{ZØ}: An Optimizing Distributing {Zero-Knowledge} Compiler
.
2014. {ZØ}: An Optimizing Distributing {Zero-Knowledge} Compiler. 23rd USENIX Security Symposium (USENIX Security 14). :909--924.
{SSOScan}: Automated Testing of Web Applications for Single {Sign-On} Vulnerabilities
.
2014. {SSOScan}: Automated Testing of Web Applications for Single {Sign-On} Vulnerabilities. 23rd USENIX Security Symposium (USENIX Security 14). :495--510.
{DSCRETE}: Automatic Rendering of Forensic Information from Memory Images via Application Logic Reuse
.
2014. {DSCRETE}: Automatic Rendering of Forensic Information from Memory Images via Application Logic Reuse. 23rd USENIX Security Symposium (USENIX Security 14). :255--269.
Never Been {KIST}: {Tor’s} Congestion Management Blossoms with {Kernel-Informed} Socket Transport
.
2014. Never Been {KIST}: {Tor’s} Congestion Management Blossoms with {Kernel-Informed} Socket Transport. 23rd USENIX Security Symposium (USENIX Security 14). :127--142.
A {Large-Scale} Empirical Analysis of Chinese Web Passwords
.
2014. A {Large-Scale} Empirical Analysis of Chinese Web Passwords. 23rd USENIX Security Symposium (USENIX Security 14). :559--574.
A Bayesian Approach to Privacy Enforcement in Smartphones
.
2014. A Bayesian Approach to Privacy Enforcement in Smartphones. 23rd USENIX Security Symposium (USENIX Security 14). :175--190.
Succinct {Non-Interactive} Zero Knowledge for a von Neumann Architecture
.
2014. Succinct {Non-Interactive} Zero Knowledge for a von Neumann Architecture. 23rd USENIX Security Symposium (USENIX Security 14). :781--796.
Revisiting {SSL/TLS} Implementations: New Bleichenbacher Side Channels and Attacks
.
2014. Revisiting {SSL/TLS} Implementations: New Bleichenbacher Side Channels and Attacks. 23rd USENIX Security Symposium (USENIX Security 14). :733--748.
{iSeeYou}: Disabling the {MacBook} Webcam Indicator {LED}
.
2014. {iSeeYou}: Disabling the {MacBook} Webcam Indicator {LED}. 23rd USENIX Security Symposium (USENIX Security 14). :337--352.
Static Detection of {Second-Order} Vulnerabilities in Web Applications
.
2014. Static Detection of {Second-Order} Vulnerabilities in Web Applications. 23rd USENIX Security Symposium (USENIX Security 14). :989--1003.