Publications can also be viewed by type.

2007

S. Ryu, K. Butler, P. Traynor, and P. McDaniel, everaging Identity-based Cryptography for Node ID Assignment in Structured P2P Systems. IEEE International Symposium on Security in Networks and Distributed Systems (SSNDS), May 2007.

Boniface Hicks, Sandra Rueda, Trent Jaeger, and Patrick McDaniel, Integrating SELinux with Security-typed Languages. Third Annual Security Enhanced Linux Symposium, March 2007.

2006

Boniface Hicks, Kiyan Ahmadizadeh, and Patrick McDaniel, Understanding Practical Application Development in Security-typed Languages. 22st Annual Computer Security Applications Conference (ACSAC), December 2006. [Full Paper: pdf Abstract]

Kevin Butler, William Enck, Jennifer Plasterr, Patrick Traynor, and Patrick McDaniel, Privacy-Preserving Web-Based Email. 2nd International Conference on Information Systems Security (ICISS 2006), December 2006. To Appear.

Luke St. Clair, Lisa Johansen, William Enck, Matthew Pirretti, Patrick Traynor, Patrick McDaniel, and Trent Jaeger, Password Exhaustion: Predicting the End of Password Usefulness. 2nd International Conference on Information Systems Security (ICISS 2006), December 2006. Invited Paper.

Kevin Butler, Patrick McDaniel, and William Aiello, Optimizing BGP Security by Exploiting Path Stability. 13th ACM Conference on Computer and Communications Security (CCS'06), November 2006. To Appear.

Matthew Pirretti, Patrick Traynor, Patrick McDaniel, and Brent Waters, Secure Attribute-Based Systems. 13th ACM Conference on Computer and Communications Security (CCS'06), November 2006. To Appear.

Patrick Traynor, William Enck, and Patrick McDaniel and Thomas La Porta, Mitigating Open Functionality in SMS-Capable Cellular Networks. Proceedings of the ACM Twelfth Annual International Conference on Mobile Computing and Networking (MobiCom), September 2006.

Patrick Traynor, JaeShung Shin, Barat Madan, Shashi Phoha, and Thomas La Porta, Efficient Group Mobility for Heterogeneous Sensor Networks. Proceedings of the IEEE Vehicular Technology Conference (VTC Fall), September 2006.

Trent Jaeger, David King, Kevin Butler, Jonathan McCune, Ramon Caceres, Serge Hallyn, Joy Latten, Reiner Sailer, and Xiolan Zhang, Leveraging IPsec for Distributed Authorization. 2nd IEEE Communications Society/CreateNet International Conference on Security and Privacy in Communication Networks (SecureComm'06), August 2006.

Patrick Traynor, Michael Chien, Scott Weaver, Boniface Hicks, and Patrick McDaniel, Non-Invasive Methods for Host Certification. 2nd IEEE Communications Society/CreateNet International Conference on Security and Privacy in Communication Networks (SecureComm'06), August 2006.

Patrick Traynor, Raju Kumar, Hussain Bin Saad, Guohong Cao, and Thomas La Porta, LIGER: Implementing Efficient Hybrid Security Mechanisms for Heterogeneous Sensor Networks. Proceedings of the 4th ACM International Conference on Mobile Systems, Applications and Services (MobiSys), June 2006.

V. Ganapathy, T. Jaeger, and S. Jha, Retrofitting Legacy Code for Authorization Policy Enforcement. Proceedings of the 2006 IEEE Symposium on Security and Privacy, May 2006.

Patrick Traynor, Heesook Choi, Guohong Cao, Sencun Zhu, and Thomas La Porta, Establishing Pair-Wise Keys In Heterogeneous Sensor Networks. Proceedings of the 25th Annual IEEE Conference on Computer Communications (INFOCOM), April 2006.

Patrick Traynor, Guohong Cao, and Thomas La Porta, The Effects of Probabilistic Key Management on Secure Routing in Sensor Networks. Proceedings of the 2006 IEEE Wireless Communications and Networking Conference (WCNC), April 2006.

Patrick McDaniel, Shubho Sen, Oliver Spatscheck and Jacobus Van der Merwe Bill Aiello, and Charles Kalmanek, Enterprise Security: A Community of Interest Based Approach. Proceedings of Network and Distributed Systems Security 2006 (NDSS), February 2006. (draft).

U. Shankar, T. Jaeger, and R. Sailer, Toward Automated Information-Flow Integrity Verification for Security-Critical Applications. Proceedings of the 2006 ISOC Networked and Distributed Systems Security Symposium, February 2006.

Trent Jaeger, Patrick McDaniel, Luke St.Clair, Ramon Caceres, and Reiner Sailer, Shame on Trust in Distributed Systems. Proceedings of the First Workshop on Hot Topics in Security (HotSec '06), July 2006.

Boniface Hicks, Dave King, Patrick McDaniel, and Michael Hicks, Trusted Declassification: High-level policy for a security-typed language. Proceedings of the 1st ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS '06), ACM Press, June 10 2006. [Full Paper: Abstract]

2005

P. McDaniel and A. Prakash, Security Policy Enforcement in the Antigone System. Journal of Computer Security 2005. Accepted for publication. Draft. [Full Paper: pdf Abstract]

Patrick McDaniel, B. Aiello, Kevin Butler, and J. Ioannidis, Origin Authentication in Interdomain Routing. Journal of Communication Networks, Elsevier 2005. Accepted for publication. Draft.

R. Sailer, T. Jaeger, E. Valdez, R. Caceres, R. Perez , S. Berger, J. L. Griffin, and L. van Doorn, Building a MAC-based Security Architecture for the Xen Open-Source Hypervisor. Proceedings of the 21st Annual Computer Security Applications Conference, December 2005.

J. Linwood Griffin, T. Jaeger, R. Perez , R. Sailer, L. van Doorn, and R. Caceres, Trusted Virtual Domains: Toward secure distributed services. Proceedings of the First Workshop on Hot Topics in Systems Dependability, June 2005.

V. Ganapathy, T. Jaeger, and S. Jha, Automatic placement of authorization hooks in the Linux security modules framework. Proceedings of the 12th ACM Conference on Computer and Communications Security, November 2005.

Kevin Butler, Understanding Mutable Internet Pathogens, or How I Learned to Stop Worrying and Love Parasitic Behavior. Proceedings of 1st International Conference on Information Systems Security (ICISS), December 2005. Invited Paper. [Full Paper: Abstract]

Wesam Lootah, William Enck, and Patrick McDaniel, TARP: Ticket-Based Address Resolution Protocol. 21st Annual Computer Security Applications Conference (ACSAC), December 2005. [Full Paper: Abstract]

William Enck, Patrick Traynor, Patrick McDaniel, and Thomas La Porta, Exploiting Open Functionality in SMS-Capable Cellular Networks. Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS), November 2005.

Matthew Pirretti, Sencun Zhu, Vijaykrishnan Narayanan, Patrick McDaniel, Mahmut Kandemir, and and Richard Brooks, The Sleep Deprivation Attack in Sensor Networks: Analysis and Methods of Defense. Proceedings of the Innovations and Commercial Applications of Distributed Sensor Networks Symposium, October 2005. (best paper).

Luis Kruger, Somesh Jha, and Patrick McDaniel, Privacy Preserving Clustering. 10th European Symposium on Research in Computer Security (ESORICS '05), September 2005. Milan, Italy. [Full Paper: pdf Abstract]

Ali Al-Lawati, Dongwon Lee, and Patrick McDaniel, Blocking in Private Information Matching. Proceedings of Second International ACM SIGMOD Workshop on Information Quality in Information Systems, July 2005. Baltimore, MD. [Full Paper: pdf]

Heesook Choi, William Enck, Jaesheung Shin, Patrick McDaniel, and Thomas F. La Porta, Secure Reporting of Traffic Forwarding Activity in Mobile Ad Hoc Networks. MobiQuitous 2005, July 2005. San Diego, CA. [Full Paper: pdf Abstract]

William Aiello, Chuck Kalmanek, Patrick McDaniel, Shubo Sen, and Oliver Spatscheck, Analysis of Communities Of Interest in Data Networks. Passive and Active Measurement Workshop 2005, March 2005. Boston, MA.

2004

S. Byers, L. Cranor, E. Cronin, D. Kormann, and P. McDaniel, Analysis of Security Vulnerabilities in the Movie Production and Distribution Process. Telecommunications Policy, 28(8):619-644, August 2004. [Full Paper: pdf Abstract]

T. Jaeger, A. Edwards, and X. Zhang, Consistency Analysis of Authorization Hook Placement in the Linux Security Modules Framework. ACM Transactions on Information and System Security (TISSEC), 7(2):175-205, May 2004.

S. Byers, L. Cranor, E. Cronin, D. Kormann, and P. McDaniel, Exposing Digital Content Piracy: Approaches, Issues and Experiences. Thirty-Eighth Conference on Signals, Systems, and Computers, Nov 2004. Monterey, CA. Invited paper.

R. Sailer, T. Jaeger, and X. Zhang and L. van Doorn, Attestation-based policy enforcement for remote access. ACM Conference on Computer and Communications Security, pages 308-317 2004.

R. Sailer, X. Zhang, and T. Jaeger and L. van Doorn, Design and Implementation of a TCG-based Integrity Measurement Architecture. USENIX Security Symposium, pages 223-238 2004.

Simon Byers, Lorrie Faith Cranor, Dave Kormann, and Patrick McDaniel, Searching for Privacy: Design and Implementation of a P3P-Enabled Search Engine. Proceedings of 2004 Workshop on Privacy Enhancing Technologies (PETS), May 2004. Toronto, Canada. [Full Paper: pdf Abstract]

H.B. Wang, S. Jha, P. McDaniel, and M. Livny, Security Policy Reconciliation in Distributed Computing Environments. Proceedings of 5th International Workshop on Policies for Distributed Systems and Networks (Policy 2004), IEEE, June 2004. Yorktown Heights, NY, to appear. [Full Paper: pdf Abstract]

T. Jaeger, R. Sailer, and X. Zhang, Resolving Constraint Conflicts. Proceedings of the 2004 ACM Symposium on Access Control Models and Technologies, June 2004.

2003

T. Jaeger, X. Zhang, and A. Edwards, Policy Management Using Access Control Spaces. ACM Transactions on Information and System Security (TISSEC), 6(3):327-364, August 2003.

T. Jaeger, R. Sailer, and X. Zhang, Analyzing Integrity Protection in the SElinux Example Policy. Proceedings of the 12th USENIX Security Symposium, pages 59-74, August 2003.

Geoff Goodell, William Aiello, Tim Griffin, John Ioannidis, Patrick McDaniel, and Avi Rubin, Working Around BGP: An Incremental Approach to Improving Security and Accuracy of Interdomain Routing. Proceedings of Network and Distributed Systems Security 2003 (NDSS), Internet Society, pages 75-85, February 2003. San Diego, CA.

W. Aiello, J. Ioannidis, and P. McDaniel, Origin Authentication in Interdomain Routing. Proceedings of 10th ACM Conference on Computer and Communications Security, ACM, pages 165-178, October 2003. Washington, DC. [Full Paper: pdf Abstract]

E. Cronin, S. Jamin, T. Malkin, and P. McDaniel, On the Performance, Feasibility, and Use of Forward Secure Signatures. Proceedings of 10th ACM Conference on Computer and Communications Security, ACM, pages 131-144, October 2003. Washington, DC. [Full Paper: pdf Abstract]

2002

Patrick McDaniel and Atul Prakash, Methods and Limitations of Security Policy Reconciliation. 2002 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, pages 73-87, MAY 2002. Oakland, CA.

X. Zhang, A. Edwards, and T. Jaeger, Using CQUAL for Static Analysis of Authorization Hook Placement. Proceedings of the 11th USENIX Security Symposium, pages 33-48, August 2002.

2001

T. Jaeger and J. Tidswell, Practical safety in flexible access control models. ACM Transactions on Information and System Security (TISSEC), 4(2):158-190 2001.

Patrick McDaniel, Atul Prakash, Jim Irrer, Sharad Mittal, and Thai-Chuin Thuang, Flexibly Constructing Secure Groups in Antigone 2.0. Proceedings of DARPA Information Survivability Conference and Exposition II, IEEE Computer Society Press, pages 55-67, June 2001. Los Angeles, CA.

Hugh Harney, Andrea Colegrove, and Patrick McDaniel, Principles of Policy in Secure Groups. Proceedings of Network and Distributed Systems Security 2001 (NDSS), Internet Society, February 2001. San Diego, CA.

2000

Patrick McDaniel and Sugih Jamin, Windowed Certificate Revocation. Proceedings of IEEE INFOCOM 2000, IEEE, pages 1406-1414, March 2000. Tel Aviv, Israel.

Patrick McDaniel and Avi Rubin, A Response to `Can We Eliminate Certificate Revocation Lists?'. Proceedings of Financial Cryptography 2000, International Financial Cryptography Association (IFCA), February 2000. Anguilla, British West Indies.

T. Jaeger, J. Tidswell, A. Gefflautand Y. Park, K. Elphinstone, and J.Liedtke, Synchronous IPC over transparent monitors. ACM SIGOPS European Workshop, pages 189-194 2000.

A. Gefflaut, T. Jaeger, Y. Park andJ. Liedtke, K. Elphinstone, V. Uhligand J. Tidswell, L. Deller, and L.Reuther, The SawMill multiserver approach. ACM SIGOPS European Workshop, pages 109-114 2000.

1999

T. Jaeger, A. Prakash, J. Liedtke, and N. Islam, Flexible Control of Downloaded Executable Content. ACM Transactions on Information and System Security, 2(2):177-228, May 1999.

Andrwe Adamson, C.J. Antonelli, Kevin Coffman, Patrick McDaniel, and Jim Rees, Secure Distributed Virtual Conferencing. Proceedings of Communications and Multimedia Security (CMS '99), pages 176-190, September 1999. Katholieke Universiteit, Leuven, Belgium.

Patrick McDaniel, Atul Prakash, and Peter Honeyman, Antigone: A Flexible Framework for Secure Group Communication. Proceedings of the 8th USENIX Security Symposium, pages 99-114, August 1999. Washington, DC.

T. Jaeger, K. Elphinstone, J. Liedtkeand V. Panteleenko, and Y. Park, Flexible Access Control using IPC Redirection. Workshop on Hot Topics in Operating Systems 1999.