george.bib

@inproceedings{Jones-Romig-1991-LISA,
  title = {{Cloning customized hosts (or customizing cloned hosts)}},
  author = {Jones, George M and Romig, Steven M},
  booktitle = {Proceedings of the Fifth Large Installation Systems Administration Conference (LISA V)(USENIX Association: Berkeley, CA)},
  pages = {233},
  year = {1991},
  note = {\url{http://port111.com/george/pubs/1991-Jones-Romig-LISA.pdf}, Accessed: 2014-07-29}
}
@article{Jones-2002-LOGIN,
  title = {{The Case for Network Infrastructure Security}},
  author = {Jones, George M},
  journal = {login: The Magazine of USENIX and SAGE},
  volume = {27},
  number = {6},
  year = {2002},
  note = {\url{http://port111.com/george/pubs/2002-Jones-LOGIN-Security.pdf}, Accessed: 2014-07-29}
}
@inproceedings{Jones-2003-NANOG,
  title = {{Knobs, Levers, Dials and Switches: Now and Then (please sir, may I have some more ?)}},
  year = {2003},
  author = {Jones, George},
  booktitle = {Proceedings of NANOG 29},
  note = {\url{http://port111.com/george/pubs/2003-Jones-NANOG.pdf}, Accessed: 2014-07-29},
  month = {October},
  publisher = {NANOG}
}
@misc{rfc3871,
  author = {G. Jones},
  title = {{Operational Security Requirements for Large Internet Service Provider (ISP) IP Network Infrastructure}},
  series = {Request for Comments},
  number = {3871},
  howpublished = {RFC 3871 (Informational)},
  publisher = {IETF},
  organization = {Internet Engineering Task Force},
  year = 2004,
  month = sep,
  url = {http://www.ietf.org/rfc/rfc3871.txt},
  note = {\url{http://www.ietf.org/rfc/rfc3871.txt}, Accessed: 2013-04-06}
}
@misc{Jones-2009-MITRE,
  title = {{NETwork Application ID (NETAID)}},
  author = {George Jones and Dr. Neal J. Rothleder},
  journal = {MITRE Innovation Program},
  year = {2009},
  note = {\url{http://port111.com/george/pubs/2009-Jones-MITRE.pdf},
                  Accessed: 2014-07-29}
}
@misc{Jones-2002-SANS,
  title = {{Router Audit Tool and Benchmark}},
  author = {Jones, George},
  journal = {SANS Webcast. February},
  month = {February},
  year = {2002},
  note = {\url{http://ncat.sourceforge.net/}, \url{http://port111.com/george/talks/Jones-2002-SANS.pdf}, \url{https://www.sans.org/webcasts/router-audit-tool-benchmark-90463}, Accessed: 2013-04-04}
}
@misc{Jones-2002-NCAT,
  title = {{CIS Cisco Router Audit Tool}},
  author = {Jones, George},
  journal = {Center for Internet Security},
  year = {2002},
  note = {\url{http://port111.com/george/pubs/ncat.html}, Accessed: 2014-07-29}
}
@inproceedings{Jones-Conrad-2012-GFIRST,
  author = {George Jones and Paul Conrad},
  affiliation = {CERT},
  title = {{“Capture the Flag” Data Capture Experiences}},
  booktitle = {GFIRST 2012 Proceedings},
  year = {2012},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://port111.com/george/pubs/2012-Jones-Conrad-GFIRST.pdf}, Accessed: 2013-04-06}
}
@inproceedings{Jones-Krystosek-Faber-2012-FloCon,
  author = {George Jones and Paul Krystosek and Sid Faber},
  affiliation = {},
  title = {{From Bandwidth to Beacon Detection, Prism, and Touchpoints}},
  booktitle = {FloCon 2012 Proceedings},
  year = {2012},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://port111.com/george/pubs/2012-Jones-Krystosek-Faber-FloCon.pdf}, Accessed: 2014-07-29}
}
@inproceedings{Jones-Whisnant-2012-FloCon,
  author = {George Jones and Austin Whisnant},
  affiliation = {},
  title = {{Network Profiling with SiLK}},
  booktitle = {FloCon 2012 Proceedings},
  year = {2012},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://port111.com/george/pubs/2012-Jones-Whisnant-FloCon.pdf}, Accessed: 2014-07-29}
}
@inproceedings{Sample-Jones-2013-FloCon,
  author = {Char Sample and George Jones},
  affiliation = {},
  title = {{Anomaly Detection}},
  booktitle = {FloCon 2013 Proceedings},
  year = {2013},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://www.cert.org/flocon/2013/presentations/sample-char-intro-anomaly-detection.pdf}, Accessed: 2013-04-06}
}
@inproceedings{Jones-Shimeall-2013-FloCon,
  author = {George Jones and Tim Shimeall},
  affiliation = {},
  title = {{Behavioral Whitelists of High-Volume Web Traffic to Specific Domains}},
  booktitle = {FloCon 2013 Proceedings},
  year = {2013},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://port111.com/george/pubs/2013-Jones-Shimeall-FloCon.pdf}, Accessed: 2013-07-29}
}
@inproceedings{Quilt-IEEE-2013abstract,
  author = {Dr. Timothy Shimeall and George M. Jones and Derrick H. Karimi},
  affiliation = {},
  title = {{Quilt: A system for distributed queries of security-relevant data}},
  booktitle = {IEEE Securtiy and Privacy, 2013},
  year = {2013},
  address = {San Francisco, CA, USA},
  publisher = {IEEE},
  note = {\url{http://port111.com/george/pubs/2013-Jones-Shimeall-Quilt-Abstract.pdf}, Accessed: 2014-07-29}
}
@inproceedings{Jones-Shimeall-2014-FloCon,
  author = {George Jones and Tim Shimeall},
  affiliation = {},
  title = {{Quilt: A System for Distributed Temporal Queries of Security Relevant Heterogeneous Data, Tim Shimeall and George Jones}},
  booktitle = {FloCon 2014 Proceedings},
  year = {2014},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://www.cert.org/flocon/proceedings/Shimeall-QUILT-20131230.pdf}, Accessed: 2013-07-29}
}
@inproceedings{Jones-2014-ALTS,
  title = {{ALTernatives to Signatures (ALTS))}},
  year = {2014},
  author = {George Jones and John Stogoski},
  booktitle = {CERT/CC Whitepaper},
  note = {\url{http://port111.com/george/pubs/2014-Jones-Stogoski-ALTS.pdf}, Accessed: 2014-07-29},
  month = {April},
  publisher = {CERT}
}
@article{Engst-CompuServe-1996-TIDBITS,
  title = {{Internet starter kit: For Macintosh}},
  author = {Engst, Adam C},
  year = {1996},
  journal = {TidBITS},
  note = {\url{http://tidbits.com/iskm/iskw2html/pt3/ch09/ch09c1.html#aa19}, Accessed: 2013-04-06}
}
@article{Engst-CompuServe-Mail-1996-TIDBITS,
  title = {{Gateways II/CompuServe}},
  author = {Engst, Adam C},
  year = {1992},
  journal = {TidBITS},
  note = {\url{http://tidbits.com/article/2945}, Accessed: 2013-04-07}
}
@article{Engst-USENET-1996-TIDBITS,
  title = {{Internet starter kit: For Macintosh}},
  author = {Engst, Adam C},
  year = {1996},
  journal = {TidBITS},
  note = {\url{http://tidbits.com/iskm/iskw2html/pt3/ch09/ch09c1.html#aa23}, Accessed: 2013-04-06}
}
@article{Engst-FTP-1996-TIDBITS,
  title = {{Internet starter kit: For Macintosh}},
  author = {Engst, Adam C},
  year = {1996},
  journal = {TidBITS},
  note = {\url{http://tidbits.com/iskm/iskw2html/pt3/ch09/ch09c1.html#aa24}, Accessed: 2014-03-27}
}
@article{Truncale-1996-WindowsITPro,
  title = {{CompuServe Brings NT Online}},
  author = {David Truncale},
  journal = {Windows IT Pro},
  year = {1996},
  note = {\url{http://windowsitpro.com/windows-server/compuserve-brings-nt-online}, Accessed: 2013-04-06}
}
@book{wright2003securing,
  title = {Securing Cisco routers},
  author = {Wright, Joshua L and Stewart, John N},
  year = {2003},
  publisher = {SANS Institute},
  note = {\url{http://www.amazon.com/Securing-Cisco-Routers-Step-Step/dp/0972427333}}
}
@misc{rfc4778,
  author = {M. Kaeo},
  title = {{Operational Security Current Practices in Internet Service Provider Environments}},
  series = {Request for Comments},
  number = {4778},
  howpublished = {RFC 4778 (Informational)},
  publisher = {IETF},
  organization = {Internet Engineering Task Force},
  year = 2007,
  month = jan,
  url = {http://www.ietf.org/rfc/rfc4778.txt}
}
@inproceedings{Shimeall-2011-GFIRST,
  author = {Dr. Timothy Shimeall},
  affiliation = {CERT},
  title = {{Analytical Evaluation Framework}},
  booktitle = {GFIRST 2011 Proceedings},
  year = {2011},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT}
}
@inproceedings{Shimeall-2012-GFIRST,
  author = {Dr. Timothy Shimeall},
  affiliation = {CERT},
  title = {{Analytical Tool Evaluation Framework}},
  booktitle = {GFIRST 2012 Proceedings},
  year = {2012},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT}
}
@inproceedings{Bandes-2013-FloCon,
  author = {Ron Bandes},
  affiliation = {CERT},
  title = {{Introduction to SiLK \& Advanced SiLK Training}},
  booktitle = {FloCon 2013 Proceedings},
  year = {2013},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://www.cert.org/flocon/2013/presentations/bandes-ron-network-analysis-silk.pdf}, Accessed: 2013-04-06}
}
@inproceedings{Allen-Annand-2013-FloCon,
  author = {Brian Allen and Robert Annand},
  affiliation = {},
  title = {{Behavioral Whitelists of Beaconing Activity}},
  booktitle = {FloCon 2013 Proceedings},
  year = {2013},
  address = {Pittsburgh, PA, USA},
  publisher = {CERT},
  note = {\url{http://www.cert.org/flocon/2013/posters/allen-annand-behavioral-whitelists-of-beaconing-activity.pdf}, Accessed: 2013-04-06}
}