Evaluating Physical-Layer BLE Location Tracking Attacks on Mobile Devices, Hadi Givehchian, Nishant Bhaskar, Eliana Rodriguez Herrera, Héctor Rodrigo López Soto, Christian Dameff, Dinesh Bharadia, and Aaron Schulman,
Proceedings of the IEEE Symposium on Security and Privacy, May 2022.
Risky BIZness: Risks Derived from Registrar Name Management, Gautam Akiwate, Stefan Savage, Geoffrey M. Voelker, and kc Claffy,
Proceedings of the ACM Internet Measurement Conference (IMC), Virtual, November 2021.
Who’s Got Your Mail? Characterizing Mail Service Provider Usage, Enze Liu, Gautam Akiwate, Mattijs Jonker, Ariana Mirian, Stefan Savage, and Geoffrey M. Voelker,
Proceedings of the ACM Internet Measurement Conference (IMC), Virtual, November 2021.
Home is Where the Hijacking is: Understanding DNS Interception by Residential Routers, Audrey Randall, Enze Liu, Ramakrishna Padmanabhan, Gautam Akiwate, Geoffrey M. Voelker, Stefan Savage, and Aaron Schulman,
Proceedings of the ACM Internet Measurement Conference (IMC), Virtual, November 2021.
Solver-Aided Constant-Time Hardware Verification, Klaus von Gleissenthall, Rami G¨okhan Kic, Deian Stefan, and Ranjit Jhala,
Proceedings of the ACM Conference on Computer and Communications Security (CCS), Seoul, Korea, November 2021.
SugarCoat: Programmatically generating privacy-Preserving, Web-compatible resource replacements for content blocking, Michael Smith, Peter Snyder, Ben Livshits, and Deian Stefan,
Proceedings of the ACM Conference on Computer and Communications Security (CCS), Seoul, Korea, November 2021.
On Bounded Distance Decoding with Predicate: Breaking the "Lattice Barrier" for the Hidden Number Problem, Martin R Albrecht and Nadia Heninger,
Proceedings of Eurocrypt 2021, Zagreb, Croatia, October 2021.
On the Security of Homomorphic Encryption on Approximate Numbers, Baiyu Li and Daniele Micciancio,
Proceedings of Eurocrypt 2021, Zagreb, Croatia, October 2021.
Hopper: Modeling and Detecting Lateral Movement, Grant Ho, Mayank Dhiman, Devdatta Akhawe, Vern Paxson, Stefan Savage, Geoffrey M. Voelker, and David Wagner,
Proceedings of the USENIX Security Symposium, Vancouver, B.C., Canada, August 2021.
Driving 2FA Adoption at Scale: Optimizing Two-Factor Authentication Notification Design Patterns, Maximillian Golla, Grant Ho, Marika Lohmus, Monica Pulluri, and Elissa M. Redmiles,
Proceedings of the USENIX Security Symposium, Vancouver, B.C., Canada, August 2021.
Swivel: Hardening WebAssembly against Spectre, Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean Tullsen, and Deian Stefan,
Proceedings of the USENIX Security Symposium, Vancouver, B.C., Canada, August 2021.
Jetset: Targeted Firmware Rehosting for Embedded Systems, Evan Johnson, Maxwell Bland, Yifei Zhu, Joshua Mason, Stephen Checkoway, Stefan Savage, and Kirill Levchenko,
Proceedings of the USENIX Security Symposium, Vancouver, B.C., Canada, August 2021.
Can Systems Explain Permissions Better? Understanding Users' Misperceptions under Smartphone Runtime Permission Model, Bingyu Shen, Lili Wei, Chengcheng Xiang, Yudong Wu, Mingyao Shen, Yuanyuan Zhou, and Xinxin Jin,
Proceedings of the USENIX Security Symposium, Vancouver, B.C., Canada, August 2021.
STORM: Refinement Types for Secure Web Applications, Nico Lehmann, Rose Kunkel, Jordan Brown, Jean Yang, Niki Vazou, Nadia Polikarpova, Deian Stefan, and Ranjit Jhala,
Proceedings of the 15th USENIX Symposium on Operating System Design and Implementation (OSDI), Virtual, July 2021.
Scooter & Sidecar: A Domain-Specific Approach to Writing Secure Database Migrations, John Renner, Alex Sanchez-Stern, Fraser Brown, Sorin Lerner, and Deian Stefan,
Proceedings of the ACM SIGPLAN Conference onProgramming Language Design and Implementation (PLDI), Virtual, June 2021.
CoResident Evil: Covert Communications in the Cloud with Lambdas, Anil Yelam, Ariana Mirian, Keerthana Ganesan, Shibani Subbareddy, and Stefan Savage,
Proceedings of the Web Conference (WWW), Ljubljana, Solvenia, arp 2021.
High-Assurance Cryptography in the Spectre Era, Gilles Barthe, Sunjay Cauligi, Benjamin Gregoire, Adrien Koutsos, Kevin Liao, Tiago Oliveira, Swarn Priya, Tamara Rezk, and Peter Schwabe,
Proceedings of the IEEE Symposium on Security and Privacy, San Francisco, CA, May 2021.
Diogenes: Lightweight Scalable RSA Modulus Generation with a Dishonest
Majority, Megan Chen, Carmit Hazay, Yuval Ishai, Yuriy Kashnikov, Daniele Micciancio, Tarik Riviere, Abhi Shelat, Muthuramakrishnan Venkitasubramaniam, and Ruihan Wang,
Proceedings of the IEEE Symposium on Security and Privacy, San Francisco, CA, May 2021.
Clairvoyance: Inferring Blocklist Use on the Internet, Vector Guo Li, Gautam Akiwate, Kirill Levchenko, Geoffrey M. Voelker, and Stefan Savage,
Proceedings of the Passive and Active Measurement Conference (PAM), Brandenburg, Germany, March 2021.
Доверя́й, но проверя́й: SFI safety for native-compiled Wasm, Evan Johnson, David Thien, Yousef Alhessi, Shravan Narayan, Fraser Brown, Sorin Lerner, Tyler McMullen, Stefan Savage, and Deian Stefan,
Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2021.
Automatically Eliminating Speculative Leaks from CryptograpHic Code with Blade, Marco Vassena, Craig Disselkoen, Klaus v. Gleissenthall, Sunjay Cauligi, Rami Gokhan Kici, Ranjit Jhala, Dean Tullsen, and Deian Stefan,
Proceedings of the ACM SIGPLAN Symposium on Principles of Programming Languages, Internet, January 2021. (Distinguished paper).
Simpler Statistically Sender Private Oblivious Transfer from Ideals of Cyclotomic Integers, Daniele Micciancio and Jessica Sorrell,
Proceedings of Asiacrypt 2020, Virtual, December 2020.
The Road to Less Trusted Code: Lowering the Barrier to In-Process Sandboxing, Tal Garfinkel, Shravan Narayan, Craig Disselkoen, Hovav Shacham, and Deian Stefan,
USENIX ;login: 45(5), December 2020.
Unresolved Issues: Prevalence, Persistence and Perils of Lame Nameservers, Gautam Akiwate, Raffaele Sommese, Mattijs Jonker, Ian Foster, Stefan Savage, Geoffrey M. Voelker, and kc Claffy,
Proceedings of the ACM Internet Measurement Conference, Pittsburgh, Pennsylvania (via the Internet), October 2020.
Trufflehunter: Cache Sniffing Rare Domains at Large Public DNS Resolvers, Audrey Randall, Enze Liu, Gautam Akiwate, Ramakrishna Padmanabhan, Stefan Savage, Geoffrey M. Voelker, and Aaron Schulman,
Proceedings of the ACM Internet Measurement Conference, Pittsburgh, Pennsylvania (via the Internet), October 2020. (Applied Networking Research Prize).
