Gene Spafford

Eugene Howard Spafford
Spaf
Eugene Spafford speaks on computer security at Linux Forum 2000 in Copenhagen, Denmark.
Born1956 (age 69–70)
Rochester, NY
Other namesSpaf
CitizenshipUnited States
EducationState University of New York Brockport (BA)
Georgia Institute of Technology (MS, PhD)
AwardsSee section below
Scientific career
FieldsComputer science
Computer security
InstitutionsPurdue University
Notable studentsDan Farmer, Gene Kim
Websitespaf.cerias.purdue.edu

Eugene H. Spafford (born 1956), known professionally as Spaf, is an American computer scientist and cybersecurity pioneer who has served as a distinguished professor of computer science at Purdue University since 1987. Specializing in computer and network security, cybercrime investigation, ethics in computing, and technology policy, Spafford has made seminal contributions to the field, including his detailed analysis of the 1988 Morris Internet Worm that informed early understandings of malware propagation and system vulnerabilities. He founded and directed the Center for Education and Research in Information Assurance and Security (CERIAS) at Purdue, establishing it as a leading interdisciplinary hub for cybersecurity research and education. Spafford is the only individual to have received all three major U.S. national awards in computer security: the NIST/NCSC National Computer Systems Security Award in 2000, the ACM SIGSAC Outstanding Innovations in Computer and Network Security Award, and the National Information Systems Security Award. His work emphasizes practical defenses against cyber threats grounded in empirical analysis of real-world incidents and policy implications for secure system design.