6 citations · 9 across the 9 of their papers we have counts for
7 papers · 1 filter
Atlas: Enabling Cross-Vendor Authentication for IoT
Sanket Goutam, Omar Chowdhury, Amir Rahmati
Cloud-mediated IoT architectures fragment authentication across vendor silos and create latency and availability bottlenecks for cross-vendor device-to-device (D2D) interactions. W…
Automatically Tightening Access Control Policies with Restricter
Ka Lok Wu, Christa Jenkins, Scott D. Stoller +1
Robust access control is a cornerstone of secure software, systems, and networks. An access control mechanism is as effective as the policy it enforces. However, authoring effectiv…
State Machine Mutation-based Testing Framework for Wireless Communication Protocols
Syed Md Mukit Rashid, Tianwei Wu, Kai Tu +5
This paper proposes Proteus, a protocol state machine, property-guided, and budget-aware automated testing approach for discovering logical vulnerabilities in wireless protocol imp…
VetIoT: On Vetting IoT Defenses Enforcing Policies at Runtime
Akib Jawad Nafis, S Mahmudul Hasan, Omar Chowdhury +1
Smart homes, powered by programmable IoT platforms, often face safety and security issues. A class of defense solutions dynamically enforces policies that capture the expected beha…
MAVERICK: An App-independent and Platform-agnostic Approach to Enforce Policies in IoT Systems at Runtime
M. Hammad Mazhar, Li Li, Endadul Hoque +1
Many solutions have been proposed to curb unexpected behavior of automation apps installed on programmable IoT platforms by enforcing safety policies at runtime. However, all prior…
PHOENIX: Device-Centric Cellular Network Protocol Monitoring using Runtime Verification
Mitziu Echeverria, Zeeshan Ahmed, Bincheng Wang +3
End-user-devices in the current cellular ecosystem are prone to many different vulnerabilities across different generations and protocol layers. Fixing these vulnerabilities retros…
Equivalence-based Security for Querying Encrypted Databases: Theory and Application to Privacy Policy Audits
Omar Chowdhury, Deepak Garg, Limin Jia +1
Motivated by the problem of simultaneously preserving confidentiality and usability of data outsourced to third-party clouds, we present two different database encryption schemes t…