Rock Stevens

Computer security research — University of Maryland

View publications Google Scholar

All timeSince 2021

Citations1098866

h-index1311

i10-index1312

per Google Scholar

#1 RESEARCH

Research themes

Threat modeling & security operations

These papers apply digital threat modeling and proactive security-operations measures to enterprise and combat systems.

Security advice & readability

These papers evaluate and measure the quality and readability of security and privacy advice.

Compliance & standards

These papers examine security issues and auditing methods tied to U.S. digital-security compliance standards and programs.

Vulnerability discovery & ML

Vulnerability discovery, exploitable bugs in machine learning, and mobile intrusion protection.

Usable security / HCI

These papers study user interactions with permissions and software-update behavior.

Leadership & crisis readiness

These papers address trust-based leadership and the usability of crisis and incident-response readiness.

#2 SELECTED PUBLICATIONS

Selected publications

Hackers vs. testers: A comparison of software vulnerability discovery processes

2018 IEEE Symposium on Security and Privacy (SP), 374-3912018

300 citations

A comprehensive quality evaluation of security and privacy advice on the web

29th USENIX Security Symposium (USENIX Security 20), 89-1082020

245 citations

Trust: The Key to Leading When Lives Are on the Line

Leadership in dangerous situations: A handbook for the armed forces …2022

103 citations

The Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise Level

27th USENIX Security Symposium (USENIX Security 18), 621-6372018

80 citations

#3 ALL PUBLICATIONS

All publications

2022

Trust: The Key to Leading When Lives Are on the LineP Sweeney, K Dirks, D Sundberg, P Lester, R StevensLeadership in dangerous situations: A handbook for the armed forces …2022103
How ready is your ready? assessing the usability of incident response playbook frameworksR Stevens, D Votipka, J Dykstra, F Tomlinson, E Quartararo, C Ahern, ...Proceedings of the 2022 CHI Conference on Human Factors in Computing Systems …202270
Above and Beyond: Organizational Efforts to Complement U.S. Digital Security Compliance MandatesR Stevens, FB Kokulu, A Doupé, ML MazurekNetwork and Distributed System Security (NDSS) Symposium202220

2020

A comprehensive quality evaluation of security and privacy advice on the webEM Redmiles, N Warford, A Jayanti, A Koneru, S Kross, M Morales, ...29th USENIX Security Symposium (USENIX Security 20), 89-1082020245
Compliance Cautions: Investigating Security Issues Associated with US Digital-Security Standards.R Stevens, J Dykstra, WK Everette, J Chapman, G Bladow, A Farmer, ...NDSS202046
It Lurks Within: A Look at the Unexpected Security Implications of Compliance ProgramsR Stevens, J Dykstra, WK Everette, M MazurekIEEE Security & Privacy202013
Optimizing proactive measures for security operationsRA StevensUniversity of Maryland, College Park20201
How to Hack Compliance: Using Lessons Learned to Repeatably Audit Compliance Programs for Digital Security ConcernsR Stevens, J Dykstra, W Knox-Everette, ML MazurekLearning from Authoritative Security Experiment Results (LASER)20201

2019

Comparing and developing tools to measure the readability of domain-specific textsEM Redmiles, L Maszkiewicz, E Hwang, D Kuchhal, E Liu, M Morales, ...Proceedings of the 2019 Conference on Empirical Methods in Natural Language …201923
Applied digital threat modeling: It worksR Stevens, D Votipka, EM Redmiles, C Ahern, ML MazurekIEEE Security & Privacy 17 (4), 35-4220198

2018

Hackers vs. testers: A comparison of software vulnerability discovery processesD Votipka, R Stevens, E Redmiles, J Hu, M Mazurek2018 IEEE Symposium on Security and Privacy (SP), 374-3912018300
The Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise LevelR Stevens, D Votipka, EM Redmiles, C Ahern, P Sweeney, ML Mazurek27th USENIX Security Symposium (USENIX Security 18), 621-637201880
First steps toward measuring the readability of security adviceEM Redmiles, M Morales, L Maszkiewicz, R Stevens, E Liu, D Kuchhal, ...The 2018 IEEE Security & Privacy Workshop on Technology and Consumer …201821
Offensive Digital Countermeasures: Exploring the Implications for GovernmentsR Stevens, J BillerThe Cyber Defense Review 3 (3), 93-11420187
Digital words: Moving forward with measuring the readability of online textsEM Redmiles, L Maszkiewicz, E Hwang, D Kuchhal, E Liu, M Morales, ...—20181

2017

User interactions and permission use on androidK Micinski, D Votipka, R Stevens, N Kofinas, ML Mazurek, JS FosterProceedings of the 2017 CHI Conference on Human Factors in Computing Systems …201775
Summoning Demons: The Pursuit of Exploitable Bugs in Machine LearningR Stevens, O Suciu, A Ruef, S Hong, M Hicks, T Dumitraşhttps://arxiv.org/abs/1701.04739201725
Calcifying crisis readinessR Stevens—20175
Identifying self-inflicted vulnerabilities: The operational implications of technology within U.S. combat systemsR Stevens2017 International Conference on Cyber Conflict (CyCon U.S.), 112-11820172

2007

FLIP-Forward Looking Intrusion Protection for Mobile Devices via Snort-Inline Hardware Implementation.S Mosley, M Potasznik, K Davis, R Stevens, M Ballmann, B Ancheta, ...ICWN, 167-17320070

Undated

Measuring Security Advice Quality: First StepsEM Redmiles, E Hwang, D Kuchhal, E Liu, L Maszkiewicz, M Morales, ...—Undated0

#4 PROFILE

Profile

Rock Stevens is a computer security researcher at University of Maryland.

View full Google Scholar profile ↗