Professor Ehab Al-Shaer's Professional Services

Journal Editorial Board Member

Special Issue Journal Editor

Conference & Program Committee Chair

Technical Program Committee Membership

Conference Steering Committee Membership

  • International Conference on Network and System Security (NSS 2010) 2009-current
  • Usenix Internet Network Management, 2009-current
  • ACM Assurable Security Configuration (SafeConfig), 2009-current
  • IEEE Workshop on End-to-End Monitoring Techniques and Services, 2005-2007
  • IEEE Management of Multimedia Networks and Services, 2001-2004

Member of Organization Committee

  • Workshop Co-Chair, ACM SafeConfig, 2015, 2013, 2012.
  • Workshops Co-Chairof IEEE INFOCOM 2008, April 2008, Phoenix, Arizona
  • Workshops Co-Chairof IEEE NOMS 2006, April 2006, Vancouver, Canada
  • Poster Chairof Consumer Communications and Network (CCNC 2005)

Conference/Workshop Session Chair

  • ACM/IEEE SafeConfig, 2011-2016
  • ACM CCS 2014 (Web Security)
  • INFOCOM 2007 (Intrusion Detection)
  • INFOCOM 2006 (Trust Management)
  • INFOCOM 2004 (Multicast Security)
  • NSF Workshop 2006 (Security Management)
  • ICNP 2006 (Security session)
  • ICNP 2005 (Overlay Networks)
  • IM 2005 (Application Monitoring)
  • IM 2003 (Configuration Management)
  • DSOM 2005 (Fault Management)
  • IEEE MMNS 2004 (Mobility Management)

International and National Professional Services

  • White House Office of Science and Technology (OSTP) BriefingInvited to present on the state of the art and future directions of cyber resiliency and asymmetric cyber warfare in December 2014. Many of the discussed themes in my presentation appeared in the national research agenda for cyber defense.
  • NSF US-Egypt Workshop on CybersecurityOrganized an NSF workshop on cybersecurity in Egypt in 2013. The workshop participants included eight US universities, seven Egyptian Universities and six other universities
  • NSF US-Turkey Workshop on Distributed Systems and SecurityParticipated in the US team in the NSF team who participated in the US-Turkey Workshop on security of networks and distributed systems hosted by Turkey government in June 2012.
  • NSF US-INDIA Workshop on Monitoring and SecurityParticipated in the US team in the NSF team who participated in the IUSSTF-NSF Indo-US Workshop on Infrastructure Security Monitoring hosted in India in Jan 2010 and sponsored by both the US and Indian governments.
  • United Nation Book on Cyber WarfareContributed to a United Nation book on “The Law of Cyber-Space” published by the United Nation in 2006.
  • NSF Workshop for National Initiative on Safe ConfigurationLead a national effort to create a research forum and future research directions in Assurable security configuration by founding and chairing NSF Assurable and Usable (SafeConfig) Workshops in 2008 and 2009. The workshop includes more than 25 experts in this area from 14 national and international institutions, 5 government agencies, and 5 R&D companies, who meet over 3 days to discuss and create the future research agenda in this critical area. My role was creating the team, program agenda, and discussion themes, coordinating the summary notes and editing the final report.
  • NITRD Workshop on Game Changing in CybersecurityParticipated NITRD National Cyber Leap Summit 2009 a government/national initiative for game-changing research in information security.

Professional Affiliate Membership

  • ACM Senior Member, SIGSAC (security group)
  • IEEE Communication Society Senior (nominated) Member
  • Usenix Member
  • IFIP TC 6 Member

Technology Transfer

  • Cisco INSPEC System: My group developed an automated tool for testing automatically the firewall implementation of policy enforcement using a novel testing technique called policy segmentation that minimizes the number of probe packets, while maintaining high accuracy. Our prototype was further developed as a tool that CISCO used locally for firewall automated testing that improves quality assurance.
  • Intel Security Policy Advisor: My group developed an automated tool for analyzing the firewall and IPSec polices for detecting configuration conflicts or inconsistencies, and recommending policy modification to fix the problem.
  • IP Mutation in Air Force SBIR Phase II: In collaboration with our DoD contractor partner, our team won the SBIR II award for developing our IP Mutation on Software Defined Networking. IP Mutation is a moving target defense technique that randomizes IP address in a network to disguise network assets identity.
  • NSA/APL ActiveSDN for Automated Response: We developed a novel reactive policy engine for automated proactive and reactive response to attacks or potential threats. The system, called CLIPS/ActiveSDN, can plan, deploy and orchestrate responses for thousands of active threats actions simultaneously, while guaranteeing the integrity of the network operations. The system was developed jointly with APL engineers (DoD contractors), and deployed in the DoD testbed used of the Integrated Active Cyber Defense (IACD) community.
  • Active Deception for ONR SBIR Phase I: In collaboration with our industry partner, our group won SBIR I award by the US Navy to develop active cyber defense that creates honey-games on demand.
  • CyberARM for Transition to Practice: In collaboration with Bank of America and Cyber Risk Research, we submitted a transition to practice proposal to NSF for developing a robust CyberARM tool, which is a tool developed by our group for cyber risk mitigation planning.
  • CCAA-UNCC will demonstrate their tools in RSA Exhibition 2018: Our team have developed three novel and mature tools that address critical challenges in Cybersecurity: (1) CyberARM for cyber risk planning mitigation, (2) TTPDrill for analyzing cyber threat intelligence report, and (3) HIDE for high anonymity in cyber deception. These tools have been selected for demonstration in RSA 2018.