UCSD Main WebsiteUCSD Jacobs SchoolDepartment of Computer Science and Engineering
About CSECSE PeopleFacultyGraduate EducationUndergrduate EducationDepartment AdministrationContact CSE
     
 
Security and Cryptography

Welcome to the web page for security and cryptography research in the Department of Computer Science and Engineering at the University of California at San Diego. Our group conducts research in areas spanning from theory to practice: we work on the theoretical foundations of cryptography; the development and analysis of cryptographic protocols and algorithms; and on applied cryptography, systems security, and network security. In line with our broad security-related research interests, we are affiliated and actively collaborate with both the Theory Group and the Systems and Networking Group here at UCSD.

People |  News |  Publications |  Sponsors

Faculty

Mihir Bellare
Russell Impagliazzo
Daniele Micciancio
Stefan Savage
Hovav Shacham
Geoffrey M. Voelker
 

Affiliated Faculty

Keith Marzullo
Alex C. Snoeren
George Varghese
Yuanyuan Zhou

Postdocs and Research Staff

Kirill Levchenko
Damon McCoy
 

PhD Students

Stephen Checkoway
Shanshan Duan
Neha Chachra
Tristan Halvorson
Sriram Keelveedhi     Ravinarayanan
Chris Kanich
Vinh The Lam
Lonnie He Liu
Justin Ma
John McCullough
Sarah Meiklejohn
Petros Mol
Marti Motoyama
David Moore
Keaton Mowery
Andreas Pitsillidis
Thomas Ristenpart
Panagiotis Voulgaris
Patrick Verkaik
Michael Vrable
Scott Yilek
Qing Zhang
Gjergji Zyba

MS Students

Danny Anderson
Erik Buchanan
Stephan Chenette
Grace Wang

BS Students

Brandon Enright

Recent Alumni

Barath Raghavan (Ph.D. 2009) → Williams College
Todor Ristov (M.S. 2009) → Motorola
Ryan Roemer (M.S. 2009) → Microsoft
Vadim Lyubashevsky (Ph.D. 2008) → Postdoc at Tel Aviv University
Varun Almaula (M.S. 2008) → Cisco
Seung-Won Lee (M.S. 2008)
Sarah Shoup (M.S. 2008) → Booz Allen Hamilton
Alper Mizrak (Ph.D., 2007) → VMWare
Saurabh Panjwani (Ph.D., 2007) → Postdoc at Microsoft Research India
Sean Peisert (Ph.D., 2007) → Postdoc at UC Davis/Infidel, Inc.
David Anderson (M.S., 2007) → Move Networks
Chris Fleizach (M.S., 2007) → Apple
Nabil Schear (M.S., 2007) → UIUC Ph.D. program
Alejandro Hevia (Ph.D. 2006) → Universidad de Chile
Tadayoshi Kohno (Ph.D. 2006) → University of Washington
Anton Mityagin (Ph.D. 2006) → Microsoft
Adriana Palacio (Ph.D. 2006) → Bowdoin
 

[Alumni Archive]

News

Doc Savage

(9/27/09) Stefan Savage gets featured in Voice of San Diego story.

(9/3/09) Press for Tom Ristenpart, Hovav Shacham and Stefan Savage for their recent paper examining placement vulnerabilities in third-party cloud computing.

(9/4/09) Press for our AVC Advantage paper: NPR’s Talk of the Nation—Science Friday; KPBS; The Register; Dark Reading; PC World; InformationWeek; Canwest; The Hindustan Times; Slashdot; Digg; Ars Technica; Engadget.

(8/10/09) Stephen Checkoway, in collaboration with Hovav Shacham, Brian Kantor and their co-authors from Michigan and Princeton, recently demonstrated a practical attack against the AVC Advantage voting machine -- absent any access to source code and overcoming a hardware architecture that prevents code execution from DRAM. An introductory video can be found on the paper's page here; more info can be found in the Jacobs School press release here or in their EVT'09 paper here.

Canadian Pharmacy Spam

(7/16/09) Network World magazine quotes Stefan Savage today in its story on Canadian Pharmacy spam.

(6/15/09) Geoff Voelker received one of sixty national HP 2009 Innovation Research grants to support our ongoing studies of Internet-based eCrime. More information can be found here.

HP

Network World

(5/1/09) Network World magazine's list of "20 kick-ass network research projects" includes three efforts with UCSD creators including Tom Ristenpart's Adeona laptop tracking service (USENIX Security '08, w/UW collaborators). Also, on the sysnet side of the house: Yuvraj Agarwal's Somniloquy system for power savings (NSDI '09, w/Microsoft collaborators) and Kirill Levchenko's XL routing protocol (SIGCOMM '08). Congrats to everyone for all the ass-kicking!

(2/25/09) Google just announced their Native Client Security Contest for which Stefan Savage has agreed to be one of the judges. Good luck everyone!

Google

Stefan Savage

(2/21/09) Stefan Savage was quoted in Markoff's recent NYT article Do We Need a New Internet and, even more influential, the infamous CCC blog :-)

(12/30/08) Lots of press for Tom Ristenpart's USENIX Security paper describing Adeona, a system that helps track stolen laptops in a privacy-preserving manner. A collaboration with University of Washington researchers including alumn Yoshi Kohno), Adeona has been downloaded by over 50,000 people and has been covered in reports ranging frm the San Francisco Chronicle to Slashdot. See Tom describe Adeona in this short video or read more in press releases from UCSD and UW.

Tom

Mihir

(11/6/08) As some of you many know, the National Institute of Standards and Technology is running a public competition to develop a new crytopgraphic hash function for a range of applications. Our own Mihir Bellare as well as alumn Yoshi Kohno are part of the team that has developed and submitted the Skein Hash Function. Its received some coverage at places like Wired, Slashdot, Dark Reading, and Arstechnica.

(11/5/08) Brian Krebs of the Washington Post recently wrote about our paper on spam conversion rates (joint w/ICSI). From there it snowballed a bit. Here are some pointers to derivative stories: The Register, Network World, BBC News, Slashdot, Arstechnica, Schneier's blog, etc.

Spamalytics
Celestron and friends

(10/30/08) Our recent paper on duplicating house keys from photos has received a bit of press (e.g., MSNBC, Scientific American, Popular Science, Discover, CNET, CNET [again], The Register, Dark Reading, and others).

(10/27/08) Erik Buchanan and Ryan Roemer got written up in both Information Week and Dark Reading for their work on generalizing return-oriented programming.

Ryan and Erik
Kirill Levchenko

(9/3/08) Kirill Levchenko defended his thesis today. "XL"ent work, Dr. Levchenko. Kirill continues on as a postdoc with the group.

[News Archive]

Recent Publications

Botnet Judo: Fighting Spam with Itself, Andreas Pitsillidis, Kirill Levchenko, Christian Kreibich, Chris Kanich, Geoffrey M. Voelker, Vern Paxson, Nicholas Weaver, and Stefan Savage, Proceedings of the Network and Diestributed System Security Symposium (NDSS), San Diego, CA, February 2010.

When Good Randomness Goes Bad: Virtual Machine Reset Vulnerabilities and Hedging Deployed Cryptography, Thomas Ristenpart and Scott Yilek, Proceedings of the Network and Diestributed System Security Symposium (NDSS), San Diego, CA, February 2010.

Hedged Public-Key Encryption: How to Protect Against Bad Randomness, Mihir Bellare, Zvika Brakerski, Moni Naor, Thomas Ristenpart, Gil Segev, Hovav Shacham, and Scott Yilek, Proceedings of Asiacrypt 2009, Tokyo, December 2009.

Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds, Thomas Ristenpart, Eran Tromer, Hovav Shacham, and Stefan Savage, Proceedings of the ACM Conference on Computer and Communications Security, Chicago, IL, November 2009.

When Private Keys are Public: Results from the 2008 Debian OpenSSL Debacle, Scott Yilek, Eric Rescorla, Hovav Shacham, Brandon Enright, and Stefan Savage, Proceedings of the ACM Internet Measurement Conference, Chicago, IL, November 2009.

Spamalytics: An Empirical Analysis of Spam Marketing Conversion, Chris Kanich, Christian Kreibich, Kirill Levchenko, Brandon Enright, Geoffrey M. Voelker, Vern Paxson, and Stefan Savage, Communications of the Association for Computing Machinery 52(9):99-107, September 2009.

Reconstructing RSA Private Keys from Random Key Bits, Nadia Heninger and Hovav Shacham, Proceedings of Crypto 2009, Santa Barbara, CA, August 2009.

Randomizable Proofs and Delegatable Anonymous Credentials, Mira Belenkiy, Jan Camenisch, Melissa Chase, Markulf Kohlweiss, Anna Lysyanskaya, and Hovav Shacham, Proceedings of Crypto 2009, Santa Barbara, CA, August 2009.

On Bounded Distance Decoding, Unique Shortest Vectors, and the Minimum Distance Problem, Vadim Lyubashevsky and Daniele Micciancio, Proceedings of Crypto 2009, Santa Barbara, CA, August 2009.

Format-Preserving Encryption, Mihir Bellare, Thomas Ristenpart, Phillip Rogaway, and Till Stegers, Proceedings of Selected Areas in Cryptography (SAC) 2009, Calgary, Canada, August 2009.

Can DREs Provide Long-Lasting Security? The Case of Return-Oriented Programming and the AVC Advantage, Stephen Checkoway, Ariel J. Feldman, Brian Kantor, J. Alex Halderman, Edward W. Felten, and Hovav Shacham, Proceedings of EVT 2009, Montreal, Canada, August 2009.

Enlisting ISPs to Improve Online Privacy: IP Address Mixing by Default, Barath Raghavan, Tadayoshi Kohno, Alex C. Snoeren, and David Wetherall, Privacy Enhancing Technologies Symposium, Seattle, Washington, August 2009.

Secure and Policy-Compliant Source Routing, Barath Raghavan, Patrick Verkaik, and Alex C. Snoeren, IEEE/ACM Transactions on Networking 17(4), August 2009.

Identifying Suspicious URLs: An Application of Large-Scale Online Learning, Justin Ma, Lawrence K. Saul, Stefan Savage, and Geoffrey M. Voelker, Proceedings of the 26th Annual International Conference on Machine Learning (ICML 2009), Montreal, Quebec, June 2009.

Beyond Blacklists: Learning to Detect Malicious Web Sites from Suspicious URLs, Justin Ma, Lawrence K. Saul, Stefan Savage, and Geoffrey M. Voelker, Proceedings of the ACM SIGKDD Conference, Paris, France, June 2009.


[Publication Archive]

Affiliations

Center for Networked Systems (CNS)         Cooperative Association for Internet Data Analysis (CAIDA)       San Diego Super Computer Center (SDSC)        California Institute for Telecommunications and Information Technology (Cal-IT2) CalIT(2)

Sponsors

National Science Foundation (NSF)    Air Force Office of Scientific Research    Defense Advanced Research Projects Agency (DARPA)    National Institute of Standards (NIST)  
AT&T  Google Microsoft  Hewlett-Packard (HP)  Intel Yahoo!
Ericsson Cisco Symantec  Websense CNA
     
spacer gif
spacer gif
spacer gif
9500 Gilman Drive, La Jolla, CA 92093-0114
spacer gif
About CSE | CSE People | Faculty & Research | Graduate Education | Undergraduate Education
Department Administration | Contact CSE | Help | Search | Site map | Home
webmaster@cse.ucsd.edu
Official web page of the University of California, San Diego
Copyright © 2003 Regents of the University of California. All rights reserved.
spacer gif