<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(87, 6, 6);">
<i>UNIVERSITY OF CHICAGO</i></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0in 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(87, 6, 6);">
<i>COMPUTER SCIENCE DEPARTMENT</i></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(87, 6, 6);">
<i>PRESENTS</i></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Daniel Votipka</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Assistant Professor, <a href="https://engineering.tufts.edu/cs/" id="OWAa71d36d9-81f6-0652-bbc5-f3c79a122f96" class="x_OWAAutoLink" data-auth="NotApplicable" style="color: rgb(0, 0, 0); text-decoration: none; text-align: left;">
Computer Science Department</a></b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Tufts University</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b><br>
</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Friday, October 25th</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>10:00 am - 11:00am</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>John Crerar Library 298</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b><br>
</b></div>
<div style="direction: ltr; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Title</b>: Vulnerability Discovery for All: A Human-Centric Approach to Software Vulnerability Discovery </div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Abstract</b>: Software vulnerabilities persist as an important and costly challenge. Significant effort has been exerted toward automatic vulnerability discovery, but human intelligence generally remains required and will remain necessary for the foreseeable
future. Unfortunately, the pool of experts qualified to perform vulnerability discovery is small and homogeneous, leading to negative outcomes such as labor shortages and a lack of perspective diversity. In this talk, I will present the results of multiple
studies investigating the humans at the center of vulnerability discovery. I will discuss the technical (e.g., the processes they follow to find vulnerabilities), along with the social (e.g., how they interact with others and navigate the bug bounty landscape)
aspects of their work. Building on this work, I will discuss interventions in tool development and education to make vulnerability discovery more approachable and inclusive. </div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Bio</b>: Daniel Votipka is the Lin Family Assistant Professor in the Department of Computer Science at Tufts University. He received his PhD in Computer Science from the University of Maryland. His work focuses on understanding the processes and mental models
of professionals who perform security-related tasks such as secure development, vulnerability discovery, network defense, and malware analysis to make security work more accessible and inclusive through improvements in automation, education, and policy. His
work has been recognized with multiple best paper awards at top security and HCI venues and his work has been funded by the NSF, Google, Cisco, and MedCrypt. Previously, he served in the US Air Force as a Cyber Warfare Officer working in the National Security
Agency.</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<a href="https://www.eecs.tufts.edu/~dvotipka/" id="OWAe30c0a02-2374-68cf-dd28-ea8219bd1ceb" class="x_OWAAutoLink" title="https://www.eecs.tufts.edu/~dvotipka/" data-auth="NotApplicable">https://www.eecs.tufts.edu/~dvotipka/</a></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<img id="x_image_0" width="204" height="206" style="width: 204px; height: 206px;" data-outlook-trace="F:2|T:2" src="cid:a07e6e79-f71f-4909-8f75-13f555d179a6"></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>Host: Marshini Chetty</b></div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; text-align: left; text-indent: 0px; margin: 0px; font-family: Arial, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b><br>
</b></div>
<div id="x_Signature" class="x_elementToProof"></div>
</body>
</html>