Security

Cryptography

• Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data (ACM CCS 2006)
  • Introduces key-policy attribute-based encryption.

Hardware and Operating System

• Lest We Remember: Cold-Boot Attacks on Encryption Keys (CACM 2009)
  • Describes a process for finding keys in memory for several common algorithms, which is then applied to breaking encrypted disks after the machine has been physically stolen and its memory frozen to prevent state decay when the power is cut and transplanted to another machine for sifting.
• Exterminator: Automatically Correcting Memory Errors with High Probability (CACM 2008)
  • Buffer overflow and dangling pointer detection and correction via analysis of multiple randomized heaps.

Network Security

• Policy-Agile Encrypted Networks via Secure Function Computation (MILCOM 2010)
  • Survey paper of novel encryption schemes for routing applications.
• Supporting Publication and Subscription Confidentiality in Pub/Sub Networks (SPCN 2010)
  • Applies ciphertext-policy and key-policy attribute based encription and searchable encryption to protecting both content and subscriptions.

Program Verification

• Proofs from Tests (SSTA 2008)
  • Simultaneously abstracts and tests programs, driving toward a verification
• Fault Localization Using Value Replacement (SSTA 2008)
  • Finds erroneous statements in programs by permuting values and checking if they fix output
• Using Sensitivity Analysis to Create Simplified Economic Models for Regression Testing (SSTA 2008)
  • Develops a cost/benefit model for regression testing