33 citations · 107 across the 7 of their papers we have counts for
7 papers · 1 filter
Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials
Arseny Kurnikov, Andrew Paverd, Mohammad Mannan +1
Personal cryptographic keys are the foundation of many secure services, but storing these keys securely is a challenge, especially if they are used from multiple devices. Storing k…
Migrating SGX Enclaves with Persistent State
Fritz Alder, Arseny Kurnikov, Andrew Paverd +1
Hardware-supported security mechanisms like Intel Software Guard Extensions (SGX) provide strong security guarantees, which are particularly relevant in cloud settings. However, th…
Towards Linux Kernel Memory Safety
Elena Reshetova, Hans Liljestrand, Andrew Paverd +1
The security of billions of devices worldwide depends on the security and robustness of the mainline Linux kernel. However, the increasing number of kernel-specific vulnerabilities…
SafeKeeper: Protecting Web Passwords using Trusted Execution Environments
Klaudia Krawiecka, Arseny Kurnikov, Andrew Paverd +2
Passwords are undoubtedly the most dominant user authentication mechanism on the web today. Although they are inexpensive and easy-to-use, security concerns of password-based authe…
The Circle Game: Scalable Private Membership Test Using Trusted Hardware
Sandeep Tamrakar, Jian Liu, Andrew Paverd +3
Malware checking is changing from being a local service to a cloud-assisted one where users' devices query a cloud server, which hosts a dictionary of malware signatures, to check…
OmniShare: Securely Accessing Encrypted Cloud Storage from Multiple Authorized Devices
Andrew Paverd, Sandeep Tamrakar, Hoang Long Nguyen +6
Cloud storage services like Dropbox and Google Drive are widely used by individuals and businesses. Two attractive features of these services are 1) the automatic synchronization o…
Characterizing SEAndroid Policies in the Wild
Elena Reshetova, Filippo Bonazzi, Thomas Nyman +2
Starting from the 5.0 Lollipop release all Android processes must be run inside confined SEAndroid access control domains. As a result, Android device manufacturers were compelled…