Practical Obfuscation of BLE Physical-Layer Fingerprints on Mobile Devices, Hadi Givehchian, Nishant Bhaskar, Alexender Redding, Han Zhao, Aaron Schulman, and Dinesh Bharadia,
Proceedings of the IEEE Symposium on Security and Privacy, May 2024.
Architecting Trigger-Action Platforms for Security, Performance and Functionality, Deepak Siron Jegan, Michael Swift, and Earlence Fernandes,
Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2024.
Please Act Now: an Empirical Analysis of Enterprise-Wide Mandatory Password Updates, Ariana Mirian, Grant Ho, Stefan Savage, and Geoffrey M. Voelker,
Proceedings of Annual Computer Security Applications Conference (ACSAC), Austin, TX, December 2023.
Fast Practical Lattice Reduction through Iterated Compression, Keegan Ryan and Nadia Heninger,
Proceedings of Crypto 2023, Santa Barbara, CA, August 2023. (Best paper award).
When Messages are Keys: Is HMAC a Dual-PRF?, Matilda Backendal, Mihir Bellare, Felix Gunther, and Matteo Scarlata,
Proceedings of Crypto 2023, Santa Barbara, CA, August 2023.
Reductions from Module Lattices to Free Module Lattices, and Application to Dequantizing Module-LLL, Gabrielle De Micheli, Daniele Micciancio, Alice Pellet-Mary, and Nam Tran,
Proceedings of Crypto 2023, Santa Barbara, CA, August 2023.
Error Correction and Ciphertext Quantization in Lattice Cryptography, Daniele Micciancio and Mark Schultz,
Proceedings of Crypto 2023, Santa Barbara, CA, August 2023.
Access Denied: Assessing Physical Risks to Internet Access Networks, Alexander Marder, Zesen Zhang, Ricky Mok, Ramakrishna Padmanabhan, Bradley Huffaker, Matthew Luckie, Alberto Dainotti, kc claffy, Alex C. Snoeren, and Aaron Schulman,
Proceedings of the USENIX Security Symposium, Anaheim, CA, August 2023.
Improving Logging to Reduce Permission Over-Granting Mistakes, Bingyu Shen, Tianyi Shan, and Yuanyuan Zhou,
Proceedings of the USENIX Security Symposium, Anaheim, CA, August 2023.
HECO: Fully Homomorphic Encryption Compiler, Alexander Viand, Patrick Jattke, Miro Haller, and Anwar Hithnawi,
Proceedings of the USENIX Security Symposium, Anaheim, CA, August 2023.
MultiView: Finding Blind Spotsin Access-Deny Issues, Bingyu Shen, Tianyi Shan, and Yuanyuan Zhou,
Proceedings of the USENIX Security Symposium, Anaheim, CA, August 2023.
Understanding the Viability of Gmail’s Origin Indicator for Identifying the Sender, Enze Liu, Lu Sun, Alex Bellon, Grant Ho, Stefan Savage, Geoffrey M. Voelker, and Imani N. S. Munyaka,
Proceedings of the Sympsoium on Useable Privacy and Security, Anaheim, CA, August 2023.
In the Line of Fire: Risks of DPI-triggered Data Collection, Ariana Mirian, Alisha Ukani, Ian Foster, Gautam Akiwate, Taner Halicioglu, Cindy Moore, Alex C. Snoeren, Geoffrey M. Voelker, and Stefan Savage,
Proceedings of Workshop on Cyber Security Experimentation and Test (CSET), Marina del Rey, CA, August 2023.
No Privacy Among Spies: Assessing the Functionality and Insecurity of Consumer Android Spyware Apps, Enze Liu, Sumanth Rao, Sam Havron, Grant Ho, Stefan Savage, Geoffrey M. Voelker, and Damon McCoy,
Proceedings on Privacy Enhancing Technologies Symposium, Lausanne, Switzerland, July 2023.
Forward Pass: On the Security Implications of Email Forwarding Mechanism and Policy, Enze Liu, Gautam Akiwate, Mattijs Jonker, Ariana Mirian, Grant Ho, Geoffrey M. Voelker, and Stefan Savage,
Proceedings of the IEEE European Symposium on Security and Privacy, Delft, The Netherlands, July 2023. (Best paper award).
WaVe: a Verifiably Secure WebAssembly Sandboxing Runtime, Evan Johnson, Evan Laufer, Zijie Zhao, Shravan Narayan, Stefan Savage, Deian Stefan, and Fraser Brown,
Proceedings of the IEEE Symposium on Security and Privacy, May 2023. (Distinguished Paper Award).
Half&Half: Demystifying Intel’s Directional Branch Predictors for Fast, Secure Partitioned Execution, Hosein Yavarzadeh, Mohammadkazem Taram, Shravan Narayan, Deian Stefan, and Dean Tullsen,
Proceedings of the IEEE Symposium on Security and Privacy, May 2023. (Distinguished Paper Award).
MEGA: Malleable Encryption Goes Awry, Matilda Backendal, Miro Haller, and Kenneth G. Paterson,
Proceedings of the IEEE Symposium on Security and Privacy, May 2023. (Distinguished Paper Award).
The Hidden Number Problem with Small Unknown Multipliers: Cryptanalyzing MEGA in Six Queries and Other Applications, Keegan Ryan and Nadia Heninger,
Proceedings of PKC 2023, May 2023. (Best Paper Award).
Hardening Signature Schemes via Derive-then-Derandomize: Stronger Security Proofs for EdDSA, Mihir Bellare, Hanna Davis, and Zijing Dai,
Proceedings of PKC 2023, May 2023.
Ransomware Attack Associated With Disruptions at Adjacent Emergency Departments in the US, Christian Dameff, Jeffrey Tully, Theodore C. Chan, Edward M. Castillo, Stefan Savage, Patricia Maysent, Thomas M. Hemmen, Brian J. Clay, and Christopher A. Longhurst,
JAMA Network Open 6(5):e2312270-e2312270, 2023.
Efficient FHEW Bootstrapping with Small Evaluation Keys, and Applications to Threshold Homomorphic Encryption, Yongwoo Lee, Daniele Micciancio, Andrey Kim, Rakyong Choi, Maxim Deryabin, Jieun Eom, and Donghoon Yoo,
Proceedings of Eurocrypt 2023, Lyon, France, April 2023.
Flexible Password-Based Encryption: Securing Cloud Storage and Provably Resisting Partitioning-Oracle Attacks, Mihir Bellare and Laura Shea,
The Cryptographers' Track at the RSA Conference 2023, San Francisco, April 2023.
Turn on, Tune in, Listen up: Maximizing Side-Channel Recovery in Time-to-Digital Converters, Colin Drewes, Olivia Weng, Keegan Ryan, Bill Hunter, Christopher McCarty, Ryan Kastner, and Dustin Richmond,
Proceedings of the International Symposiuym on Field-Programable Gate Arrays, MOnterey, CA, February 2023.
TagAlong: Free, Wide-Area Data-Muling and Services, Alex Bellon, Alex Yen, and Pat Pannuto,
Proceedings of International Workshop on Mobile Computing Systems and Applications (HotMobile), Newport Beach, CA, 2023.
Going Beyond the Limits of SFI: Flexible Hardware-Assisted In-Process Isolation with HFI, Shravan Naryan, Tal Garfinkel, Mohammadkazem Taram, Joey Rudek, Daniel Moghimi, Evan Johnson, Chris Fallin, Anjo Vahldiek-Oberwagner, Michael LeMay, Ravi Sahita, Dean Tullsen, and Deian Stefan,
Proceedings of the 28th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), Vancouver, Canada, March 2023. (Distinguished Paper Award).
MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code, Alexandra E. Michael, Anitha Gollamudi, Jay Bosamiya, Evan Johnson, Aidan Denlinger, Craig Disselkoen, Conrad Watt, Bryan Parno, Marco Patrignani, Marco Vassena, and Deian Stefan,
Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, Boston, MA, January 2023.
Segue & ColorGuard: Optimizing SFI Performance and Scalability on Modern x86, Shravan Narayan, Tal Garfinkel, Evan Johnson, David Thien, Joey Rudek, Michael LeMay, Anjo Vahldiek-Oberwagner, Dean Tullsen, and Deian Stefan,
Proceedings of the Workshop on Programming Languages and Analyusis for Security (PLAS), 2022.
The Challenges of Blockchain-based Naming Systems for Malware Defenders, Audrey Randall, Wes Hardaker, Aaron Schulman, Stefan Savage, and Geoffrey M. Voelker,
Proceedings of the APWG Symposium on Electronic Crime Research (eCrime), November 2022. (Best Student Paper).
Retroactive Identification of Targeted DNS Infrastructure Hijacking, Gautam Akiwate, Raffaele Sommese, Mattijs Jonker, Zakir Durumeric, kc Claffy, Geoffrey M. Voelker, and Stefan Savage,
Proceedings of the ACM Internet Measurement Conference (IMC), Nice, France, October 2022.
Where .ru? Assessing the Impact of Conflict on Russian Domain Infrastructure, Mattijs Jonker, Gautam Akiwate, Antonia Affinito, kc Claffy, Alessio Botta, Geoffrey M. Voelker, Rolan van Rijswijk-Deij, and Stefan Savage,
Proceedings of the ACM Internet Measurement Conference (IMC), Nice, France, October 2022.
Measuring UID Smuggling in the Wild, Audrey Randall, Peter Snyder, Alisha Ukani, Alex C. Snoeren, Geoffrey M. Voelker, Stefan Savage, and Aaron Schulman,
Proceedings of the ACM Internet Measurement Conference (IMC), Nice, France, October 2022.
Stop, DROP, and ROA: Effectiveness of Defenses through the lens of DROP, Leo Oliver, Gautam Akiwate, Matthew Luckie, Ben Du, and kc Claffy,
Proceedings of the ACM Internet Measurement Conference (IMC), Nice, France, October 2022.
Mind Your MANRS: Measuring the MANRS Ecosystem, Ben Du, Cecilia Testart, Romain Fontugne, Gautam Akiwate, Alex C. Snoeren, and kc Claffy,
Proceedings of the ACM Internet Measurement Conference (IMC), Nice, France, October 2022.
EVAX: Towards a Practical, Pro-active & Adaptive Architecture for High Performance & Security, Samira Ajorpaz, Daniel Moghimi, Jamison Collins, Nael Abu-Ghazaleh, Gilles Pokam, and Dean Tullsen,
Proceedings of the Annual IEEE/ACM International Symposium on Microarchitecture (MICRO), Chicago, IL, October 2022.
