Papers


More Content - Less Control: Access Control in the Web 2.0
Michael Hart, Rob Johnson, and Amanda Stent.
IEEE Web 2.0 Privacy and Security Workshop, Oakland, CA, May 2007.
RICH: Automatically Protecting Against Integer-Based Vulnerabilities
David Brumley, Tzi-cker Chiueh, Rob Johnson, Huijia Lin, and Dawn Song.
Proceedings of the 14th Annual Network & Distributed System Security Symposium, San Diego, CA, February, 2007.
Flow-Insensitive Type Qualifiers
Jeff Foster, Rob Johnson, John Kodumal, and Alex Aiken.
Transactions on Programming Languages, Vol. 28, Issue 6, pp. 1035-1087, 2006.
Deflation-Secure Web Metering
Rob Johnson and Jessica Staddon.
International Journal of Information and Computer Science, Vol. 1(1/2), 2006.
Fixing Races for Fun and Profit: How to abuse atime
Nikita Borisov, Rob Johnson, Naveen Sastry, and David Wagner.
Proceedings of the Fourteenth USENIX Security Symposium (USENIX Security 2005), August 2005.
Finding User/Kernel Pointer Bugs With Type Inference
Rob Johnson and David Wagner.
13th USENIX Security Symposium, 2004.
The slides (PDF) from the conference talk are available. These slides also have a high-level overview of other CQual features and a tutorial on developing new analyses with CQual.
FAIR: Fair Audience InfeRence
Rob Johnson andJessica Staddon.
2002 ACM Workshop on Digital Rights Management.
Multiplicative Differentials
Nikita Borisov, Monica Chew, Rob Johnson, and David Wagner.
Fast Software Encryption 2002.
This paper generalizes the techniques developed in the MultiSwap attack and uses them to attack several other ciphers.
Cryptanalysis of MultiSwap
Nikita Borisov, Monica Chew, and Rob Johnson
A Cryptanalysis of the High-bandwidth Digital Content Protection System
Scott Crosby, Ian Goldberg, Rob Johnson, Dawn Song, and David Wagner.
ACM Workshop onSecurity and Privacy in Digital Rights Management.
Homomorphic Signature Schemes
Robert Johnson, David Molnar, Dawn Song, and David Wagner.
RSA 2002, Cryptographer's track.
Non-transferable Anonymous Credentials
Hao Chen, Monica Chew, Rob Johnson, and Dawn Song.
This report is the result of a class project in which we developed authentication schemes that did not reveal the identity of the party being authenticated. We decided the results were interesting, but not good enough to publish. E-mail me if you're really interested.
New Approaches to Data Location
Hao Chen, Monica Chew, and Rob Johnson.
This report summarizes our class project for Networking. I think it contains some interesting results. If you're interested in Bloom filter routing, you might also like to visit Sean Rhea's page.
On Union-closed Families, I
Rob Johnson and Theresa Vaughan.
Journal of Combinatorial Theory, Series A 85, pp. 112-119.