October 29, 2008
Professor Patrick McDaniel and I gave a tutorial entitled "Understanding Android's Security Framework" at the ACM Conference on Computer and Communications Security (CCS). Our presentation slides and the example applications (including source code) have been made publically available.
August 18, 2008
Our paper, "PinUP: Pinning User Files to Known Applications" was accepted to the 24th Annual Computer Security Applications Conference (ACSAC).
August 18, 2008
Our paper, "Defending Against Attacks on Main Memory Persistence" was accepted to the 24th Annual Computer Security Applications Conference (ACSAC).
July 30, 2008
I presented a poster on our PinUP access control project during the USENIX Security Symposium in San Jose, CA.
July 29, 2008
I presented our USENIX/ACCURATE Electronic Voting Technology (EVT) workshop paper, which was co-located with USENIX Security in San Jose, CA.
May 21, 2008
Our paper, "Systemic Issues in the Hart InterCivic and Premier Voting System: Reflections Following Project EVEREST", has been accepted at the USENIX/ACCURATE Electronic Voting Technology (EVT) Workshop.
December 14, 2007
The Ohio Secretary of State has released the EVEREST election system report from the academic team, of which I was a participant. The report can be retrieved here. The team prepared the following statement about the report and its findings, and will make no other public statements at this time.
November 5, 2007
Our paper, "Realizing Massive-Scale Conditional Access Systems Through Attribute-Based Cryptosystems," has been accepted for publication at the 15th Annual Network & Distributed System Security Symposium (NDSS'08)
August 10, 2007
I gave a Work-in-Progress report (WiP) talk on my access control research at USENIX Security.
June 20, 2007
I am at the USENIX Annual Technical conference in Santa Clara, CA, presenting my work on automated router configuration.
May 31, 2007
I am in Princeton to present PRESTO (my USENIX Annual paper) at the PRESTO Workshop. Same name, different meaning.
May 17, 2007
My paper, "TARP: Ticket-based Address Resolution Protocol", has been accepted for journal publication in Computer Networks.
March 10, 2007
My paper, "Configuration Management at a Massive Scale: System Design and Experience", has been accepted for publication at the 2007 USENIX Annual Technical Conference (USENIX Annual).
July 31, 2006
My paper, "Privacy Preserving Web-based Email", has been accepted for publication at the Second Annual International Conference on Information Systems Security (ICISS).
June 16, 2006
My paper, "Mitigating Open Functionality in SMS-Capable Cellular Networks", has been accepted for publication at the ACM Twelfth Annual International Conference on Mobile Computing and Networking (MobiCom'06).
May 16, 2006
I started my summer internship with AT&T Research in Flohram Park, NJ.
May 14, 2006
I graduated with my Masters of Science Degree in Computer Science and Engineering (CSE) from the Pennsylvania State University (PSU). I will be staying in the graduate program to pursue my PhD.
March 30, 2006
I was awarded an Honorable Mention for the 2006 National Science Foundation (NSF) Graduate Research Fellowship.
October 5, 2005
My recent work on the vulnerabilities discovered in cellular phone networks is available at http://smsanalysis.org. A copy of our paper, which has been accepted at the 2005 ACM Conference on Computer and Communications Security (CCS), is also available. Finally, you can find the New York Times article at http://www.nytimes.com/2005/10/05/technology/05phone.html.