{"693356":{"#nid":"693356","#data":{"type":"event","title":"Ph.D. Dissertation Defense - Tillson Galloway","body":[{"value":"\u003Cp\u003E\u003Cstrong\u003ETitle\u003C\/strong\u003E\u003Cem\u003E:\u0026nbsp; Demystifying Operational Gaps in the Threat Intelligence Ecosystem\u003C\/em\u003E\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ECommittee:\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003EDr.\u0026nbsp;Fabian Monrose, ECE, Chair, Advisor\u003C\/p\u003E\u003Cp\u003EDr.\u0026nbsp;Manos Antonakakis, ECE\u003C\/p\u003E\u003Cp\u003EDr.\u0026nbsp;Roberto Perdisci, UGA\u003C\/p\u003E\u003Cp\u003EDr.\u0026nbsp;Paul Pearce, UC Irvine\u003C\/p\u003E\u003Cp\u003EDr.\u0026nbsp;Angelos Keromytis, ECE\u003C\/p\u003E","summary":"","format":"limited_html"}],"field_subtitle":"","field_summary":[{"value":"\u003Cp\u003EThreat intelligence helps defenders disrupt malicious infrastructure, but opaque collection, analysis, and dissemination\u003Cbr\u003Eprocesses obscure its operational limitations. This dissertation develops active external measurements to reveal gaps in\u003Cbr\u003Eaccuracy, coverage, context, and timeliness. Executable probes and instrumented servers trace artifact extraction,\u003Cbr\u003Epropagation, and defensive action across 30 security vendors, exposing incomplete analysis and dissemination. Controlled experiments and large-scale crawling reveal retrieval and execution failures on shared hosting platforms and\u003Cbr\u003Emissing associations between recovered binaries and their originating URLs. To address these gaps, targeted collection\u003Cbr\u003Eand multimodal analysis identify malicious GitHub repositories and software packages. A 45-day evaluation spanning\u003Cbr\u003Eapproximately 13.5 million repositories uncovers 4,261 previously unreported malicious repositories, contributing to over\u003Cbr\u003E4,000 takedowns. Finally, experiments with GitHub and DNS detection systems demonstrate how low-cost adversarial\u003Cbr\u003Emanipulation undermines classification and artifact validation. Together, these studies establish methods for auditing\u003Cbr\u003Ethreat intelligence systems and inform improvements to collection, provenance, dissemination, and detection robustness.\u003C\/p\u003E","format":"limited_html"}],"field_summary_sentence":[{"value":"Demystifying Operational Gaps in the Threat Intelligence Ecosystem "}],"uid":"28475","created_gmt":"2026-10-21 12:14:06","changed_gmt":"2026-10-21 12:15:06","author":"Daniela Staiculescu","boilerplate_text":"","field_publication":"","field_article_url":"","field_event_time":{"event_time_start":"2026-11-03T13:00:00-05:00","event_time_end":"2026-11-03T15:00:00-05:00","event_time_end_last":"2026-11-03T15:00:00-05:00","gmt_time_start":"2026-11-03 18:00:00","gmt_time_end":"2026-11-03 20:00:00","gmt_time_end_last":"2026-11-03 20:00:00","rrule":null,"timezone":"America\/New_York"},"location":"Room 3402, Klaus","extras":[],"groups":[{"id":"434381","name":"ECE Ph.D. Dissertation Defenses"}],"categories":[],"keywords":[{"id":"100811","name":"Phd Defense"},{"id":"1808","name":"graduate students"}],"core_research_areas":[],"news_room_topics":[],"event_categories":[{"id":"1788","name":"Other\/Miscellaneous"}],"invited_audience":[{"id":"78771","name":"Public"}],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[],"email":[],"slides":[],"orientation":[],"userdata":""}}}