@inproceedings{pauley_performant_2022,
  title     = {Performant {Binary} {Fuzzing} without {Source} {Code} using {Static} {Instrumentation}},
  abstract  = {Advancements in fuzz testing have achieved the ability to quickly and comprehensively find security-critical faults in software systems. Yet, some of these techniques rely on access to source code, which is often unavailable in practice. In this paper, we explore techniques to replicate the depth and efficiency of source-code available fuzzers via static binary instrumentation. Developing such instrumentation is difficult because compilation is a lossy process, and much of the source-level semantics leveraged by these techniques are not available in binaries. We recover much of this information via heuristic control flow reconstruction, a shadow stack for function identification, and a novel technique for instrumenting comparison instructions. We evaluate RWFUZZ on the LAVA-M dataset, achieving the same effectiveness as a best-in-class source-available fuzzer with a 3.4× execution time overhead (lower than existing dynamic fuzzing approaches). In this way, we show that techniques for binary fuzzing may approach the functional ability of source-available fuzzing.},
  booktitle = {2022 {IEEE} {Conference} on {Communications} and {Network} {Security} ({CNS})},
  publisher = {IEEE},
  author    = {Pauley, Eric and Tan, Gang and Zhang, Danfeng and McDaniel, Patrick},
  month     = oct,
  year      = {2022}
}

@inproceedings{pauley_understanding_2023,
  address   = {San Diego, CA},
  title     = {Understanding the {Ethical} {Frameworks} of {Internet} {Measurement} {Studies}},
  booktitle = {The 2nd {International} {Workshop} on {Ethics} in {Computer} {Security} ({EthiCS} 2023)},
  author    = {Pauley, Eric and McDaniel, Patrick},
  month     = feb,
  year      = {2023},
  doi       = {10.14722/ethics.2023.239547}
}

@inproceedings{10.1145/3618257.3624810,
  author    = {Pauley, Eric and Barford, Paul and McDaniel, Patrick},
  title     = {The CVE Wayback Machine: Measuring Coordinated Disclosure from Exploits against Two Years of Zero-Days},
  year      = {2023},
  isbn      = {9798400703829},
  publisher = {Association for Computing Machinery},
  address   = {New York, NY, USA},
  url       = {https://doi.org/10.1145/3618257.3624810},
  doi       = {10.1145/3618257.3624810},
  booktitle = {Proceedings of the 2023 ACM on Internet Measurement Conference},
  pages     = {236–252},
  numpages  = {17},
  keywords  = {known exploited vulnerabilities, coordinated vulnerability disclosure, intrusion detection systems, honeypots, internet telescopes},
  location  = {Montreal QC, Canada},
  series    = {IMC '23}
}

@inproceedings{pauley_honey_2026,
  title     = {Honey {Configs}: Measuring The Emerging Exploitation of {Cloud} {IP} Address Reuse},
  author    = {Pauley, Eric and Beugin, Yohan and Barford, Paul and Traynor, Patrick and McDaniel, Patrick},
  booktitle = {Proceedings of the 2026 ACM Internet Measurement Conference (IMC '26)},
  address   = {Karlsruhe, Germany},
  publisher = {ACM},
  month     = oct,
  year      = {2026}
}

@inproceedings{hamza_split_2026,
  title     = {Split {Alignment}: Diffusing {SPF} Vulnerabilities With {DMARC}},
  author    = {Hamza, Muhammad and Jonker, Mattijs and Sommese, Raffaele and Fernandez, Simon and Hureau, Olivier and Pauley, Eric and Chung, Taejoong},
  booktitle = {Proceedings of the 2026 ACM Internet Measurement Conference (IMC '26)},
  address   = {Karlsruhe, Germany},
  publisher = {ACM},
  month     = oct,
  year      = {2026}
}

@mastersthesis{pauley_static_2020,
  title  = {Static {Instrumentation} for {Performant} {Binary} {Fuzzing}},
  url    = {https://etda.libraries.psu.edu/catalog/17753eap5377},
  school = {Pennsylvania State University},
  author = {Pauley, Eric},
  month  = mar,
  year   = {2020}
}

@article{pauley_clouds_2025,
  title   = {Clouds Are Where the (Security) Action Is: Have Honeypots Been Left in the Dust?},
  author  = {Pauley, Eric and Barford, Paul and McDaniel, Patrick},
  journal = {IEEE Security \& Privacy},
  volume  = {23},
  number  = {6},
  pages   = {51--57},
  year    = {2025},
  doi     = {10.1109/MSEC.2025.3603410}
}

@inproceedings{pauley_secure_2025,
  address   = {San Diego, CA},
  title     = {Secure {IP} {Address} {Allocation} at {Cloud} {Scale}},
  booktitle = {2025 {Network} and {Distributed} {Systems} {Security} {Symposium} ({NDSS})},
  publisher = {Internet Society},
  author    = {Pauley, Eric and Domico, Kyle and Hoak, Blaine and Sheatsley, Ryan and Burke, Quinn and Beugin, Yohan and Kirda, Engin and McDaniel, Patrick},
  month     = feb,
  year      = {2025}
}

@inproceedings{pauley_measuring_2022,
  title     = {Measuring and {Mitigating} the {Risk} of {IP} {Reuse} on {Public} {Clouds}},
  isbn      = {978-1-66541-316-9},
  url       = {https://www.computer.org/csdl/proceedings-article/sp/2022/131600b523/1CIO7rpcgSs},
  doi       = {10.1109/SP46214.2022.00094},
  abstract  = {Public clouds provide scalable and cost-efficient computing through resource sharing. However, moving from traditional on-premises service management to clouds introduces new challenges; failure to correctly provision, maintain, or decommission elastic services can lead to functional failure and vulnerability to attack. In this paper, we explore a broad class of attacks on clouds which we refer to as cloud squatting. In a cloud squatting attack, an adversary allocates resources in the cloud (e.g., IP addresses) and thereafter leverages latent configu- ration to exploit prior tenants. To measure and categorize cloud squatting we deployed a custom Internet telescope within the Amazon Web Services us-east-1 region. Using this apparatus, we deployed over 3 million servers receiving 1.5 million unique IP addresses (≈ 56\% of the available pool) over 101 days beginning in March of 2021. We identified 4 classes of cloud services, 7 classes of third-party services, and DNS as sources of exploitable latent configurations. We discovered that exploitable configurations were both common and in many cases extremely dangerous; we received over 5 million cloud messages, many containing sensitive data such as financial transactions, GPS location, and PII. Within the 7 classes of third-party services, we identified dozens of exploitable software systems spanning hundreds of servers (e.g., databases, caches, mobile applications, and web services). Lastly, we identified 5446 exploitable domains spanning 231 eTLDs—including 105 in the top 10 000 and 23 in the top 1000 popular domains. Through tenant disclosures we have identified several root causes, including (a) a lack of organizational controls, (b) poor service hygiene, and (c) failure to follow best practices. We conclude with a discussion of the space of possible mitigations and describe the mitigations to be deployed by Amazon in response to this study.},
  language  = {English},
  booktitle = {2022 {IEEE} {Symposium} on {Security} and {Privacy} ({SP})},
  publisher = {IEEE Computer Society},
  author    = {Pauley, Eric and Sheatsley, Ryan and Hoak, Blaine and Burke, Quinn and Beugin, Yohan and McDaniel, Patrick},
  month     = apr,
  year      = {2022},
  note      = {ISSN: 2375-1207},
  pages     = {1523--1523}
}

@inproceedings{pauley_dscope_2023,
  address   = {Anaheim, CA},
  title     = {{DScope}: {A} {Cloud}-{Native} {Internet} {Telescope}},
  booktitle = {Proceedings of the 32nd {USENIX} {Security} {Symposium} ({USENIX} {Security} 2023, to appear)},
  publisher = {USENIX Association},
  author    = {Pauley, Eric and Barford, Paul and McDaniel, Patrick},
  month     = aug,
  year      = {2023}
}