News

IEEE Software names Greg Morrisett's paper among 25th anniversary top picks

"Attacking Malicious Code" considered a classic in computer security

Contact:
Michael Patrick Rutter
(617) 496-3185

CAMBRIDGE, Mass. - January 5, 2009 - IEEE Software's editorial and advisory boards selected "Attacking Malicious Code: A Report to the Infosec Research Council," authored by Greg Morrisett, Allen B. Cutting Professor of Computer Science and Associate Dean for Computer Science and Electrical Engineering at the Harvard School of Engineering and Applied Sciences, and Gary McGraw, CTO of Cigital, Inc., a software security and quality consulting firm with headquarters in the Washington, D.C. area, as one of their 25th-Anniversary Top Picks for full-length, peer-reviewed articles.

The paper was among 35 articles honored in the the Jan/Feb 2009 issue. Those articles will be freely available, three at a time, on a rotating basis throughout 2009.

"Over the past 25 years, from 1984 through 2008, IEEE Softwarepublished more than 1,200 peer-reviewed full-length articles. Aspart of our 25th-anniversary celebration, Software’s editorial andadvisory boards embarked upon the ambitious task of distilling those articles into a compact list of recommended reading," wrote Hakan Erdogmus, editor in chief; Frances Paulisch, chair of the Advisory Board; and John Grundy, associate editor in chief.

"To select the articles, we relied on three sources: nominations, Web analytics, and citation statistics. We invited the members of Software’s boards as well as former editors in chief to nominate their favorite full-length, peer-reviewed articles that appeared either in a special focus section or as a standalone piece. We excluded from the competition non-peer-reviewed content such as columns, short essays, news articles, letters, point-counterpoint pieces, interviews, and guest editor introductions."

Morrisett, who earned his Ph.D. in Computer Science from Carnegie Mellon University and previously served as a faculty member at Cornell University, currently focuses on applications of programming language technology for building secure and reliable systems. In particular, he is interested in applications of advanced type systems, certifying compilers, proof-carrying code, and in-lined reference monitors for building efficient and provably secure systems.