Paul C. van Oorschot

207 papers A* 28A 22B 5C 18Journal 94Unranked 35

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	A Survey and Evaluation Framework for Secure DNS Resolution. IEEE Commun. Surv. Tutorials Ali Sadeghi Jahromi, AbdelRahman Abdou, Paul C. van Oorschot
2025	J	`jnl`	"Sign in with ... ACM Trans. Priv. Secur. Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
2025	J	`jnl`	A Survey and Evaluation Framework for Secure DNS Resolution. CoRR Ali Sadeghi Jahromi, AbdelRahman Abdou, Paul C. van Oorschot
2025	—	`conf`	Formal Security Analysis of ss2DNS. ESORICS (3) Ali Sadeghi Jahromi, AbdelRahman Abdou, Paul C. van Oorschot
2024	J	`jnl`	DNSSEC+: An Enhanced DNS Scheme Motivated by Benefits and Pitfalls of DNSSEC. CoRR Ali Sadeghi Jahromi, AbdelRahman Abdou, Paul C. van Oorschot
2024	J	`jnl`	Influences of displaying permission-related information on web single sign-on login decisions. Comput. Secur. Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
2024	—	`conf`	Owl: An Augmented Password-Authenticated Key Exchange Scheme. FC (2) Feng Hao, Samiran Bag, Liqun Chen, Paul C. van Oorschot
2024	J	`jnl`	Side-Channel Attacks: A Short Tour. IEEE Secur. Priv. Frank Piessens, Paul C. van Oorschot
2023	J	`jnl`	A Survey and Analysis of TLS Interception Mechanisms and Motivations: Exploring how end-to-end TLS is made "end-to-me" for web traffic. ACM Comput. Surv. Xavier de Carné de Carnavalet, Paul C. van Oorschot
2023	J	`jnl`	A close look at a systematic method for analyzing sets of security advice. J. Cybersecur. David Barrera, Christopher Bellman, Paul C. van Oorschot
2023	J	`jnl`	Influences of Displaying Permission-related Information on Web Single Sign-On Login Decisions. CoRR Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
2023	J	`jnl`	Memory Errors and Memory Safety: A Look at Java and Rust. IEEE Secur. Priv. Paul C. van Oorschot
2023	J	`jnl`	Memory Errors and Memory Safety: C as a Case Study. IEEE Secur. Priv. Paul C. van Oorschot
2023	J	`jnl`	Owl: An Augmented Password-Authenticated Key Exchange Scheme. IACR Cryptol. ePrint Arch. Feng Hao, Samiran Bag, Liqun Chen, Paul C. van Oorschot
2023	J	`jnl`	Security Best Practices: A Critical Analysis Using IoT as a Case Study. ACM Trans. Priv. Secur. David Barrera, Christopher Bellman, Paul C. van Oorschot
2023	J	`jnl`	Systematic analysis and comparison of security advice as datasets. Comput. Secur. Christopher Bellman, Paul C. van Oorschot
2022	J	`jnl`	A Close Look at a Systematic Method for Analyzing Sets of Security Advice. CoRR David Barrera, Christopher Bellman, Paul C. van Oorschot
2022	J	`jnl`	A View of Security as 20 Subject Areas in Four Themes. IEEE Secur. Priv. Paul C. van Oorschot
2022	—	`ch.`	Public Key Cryptography's Impact on Society: How Diffie and Hellman Changed the World. Democratizing Cryptography Paul C. van Oorschot
2022	J	`jnl`	SSOPrivateEye: Timely Disclosure of Single Sign-On Privacy Design Differences. CoRR Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
2022	J	`jnl`	Security Best Practices: A Critical Analysis Using IoT as a Case Study. CoRR David Barrera, Christopher Bellman, Paul C. van Oorschot
2022	J	`jnl`	Security as an Artificial Science, System Administration, and Tools. IEEE Secur. Priv. Paul C. van Oorschot
2022	A	`conf`	SoK: Password-Authenticated Key Exchange - Theory, Practice, Standardization and Real-World Lessons. AsiaCCS Feng Hao, Paul C. van Oorschot
2022	J	`jnl`	Systematic Analysis and Comparison of Security Advice Datasets. CoRR Christopher Bellman, Paul C. van Oorschot
2021	J	`jnl`	Coevolution of Security's Body of Knowledge and Curricula. IEEE Secur. Priv. Paul C. van Oorschot
2021	J	`jnl`	Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes. IEEE Trans. Dependable Secur. Comput. Furkan Alaca, AbdelRahman Abdou, Paul C. van Oorschot
2021	J	`jnl`	Comparative Analysis and Framework Evaluating Web Single Sign-on Systems. ACM Comput. Surv. Furkan Alaca, Paul C. van Oorschot
2021	—	`book`	Computer Security and the Internet - Tools and Jewels from Malware to Bitcoin, Second Edition Paul C. van Oorschot
2021	—	`conf`	Empirical Analysis and Privacy Implications in OAuth-based Single Sign-On Systems. WPES@CCS Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
2021	J	`jnl`	Exploring Privacy Implications in OAuth Deployments. CoRR Srivathsan G. Morkonda, Paul C. van Oorschot, Sonia Chiasson
2021	J	`jnl`	SoK: Password-Authenticated Key Exchange - Theory, Practice, Standardization and Real-World Lessons. IACR Cryptol. ePrint Arch. Feng Hao, Paul C. van Oorschot
2021	—	`conf`	SoK: Securing Email - A Stakeholder-Based Analysis. Financial Cryptography (1) Jeremy Clark, Paul C. van Oorschot, Scott Ruoti, Kent E. Seamons, Daniel Zappala
2021	J	`jnl`	Toward Unseating the Unsafe C Programming Language. IEEE Secur. Priv. Paul C. van Oorschot
2020	J	`jnl`	A survey and analysis of TLS interception mechanisms and motivations. CoRR Xavier de Carné de Carnavalet, Paul C. van Oorschot
2020	J	`jnl`	Best Practices for IoT Security: What Does That Even Mean? CoRR Christopher Bellman, Paul C. van Oorschot
2020	J	`jnl`	Blockchains and Stealth Tactics for Teaching Security. IEEE Secur. Priv. Paul C. van Oorschot
2020	A	`conf`	CAPS: Smoothly Transitioning to a More Resilient Web PKI. ACSAC Stephanos Matsumoto, Jay Bosamiya, Yucheng Dai, Paul C. van Oorschot, Bryan Parno
2020	—	`book`	Computer Security and the Internet - Tools and Jewels Paul C. van Oorschot
2020	J	`jnl`	Untangling Security and Privacy. IEEE Secur. Priv. Paul C. van Oorschot
2019	C	`conf`	Analysis, Implications, and Challenges of an Evolving Consumer IoT Security Landscape. PST Christopher Bellman, Paul C. van Oorschot
2019	C	`conf`	Onboarding and Software Update Architecture for IoT Devices. PST Hemant Gupta, Paul C. van Oorschot
2019	J	`jnl`	Secure Client and Server Geolocation Over the Internet. CoRR AbdelRahman Abdou, Paul C. van Oorschot
2019	J	`jnl`	Software Security and Systematizing Knowledge. IEEE Secur. Priv. Paul C. van Oorschot
2019	J	`jnl`	The Internet of Things: Security Challenges. IEEE Secur. Priv. Paul C. van Oorschot, Sean W. Smith
2018	A*	`conf`	A Discussion on Security Education in Academia. CCS Kevin R. B. Butler, Robert K. Cunningham, Paul C. van Oorschot, Reihaneh Safavi-Naini, Ashraf Matrawy, Jeremy Clark
2018	—	`conf`	BP: Formal Proofs, the Fine Print and Side Effects. SecDev Toby C. Murray, Paul C. van Oorschot
2018	J	`jnl`	Baseline functionality for security and control of commodity IoT devices and domain-controlled device lifecycle management. CoRR Markus Miettinen, Paul C. van Oorschot, Ahmad-Reza Sadeghi
2018	J	`jnl`	Comparative Analysis and Framework Evaluating Web Single Sign-On Systems. CoRR Furkan Alaca, Paul C. van Oorschot
2018	J	`jnl`	Comparative Analysis of Control Plane Security of SDN and Conventional Networks. IEEE Commun. Surv. Tutorials AbdelRahman Abdou, Paul C. van Oorschot, Tao Wan
2018	J	`jnl`	Letter to the Editor. IEEE Secur. Priv. John D. McLean, Cormac Herley, Paul C. van Oorschot
2018	J	`jnl`	Science of Security: Combining Theory and Measurement to Reflect the Observable. IEEE Secur. Priv. Cormac Herley, Paul C. van Oorschot
2018	J	`jnl`	Secure Client and Server Geolocation over the Internet. login Usenix Mag. AbdelRahman Abdou, Paul C. van Oorschot
2018	J	`jnl`	Securing Email. CoRR Jeremy Clark, Paul C. van Oorschot, Scott Ruoti, Kent E. Seamons, Daniel Zappala
2018	J	`jnl`	Server Location Verification (SLV) and Server Location Pinning: Augmenting TLS Authentication. ACM Trans. Priv. Secur. AbdelRahman Abdou, Paul C. van Oorschot
2017	J	`jnl`	A Framework and Comparative Analysis of Control Plane Security of SDN and Conventional Networks. CoRR Tao Wan, AbdelRahman Abdou, Paul C. van Oorschot
2017	A	`conf`	Accurate Manipulation of Delay-based Internet Geolocation. AsiaCCS AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
2017	J	`jnl`	CPV: Delay-Based Location Verification for the Internet. IEEE Trans. Dependable Secur. Comput. AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
2017	J	`jnl`	Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes. CoRR Furkan Alaca, AbdelRahman Abdou, Paul C. van Oorschot
2017	J	`jnl`	Location Verification of Wireless Internet Clients: Evaluation and Improvements. IEEE Trans. Emerg. Top. Comput. AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
2017	J	`jnl`	On the security and usability of dynamic cognitive game CAPTCHAs. J. Comput. Secur. Manar Mohamed, Song Gao, Niharika Sachdeva, Nitesh Saxena, Chengcui Zhang, Ponnurangam Kumaraguru, Paul C. van Oorschot
2017	—	`conf`	Science, Security and Academic Literature: Can We Learn from History? MTD@CCS Paul C. van Oorschot
2017	A*	`conf`	SoK: Science, Security and the Elusive Goal of Security as a Scientific Pursuit. IEEE Symposium on Security and Privacy Cormac Herley, Paul C. van Oorschot
2016	A	`conf`	Device fingerprinting for augmenting web authentication: classification and analysis of methods. ACSAC Furkan Alaca, Paul C. van Oorschot
2016	J	`jnl`	Pushing on string: the 'don't care' region of password strength. Commun. ACM Dinei Florêncio, Cormac Herley, Paul C. van Oorschot
2016	—	`conf`	Revisiting password rules: facilitating human management of passwords. eCrime Leah Zhang-Kennedy, Sonia Chiasson, Paul C. van Oorschot
2016	J	`jnl`	Server Location Verification and Server Location Pinning: Augmenting TLS Authentication. CoRR AbdelRahman Abdou, Paul C. van Oorschot
2015	J	`jnl`	Accurate One-Way Delay Estimation With Reduced Client Trustworthiness. IEEE Commun. Lett. AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
2015	J	`jnl`	An Empirical Evaluation of Security Indicators in Mobile Web Browsers. IEEE Trans. Mob. Comput. Chaitrali Amrutkar, Patrick Traynor, Paul C. van Oorschot
2015	—	`conf`	Heuristics for the evaluation of captchas on smartphones. BCS HCI Gerardo Reynaga, Sonia Chiasson, Paul C. van Oorschot
2015	J	`jnl`	Passwords and the evolution of imperfect authentication. Commun. ACM Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
2015	C	`ed.`	Proceedings of the 2015 New Security Paradigms Workshop, NSPW 2015, Twente, The Netherlands, September 8-11, 2015 NSPW Anil Somayaji, Paul C. van Oorschot, Mohammad Mannan, Rainer Böhme
2015	J	`jnl`	Quantifying the security advantage of password expiration policies. Des. Codes Cryptogr. Sonia Chiasson, Paul C. van Oorschot
2015	J	`jnl`	Taxing the Queue: Hindering Middleboxes From Unauthorized Large-Scale Traffic Relaying. IEEE Commun. Lett. AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
2015	—	`conf`	What Lies Beneath? Analyzing Automated SSH Bruteforce Attacks. PASSWORDS AbdelRahman Abdou, David Barrera, Paul C. van Oorschot
2014	A	`conf`	A three-way investigation of a game-CAPTCHA: automated attacks, relay attacks and usability. AsiaCCS Manar Mohamed, Niharika Sachdeva, Michael Georgescu, Song Gao, Nitesh Saxena, Chengcui Zhang, Ponnurangam Kumaraguru, Paul C. van Oorschot, Wei-bang Chen
2014	—	`conf`	An Administrator's Guide to Internet Password Research. LISA Dinei Florêncio, Cormac Herley, Paul C. van Oorschot
2014	—	`conf`	Baton: certificate agility for android's decentralized signing infrastructure. WISEC David Barrera, Daniel McCarney, Jeremy Clark, Paul C. van Oorschot
2014	—	`conf`	Location verification on the Internet: Towards enforcing location-aware access policies over Internet clients. CNS AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
2014	A*	`conf`	Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts. USENIX Security Symposium Dinei Florêncio, Cormac Herley, Paul C. van Oorschot
2014	C	`ed.`	Proceedings of the 2014 workshop on New Security Paradigms Workshop, Victoria, BC, Canada, September 15-18, 2014 NSPW Konstantin Beznosov, Anil Somayaji, Tom Longstaff, Paul C. van Oorschot
2014	J	`jnl`	Security Analysis and Related Usability of Motion-Based CAPTCHAs: Decoding Codewords in Motion. IEEE Trans. Dependable Secur. Comput. Yi Xu, Gerardo Reynaga, Sonia Chiasson, Jan-Michael Frahm, Fabian Monrose, Paul C. van Oorschot
2013	—	`conf`	Deadbolt: locking down android disk encryption. SPSM@CCS Adam Skillen, David Barrera, Paul C. van Oorschot
2013	J	`jnl`	Evaluation in the absence of absolute ground truth: toward reliable evaluation methodology for scan detectors. Int. J. Inf. Sec. Mansour Alsaleh, Paul C. van Oorschot
2013	C	`conf`	Markets for zero-day exploits: ethics and implications. NSPW Serge Egelman, Cormac Herley, Paul C. van Oorschot
2013	A*	`conf`	SoK: SSL and HTTPS: Revisiting Past Challenges and Evaluating Certificate Trust Model Enhancements. IEEE Symposium on Security and Privacy Jeremy Clark, Paul C. van Oorschot
2013	J	`jnl`	Three-Way Dissection of a Game-CAPTCHA: Automated Attacks, Relay Attacks, and Usability. CoRR Manar Mohamed, Niharika Sachdeva, Michael Georgescu, Song Gao, Nitesh Saxena, Chengcui Zhang, Ponnurangam Kumaraguru, Paul C. van Oorschot, Wei-bang Chen
2012	J	`jnl`	A Research Agenda Acknowledging the Persistence of Passwords. IEEE Secur. Priv. Cormac Herley, Paul C. van Oorschot
2012	J	`jnl`	Graphical passwords: Learning from the first twelve years. ACM Comput. Surv. Robert Biddle, Sonia Chiasson, Paul C. van Oorschot
2012	C	`conf`	Measuring SSL Indicators on Mobile Browsers: Extended Life, or End of the Road? ISC Chaitrali Amrutkar, Patrick Traynor, Paul C. van Oorschot
2012	J	`jnl`	Passwords for Both Mobile and Desktop Computers Appendix. login Usenix Mag. Mohammad Mannan, Paul C. van Oorschot
2012	J	`jnl`	Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android. login Usenix Mag. Mohammad Mannan, Paul C. van Oorschot
2012	J	`jnl`	Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism. IEEE Trans. Dependable Secur. Comput. Sonia Chiasson, Elizabeth Stobert, Alain Forget, Robert Biddle, Paul C. van Oorschot
2012	J	`jnl`	Reducing Unauthorized Modification of Digital Objects. IEEE Trans. Software Eng. Paul C. van Oorschot, Glenn Wurster
2012	J	`jnl`	Revisiting Defenses against Large-Scale Online Password Guessing Attacks. IEEE Trans. Dependable Secur. Comput. Mansour Alsaleh, Mohammad Mannan, Paul C. van Oorschot
2012	J	`jnl`	Revisiting network scanning detection using sequential hypothesis testing. Secur. Commun. Networks Mansour Alsaleh, Paul C. van Oorschot
2012	A*	`conf`	Security and Usability Challenges of Moving-Object CAPTCHAs: Decoding Codewords in Motion. USENIX Security Symposium Yi Xu, Gerardo Reynaga, Sonia Chiasson, Jan-Michael Frahm, Fabian Monrose, Paul C. van Oorschot
2012	A	`conf`	Tapas: design, implementation, and usability evaluation of a password manager. ACSAC Daniel McCarney, David Barrera, Jeremy Clark, Sonia Chiasson, Paul C. van Oorschot
2012	J	`jnl`	The Future of Authentication. IEEE Secur. Priv. Dirk Balfanz, Richard Chow, Ori Eisen, Markus Jakobsson, Steve Kirsch, Scott Matsumoto, Jesus Molina, Paul C. van Oorschot
2012	A*	`conf`	The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes. IEEE Symposium on Security and Privacy Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
2012	—	`conf`	Understanding and improving app installation security mechanisms through empirical analysis of android. SPSM@CCS David Barrera, Jeremy Clark, Daniel McCarney, Paul C. van Oorschot
2011	C	`conf`	A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation. NSPW Kemal Bicakci, Paul C. van Oorschot
2011	J	`jnl`	Accommodating IPv6 Addresses in Security Visualization Tools. Inf. Vis. David Barrera, Paul C. van Oorschot
2011	J	`jnl`	Back to the Future: Revisiting IPv6 Privacy Extensions. login Usenix Mag. David Barrera, Glenn Wurster, Paul C. van Oorschot
2011	J	`jnl`	Countering unauthorized code execution on commodity kernels: A survey of common interfaces allowing kernel code modification. Comput. Secur. Trent Jaeger, Paul C. van Oorschot, Glenn Wurster
2011	J	`jnl`	Exploiting predictability in click-based graphical passwords. J. Comput. Secur. Paul C. van Oorschot, Julie Thorpe
2011	—	`conf`	Exploration and Field Study of a Password Manager Using Icon-Based Passwords. Financial Cryptography Workshops Kemal Bicakci, Nart Bedin Atalay, Mustafa Yuceel, Paul C. van Oorschot
2011	J	`jnl`	Leveraging personal devices for stronger password authentication from untrusted computers. J. Comput. Secur. Mohammad Mannan, Paul C. van Oorschot
2011	—	`conf`	Mercury: Recovering Forgotten Passwords Using Personal Devices. Financial Cryptography Mohammad Mannan, David Barrera, Carson D. Brown, David Lie, Paul C. van Oorschot
2011	A	`conf`	Network scan detection with LQS: a lightweight, quick and stateful algorithm. AsiaCCS Mansour Alsaleh, Paul C. van Oorschot
2011	J	`jnl`	Secure Software Installation on Smartphones. IEEE Secur. Priv. David Barrera, Paul C. van Oorschot
2011	J	`jnl`	User Study, Analysis, and Usable Security of Passwords Based on Digital Objects. IEEE Trans. Inf. Forensics Secur. Robert Biddle, Mohammad Mannan, Paul C. van Oorschot, Tara Whalen
2010	A*	`conf`	A control point for reducing root abuse of file-system privileges. CCS Glenn Wurster, Paul C. van Oorschot
2010	A*	`conf`	A methodology for empirical analysis of permission-based security models and its application to android. CCS David Barrera, Hilmi Günes Kayacik, Paul C. van Oorschot, Anil Somayaji
2010	A	`conf`	Exploring usability effects of increasing security in click-based graphical passwords. ACSAC Elizabeth Stobert, Alain Forget, Sonia Chiasson, Paul C. van Oorschot, Robert Biddle
2010	J	`jnl`	Purely automated attacks on passpoints-style graphical passwords. IEEE Trans. Inf. Forensics Secur. Paul C. van Oorschot, Amirali Salehi-Abari, Julie Thorpe
2010	—	`conf`	System security, platform security and usability. STC@CCS Paul C. van Oorschot
2009	—	`conf`	Browser interfaces and extended validation SSL certificates: an empirical study. CCSW Robert Biddle, Paul C. van Oorschot, Andrew S. Patrick, Jennifer Sobey, Tara Whalen
2009	J	`jnl`	Internet geolocation: Evasion and counterevasion. ACM Comput. Surv. James A. Muir, Paul C. van Oorschot
2009	A*	`conf`	Multiple password interference in text passwords and click-based graphical passwords. CCS Sonia Chiasson, Alain Forget, Elizabeth Stobert, Paul C. van Oorschot, Robert Biddle
2009	—	`conf`	Passwords: If We're So Smart, Why Are We Still Using Them? Financial Cryptography Cormac Herley, Paul C. van Oorschot, Andrew S. Patrick
2009	J	`jnl`	Reducing threats from flawed security APIs: The banking PIN case. Comput. Secur. Mohammad Mannan, Paul C. van Oorschot
2009	C	`conf`	Security visualization tools and IPv6 addresses. VizSEC David Barrera, Paul C. van Oorschot
2009	—	`conf`	TwoStep: An Authentication Method Combining Text and Graphical Passwords. MCETECH Paul C. van Oorschot, Tao Wan
2009	J	`jnl`	User interface design affects security: patterns in click-based graphical passwords. Int. J. Inf. Sec. Sonia Chiasson, Alain Forget, Robert Biddle, Paul C. van Oorschot
2008	A	`conf`	CROO: A Universal Infrastructure and Protocol to Detect Identity Fraud. ESORICS Deholo Nali, Paul C. van Oorschot
2008	—	`conf`	Centered Discretization with Application to Graphical Passwords. UPSEC Sonia Chiasson, Jayakumar Srinivasan, Robert Biddle, Paul C. van Oorschot
2008	—	`conf`	Digital Objects as Passwords. HotSec Mohammad Mannan, Paul C. van Oorschot
2008	—	`conf`	Discovering Packet Structure through Lightweight Hierarchical Clustering. ICC Abdulrahman Hijazi, Hajime Inoue, Ashraf Matrawy, Paul C. van Oorschot, Anil Somayaji
2008	A	`conf`	Exploring User Reactions to New Browser Cues for Extended Validation Certificates. ESORICS Jennifer Sobey, Robert Biddle, Paul C. van Oorschot, Andrew S. Patrick
2008	A	`conf`	Improving Security Visualization with Exposure Map Filtering. ACSAC Mansour Alsaleh, David Barrera, Paul C. van Oorschot
2008	A	`conf`	Improving text passwords through persuasion. SOUPS Alain Forget, Sonia Chiasson, Paul C. van Oorschot, Robert Biddle
2008	—	`conf`	Influencing users towards better passwords: persuasive cued click-points. BCS HCI (1) Sonia Chiasson, Alain Forget, Robert Biddle, Paul C. van Oorschot
2008	C	`conf`	Localization of credential information to address increasingly inevitable data breaches. NSPW Mohammad Mannan, Paul C. van Oorschot
2008	A	`conf`	On Purely Automated Attacks and Click-Based Graphical Passwords. ACSAC Amirali Salehi-Abari, Julie Thorpe, Paul C. van Oorschot
2008	J	`jnl`	On predictive models and user-drawn graphical passwords. ACM Trans. Inf. Syst. Secur. Paul C. van Oorschot, Julie Thorpe
2008	B	`conf`	Persuasion for Stronger Passwords: Motivation and Pilot Study. PERSUASIVE Alain Forget, Sonia Chiasson, Paul C. van Oorschot, Robert Biddle
2008	A*	`conf`	Privacy-enhanced sharing of personal content on the web. WWW Mohammad Mannan, Paul C. van Oorschot
2008	A*	`ed.`	Proceedings of the 17th USENIX Security Symposium, July 28-August 1, 2008, San Jose, CA, USA USENIX Security Symposium Paul C. van Oorschot
2008	A*	`conf`	SOMA: mutual approval for included content in web pages. CCS Terri Oda, Glenn Wurster, Paul C. van Oorschot, Anil Somayaji
2008	C	`conf`	The developer is the enemy. NSPW Glenn Wurster, Paul C. van Oorschot
2008	—	`conf`	Weighing Down "The Unbearable Lightness of PIN Cracking". Financial Cryptography Mohammad Mannan, Paul C. van Oorschot
2007	A	`conf`	A second look at the usability of click-based graphical passwords. SOUPS Sonia Chiasson, Robert Biddle, Paul C. van Oorschot
2007	A	`conf`	Graphical Password Authentication Using Cued Click Points. ESORICS Sonia Chiasson, Paul C. van Oorschot, Robert Biddle
2007	A*	`conf`	Human-Seeded Attacks and Exploiting Hot-Spots in Graphical Passwords. USENIX Security Symposium Julie Thorpe, Paul C. van Oorschot
2007	J	`jnl`	On interdomain routing security and pretty secure BGP (psBGP). ACM Trans. Inf. Syst. Secur. Paul C. van Oorschot, Tao Wan, Evangelos Kranakis
2007	C	`conf`	Security and usability: the gap in real-world online banking. NSPW Mohammad Mannan, Paul C. van Oorschot
2007	—	`conf`	Self-Signed Executables: Restricting Replacement of Program Binaries by Malware. HotSec Glenn Wurster, Paul C. van Oorschot
2007	A	`conf`	Tracking Darkports for Network Defense. ACSAC David Whyte, Paul C. van Oorschot, Evangelos Kranakis
2007	A	`conf`	Usability of anonymous web browsing: an examination of Tor interfaces and deployability. SOUPS Jeremy Clark, Paul C. van Oorschot, Carlisle Adams
2007	—	`conf`	Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer. Financial Cryptography Mohammad Mannan, Paul C. van Oorschot
2007	C	`conf`	VideoTicket: detecting identity fraud attempts via audiovisual certificates and signatures. NSPW Deholo Nali, Paul C. van Oorschot, Andy Adler
2006	—	`conf`	A Protocol for Secure Public Instant Messaging. Financial Cryptography Mohammad Mannan, Paul C. van Oorschot
2006	A*	`conf`	A Usability Study and Critique of Two Password Managers. USENIX Security Symposium Sonia Chiasson, Paul C. van Oorschot, Robert Biddle
2006	J	`jnl`	A monitoring system for detecting repeated packets with applications to computer worms. Int. J. Inf. Sec. Paul C. van Oorschot, Jean-Marc Robert, Miguel Vargas Martin
2006	A	`conf`	Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks. ACSAC David Whyte, Paul C. van Oorschot, Evangelos Kranakis
2006	A	`conf`	Analysis of BGP prefix origins during Google's May 2005 outage. IPDPS Tao Wan, Paul C. van Oorschot
2006	—	`conf`	Exposure Maps: Removing Reliance on Attribution During Scan Detection. HotSec David Whyte, Paul C. van Oorschot, Evangelos Kranakis
2006	J	`jnl`	On countering online dictionary attacks with login histories and humans-in-the-loop. ACM Trans. Inf. Syst. Secur. Paul C. van Oorschot, Stuart G. Stubblebine
2005	—	`conf`	A Generic Attack on Checksumming-Based Software Tamper Resistance. S&P Glenn Wurster, Paul C. van Oorschot, Anil Somayaji
2005	—	`conf`	Countering Identity Theft Through Digital Uniqueness, Location Cross-Checking, and Funneling. Financial Cryptography Paul C. van Oorschot, Stuart G. Stubblebine
2005	A*	`conf`	DNS-based Detection of Scanning Worms in an Enterprise Network. NDSS David Whyte, Evangelos Kranakis, Paul C. van Oorschot
2005	A	`conf`	Detecting Intra-enterprise Scanning Worms based on Address Resolution. ACSAC David Whyte, Paul C. van Oorschot, Evangelos Kranakis
2005	J	`jnl`	Hardware-Assisted Circumvention of Self-Hashing Software Tamper Resistance. IEEE Trans. Dependable Secur. Comput. Paul C. van Oorschot, Anil Somayaji, Glenn Wurster
2005	A	`conf`	Highlights from the 2005 New Security Paradigms Workshop. ACSAC Simon N. Foley, Abe Singer, Michael E. Locasto, Stelios Sidiroglou, Angelos D. Keromytis, John P. McDermott, Julie Thorpe, Paul C. van Oorschot, Anil Somayaji, Richard Ford, Mark Bush, Alex Boulatov
2005	C	`conf`	Message authentication by integrity with public corroboration. NSPW Paul C. van Oorschot
2005	B	`conf`	Mitigating Network Denial-of-Service Through Diversity-Based Traffic Management. ACNS Ashraf Matrawy, Paul C. van Oorschot, Anil Somayaji
2005	—	`conf`	On instant messaging worms, analysis and countermeasures. WORM Mohammad Mannan, Paul C. van Oorschot
2005	J	`jnl`	Pass-thoughts: Authenticating With Our Minds. IACR Cryptol. ePrint Arch. Julie Thorpe, Paul C. van Oorschot, Anil Somayaji
2005	C	`conf`	Pass-thoughts: authenticating with our minds. NSPW Julie Thorpe, Paul C. van Oorschot, Anil Somayaji
2005	A*	`conf`	Pretty Secure BGP, psBGP. NDSS Tao Wan, Evangelos Kranakis, Paul C. van Oorschot
2004	—	`conf`	Addressing Online Dictionary Attacks with Login Histories and Humans-in-the-Loop (Extended Abstract). Financial Cryptography Stuart G. Stubblebine, Paul C. van Oorschot
2004	A*	`conf`	Graphical Dictionaries and the Memorable Space of Graphical Passwords. USENIX Security Symposium Julie Thorpe, Paul C. van Oorschot
2004	B	`conf`	S-RIP: A Secure Distance Vector Routing Protocol. ACNS Tao Wan, Evangelos Kranakis, Paul C. van Oorschot
2004	C	`conf`	Secure Public Instant Messaging. PST Mohammad Mannan, Paul C. van Oorschot
2004	C	`conf`	Securing the Destination-Sequenced Distance Vector Routing Protocol (S-DSDV). ICICS Tao Wan, Evangelos Kranakis, Paul C. van Oorschot
2004	A	`conf`	Towards Secure Design Choices for Implementing Graphical Passwords. ACSAC Julie Thorpe, Paul C. van Oorschot
2003	C	`conf`	Revisiting Software Protection. ISC Paul C. van Oorschot
2002	—	`conf`	A White-Box DES Implementation for DRM Applications. Digital Rights Management Workshop Stanley Chow, Philip A. Eisen, Harold Johnson, Paul C. van Oorschot
2002	B	`conf`	White-Box Cryptography and an AES Implementation. Selected Areas in Cryptography Stanley Chow, Philip A. Eisen, Harold Johnson, Paul C. van Oorschot
2000	J	`jnl`	Cryptographic Information Recovery Using Key Recover. Comput. Secur. Michael Smith, Paul C. van Oorschot, Michael Willett
1999	A*	`conf`	Addressing the Problem of Undetected Signature Key Compromise. NDSS Mike Just, Paul C. van Oorschot
1999	—	`ch.`	Coding Theory And Cryptology. Handbook of Discrete and Combinatorial Mathematics Alfred J. Menezes, Paul C. van Oorschot
1999	J	`jnl`	On the Security of Iterated Message Authentication Codes. IEEE Trans. Inf. Theory Bart Preneel, Paul C. van Oorschot
1999	J	`jnl`	Parallel Collision Search with Cryptanalytic Applications. J. Cryptol. Paul C. van Oorschot, Michael J. Wiener
1997	J	`jnl`	Security analysis of the message authenticator algorithm (MAA). Eur. Trans. Telecommun. Bart Preneel, Vincent Rijmen, Paul C. van Oorschot
1997	J	`jnl`	Special Issue: Selected Areas in Cryptography - Introduction. Des. Codes Cryptogr. Evangelos Kranakis, Paul C. van Oorschot
1996	—	`book`	Handbook of Applied Cryptography Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone
1996	A*	`conf`	Improving Implementable Meet-in-the-Middle Attacks by Orders of Magnitude. CRYPTO Paul C. van Oorschot, Michael J. Wiener
1996	A*	`conf`	On Diffie-Hellman Key Agreement with Short Exponents. EUROCRYPT Paul C. van Oorschot, Michael J. Wiener
1996	A*	`conf`	On the Security of Two MAC Algorithms. EUROCRYPT Bart Preneel, Paul C. van Oorschot
1995	C	`conf`	Design Choices and Security Implications in Implementing Diffie-Hellman Key Agreement. IMACC Paul C. van Oorschot
1995	A*	`conf`	MDx-MAC and Building Fast MACs from Hash Functions. CRYPTO Bart Preneel, Paul C. van Oorschot
1994	J	`jnl`	Modern key agreement techniques. Comput. Commun. Rainer A. Rueppel, Paul C. van Oorschot
1994	A*	`conf`	On Key Distribution via True Broadcasting. CCS Mike Just, Evangelos Kranakis, Danny Krizanc, Paul C. van Oorschot
1994	—	`conf`	On unifying some cryptographic protocol logics. S&P Paul F. Syverson, Paul C. van Oorschot
1994	A*	`conf`	Parallel Collision Search with Application to Hash Functions and Discrete Logarithms. CCS Paul C. van Oorschot, Michael J. Wiener
1993	A*	`conf`	An Alternate Explanation of two BAN-logic "failures". EUROCRYPT Paul C. van Oorschot
1993	A*	`conf`	Extending Cryptographic Logics of Belief to Key Agreement Protocols. CCS Paul C. van Oorschot
1992	J	`jnl`	Authentication and Authenticated Key Exchanges. Des. Codes Cryptogr. Whitfield Diffie, Paul C. van Oorschot, Michael J. Wiener
1992	J	`jnl`	Pair-Splitting Sets in SIAM J. Discret. Math. Albrecht Beutelspacher, Dieter Jungnickel, Paul C. van Oorschot, Scott A. Vanstone
1992	J	`jnl`	Subgroup Refinement Algorithms for Root Finding in GF(q). SIAM J. Comput. Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone
1990	A*	`conf`	A Comparison of Practical Public Key Cryptosystems Based on Integer Factorization and Discrete Logarithms. CRYPTO Paul C. van Oorschot
1990	A*	`conf`	A Known Plaintext Attack on Two-Key Triple Encryption. EUROCRYPT Paul C. van Oorschot, Michael J. Wiener
1990	J	`jnl`	On splitting sets in block designs and finding roots of polynomials. Discret. Math. Paul C. van Oorschot, Scott A. Vanstone
1989	J	`jnl`	A geometric approach to root finding in GF(q IEEE Trans. Inf. Theory Paul C. van Oorschot, Scott A. Vanstone
1989	J	`jnl`	Applications of Combinatorial Designs in Computer Science. ACM Comput. Surv. Charles J. Colbourn, Paul C. van Oorschot
1988	B	`conf`	Some Computational Aspects of Root Finding in GF(q ISSAC Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone