Gene Spafford


Eugene Howard Spafford, nicknamed Spaf, is an American professor of computer science at Purdue University and a leading computer security expert.
A historically significant Internet figure, he is renowned for first analyzing the Morris Worm, one of the earliest computer worms, and his role in the Usenet backbone cabal, although his role as founder has also been claimed by Mary Ann Horton. Spafford was a member of the President's Information Technology Advisory Committee 2003-2005, has been an advisor to the National Science Foundation, and serves as an advisor to over a dozen other government agencies and major corporations.

Biography

Education and early career

Spafford attended The College at Brockport, State University of New York completing a double Bachelor of Arts in both mathematics and computer science in 3 years. He then attended the School of Information and Computer Sciences at the Georgia Institute of Technology. He received his Master of Science in 1981, and Doctor of Philosophy in 1986, for his design and implementation of the kernel of the original Clouds distributed operating system.
During the early formative years of the Internet, Spafford made significant contributions to establishing semi-formal processes to organize and manage Usenet, then the primary channel of communication between users, and to defining the standards of behavior governing its use.

Recent work

At Purdue, Spafford has a joint appointment as a professor of computer science and as professor of electrical and computer engineering, where he has served on the faculty since 1987. He is also a professor of philosophy, and a professor of communication. He is also Executive Director of Purdue's Center for Education and Research in Information Assurance and Security, and was the founder and director of COAST Laboratory, which preceded CERIAS.
He is involved in many professional associations and activities outside of Purdue, including serving on the Board of Directors of the Computing Research Association and as co-chairperson of the Association for Computing Machinery's US Public Policy Committee. He serves on several advisory and editorial boards and is internationally known for his writing, research, and speaking on issues of security and ethics. Spafford has authored or co-authored four books on computer and computer security, including Practical Unix and Internet Security for O'Reilly Media, and over 100 research papers, chapters, and monographs.
Spafford has stated that his research interests have focused on "the prevention, detection, and remediation of information system failures and misuse, with an emphasis on applied information security. This has included research in fault tolerance, software testing and debugging, intrusion detection, software forensics, and security policies."
Among notable software designed and/or supervised by Spafford include the Open Source Tripwire tool coded by his student Gene Kim, and the freeware Computer Oracle and Password System tool coded by his student Dan Farmer. He initiated the Phage List as a response to the Morris Worm. Some of his research also helped inspire the creation of the Mitre Corporation CVE service and the National Institute of Standards and Technology ICAT database. Research by other graduate students of his has resulted in tools for software testing and debugging, distributed processing, cyber forensics, firewalls, intrusion detection, auditing, and network traceback.
Spafford discussed on Cable-Satellite Public Affairs Network in 2009, a then-recent article in The New York Times that looked at how the Internet had been a conduit for many types of cybercrime.

Selected honors and awards