Purdue University - Department of Computer Science -

Eugene H. Spafford

Professor of Computer Science

Professor of Electrical and Computer Engineering (courtesy)

Professor of Communication (courtesy)

Professor of Philosophy (courtesy)

Professor of Political Science (courtesy)

Executive Director Emeritus, Purdue CERIAS

Joined department: 1987


BA, State University of New York at Brockport, Mathematics and Computer Science (1979)
MS, Georgia Institute of Technology, Information and Computer Science (1981)
PhD, Georgia Institute of Technology, Information and Computer Science (1986)
DSc (honorary), State University of NY (SUNY), (2005)

Dr. Spafford's current research interests are focused on issues of computer and network security, cybercrime and ethics, technology policy, and social impact of computing. He is the founder and executive director emeritus of the Center for Education and Research in Information Assurance and Security (CERIAS). This university-wide institute draws on expertise and research across many of the academic disciplines at Purdue.

Spaf (as he is widely known) has received recognition and many honors for his research, including being named as a Fellow of the ACM, the AAAS, the IEEE, the (ISC)2, and as a Distinguished Fellow of the ISSA; he is the only person ever to achieve all five designations. Dr. Spafford has also been honored with all of the most prestigious awards in cyber security: the NIST/NCSC National Computer Systems Security Award in 2000; named to the Cyber Security Hall of Fame in 2013, and as recipient of the (ISC)?? Harold F. Tipton Lifetime Achievement Award , also in 2013. He is the 2017 recipient of the IFIP TC-11 Kristian Beckman Award.

Among other honors for Professor Spafford are the 2004 ACM SIGCAS Making a Difference Award, a U.S. Air Force medal for "Meritorious Civilian Service" for his work with the USAF Scientific Advisory Board from 1999-2003, the 2005 IEEE Computer Society Technical Achievement Award, the 2006 ACM SIGSAC Outstanding Contribution award, and the rarely given ACM President's Award in 2007. In 2009 he received the prestigious CRA Distinguished Service Award, and in 2011 he was presented with a SANS Lifetime Achievement Award. He has been named as a member of the ISSA's Hall of Fame. In 2016, he was awarded Indiana's highest civilian honor, being named as a Sagamore of the Wabash.

Professor Spafford has also been honored for his teaching, including receiving all three of Purdue's highest honors for education: the Outstanding Undergraduate Teaching Award in Memory of Charles B. Murphy , made a Fellow of the Purdue Teaching Academy , and listing in Purdue's Book of Great Teachers . In 2001, he was awarded the Founder's Award by the NCISSE, and in 2003, he received the IEEE Computer Society's Taylor L. Booth medal for his accomplishments in infosec education. In 2009 he was awarded UPE's ABACUS award for contributions to excellence in education. In 2012, he was named as one of Purdue's first Morrill Award winners for outstanding career achievements.

Among many professional activities, Dr. Spafford is immediate past chair of ACM's U.S. Public Policy Council, is a Member-at-Large of the ACM Council, and is the Editor-in-Chief of the Elsevier journal Computers & Security .

Selected Publications

Mohammed Almeshekah and Eugene H. Spafford, "Using Deceptive Information in Computer Security Defenses", International Journal of Cyber Warfare and Terrorism , IGI Global; 4(3); Jul/Sep 2014; pp. 46-58

Jeffrey Avery and Eugene H. Spafford; Ghost Patches: Fake Patches for Fake Vulnerabilities; Proceedings of the 32nd International Conference on ICT Systems Security and Privacy Protection (IFIP SEC 2017); 2017; Rome, Italy.

Fariborz Farahmand and Eugene H. Spafford, "Understanding Insiders: An Analysis of Risk-Taking Behavior", Information Systems Frontiers, Springer; 15(1), March 2013; pp. 5-15.

Christopher N. Gutierrez, Mohammed H. Almeshekah, Eugene H. Spafford, Mikhail J. Atallah, and Jeff Avery; Inhibiting and Detecting Offline Password Cracking Using ErsatzPasswords; ACM Transactions on Privacy and Security (TOPS); ACM; Dec 2016; 19(3).

Mohammed Almeshekah and Eugene H. Spafford; Cyber Security Deception; chapter 2 in Cyber Deception: Building the Scientific Foundation; edited by Sushil Jajodia, V.S. Subrahmanian, Vipin Swarup, and Cliff Wang; Springer International; 2016.

Department of Computer Science, 305 N. University Street, West Lafayette, IN 47907

Phone:(765) 494-6010 • Fax: (765) 494-0739

Copyright © 2016 Purdue University | An equal access/equal opportunity university | Copyright Complaints

Trouble with this page? Disability-related accessibility issue? Please contact the College of Science.