke Lee, Niels Provos, Proc. 15th Network and Distributed System Security Symposium (NDSS), 2008.

• Ghost Turns Zombie: Exploring the Life Cycle of Web-based Malware, Michalis Polychronakis, Panayiotis Mavrommatis, Niels Provos, Proceedings of the 1st USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2008.

• A Framework for Detection and Measurement of Phishing Attacks, Sujata Garera, Niels Provos, Monica Chew, Aviel D. Rubin, WORM'07, 2007.

• The Ghost In The Browser: Analysis of Web-based Malware, Niels Provos, Dean McNamee, Panayiotis Mavrommatis, Ke Wang, Nagendra Modadugu, First Workshop on Hot Topics in Understanding Botnets (HotBots '07), 2007.

• Virtual Honeypots: From Botnet Tracking to Intrusion Detection, Niels Provos, Thorsten Holz, 2007.

• Cookies Along Trust-Boundaries (CAT): Accurate and Deployable Flood Protection, Martin Casado, Aditya Akella, Pei Cao, Niels Provos, Scott Shenker, In Proceedings of Steps To Reduce Unwated Traffic From The Internet, 2006.

• Flow-Cookies: Using Bandwidth Amplification to Defend Against DDoS Flooding Attacks, Martin Casado, Pei Cao, Aditya Akella, Niels Provos, Proceedings of the IEEE Workshop on QoS, 2006.

• Search Worms, Niels Provos, Joe McClain, Ke Wang, WORM '06: Proceedings of the 4th ACM workshop on Recurring malcode, 2006, pp. 1-8.

• Data Reduction for the Scalable Automated Analysis of Distributed Darknet Traffic, Michael Bailey, Evan Cooke, Farnam Jahanian, Niels Provos, Karl Rosaen, David Watson, Proceedings of the 2005 Internet Measurement Conference.

• A Virtual Honeypot Framework, Niels Provos, USENIX Security Symposium, 2004, pp. 1-14.

• Improving Host Security with System Call Policies, Niels Provos, 12th USENIX Security Symposium, 2003.

• Preventing Privilege Escalation, Niels Provos, Markus Friedl, Peter Honeyman, 12th USENIX Security Symposium, 2003.

• Defending Against Statistical Steganalysis, Niels Provos, 10th USENIX Security Symposium, 2001.

• Encrypting Virtual Memory, Niels Provos, 9th USENIX Security Symposium (2000).

• A Future-Adaptable Password Scheme, Niels Provos, David Mazieres, USENIX Annual Technical Conference, FREENIX Track, 1999.

• Cryptography in OpenBSD: An Overview, Theo de Raadt, Niklas Hallqvist, Artur Grabowski, Angelos D. Keromytis, Niels Provos, USENIX Annual Technical Conference, FREENIX Track, 1999.

Prior Publications

• Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol, M. Friedl, N. Provos, W. Simpson, 2006.

• Hide and Seek: An Introduction to Steganography, Niels Provos, Peter Honeyman, IEEE Security & Privacy, vol. 1 (2003), pp. 32-44.

• Detecting Steganographic Content on the Internet, Niels Provos, Peter Honeyman, NDSS, 2002.

• ScanSSH: Scanning the Internet for SSH Servers, Niels Provos, Peter Honeyman, LISA, 2001, pp. 25-30.