Publications

The goal of continuous smartphone authentication is to detect when the adversary has gained possession of the user’s device …

Continuous authentication aims to authenticate users at regular intervals post-login, typically using biometric features that capture …

Personal Identification Numbers (PINs) are widely used as the primary authentication method for Automated Teller Machines (ATMs) and …

This paper studies leakage of user passwords and PINs based on observations of typing feedback on screens or from projectors in the …

State-of-the-art password guessing tools, such as HashCat and John the Ripper, enable users to check billions of passwords per second …

This paper introduces DISPERSE, a distributed scalable architecture for delivery of content and services that provides resilience …

Consider a scenario in which a whistleblower (Alice) would like to disclose confidential documents to a journalist (Bob). Bob wants to …

Tor is used to communicate anonymously by millions of daily users, which rely on it for their privacy, security, and often safety. In …

In this paper, we show that keystroke latencies used in continuous user authentication systems disclose application context, i.e., in …

Shoulder surfing attacks are an unfortunate consequence of entering passwords or PINs into computers, smartphones, PoS terminals, and …

Garbled circuits are a general tool that allows two parties to compute any function without disclosing their respective inputs. …

Telerobotic systems are used to perform critical tasks in sensitive environments. The security of these systems is of paramount …

Named Data Networking and Content-Centric Networking (NDN and CCN, respectively) are closely related networking architectures which, …

Information-Centric Networking (ICN) is an emerging networking paradigm where named and routable data (content) is the focal point. …

In this paper, we show that public USB charging stations pose a significant privacy risk to smartphone users even when no data …

Common smartphone authentication mechanisms (e.g., PINs, graphical passwords, and fingerprint scans) are not designed to offer security …

We introduce hand movement, orientation, and grasp (HMOG), a set of behavioral features to continuously authenticate smartphone users. …

Mobile code distribution relies on digital signatures to guarantee code authenticity. Unfortunately, standard signature schemes are not …

Named Data Networking (NDN) is an information-centric network architecture designed as a candidate replacement for the current IP-based …

We design privacy-preserving protocols for Scaled Manhattan and Scaled Euclidean verifiers, secure against malicious clients and …

Recent advances in biometric recognition and the increasing use of biometric data prompt significant privacy challenges associated with …

Matching two or more users with related interests is an important and general primitive, applicable to a wide range of scenarios …

The anticipated proliferation of smart devices, the “Internet of Things” (IoT), is one of the motivations for some large-scale research …

Biometric key generation techniques are used to reliably generate cryptographic material from biometric signals. Existing constructions …

In recent years, the availability of GPS-enabled smartphones have made location-based services extremely popular. A multitude of …

Electronic information is increasingly often shared among entities without complete mutual trust. To address related security and …

In the last decade, there has been a growing realization that the current Internet Protocol is reaching the limits of its senescence. …

Instrumented environments, such as modern building automation systems (BAS), are becoming commonplace and are increasingly …

We introduce new secure privacy-preserving protocols for outsourcing continuous authentication of smartphone users. Our protocols allow …

Information-Centric Networking (ICN) is an emerging networking paradigm where named and routable data (content) is the focal point. …

Popular consumer review sites, such as Yelp and Tripadvisor, are based upon massive amounts of voluntarily contributed content. Sharing …

Content-Centric Networking (CCN) is an emerging networking paradigm being considered as a possible replacement for the current IP-based …

Content-Centric Networking (CCN) is an alternative to today’s Internet IP-style packet-switched host-centric networking. One key …

Electronic information is increasingly often shared among entities without complete mutual trust. To address related security and …

With the growing realization that current Internet protocols are reaching the limits of their senescence, several on-going research …

Content-Centric Networking (CCN) is an alternative to host-centric networking exemplified by today’s Internet. CCN emphasizes …

Content-Centric Networking (CCN) is an emerging paradigm being considered as a possible replacement for the current IP-based …

Password managers are critical pieces of software relied upon by users to securely store valuable and sensitive information, from …

As fast and accurate sequencing of human genomes becomes affordable, it is expected that individuals will soon be able to carry around …

In many everyday scenarios, sensitive information must be shared between parties without complete mutual trust. Private set operations …

Content-centric networking — also known as information-centric networking (ICN) — shifts emphasis from hosts and interfaces (as in …

Recent advances in biometric recognition and the increasing use of biometric data prompt significant privacy challenges associated with …

Broadcast encryption provides an efficient way to encrypt a message for a large number of receivers. This paper investigates whether it …

In many everyday scenarios, sensitive information must be shared between parties without complete mutual trust. Private set operations …

Recent advances in DNA sequencing technologies have put ubiquitous availability of fully sequenced human genomes within reach. It is no …

Content-centric networking — also known as information-centric networking (ICN) — shifts emphasis from hosts and interfaces (as in …

Named Data Networking (NDN), a recently proposed Internet architecture based on content-centric networking, is designed to secure data …

Network coding is a class of routing algorithms offering increased throughput and improved robustness to random failures. With …

Cloud computing provides users with ample computing resources, storage, and bandwidth to meet their computing needs, often at minimal …

Data security is one of the major challenges that prevents the wider acceptance of mobile devices, especially within business and …

We introduce the first universally anonymous, thus key-private, IBE whose security is based on the standard quadratic residuosity …