Eugene H. Spafford

Professor of Computer Science
Professor of Electrical and Computer Engineering (courtesy)
Professor of Communication (courtesy)
Professor of Philosophy (courtesy)
Professor of Political Science (courtesy)
Executive Director, Purdue CERIAS

Joined department: 1987
BA, State University of New York at Brockport, Mathematics and Computer Science (1979)
MS, Georgia Institute of Technology, Information and Computer Science (1981)
PhD, Georgia Institute of Technology, Information and Computer Science (1986)
DSc (honorary), State University of NY (SUNY), (2005)

Dr. Spafford's current research interests are focused on issues of computer and network security, cybercrime and ethics, technology policy, and social impact of computing. He is the founder and executive director of the Center for Education and Research in Information Assurance and Security (CERIAS). This university-wide institute draws on expertise and research across many of the academic disciplines at Purdue.

Spafford has received recognition and many honors for his research, including being named as a Fellow of the ACM, the AAAS, the IEEE, the (ISC)2, and as a Distinguished Fellow of the ISSA; he is the only person ever to achieve all five designations. Dr. Spafford is also the only person to receive all three of the most prestigious awards in cyber security: the NIST/ NCSC NationalComputer Systems Security Award in 2000; named to the Cyber Security Hall of Fame in 2013, and as recipient of the Harold F. Tipton Lifetime Achievement Award , also in 2013. In 2012, he was named as one of Purdue's first Morrill Award winners for outstanding career achievements.

Among other honors for Professor Spafford are the 2004 ACM SIGCAS Making a Difference Award, a U.S. Air Force medal for "Meritorious Civilian Service" for his work with the USAF Scientific Advisory Board from 1999-2003, the 2005 IEEE Computer Society Technical Achievement Award, the 2006 ACM SIGSAC Outstanding Contribution award, and the rarely given ACM President's Award in 2007. In 2009 he received the prestigious CRA Distinguished Service Award, and in 2011 he was presented with a SANS Lifetime Achievement Award. He has been awarded status as an Honorary CISSP (Certified Information Systems Security Professional) and named as a member of ISSA's Hall ofFame.

Professor Spafford has also been honored for his teaching, including receiving all three of Purdue's highest honors for education: the Outstanding Undergraduate Teaching Award in Memory of Charles B. Murphy, a Fellow of the Purdue Teaching Academy, and listing in Purdue's Book of Great Teachers. In 2001, he was awarded the Founder's Medal by the NCISSE, and in 2003, he received the IEEE Computer Society's Taylor L. Booth medal for his accomplishments in infosec education. In 2009 he was awarded UPE's ABACUS award for contributions to excellence in education.

Among many professional activities, Dr. Spafford is immediate past chair of ACM's U.S. Public Policy Council, is a Member-at-Large of the ACM Council, and is the Editor-in-Chief of the Elsevier journal Computers & Security .

Selected Publications
Mohammed Almeshekah and Eugene H. Spafford, "Using Deceptive Information in Computer Security Defenses", International Journal of Cyber Warfare and Terrorism, IGI Global; 4(3); Jul/Sep 2014; pp. 46-58
Mohammed Almeshekah and Eugene H. Spafford, "Planning and Integrating Deception into Computer Security Defenses", Proceedings of the New Security Paradigms Workshop (NSPW), Sep 2014; Victoria BC
Fariborz Farahmand and Eugene H. Spafford, "Understanding Insiders: An Analysis of Risk-Taking Behavior", Information Systems Frontiers, Springer; 15(1), March 2013; pp. 5-15.