Santiago Torres-Arias

44 papers A* 12A 2C 2Misc 2Journal 21Unranked 2
YearRankTypeTitle / Venue / Authors
2026 J jnl
A Longitudinal Study of Usability in Identity-Based Software Signing.
CoRR
Kelechi G. Kalu, Hieu Tran, Santiago Torres-Arias, Sooyeon Jeong, James C. Davis
2026 J jnl
Privocracy: Online Democracy through Private Voting.
CoRR
Pedro Camponês, Hugo Pereira, Adrian Persaud, Kevin Gallagher, Santiago Torres-Arias
2025 A* conf
$ZTD_{\text{JAVA}}$: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies.
ICSE
Paschal C. Amusuo, Kyle A. Robinson, Tanmay Singla, Huiyun Peng, Aravind Machiry, Santiago Torres-Arias, Laurent Simon, James C. Davis
2025 J jnl
ARMS: A Vision for Actor Reputation Metric Systems in the Open-Source Software Supply Chain.
CoRR
Kelechi G. Kalu, Sofia Okorafor, F. Betül Durak, Kim Laine, Radames Cruz Moreno, Santiago Torres-Arias, James C. Davis
2025 A* conf
An Industry Interview Study of Software Signing for Supply Chain Security.
USENIX Security Symposium
Kelechi G. Kalu, Tanmay Singla, Chinenye Okafor, Santiago Torres-Arias, James C. Davis
2025 J jnl
Establishing Provenance Before Coding: Traditional and Next-Generation Software Signing.
IEEE Secur. Priv.
Taylor R. Schorlemmer, Ethan H. Burmane, Kelechi G. Kalu, Santiago Torres-Arias, James C. Davis
2025 A* conf
SCORED '25: Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses.
CCS
Aditya Sirish A Yelgundhalli, Behnaz Hassanshahi, Dennis Roellke, Drew Davidson, Kathleen Moriarty, Lorenzo De Carli, Marcela S. Melara, Santiago Torres-Arias, Sarah Evans, Yuchen Zhang
2025 J jnl
Trustworthy and Confidential SBOM Exchange.
CoRR
Eman Abu Ishgair, Chinenye Okafor, Marcela S. Melara, Santiago Torres-Arias
2025 J jnl
Why Johnny Signs with Sigstore: Examining Tooling as a Factor in Software Signing Adoption in the Sigstore Ecosystem.
CoRR
Kelechi G. Kalu, Sofia Okorafor, Tanmay Singla, Santiago Torres-Arias, James C. Davis
2024 J jnl
A Study of Malware Prevention in Linux Distributions.
CoRR
Duc-Ly Vu, Trevor Dunlap, Karla Obermeier-Velazquez, Paul Gibert, John Speed Meyers, Santiago Torres-Arias
2024 J jnl
An Industry Interview Study of Software Signing for Supply Chain Security.
CoRR
Kelechi G. Kalu, Tanya Singla, Chinenye Okafor, Santiago Torres-Arias, James C. Davis
2024 J jnl
DiVerify: Diversifying Identity Verification in Next-Generation Software Signing.
CoRR
Chinenye L. Okafor, James C. Davis, Santiago Torres-Arias
2024 J jnl
Establishing Provenance Before Coding: Traditional and Next-Gen Signing.
CoRR
Taylor R. Schorlemmer, Ethan H. Burmane, Kelechi G. Kalu, Santiago Torres-Arias, James C. Davis
2024 A* conf
Rust for Embedded Systems: Current State and Open Problems.
CCS
Ayushi Sharma, Shashank Sharma, Sai Ritvik Tanksalkar, Santiago Torres-Arias, Aravind Machiry
2024 A* conf
SCORED '24: Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses.
CCS
Santiago Torres-Arias, Marcela S. Melara
2024 — conf
Should Smart Homes Be Afraid of Evil Maids? : Identifying Vulnerabilities in IoT Device Firmware.
CCWC
Austen Knapp, Emmanuel Wamuo, Minhajul Alam Rahat, Santiago Torres-Arias, Gedare Bloom, Yanyan Zhuang
2024 A* conf
Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors.
SP
Taylor R. Schorlemmer, Kelechi G. Kalu, Luke Chigges, Kyung Myung Ko, Eman Abu Ishgair, Saurabh Bagchi, Santiago Torres-Arias, James C. Davis
2024 J jnl
Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors.
CoRR
Taylor R. Schorlemmer, Kelechi G. Kalu, Luke Chigges, Kyung Myung Ko, Eman Abdul-Muhd Abu Isghair, Saurabh Baghi, Santiago Torres-Arias, James C. Davis
2024 J jnl
SoK: A Defense-Oriented Evaluation of Software Supply Chain Security.
CoRR
Eman Abu Ishgair, Marcela S. Melara, Santiago Torres-Arias
2024 J jnl
SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties.
CoRR
Chinenye Okafor, Taylor R. Schorlemmer, Santiago Torres-Arias, James C. Davis
2023 J jnl
A Viewpoint on Knowing Software: Bill of Materials Quality When You See It.
IEEE Secur. Priv.
Santiago Torres-Arias, Daniel E. Geer, John Speed Meyers
2023 J jnl
A Viewpoint on Software Supply Chain Security: Are We Getting Lost in Translation?
IEEE Secur. Priv.
Marcela S. Melara, Santiago Torres-Arias
2023 A conf
Behind the Scenes: Uncovering TLS and Server Certificate Practice of IoT Device Vendors in the Wild.
IMC
Hongying Dong, Hao Shu, Vijay Prakash, Yizhe Zhang, Muhammad Talha Paracha, David R. Choffnes, Santiago Torres-Arias, Danny Yuxing Huang, Yixin Sun
2023 J jnl
Preventing Supply Chain Vulnerabilities in Java with a Fine-Grained Permission Manager.
CoRR
Paschal C. Amusuo, Kyle A. Robinson, Santiago Torres-Arias, Laurent Simon, James C. Davis
2023 — ed.
Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, SCORED 2023, Copenhagen, Denmark, 30 November 2023
SCORED@CCS
Santiago Torres-Arias, Marcela S. Melara, Laurent Simon, Nikos Vasilakis, Kathleen Moriarty
2023 — ed.
Proceedings of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, SCORED 2024, Salt Lake City, UT, USA, October 14-18, 2024
SCORED
Santiago Torres-Arias, Lorenzo De Carli, Yuchen Zhang
2023 J jnl
Rust for Embedded Systems: Current State, Challenges and Open Problems.
CoRR
Ayushi Sharma, Shashank Sharma, Santiago Torres-Arias, Aravind Machiry
2023 A* conf
SCORED '23: Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses.
CCS
Marcela S. Melara, Santiago Torres-Arias, Laurent Simon
2023 A* conf
Speranza: Usable, Privacy-friendly Software Signing.
CCS
Kelsey Merrill, Zachary Newman, Santiago Torres-Arias, Karen R. Sollins
2023 J jnl
Speranza: Usable, privacy-friendly software signing.
CoRR
Kelsey Merrill, Zachary Newman, Santiago Torres-Arias, Karen R. Sollins
2023 J jnl
Towards verifiable web-based code review systems.
J. Comput. Secur.
Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
2022 C conf
Bootstrapping Trust in Community Repository Projects.
SecureComm
Sangat Vaidya, Santiago Torres-Arias, Justin Cappos, Reza Curtmola
2022 — ed.
Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, SCORED2022, Los Angeles, CA, USA, 7 November 2022
SCORED@CCS
Santiago Torres-Arias, Marcela S. Melara, Laurent Simon
2022 A* conf
SCORED '22: ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses.
CCS
Santiago Torres-Arias, Marcela S. Melara, Laurent Simon
2022 A* conf
Sigstore: Software Signing for Everybody.
CCS
Zachary Newman, John Speed Meyers, Santiago Torres-Arias
2022 — conf
SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties.
SCORED@CCS
Chinenye Okafor, Taylor R. Schorlemmer, Santiago Torres-Arias, James C. Davis
2021 C conf
COLBAC: Shifting Cybersecurity from Hierarchical to Horizontal Designs.
NSPW
Kevin Gallagher, Santiago Torres-Arias, Nasir D. Memon, Jessica Feldman
2020 J jnl
Towards adding verifiability to web-based Git repositories.
J. Comput. Secur.
Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
2019 Misc conf
Commit Signatures for Centralized Version Control Systems.
SEC
Sangat Vaidya, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
2019 A* conf
in-toto: Providing farm-to-table guarantees for bits and bytes.
USENIX Security Symposium
Santiago Torres-Arias, Hammad Afzali, Trishank Karthik Kuppusamy, Reza Curtmola, Justin Cappos
2018 A conf
le-git-imate: Towards Verifiable Web-based Git Repositories.
AsiaCCS
Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
2016 Misc conf
Diplomat: Using Delegations to Protect Community Repositories.
NSDI
Trishank Karthik Kuppusamy, Santiago Torres-Arias, Vladimir Diaz, Justin Cappos
2016 A* conf
On Omitting Commits and Committing Omissions: Preventing Git Metadata Tampering That (Re)introduces Software Vulnerabilities.
USENIX Security Symposium
Santiago Torres-Arias, Anil Kumar Ammula, Reza Curtmola, Justin Cappos
2014 J jnl
PolyPasswordHasher: Improving Password Storage Security.
login Usenix Mag.
Santiago Torres-Arias, Justin Cappos