David Warren
CERT
David Warren is an SEI alumni employee.
David Warren is a senior member of the technical staff focused on vulnerability analysis and discovery. Warren reverse engineers systems and tries to move the needle towards security.
Publications by David Warren
-
Historical Analysis of Exploit Availability Timelines
August 13, 2020 • White Paper
Allen D. HouseholderJeff Chrabaszcz (Govini)Trent Novelly
This paper analyzes when and how known exploits become associated with the vulnerabilities that made them possible.
read -
The CERT Guide to Coordinated Vulnerability Disclosure
March 26, 2020 • Podcast
Allen D. HouseholderDavid Warren
Allen Householder and David Warren discuss the CERT Guide to Coordinated Vulnerability Disclosure, which is used by security researchers, software vendors, and other stakeholders in informing others about security vulnerabilities.
learn more -
Vulnerability Discovery
November 01, 2016 • Presentation
Edward J. SchwartzDavid Warren
Overall aim is to increase assurance of DoD software through enhanced vulnerability discovery techniques
read -
-
Optimizing Seed Selection for Fuzzing
August 20, 2014 • Conference Paper
Alexandre Rebert (Carnegie Mellon University and ForAllSecure, Inc.)Sang Kil Cha (Carnegie Mellon University)Thanassis Avgerinos (Carnegie Mellon University)
In this paper, we focus on how to mathematically formulate and reason about one critical aspect in fuzzing: how best to pick seed files to maximize the total number of bugs found during a fuzz campaign.
read