Curriculum Vitae

RICHARD J. ENBODY
Department of Computer Science and Engineering
Michigan State University
3115 Engineering Building
East Lansing, Michigan 48824-1226

Email: enbody@cse.msu.edu
Phone: (517) 353-3389
Fax: (517) 432-1061
URL: http://www.cse.msu.edu/~enbody/

Education

1982 - 1987
Ph.D., Computer Science
Minor in Electrical Engineering
University of Minnesota, Minneapolis, Minnesota
1972 - 1976
B.A., Mathematics
Carleton College, Northfield, Minnesota

Awards

1992 & 2008
MSU Engineering College Withrow Teaching Excellence Award

Employment History

1993 - present
Associate Professor
Dept. of Computer Science and Engineering, Michigan State University, East Lansing, MI
1998 (June - December)
Acting Chairperson
Dept. of Computer Science and Engineering, Michigan State University, East Lansing, MI
1996 - 1999
Associate Chairperson
Dept. of Computer Science and Engineering, Michigan State University, East Lansing, MI
1987 - 1993
Assistant Professor
Dept. of Computer Science, Michigan State University, East Lansing, MI
1982 - 1987
Teaching Assistant/Research Assistant
Dept. of Computer Science, University of Minnesota, Minneapolis, MN
1983 Summer
Programmer
Control Data Corporation, Arden Hills, MN
1981 - 1982
Instructor
Departments of Computer Science and Mathematics
University of New Hampshire, Durham, NH
1981 - 1982 Summers
Mathematics Teacher
Advanced Studies Program at St. Paul's School, Concord, NH
1978 - 1981
Mathematics Teacher, Dorm Master, Coach
St. Paul's School, Concord, NH
1976 - 1978
Mathematics Teacher, Coach
Hartford High School, White River Junction, VT

Patents

"Micro-Fastening System and Method of Manufacture," with D. Tomanek and Young-Kyun Kwon, United States Patent No. 7,181,811, February 27, 2007

"Nanocapsules Containing Charged Particles, Their Uses and Methods of Forming the Same," with D. Tomanek, Young-Kyun Kwon, and Mark W. Brehob. United States Patent 6,473,351, October 29, 2002

"Hardware Buffer-Overflow Prevention," U.S. Patent Pending with Krerk Piromsopa, filed November, 2004.

"Canary Bit," U.S. Patent Pending with Krerk Piromsopa, filed October, 2006.

"iS3 Tools: i-Safety Segmentation Strategy Tools," U.S. Patent Pending with Nora Rifon and Robert LaRose, filed October 5, 2006: MSU ID #07-018.

Journal Publications

Sood, Enbody,"Crimeware-as-a-service -- A survey of commoditized crimeware in the underground market," International Journal of Critical Infrastructure Protection, vol. 6, no. 1, March 2013, pp. 28-38

Sood, Bansal, Enbody, "Dissecting SpyEye - Understanding the design of third generation botnets," Computer Networks , vol. 52, no. 3, pp. 436-450, February 2013

Demott, Enbody, Punch, "Systematic Bug Finding and Fault Localization Enhanced with Input Data Tracking," Computers & Security, 2013, pp. 130-157

Sood, Greko, Enbody, "Abusing Glype Proxies - Attacks, Exploits and Defenses.," Network Security, pp. 8-15, December 2012

Sood, Enbody, "iPhone Malware Paradigm," STSC CrossTalk - Journal of Defense Engineering, Vol. 25, No. 2, Jan/Feb 2012, p. 4 - 8

Sood, Enbody, "Cross Interface Attacks in Network Devices," ISACA Journal, Issue 6, December 2011

Sood, Enbody, "Frametrapping the Framebusting Defense," Elsevier NESE - Network Security Journal, Vol. 2011, Issue 10, October 2011, p. 8-12.

Sood, Enbody, "State of Declarative Security in Banking Websites," Elsevier CFS - Computer, Fraud and Security Journal, Issue 7, July 2011

Sood, Enbody, "Browser User Interface Design Flaws: Exploiting User Ignorance," STSC CrossTalk - Journal of Defense Engineering, Vol. 24, No. 3, May/June 2011, p. 30 - 33.

Sood, Enbody, "Spying on the browser: dissecting the design of malicious extensions," Network Security , May 2011, p. 8-12.

Sood, Enbody, "Browser User Interface Design Flaws: Expliting User Ignorance," Crosstalk, May/June 2011, p. 30-33

Sood, Enbody, "Malvertising - exploiting web advertising," Computer Fraud & Security, April 2011, p. 11-15

Piromsopa, Enbody, "Survey of Protections from Buffer-Overflow Attacks," Engineering Journal, vol 15, no 2, p. 31-52.

Sood, Enbody, "Social Networks - Chain Exploitation," ISACA Journal - Information Systems Audit and Control Association, to appear.

Sood, Enbody, "JavaScript Infection Model," ISSA Journal - Information Systems Security Association, Vol. 8, No. 11, November, 2010.

LaRose, Rifon, Enbody, "Promoting Personal Responsibility for Internet Safety," Communications of the ACM, Vol. 51, No. 3, March 2008

Piromsopa, Enbody, "Secure Bit : Transparent, Hardware Buffer-Overflow Protection," IEEE Transactions on Dependable and Secure Computing, Vol. 3, No. 4, October-December 2006.

Brehob, Wagner, Torng, Enbody, Optimal replacement is NP-hard for non-standard caches. IEEE Transactions on Computers, vol. 53, no. 1, January 2004, pp. 73 - 76.

Brehob, M, Enbody, R.J., Torng, E., Wagner, S., "On-line Restricted Cache Scheduling," Journal of Scheduling, 6:149-166, 2003.

Enbody, R.J., Horoi, M. "Using Amdahl's Law as a Metric to Drive Code Parallelization: Two Case Studies," International Journal of High Performance Computing Applications, Vol. 15, No 1, Spring 2001, pp. 75 - 80.

Horoi, M., Enbody, R. J., "Efficient Implementation of a Lanczos Eigenvalue solver on a Cray T3E-900." Lecture Notes in Computer Science, Springer, ISBN 3-540-6443-1, Volume 1401, June 1998, pp. 907-909.

Enbody, R.J., Severance, C.R., and Petersen, P., " Managing the Overall Balance of Operating System Threads on a MultiProcessor using Automatic Self-Allocating Threads (ASAT)," Journal of Parallel and Distributed Computing -- Special Issue on Multithreading for Multiprocessors, Volume 37, Number 1, August 25, 1996, pp. 106 - 112.

Enbody, R.J., Chittor, S., and Jou, Tyan-shu, "A Simulator for Large, Wormhole-Routed Networks," International Journal of Computer Simulation, Special Issue on the Simulation of Highly Parallel Systems, vol. 2, no. 2, pp. 151 - 174, 1992.

Enbody, R.J. and Du, H.C., "SPYDER: a serial/parallel goal-directed router," INTEGRATION, the VLSI journal, Vol. 7, 1989, pp. 151 - 187.

Enbody, R.J. and Du, H.C., "Dynamic Hashing Schemes," ACM Computing Surveys, Vol. 20, No. 2, June 1988, pp. 85 - 113. (Translated into Japanese for a special edition of bit, "Computer Science '88," April, 1990, pp. 43 - 68.)

Books

Targeted Cyber Attacks: Multi-staged Attacks Driven by Exploits and Malware, with Aditya Sood, ISBN 978-0128006047, Syngress, 2014.

The Practice of Computing using Python, 2nd Ed., with William Punch, ISBN 978-0-13-280557-5, Addison-Wesley, 2013.

The Practice of Computing using Python, with William Punch, ISBN 978-0136110675, Addison-Wesley, 2010.

Science and Applications of Nanotubes, Edited by David Tomanek and Richard Enbody, Fundamental Materials Research Series, (ISBN 978-0306463723), Kluwer Academic/Plenum Publishers, 2000.

Book Chapters

Sood & Enbody, "Lifecycle of a botnet," in Hackers and Hacking: A Reference Handbook, ABC-CLIO, 2013

"Keeping Families Safe Online" in New Directions in family reserch at Michigan State University with Larose, R., and Rifon, N. by Whitten, P.S., Bokemeier, J.L., and Fitzgerald , H.E. (Eds.), 2008

"Future Trends - IA-64" in High Performance Computing by Charles Severance and Kevin Dowd, O'Reilly and Assoc, 1998

Magazine Articles

Sood, Enbody, "The Art of Cyber Bank Robbery," STSC Crosstalk Magazine, Sept/Oct, 2013

Sood, Enbody, "Targeted Cyber Attacks - A Superset of Advanced Persistent Threats," IEEE Security & Privacy, vol. 11 no. 1, January/February 2013, pp. 54-61.

Sood, Bansal, Enbody, "Cybercrime : Dissecting the State of Underground Enterprise," IEEE Internet Computing, vol. 17, no. 1, January-February 2013, pp. 60-68.

Sood, Bansal, Enbody, "Win-locker Ransomware," Virus Bulletin, Issue 11, November 2012

Sood, Bansal, Enbody, "Inside ICE IX - Descendent of Zeus," Virus Bulletin, Issue 8, August 2012

Sood, Enbody, "Circumventing SMS Based Two Factor Authentication (TFA)," Digital Forensics Magazine, August 2012

Sood, Enbody, "Malware Design Strategies (Part 2)," Virus Bulletin, Issue 6, June 2012

Sood, Enbody, "Malware Design Strategies (Part 1)," Virus Bulletin, Issue 5, May 2012

Sood, Enbody, "Zombifying Targets - Malicious Phishing Campaigns," Virus Bulletin, Issue 4, April 2012

Sood, Bansal, Enbody, "Dissecting the NGR Bot Framework," Virus Bulletin, Issue 1, January 2012

Sood, Enbody, "Social Networks - Launchpads for Malware," Commercial Crime International, December, 2011

Sood, Enbody, Bansal, "The Art of Stealing Banking Information - Form Grabbing on Fire," Virus Bulletin, Issue 11, November 2011

Sood, Enbody, "Extending SQL Injection Using Buffer Overflows - Tactical Exploitation," Hack In The Box Magazine, Issue 7, September 2011

Sood, Enbody, "A Browser Malware Taxonomy," Virus Bulletin, June 2011, p. 8-13.

Sood, Enbody, "Botnet-Resistent Coding," hitb: hack in the box , Vol. 1, Issue 6, June 2011, p. 24-33.

Sood, A, and Enbody, R.,"Exploiting Web Virtual Hosting Malware Infections", HITB Magazine, February 1, 2011, Vol 1, No. 5, p.32-36

Sood, A, Enbody, R., and Bansal, R., "SpyEye Malware Infection Framework," Virus Bulletin Magazine, Issue 7, July 2011

Sood, A, Enbody, R., and Bansal, R., "SpyEye Bot - Exploitation Tactics," Virus Bulletin Magazine, Issue 8, August 2011

Enbody, R., Punch, W., ``Teaching Python in the University,'' Python Magazine, August, 2009

Conference Proceedings

Sood, Enbody, "Socioware: Dissecting Online Social Network Worms-Insidious Analysis and Design," GRRCON, 2014

Sood, Enbody, "Browser Exploit Packs - Exploitation Paradigm," Proceedings of 21st Annual Virus Bulletin Conference ,Barcelona, Spain, October 2011

Sood, Enbody, "Spying on SpyEye - What Lies Beneath?," Hack In The Box Security Conference, Amsterdam, Europe, May 2011

Sood, Enbody, "The Good Hacker - Hunting Web Malware," Proceedings of OWASP - Web Application Security Conference , Minneapolis, Minnesota, 2011

Sood, Enbody, "Cross Interface Attacks: Malware Paradox," Proceedings of the 13th Symposium of Association of Anti Virus Asia Researchers(AAVAR 2010), November 2010

Sood, Enbody, "The Conundrum of Declarative Security - HTTP Response Headers: Lessons Learned," Workshop on Collaborative Methods for Security and Privacy(USENIX CollSec 2010), August 2010

Demott, J, Enbody, R., Punch, W. "ClusterFuzz: A Novel Distributed Fuzzing System including Fault Localization," Blackhat 2010

Enbody, R., Punch, W., et al., "Measuring the Effect of Intervening Early With at Risk Students in a CS1 Course," ASEE 2010

Enbody, R., Punch, W., "Performance of Python CS1 Students in Mid-level non-Python CS Courses," SIGCSE 2010

Enbody, R., Punch, W., McCullen, M., "Python CS1 as Preparation for C++ CS2," SIGCSE 2009 , p. 116-120

Demott, J., Enbody, R., Punch, W., "Revolutionizing the Field of Grey-box Attack Surface Testing with Evolutionary Fuzzing," Black Hat USA 2007 & DefCon 15, 2007.

Enbody, R., Zhang, Y., "A Mathematic Model for Securing Private Data in an Outsourcing Environment", 6th Security Conference (2007).

Enbody, R., Piromsopa, K., "Architecting Security: A Secure Implementation of Hardware Buffer-Overflow Protection", Third International Conference on Advances in Computer Science and Technology (ACST) 2007.

Demott, J., Enbody, R., "The Evolving Art of Fuzzing," DEF CON 14, Las Vegas, 2006.

Enbody, R., Piromsopa, K., "Defeating Buffer-Overflow Prevention Hardware," WDDD 2006: Fifth Annual Workshop on Duplicating, Deconstructing, and Debunking, 2006, p. 58-65.

Enbody, R., Piromsopa, K., "Buffer-Overflow Protection: The Theory," Sixth IEEE International Conference on Electro/Information Technology, 2006, p. 454-458.

Enbody, R., Piromsopa, K., "Arbitrary Copy: Bypassing Buffer-Overflow Protections," Sixth IEEE International Conference on Electro/Information Technology, 2006, p. 580-584.

Zhang, Enbody, Lloyd, "Proactive, Content-Aware, Sensitive Data Protection Framework for Enterprises," Communication, Network and Information Security (CNIS 2006), 2006.

Zhang and Enbody, "Protecting Private Data in an Outsourcing Environment," Communications, Internet and Information Technology (CIIT 2006), 2006.

Brehob, M, Enbody, R.J., Torng, E., Wagner, S., "On-line Restricted Cache Scheduling," Proceedings of the 12th Annual ACM-SIAM Symposium on Discrete Algorithms (SODA), p. 374-383, 2001.

Stockman, G, Enbody, R.J., "Teaching Advanced Students C++ with Computer Vision," Computer Vision and Pattern Recognition: Combined Research-Curriculum Development in Computer Vision Workshop, Dec., 2001.

Horoi, M., Enbody, R., Tomanek, D, "High Performance Implementation of a Carbon Molecular Dynamics Code on a Cluster of Workstations", American Physics Society, March, 2000.

Enbody, R.J., "A Virtual University CS1Course as a Platform for Web-based Education Experimentation," American Society for Engineering Education Annual Conference, June, 1999.

Brehob, M, Enbody, R.J., "The Potential of Carbon-based Memory Systems," 1999 IEEE International Workshop on Memory Technology, Design, and Testing, August 1999, p.110-114.

Hughes, J., Rover, D., and Enbody, R.J., "Towards a More Collegial and Consultative ABET Visit," Frontiers in Education, November, 1999.

Enbody, R.J. and Horoi, M., "Performance Analysis and Optimization of a Parallel Carbon Molecular Dynamic Code on a Cray T3E," International Conference on Parallel Processing, August, 1998, p. 62-69.

Horoi, M., Enbody, R. J., "High Performance Implementation of a Carbon Molecular Dynamic Code on a Cray T3E." American Physical Society Annual Meeting 1998.

Enbody, R.J., "The Computer Architecture Sequence at Michigan State University," International Symposium on Computer Architecture Workshop on Computer Architecture Education, June, 1998. (Also reprinted in the IEEE Computer Society Technical Committee on Computer Architecture Newsletter p. 10-12, February 1999.)

Enbody, R.J., Kelly, P., Moore, W.M., "Performance Monitoring in Advanced Computer Architecture," International Symposium on Computer Architecture Workshop on Computer Architecture Education, June, 1998.

Enbody, R.J. "Our Experience Developing CQI Procedures for ABET 2000 Accreditation", IEEE Frontiers In Education,1998, p.878 - 883.

"Comparing Gang Scheduling with Dynamic Space Sharing on Symmetric Multiprocessors Using Automatic Self-Allocating Threads (ASAT)," International Parallel Processing Symposium, April, 1997, pp. 288 - 292.

Enbody, R.J. and Severance, C.R., "Automatic Self-allocating Threads (ASAT) on an SGI Challenge," International Conference on Parallel Processing, August, 1996, Vol III, pp. 132 - 139.

Enbody, R.J. and Severance, C.R., " A Possible Addition to HPF 3.0 - Real Valued Indexed (RVI) Arrays," High Performance Computing Symposium 96, New Orleans, Louisiana, April, 1996, pp. 248-253.

Severance, C.R., Enbody, R.J., Wallach, S., "Automatic Self-Allocating Threads (ASAT) on the Convex Exemplar," 1995 International Conference on Parallel Processing, Oconomowoc, Wisconsin, 1995, Vol. 1. pp. 24 - 31.

Enbody, R.J., Li, T.Y., Xiaozhuo, Y.," A Parallel Algorithm For The Nonsymmetric Eigenvalue Problems," 7th SIAM Conference on Parallel Processing for Scientific Computing, San Francisco, 1995, pp. 569-570.

Enbody, R.J., Purdy, R., Severance, C.R., " Dynamic Load Balancing," 7th SIAM Conference on Parallel Processing for Scientific Computing, San Francisco, 1995, pp. 645-646.

W.F. Punch, E.D. Goodman, Min Pei, Lai Chia-Shun, P. Hovland and R. Enbody, "Further Research on Feature Selection and Classification Using Genetic Algorithms", 5th International Conference on Genetic Algorithms, Urbana-Champaign, July 1993, pg 557.

Goodman, Punch, Pei, Enbody, Lai, Hovland, "Genetic Algorithms: New Implementations and New Applications," CAD-93, Yalta, May, 1993.

Nesbeitt, P., Enbody, R. J., Bulgac, A., Tomanek, D., Overney, G., Severance, C., "A Topology- and Problem-Independent Scalable Parallel Approach to Molecular Dynamics Simulation", Sixth SIAM Conference on Parallel Processing for Scientific Computing, March, 1993, pp. 170 - 173.

Severance, C., Enbody, R. J., Bulgac, A., Tomanek, D., "Real-Valued Array Indices: A Possible FORTRAN Extension," Sixth SIAM Conference on Parallel Processing for Scientific Computing, March, 1993, pp. 979 - 982.

Enbody, R.J., and Jou, T-S, "A Scalable Snoopy Coherence Scheme on Distributed Shared-Memory Multiprocessors," IEEE Supercomputing'92, 1992, pp. 652 - 659.

Enbody, R.J., and Jou, T-S, "Address-Separated Multibus Architecture," International Conference On Parallel And Distributed Systems, 1992, pp. 82 - 89.

Punch, W. F., and Enbody, R. J., "Teaching the Concept of Computation to Junior High-School Students," IEEE Frontiers in Education Conference, 1992, pp. 292 - 297.

Robinson, D., Cheng, B.H.C., Enbody, R.J., "A Transparent Monitoring Tool for Shared-Memory Multiprocessors," 16th Annual IEEE International Conference on Computer Software and Applications (COMPSAC), 1992, pp. 227 - 232.

Newman, T., Jain, A., Enbody, R.J., "3D Object Recognition: Interpretation Tree Search on a MIMD Machine" IAPR's 11th International Conference on Pattern Recognition (Architectures for Vision and Pattern Recognition Track), 1992, pp. A-337 - A-340.

Enbody, R.J., and Chittor, S., "Predicting the Effect of Mapping on the Communication Performance of Large Multicomputers," 1991 Int'l Conference on Parallel Processing, Vol. II, pp. 1 - 4.

Enbody, R.J., Tan, K., Lynn, G., "Routing the 3D Chip," 28th Design Automation Conference, June, 1991, pp. 132 - 137.

Enbody, R.J., and Chittor, S., "Performance Evaluation of Mesh-Connected Wormhole-Routed Networks for Interprocessor Communication in Multicomputers," IEEE/ACM Supercomputing '90, November, 1990, pp. 647 - 656.

Enbody, R.J., and Chittor, S., "Performance Degradation in Large Wormhole-Routed Interprocessor Communication Networks," 1990 Int'l Conference on Parallel Processing, August, 1990, pp. 424 - 428.

Enbody, R.J., and Chittor, S., "Will 2D Mesh replace Hypercubes?," PARBASE-90: International Conference on Databases, Parallel Architectures, and their Applications, March, 1990, pp. 117 - 119.

Enbody, R.J., and Chittor, S., "Hypercubes vs. 2D Mesh," 4th SIAM Conference on Parallel Processing for Scientific Computing, December, 1989, pp. 313 - 318.

Enbody, R.J., and Chittor, S., "Link Switching: A Communication Architecture for Configurable Parallel Systems," Proc. 8th Int'l Phoenix Conference on Computers and Communications, March, 1989, pp. 386 - 390.

Enbody, R.J., Robinson, D.F., and Sun, X-H., "A Pipelined Parallel Approach for Solving Dense Linear Systems," 4th Conference on Hypercube Concurrent Computers and Applications, March, 1989.

Enbody, R.J. and Du, H.C., "General Purpose Router," Proc. 24th Design Automation Conference, July 1987, pp. 637 - 640.

Enbody, R.J. and Du, H.C., "Near Optimal n-layer Channel Routing," Proc. 23th Design Automation Conference, July 1986, pp. 708 - 714.

Workshops

"Developing Web-based Lectures" by Charles Severance and Richard Enbody, Frontiers In Education (FIE), San Juan, Puerto Rico, November 1999.

Ph.D. Students Graduated

Sood, Aditya, 2013
Senior Researcher and Engineer
Stealth Security
Demott, Jared, 2012
Principal Security Researcher
Harris Corporation
Piromsopa, Krerk, 2006
Department of Computer Engineering
Chulalongkorn University, Bangkok, Thailand
Brehob, Mark, 2003
Department of Computer Science
University of Michigan, Ann Arbor, Michigan
Severance, Charles R., 1996
School of Information
University of Michigan, Ann Arbor, Michigan
Jou, Tyan-Shu, 1993
Director, Accton Technology Corp., Taiwan
Chittor, Suresh, 1991
MPG/MD6 (Microprocessor Products Group, and Microprocessor Division 6)
Intel Corporation, Beaverton, Oregon