143 citations · 183 across the 13 of their papers we have counts for
7 papers · 1 filter
Accountable authentication with privacy protection: The Larch system for universal login
Emma Dauterman, Danny Lin, Henry Corrigan-Gibbs +1
Credential compromise is hard to detect and hard to mitigate. To address this problem, we present larch, an accountable authentication framework with strong security and privacy pr…
Extricating IoT Devices from Vendor Infrastructure with Karl
Gina Yuan, David Mazières, Matei Zaharia
Most consumer IoT devices are vertically integrated with cloud-side infrastructure. Such architectures present enormous risk to user data, exacerbated by vendor heterogeneity and t…
SafetyPin: Encrypted Backups with Human-Memorable Secrets
Emma Dauterman, Henry Corrigan-Gibbs, David Mazières
We present the design and implementation of SafetyPin, a system for encrypted mobile-device backups. Like existing cloud-based mobile-backup systems, including those of Apple and G…
True2F: Backdoor-resistant authentication tokens
Emma Dauterman, Henry Corrigan-Gibbs, David Mazières +2
We present True2F, a system for second-factor authentication that provides the benefits of conventional authentication tokens in the face of phishing and software compromise, while…
Riposte: An Anonymous Messaging System Handling Millions of Users
Henry Corrigan-Gibbs, Dan Boneh, David Mazières
This paper presents Riposte, a new system for anonymous broadcast messaging. Riposte is the first such system, to our knowledge, that simultaneously protects against traffic-analys…
Cryptographically Enforced Control Flow Integrity
Ali Jose Mashtizadeh, Andrea Bittau, David Mazieres +1
Recent Pwn2Own competitions have demonstrated the continued effectiveness of control hijacking attacks despite deployed countermeasures including stack canaries and ASLR. A powerfu…
Flexible Dynamic Information Flow Control in the Presence of Exceptions
Deian Stefan, Alejandro Russo, John C. Mitchell +1
We describe a new, dynamic, floating-label approach to language-based information flow control. A labeled IO monad, LIO, keeps track of a current label and permits restricted acces…