Eugene Howard Spafford
|Born||1956 (age 64–65)|
|Education||The College at Brockport, State University of New York (B.A.)|
Georgia Institute of Technology (M.S., Ph.D.)
|Awards||See section below|
|Notable students||Dan Farmer, Gene Kim|
A historically significant Internet figure, he is renowned for first analyzing the Morris Worm, one of the earliest computer worms, and his role in the Usenet backbone cabal, although his role as founder has also been claimed by Mary Ann Horton. Spafford was a member of the President's Information Technology Advisory Committee 2003-2005, has been an advisor to the National Science Foundation (NSF), and serves as an advisor to over a dozen other government agencies and major corporations.
Education and early career
Spafford attended The College at Brockport, State University of New York completing a double Bachelor of Arts (B.A.) in both mathematics and computer science in 3 years. He then attended the School of Information and Computer Sciences (now the College of Computing) at the Georgia Institute of Technology. He received his Master of Science (M.S.) in 1981, and Doctor of Philosophy (Ph.D.) in 1986, for his design and implementation of the kernel of the original Clouds distributed operating system.
During the early formative years of the Internet, Spafford made significant contributions to establishing semi-formal processes to organize and manage Usenet, then the primary channel of communication between users, and to defining the standards of behavior governing its use.
At Purdue, Spafford has a joint appointment as a professor of computer science and as professor of electrical and computer engineering, where he has served on the faculty since 1987. He is also a professor of philosophy (courtesy), and a professor of communication (courtesy). He is also Executive Director of Purdue's Center for Education and Research in Information Assurance and Security (CERIAS), and was the founder and director of COAST Laboratory, which preceded CERIAS.
He is involved in many professional associations and activities outside of Purdue, including serving on the Board of Directors of the Computing Research Association and as co-chairperson of the Association for Computing Machinery's (ACM) US Public Policy Committee. He serves on several advisory and editorial boards and is internationally known for his writing, research, and speaking on issues of security and ethics. Spafford has authored or co-authored four books on computer and computer security, including Practical Unix and Internet Security for O'Reilly Media, and over 100 research papers, chapters, and monographs.
Spafford has stated that his research interests have focused on "the prevention, detection, and remediation of information system failures and misuse, with an emphasis on applied information security. This has included research in fault tolerance, software testing and debugging, intrusion detection, software forensics, and security policies."
Among notable software designed and/or supervised by Spafford include the Open Source Tripwire tool coded by his student Gene Kim (Spafford was later the chief external technical advisor to the company Tripwire during their first few years), and the freeware Computer Oracle and Password System (COPS) tool coded by his student Dan Farmer. He initiated the Phage List as a response to the Morris Worm. Some of his research also helped inspire the creation of the Mitre Corporation CVE service and the National Institute of Standards and Technology (NIST) ICAT database. Research by other graduate students of his has resulted in tools for software testing and debugging, distributed processing, cyber forensics, firewalls, intrusion detection, auditing, and network traceback.
Spafford discussed on Cable-Satellite Public Affairs Network (C-SPAN) in 2009, a then-recent article in The New York Times that looked at how the Internet had been a conduit for many types of cybercrime.
Recent work from Spafford has shown how to use deception to deceive adversaries and thus make computing systems more secure. This work draws on multi-disciplinary expertise in security and psychology and has been funded by the National Science Foundation.
Selected honors and awards
- 1992 Inducted in Sigma Xi, research scientists' honor society
- 1992 Inducted in Upsilon Pi Epsilon, the computer sciences honor society
- 1996 Awarded charter membership in the Institute of Electrical and Electronics Engineers (IEEE) IEEE Computer Society's Golden Core for distinguished service to the Computer Society during its first 50 years
- 1996 Award of Distinguished Technical Communication (highest award) and Award of Merit by the Society for Technical Communication for Practical Unix and Internet Security
- 1997 Inducted as a Fellow of the Association for Computing Machinery (ACM)
- 1999 Inducted as a Fellow of the American Association for the Advancement of Science (AAAS)
- 2000 National Institute of Standards and Technology (NIST) and National Computer Security Center (NCSC) National Computer Systems Security Award
- 2000 Proclaimed a Certified Information Systems Security Professional (CISSP), honoris causa by the International Information System Security Certification Consortium (ISC)²
- 2000 Inducted as a Fellow of the Institute of Electrical and Electronics Engineers
- 2001 Named to the Information Systems Security Association (ISSA) Hall of Fame
- 2003 Awarded United States Air Force medal for Meritorious Civilian Service
- 2005 Honorary Doctor of Science (D.Sc.) from the State University of New York (SUNY)
- 2006 IEEE Computer Society Technical Achievement Award
- 2007 ACM President's Award
- 2009 Computing Research Association Distinguished Service Award
- 2013 Elected to the National Cybersecurity Hall of Fame
- 2017 Received the International Federation for Information Processing (IFIP) TC-11 Kristian Beckman Award
- 2020 IEEE Security and Privacy Symposium Test of Time Award
- 2020 Inducted as a Fellow of the American Academy of Arts and Sciences
- "Spaf's Home Page". CERIAS. Purdue University. Retrieved 2020-04-12.
- "Spafford Receives ACM President's Award". Spafford Receives ACM President's Award. Purdue University. 2007-04-06. Archived from the original on 2015-09-14. Retrieved 2015-01-30.
- "Usenet: The Great Renaming [FAQ]: 1985–1988". Archived from the original on 2002-10-12. Retrieved 2020-04-12.
Orginially organized by Gene Spafford in 1983, the backbone was formalized by Spaf after the Great Renaming.
- "Mary Ann Horton, Ph.D.: Professional Profile". Archived from the original on 2006-07-09. Retrieved 2020-04-12.
... 1980-1987 ... Designed Usenet Backbone, recruited and led the "Backbone Cabal" of key Usenet site administrators.
- "President's Information Technology Advisory Committee – Archive". Retrieved 2011-10-03.
- Spafford, Eugene H. (2013-11-12). "Oral history interview with Eugene H. Spafford". Charles Babbage Institute (Interview). Minneapolis, Minnesota: University of Minnesota. Retrieved 2020-04-12.
- "The Internet and Cyber-Security". C-SPAN. Purdue University: National Cable Satellite Corporation. 2009-02-21.
- Markoff, John (2009-02-14). "Do We Need a New Internet?". The New York Times.
- "Deceiving the deceivers: professor employs false fronts, data to fool hackers". Purdue 150th. 2019-01-30. Retrieved 2021-06-25.
- "NSF Award Search: Award # 1548114 - EAGER: Exploring the Use of Deception to Enhance Cyber Security". nsf.gov. Retrieved 2021-06-25.
- Spafford, Eugene (2011-09-25). "Abridged Vita: Eugene H. Spafford" (PDF). Retrieved 2011-10-03.
- "National Cybersecurity Hall of Fame". Retrieved 2020-04-12.
- "Kristian Beckman and Yves Deswarte Awards". IFIP TC-11. International Federation for Information Processing. Retrieved 2020-04-12.
|Wikiquote has quotations related to: Gene Spafford|
- Gene Spafford at the Mathematics Genealogy Project
- Official website, at Purdue
- Greplaw interview
- PKI Forum interview (introduction) (very long)
- CERIAS website
- Spafford's analysis of the Morris worm
- Practical Unix and Internet Security
- The Phage List"