Symantec Research Labs

Symantec Research Labs
Name	Symantec Research Labs
Type	Research division
Parent	Broadcom Inc.
Founded	1990s
Headquarters	Mountain View, California
Fields	Computer security, cryptography, machine learning, systems
Notable people	Gary Hendrix, Vinod Vaikuntanathan, John Viega

Symantec Research Labs is the research division formerly of Symantec Corporation and now within Broadcom Inc., focused on advancing technologies for computer security and information assurance through foundational research, prototype systems, and industry partnerships. The labs promoted interdisciplinary work spanning cryptography, machine learning, systems engineering, networking, and privacy to address threats exemplified by historical incidents such as the Morris worm and actors like the Conficker authors. Its research influenced products, standards bodies, and academic venues including IEEE, ACM, USENIX, and IETF.

History

Founded in the 1990s during a period of rapid growth in commercial antivirus and internet security, the labs evolved alongside companies such as Symantec Corporation, later integrated into Broadcom Inc. following a corporate acquisition. Early work responded to events like the Melissa worm and the ILoveYou outbreak while interacting with institutions such as DARPA, National Science Foundation, and Mitre Corporation. Leadership and researchers included alumni from Bell Labs, Xerox PARC, SRI International, and universities such as Stanford University, Massachusetts Institute of Technology, and Carnegie Mellon University, shaping collaborations with conferences like RSA Conference, Black Hat, and DEF CON.

Research Focus and Areas

The labs concentrated on topics in cryptography (including work related to homomorphic encryption and lattice-based cryptography), malware analysis (static and dynamic), network security (intrusion detection and anomaly detection), privacy-preserving computation (secure multi-party computation and differential privacy), and applied machine learning for threat detection. Projects connected to protocols and standards referenced Transport Layer Security, DNSSEC, and OAuth, while theoretical threads involved researchers tied to IZI, MIT CSAIL, and Microsoft Research communities. Cross-disciplinary engagement extended to applied work in cloud computing platforms like Amazon Web Services, Google Cloud Platform, and Microsoft Azure.

Organizational Structure and Locations

Organized as a distributed research group, the labs maintained sites in Silicon Valley near Mountain View, California, international offices in locations comparable to Bangalore, Beijing, and Cambridge, UK, and collaboration hubs in proximity to institutions such as Stanford University and University of California, Berkeley. Teams typically comprised principal researchers, postdocs, engineers, and visiting scholars recruited from entities like University of Cambridge, ETH Zurich, Tel Aviv University, and industrial labs such as Google Research and Facebook AI Research. Administrative oversight reported into corporate units at Symantec Corporation and later Broadcom Inc., interfacing with product groups and legal departments during interactions with regulatory bodies such as Federal Trade Commission.

Major Projects and Contributions

Notable initiatives included automated malware classification systems influenced by work at CARO, large-scale telemetry analysis comparable to efforts from Shodan and Project Inquest, and contributions to vulnerability research akin to disclosures at Pwn2Own and CanSecWest. The labs produced tools and prototypes for dynamic binary analysis, sandboxing comparable to DynamoRIO and Valgrind, and network forensics pipelines resonant with Bro (Zeek). Contributions impacted standards and practices referenced by National Institute of Standards and Technology, influenced threat intelligence sharing frameworks like STIX and TAXII, and informed incident response playbooks used by entities such as CERT Coordination Center and Microsoft Security Response Center.

Publications and Patents

Researchers published in venues including IEEE Symposium on Security and Privacy, ACM Conference on Computer and Communications Security, USENIX Security Symposium, NeurIPS, and ICML, with papers cited alongside work from Van Jacobson, Dan Boneh, Adi Shamir, and Whitfield Diffie. The labs filed patents on malware detection, cryptographic primitives, and behavioral analytics, contributing to portfolios analogous to those held by Intel Corporation, IBM Research, and Cisco Systems. Publication outputs were presented at workshops and symposia such as Workshop on Privacy in the Electronic Society and HotSec.

Collaborations and Industry Impact

The labs partnered with academic groups at Harvard University, Princeton University, University of Illinois Urbana–Champaign, and University of Toronto, and maintained industry collaborations with Microsoft Research, Google Research, IBM Research, Palo Alto Networks, and McAfee. Impact extended to open-source projects and community initiatives like Apache Software Foundation projects, shared datasets comparable to Kaggle competitions, and participation in policy discussions involving European Commission and National Cyber Security Centre (UK). Their research influenced commercial products, contributed to vendor best practices used by enterprises such as Amazon.com and Walmart, and informed curricula at programs including MIT Professional Education and Stanford Continuing Studies.

Category:Computer security research institutes