Weidong Cui Researcher Systems and Networking Research Area Microsoft Research One Microsoft Way Redmond, WA 98052 Phone: 425-421-7749 Fax: 425-936-7329 Email: wdcui@microsoft.com

---

I am a researcher in the Distributed Systems and Security Group in the Systems and Networking Research Area at Microsoft Research, Redmond.

I completed my Ph.D. in Electrical Engineering and Computer Sciences at the University of California, Berkeley in September 2006. My Ph.D. dissertation was on automating malware detection by inferring the intent of users or adversaries under the supervision of Professor Randy Katz and Dr. Vern Paxson (now Professor Vern Paxson). During my Ph.D., I also worked in the Collaborative Center for Internet Epidemiology and Defenses at the International Computer Science Institute. I received my M.S. in Computer Science at the University of California, Berkeley in 2003. Prior to joining Berkeley, I received my B.E. and M.E. in Electronic Engineering at Tsinghua University in 1998 and 2000 under the supervision of Professor Xing Li.

---

Refereed Publications

• "Mapping Kernel Objects to Enable Systematic Integrity Checking",
  Martim Carbone, Weidong Cui, Long Lu, Wenke Lee, Marcus Peinado, Xuxian Jiang,
  The 16th ACM Conference on Computer and Communications Security (CCS), Chicago, IL, November 9-13, 2009.
  
  
• "Countering Kernel Rootkits with Lightweight Hook Protection",
  Zhi Wang, Xuxian Jiang, Weidong Cui, Peng Ning,
  The 16th ACM Conference on Computer and Communications Security (CCS), Chicago, IL, November 9-13, 2009.
  
  
• "Secure In-VM Monitoring Using Hardware Virtualization",
  Monirul Sharif, Wenke Lee, Weidong Cui, Andrea Lanzi,
  The 16th ACM Conference on Computer and Communications Security (CCS), Chicago, IL, November 9-13, 2009.
  
  
• "ReFormat: Automatic Reverse Engineering of Encrypted Messages",
  Zhi Wang, Xuxian Jiang, Weidong Cui, Xinyuan Wang, Mike Grace,
  The 14th European Symposium on Research in Computer Security (ESORICS), Saint Malo, France, September 2009.
  
  
• "Tupni: Automatic Reverse Engineering of Input Formats",
  Weidong Cui, Marcus Peinado, Karl Chen, Helen J. Wang, Luis Irun-Briz,
  The 15th ACM Conference on Computer and Communications Security (CCS), Alexandria, VA, October 27-31, 2008.
  
  
• "Countering Persistent Kernel Rootkits Through Systematic Hook Discovery",
  Zhi Wang, Xuxian Jiang, Weidong Cui, Xinyuan Wang,
  The 11th International Symposium on Recent Advances in Intrusion Detection (RAID), Boston, MA, September 15-17, 2008.
  
  
• "Spectator: Detection and Containment of JavaScript Worms",
  Benjamin Livshits, Weidong Cui,
  2008 USENIX Annual Technical Conference, Boston, MA, June 22–27, 2008.
  
  
• "Discoverer: Automatic Protocol Reverse Engineering from Network Traces", (html)
  Weidong Cui, Jayanthkumar Kannan, Helen J. Wang,
  The 16th USENIX Security Symposium, Boston, MA, August 2007.
  
  
• "ShieldGen: Automatic Data Patch Generation for Unknown Vulnerabilities with Informed Probing",
  Weidong Cui, Marcus Peinado, Helen J. Wang, Michael Locasto,
  2007 IEEE Symposium on Security and Privacy, Oakland, CA, May 2007.
  
  
• "Protocol-Independent Adaptive Replay of Application Dialog",
  Weidong Cui, Vern Paxson, Nicholas Weaver, Randy H. Katz,
  The 13th Annual Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2006.
  
  
• "Design and Implementation of an Extrusion-based Break-In Detector for Personal Computers",
  Weidong Cui, Randy H. Katz, Wai-tian Tan,
  The 21st Annual Computer Security Applications Conference (ACSAC), Tucson, AZ, December 2005.
  
  
• "Opportunistic Measurement: Extracting Insight from Spurious Traffic",
  Martin Casado, Tal Garfinkel, Weidong Cui, Vern Paxson, Stefan Savage,
  The Fourth Workshop on Hot Topics in Networks (HotNets-IV), College Park, MD, November 2005.
  
  
• "BINDER: An Extrusion-based Break-In Detector for Personal Computers",
  Weidong Cui, Randy H. Katz, Wai-tian Tan,
  2005 USENIX Annual Technical Conference, Anaheim, CA, April 2005.
  
  
• "Playback-Buffer Equalization for Streaming Media using Stateless Transport Prioritization",
  Wai-tian Tan, Weidong Cui, John Apostolopoulos,
  The 13th International Packet Video Workshop, Nantes, France, April 2003.
  
  
• "Backup Path Allocation based on a Correlated Link Failure Probability Model in Overlay Networks",
  Weidong Cui, Ion Stoica, and Randy H. Katz,
  The Tenth International Conference on Network Protocols (ICNP), Paris, France, November 2002.
  
  
• "The SAHARA Model for Service Composition Across Multiple Providers",
  B. Raman, S. Agarwal, Y. Chen, M. Caesar, W. Cui, P. Johansson, K. Lai, T. Lavian, S. Machiraju, Z. M. Mao, G. Porter, T. Roscoe, M. Seshadri, J. Shih, K. Sklower, L. Subramanian, T. Suzuki, S. Zhuang, A. D. Joseph, R. H. Katz, I. Stoica,
  The First International Conference on Pervasive Computing, Zurich, Switzerland, August 2002.

---

Non-Refereed Publications

• "Automating Malware Detection by Inferring Intent",
  Weidong Cui,
  Ph.D. Dissertation, September 2006.
  
  
• "GQ: Realizing a System to Catch Worms in a Quarter Million Places",
  Weidong Cui, Vern Paxson, Nicholas Weaver,
  ICSI Tech Report TR-06-004, September 2006.
  
  
• "SCONE: A Tool to Estimate Shared Congestion Among Internet Paths",
  Weidong Cui, Sridhar Machiraju, Randy H. Katz, Ion Stoica,
  Technical Report UCB-CSD-04-1320, May 2004.

---

Professional Services

• Program Committee Member, ACM CCS 2010.
• Program Committee Member, NDSS 2010.
• Program Committee Member, SecureComm 2009.
• Program Committee Member, ACM CCS 2009.
• Program Committee Member, IEEE S&P 2009.
• Program Committee Member, NDSS 2009.
• Program Committee Member, SecureComm 2008.
• Program Committee Member, DIMVA 2008.
• Program Committee Member, CRITIS 2007.
• Program Committee Member, DIMVA 2007.
• Program Committee Member, WWW 2007.

---

Last Modified: September 30, 2009.