Publications

www.cs.dartmouth.edu/~sws/research/pubs.shtml Last modified: Wednesday, 09-Apr-2008 15:57:43 EDT

Books Sean W. Smith, John C. Marchesini. The Craft of System Security. Addison-Wesley. 2007. Sean W. Smith. Trusted Computing Platforms: Design and Applications. New York: Springer. 2005. Sean. W. Smith. Trusted Computing Platforms: Design and Applications. Chinese language version. Tsinghua University Press, October 2006.

Edited Volumes S.J. Stolfo, S.M. Bellovin, S. Hershkop, A. Keromytis, S. Sinclair, and S.W. Smith (editors). Insider Attack and Cyber Security: Beyond the Hacker. Springer-Verlag, Advances in Information Security 39. 2008. C. Ellison. W.T. Polk, N. Hastings, S.W. Smith (editors). 2nd Annual PKI Research Workshop Proceedings. NIST Special Publication NISTIR 7085. 2004. S.W. Smith, W.T. Polk, N. Hastings (editors). 1st Annual PKI Research Workshop Proceedings. NIST Special Publication 800-62. 2003.

Refereed Journal Articles

• C. Masone, S.W. Smith.
  "Towards Usefully Secure Email."
  IEEE Technology and Society (Special Issue on Security and Usability)
  26 (12): 25-34. Spring 2007.
  

• M. Zhao, S.W. Smith, D. Nicol.
  "The Performance Impact of BGP Security."
  IEEE Network.
  19 (6): 42--48. November/December 2005.
  

• G. Vanrenen, S.W. Smith, J. Marchesini.
  "Distributing Security-Mediated PKI."
  International Journal of Information Security.
  In press; online version published July 2005. (A revised and extended version of our EuroPKI 2004 paper.)
  

• E. Ye, S.W. Smith, D. Anthony.
  "Trusted Paths for Browsers."
  ACM Transactions on Information System Security.
  8 (2): 153-186. May 2005. (A revised and extended version of Usenix Security paper.)
  

• A. Iliev, S.W. Smith.
  "Protecting User Privacy via Trusted Computing at the Server."
  IEEE Security and Privacy.
  3 (2): 20--28. March/April 2005. (A revised and extended version of two of our conference papers.)
  

• J. Marchesini, S.W. Smith, M. Zhao.
  "Keyjacking: the Surprising Insecurity of Client-side SSL."
  Computers and Security.
  4 (2): 109-123. March 2005. (A revised and extended version of our PKI03 paper.)
  

• S.W. Smith.
  "Outbound Authentication for Programmable Secure Coprocessors."
  International Journal of Information Security.
  3(1): 28--41. October 2004. (Revised version of my ESORICS paper.)
  

• D.M. Nicol, S.W. Smith, M. Zhao.
  "Evaluation of Efficient Security for BGP Route Announcements using Parallel Simulation."
  Simulation Modelling Practice and Theory.
  12 (3-4): 187--216. July 2004. (Special issue on "Modeling and simulation of distributed systems and networks.")
  

• A. Shubina, S.W. Smith.
  "Using Caching for Browsing Anonymity."
  ACM SIGecom Exchanges.
  Volume 4.2, pp 11--20. Summer 2003.
  

• A. Perrig, S.W. Smith, D. Song, J.D. Tygar.
  "SAM: A Flexible and Secure Auction Architecture using Trusted Hardware."
  eJETA.org: The Electronic Journal for E-Commerce Tools and Applications.
  Vol 1, Issue 1. January 2002.
  

• J. Dyer, M. Lindemann, R. Perez, R. Sailer, S.W. Smith, L. van Doorn, S. Weingart.
  "Building the IBM 4758 Secure Coprocessor."
  IEEE Computer.
  34: 57-66. October 2001.
  

• S.W. Smith, D. Safford.
  "Practical Server Privacy Using Secure Coprocessors."
  IBM Systems Journal (special issue on End-to-End Security)
  40: 683--695. 2001.
  

• S.W. Smith.
  "WebALPS: A Survey of E-Commerce Privacy and Security Applications."
  ACM SIGecom Exchanges.
  Volume 2.3, September 2001.
  

• S.W. Smith, S.H. Weingart.
  "Building a High-Performance, Programmable Secure Coprocessor."
  Computer Networks (Special Issue on Computer Network Security.)
  31: 831-860. April 1999.
  

• M. Pala and S.W. Smith.
  "PEACHES and Peers."
  Public Key Infrastructure: EuroPKI 2008.
  Springer-Verlag LNCS. To appear.

• P. Tsang and S.W. Smith.
  "YASIR: A Low-Latency, High-Integrity Security Retrofit for Legacy SCADA Systems."
  23rd International Information Security Conference (SEC 2008).
  Springer-Verlag LNCS. To appear, August 2008.

• P. Tsang and S.W. Smith.
  "Peer-to-Peer Anonymous Authentication."
  6th International Conference on Applied Cryptography and Network Security (ACNS 2008).
  Springer-Verlag LNCS,. To appear, June 2008.

• M. Pala, S. Cholia, S. Rea , S. W. Smith.
  "Extending PKI Interoperability in Computational Grids."
  STPG 2008: The First Workshop on Security, Trust and Privacy in Grid Environments.
  IEEE. To appear, May 2008.

• P. Tsang and S.W. Smith.
  "Secure Cryptographic Precomputation with Insecure Memory."
  4th Information Security Practice and Experience Conference (ISPEC 2008).
  Springer-Verlag LNCS. To appear, April 2008.

• P. Tsang and S.W. Smith.
  "Combating Spam and Denial-of-Service Attacks with Trusted Puzzle Solvers"
  4th Information Security Practice and Experience Conference (ISPEC 2008).
  Springer-Verlag LNCS. To appear, April 2008.

• S. Bratus, N. D'Cunha, E. Sparks, S.W. Smith.
  "TOCTOU, Traps, and Trusted Computing".
  TRUST2008. (Best Paper)
  April 2008. To appear, Springer-Verlag LNCS.

• S. Sinclair, S.W. Smith, S. Trudeau, M.E. Johnson, A. Portera.
  "Information Risk in Financial Institutions: Field Study and Research Roadmap."
  3rd International Workshop on Enterprise Applications and Services in the Finance Industry (FinanceCom 2007).
  Springer-Verlag Lecture Notes in Business Information Processing 4. Pp. 165-180. 2008.

• P. Tsang, S. Chow and S.W. Smith.
  "Batch Paring Delegation."
  International Workshop on Security (IWSEC2007).
  Springer-Verlag LNCS 4752. pp. 74--90.

• M. Au, A. Kapadia, P. Tsang, S.W. Smith.
  "Blacklistable Anonymous Credentials: Blocking Misbehaving Users without TTPs."
  Proceedings of the 14th ACM Conference on Computer and Communication Security (CCS '07).
  November 2007. pp 72--81.

• K.-H. Baek, S. Bratus, S. Sinclair, S.W. Smith.
  "Attacking and Defending Networked Embedded Devices."
  2nd Workshop on Embedded Systems Security (WESS'2007).
  October 2007.

• K. Bailey, L. Vongsathorn, A. Kapadia, C. Masone, S. W. Smith.
  "TwoKind Authentication: Usable Authenticators for Untrustworthy Environments (Poster Abstract)."
  Proceedings of the Third Symposium on Usable Privacy and Security (SOUPS '07).
  July 2007. 169--170.

• P. Johnson, A. Kapadia, P. Tsang, S.W. Smith.
  "Nymble: Anonymous IP-address Blocking."
  Privacy-Enhancing Technology 2007.
  Springer-Verlag LNCS 4776, 113--133.

• M. Pala and S.W. Smith.
  "AutoPKI: a PKI Resources Discovery System."
  Public Key Infrastructure: EuroPKI 2007.
  Springer-Verlag LNCS 4582, 154--169.

• N. Santos, S.W. Smith.
  "Limited Delegation for Client-Side SSL."
  6th Annual PKI Research and Development Workshop.
  NIST/NIH/Internet2. April 2007.
  

• S. Bratus, A. Ferguson, D. McIlroy, S.W. Smith.
  "Pastures: Towards Usable Security Policy Engineering."
  Proceedings of the Second International Conference on Availability, Reliability and Security (ARES 2007).
  IEEE Computer Society. 1052--1059. April 2007

• C. Masone, K.-H. Baek, S.W. Smith.
  "WSKE: Web Server Key Enabled Cookies."
  Usable Security (USEC).
  2007.
  

• A. Kapadia, P. Tsang, S.W. Smith.
  "Attribute-Based Publishing with Hidden Credentials and Hidden Policies."
  14th Annual Network and Distributed System Security Symposium (NDSS '07)
  179--192. February 2007.
  

• P. Tsang, A. Kapadia, S.W. Smith.
  "Anonymous IP-Address Blocking in Tor with Trusted Computing." (Work in Progress)
  Second Workshop on Advances in Trusted Computing (WATC '06)
  November 2006.
  

• A. Iliev, S.W. Smith.
  "Faerieplay on Tiny Trusted Third Parties" (Work in Progress)
  Second Workshop on Advances in Trusted Computing (WATC '06)
  November 2006.
  

• M. Zhao, S.W. Smith.
  "Modeling and Evaluation of Certification Path Discovery in the Emerging Global PKI."
  Public Key Infrastructure: EuroPKI 2006.
  Springer-Verlag LNCS.
  

• S. Sinclair, S.W. Smith.
  "PorKI: Making User PKI Safe on Machines of Heterogeneous Trustworthiness."
  21st Annual Computer Security Applications Conference.
  IEEE Computer Society. To appear, December 2005.
  

• M. Zhao, S.W. Smith and D. Nicol.
  "Aggregated Path Authentication for Efficient BGP Security."
  12th ACM Conference on Computer and Communications Security.
  To appear, November 2005.
  

• J. Marchesini, S.W. Smith.
  "SHEMP: Secure Hardware Enhanced MyProxy."
  Proceedings of Third Annual Conference on Privacy, Security and Trust.
  To appear, October 2005.
  

• K.-H. Baek, S.W. Smith.
  "Preventing Theft of Quality of Service on Open Platforms."
  First IEEE/CREATE-NET Workshop on Security and QoS in Communication Networks (IEEE/CREATE-NET SecQoS 2005).
  September 2005.
  

• J. Marchesini, S.W. Smith.
  "Modeling Public Key Infrastructure in the Real World."
  Public Key Infrastructure: EuroPKI 2005.
  Springer-Verlag LNCS. June 2005.
  

• M. Franklin, K. Mitcham, S.W. Smith, J. Stabiner, O. Wild.
  "CA-in-a-Box."
  Public Key Infrastructure: EuroPKI 2005.
  Springer-Verlag LNCS. 2005.
  

• M. Zhao, S.W. Smith, D. Nicol.
  "Evaluating the Performance Impact of PKI on BGP Security."
  4th Annual PKI Research and Development Workshop.
  NIST/NIH/Internet2. April 2005.
  

• J. Marchesini, S.W. Smith, O. Wild, J. Stabiner, A. Barsamian.
  "Open-Source Applications of TCPA Hardware."
  20th Annual Computer Security Applications Conference.
  IEEE Computer Society. December 2004.
  

• S. Nazareth, S.W. Smith.
  "Using SPKI/SDSI for Distributed Maintenance of Attribute Release Policies in Shibboleth."
  Proceedings of the IADIS International Conference WWW/Internet 2004.
  Volume 1. 218--226. October 2004.
  

• P. Seligman, S.W. Smith.
  "Detecting Unauthorized Use in Online Journal Archives: A Case Study."
  Proceedings of the IADIS International Conference WWW/Internet 2004.
  Volume 1. 209--217. October 2004.
  

• A. Shubina, S.W. Smith.
  "Design and Prototype of a Coercion-Resistant, Verifiable Electronic Voting System."
  Proceedings of Second Annual Conference on Privacy, Security and Trust.
  29--39. October 2004.
  

• S.W. Smith, C. Masone, S. Sinclair..
  "Expressing Trust in Distributed Systems: the Mismatch Between Tools and Reality."
  Forty-Second Annual Allerton Conference on Communication, Control, and Computing.
  September 2004.
  

• A. Iliev, S.W. Smith.
  "Private Information Storage with Logarithmic-space Secure Hardware."
  Information Security Management, Education, and Privacy.
  Kluwer. 201--216. 2004. (Proceedings of i-NetSec 04: 3rd Working Conference on Privacy and Anonymity in Networked and Distributed Systems.)
  

• Y. Ali, S.W. Smith.
  "Flexible and Scalable Public Key Security for SSH."
  Public Key Infrastructure: EuroPKI 2004.
  Springer-Verlag LNCS 3093. 43--56. June 2004.
  

• G. Vanrenen, S.W. Smith.
  "Distributing Security-Mediated PKI."
  Public Key Infrastructure: EuroPKI 2004.
  Springer-Verlag LNCS 3093. 218--231. June 2004.
  

• N. Goffee, S.H. Kim, S.W. Smith, P. Taylor, M. Zhao, J. Marchesini.
  "Greenpass: Decentralized, PKI-based Authorization for Wireless LANs."
  3rd Annual PKI Research and Development Workshop Proceedings.
  NIST/NIH/Internet2. NISTIR 7122. 26--41, 2004.
  

• J. Marchesini, S.W. Smith, M. Zhao.
  "Keyjacking: Risks of the Current Client-side Infrastructure."
  2nd Annual PKI Research Workshop Prooceedings.
  Internet2/NIST/NIH. April 2003.
  

• A. Iliev, S.W. Smith.
  "Privacy-Enhanced Credential Services."
  2nd Annual PKI Research Workshop Proceedings.
  NIST/NIH/Internet2. April 2003
  

• J. Marchesini, S.W. Smith.
  "Virtual Hierarchies: An Architecture for Building and Maintaining Efficient and Resilient Trust Chains."
  Proceedings of the 7th Nordic Workshop on Secure IT Systems---NORDSEC 2002.
  Karlstad University Studies. November 2002.
  

• S.W. Smith.
  "Outbound Authentication for Programmable Secure Coprocessors."
  Computer Security---ESORICS 2002.
  Springer-Verlag LNCS 2502. Pp. 72--89. October 2002.
  

• K. Kain, S.W. Smith, R. Asokan.
  "Digital Signatures and Electronic Documents: A Cautionary Tale."
  Advanced Communications and Multimedia Security.
  Kluwer Academic Publishers. Pp. 293--307. September 2002.
  

• E. Ye, S.W. Smith.
  "Trusted Paths for Browsers."
  11th USENIX Security Symposium.
  August 2002.
  

• A. Iliev, S.W. Smith.
  "Prototyping an Armored Data Vault: Rights Management on Big Brother's Computer."
  Privacy-Enhancing Technology 2002.
  Springer-Verlag LNCS 2482. 144--159 April 2002.
  

• S. Jiang, S.W. Smith, K. Minami.
  "Securing Web Servers against Insider Attack."
  17th Annual Computer Security Applications Conference.
  IEEE Computer Society. 265--276. December 2001.
  

• M. Lindemann, S.W. Smith.
  "Improving DES Hardware Throughput for Short Operations."
  10th USENIX Security Symposium
  67--81. August 2001.
  

• S.W. Smith, R. Perez, S.H. Weingart, V. Austel.
  "Validating a High-Performance, Programmable Secure Coprocessor."
  22nd National Information Systems Security Conference.
  October 1999.
  

• J. Dyer, R. Perez, S.W. Smith, M. Lindemann.
  "Application Support Architecture for a High-Performance, Programmable Secure Coprocessor."
  22nd National Information Systems Security Conference.
  October 1999.
  

• S.W. Smith, V. Austel.
  "Trusting Trusted Hardware: Towards a Formal Model for Programmable Secure Coprocessors."
  3rd USENIX Workshop on Electronic Commerce.
  August 1998.
  

• S.W. Smith, E. Palmer, S.H. Weingart.
  "Using a High-Performance, Programmable Secure Coprocessor."
  2nd International Conference on Financial Cryptography.
  Springer-Verlag LNCS 1465. 73--89. February 1998.
  

• S.W. Smith, P. Pedersen.
  "Organizing Electronic Services into Security Taxonomies."
  2nd USENIX Workshop on Electronic Commerce.
  1996.
  

• H. Gobioff, S.W. Smith, J.D. Tygar, B.S. Yee.
  "Smart Cards in Hostile Environments."
  2nd USENIX Workshop on Electronic Commerce.
  1996.
  

• S.W. Smith, D.B. Johnson.
  "Minimizing Timestamp Size for Completely Asynchronous Optimistic Recovery with Minimal Rollback"
  15th IEEE Symposium on Reliable Distributed Systems.
  October 1996.
  

• S.W. Smith, D.B. Johnson, J.D. Tygar.
  "Completely Asynchronous Optimistic Recovery with Minimal Rollbacks."
  25th IEEE International Symposium on Fault-Tolerant Computing.
  1995.
  

• S.W. Smith, J.D. Tygar.
  "Security and Privacy for Partial Order Time."
  ISCA Seventh International Conference on Parallel and Distributed Computing Systems.
  October 1994.
  

• M. Furst, J. Jackson, S. Smith.
  "Improved Learning of AC0 Functions."
  4th ACM Annual Workshop on Computational Learning Theory.
  1991.
  

Book Chapters

• S. Sinclair, S.W. Smith.
  "Preventative Directions For Insider Threat Mitigation Via Access Control.".
  In S .J. Stolfo, S.M. Bellovin, S. Hershkop, A. Keromytis, S. Sinclair, and S.W. Smith (editors).
  Insider Attack and Cyber Security: Beyond the Hacker.
  Springer-Verlag, Advances in Information Security 39. 2008. 173--202.

• S. Sinclair, S.W Smith.
  "Secure Dongles and PDAs."
  Phishing and Counter-measures: Understanding the Increasing Problem of Electronic Identity Theft (M. Jakobsson and S.A. Myers, editors).
  John Wiley. 2007. PP 407-420.
  

• S. Chari, P. Kermani, S.W. Smith, L. Tassiulas.
  "Security Issues in M-Commerce: A Usage-Based Taxonomy."
  E-Commerce Agents: Marketplace Solutions, Security Issues, and Supply and Demand.
  Springer-Verlag LNCS 2033, pp. 264-283. April 2001.
  

Other Journal and Magazine Articles

• S.W. Smith.
  "Pretending that Systems are Secure.".
  IEEE Security and Privacy.
  3 (6): 73-76. November/December 2005.
  

• S. Sinclair, S.W. Smith.
  "The TIPPI Point: Towards Trustworthy Interfaces."
  IEEE Security and Privacy.
  3 (4): 68-71. July/August 2005.
  

• S.W. Smith.
  "Turing is from Mars, Shannon is from Venus: Computer Science and Computer Engineering."
  IEEE Security and Privacy.
  3 (2): 66-69. March/April 2005.
  

• S.W. Smith.
  "Probing End-User IT Security Practices---via Homework."
  The Educause Quarterly.
  27(4): 68--71. November 2004.
  

• S.W. Smith.
  "Magic Boxes and Boots: Security in Hardware."
  IEEE Computer.
  37 (10): 106--109. October 2004.
  

• S.W. Smith, E. Spafford.
  "Grand Challenges in Information Security: Process and Output."
  IEEE Security and Privacy.
  2 (1): 69--71. January/February 2004.
  

• S.W. Smith.
  "A Funny Thing Happened on the Way to the Marketplace."
  IEEE Security and Privacy.
  1 (6), 74--78. November/December 2003.
  

• S.W. Smith.
  "Humans in the Loop: Human-Computer Interaction and Security."
  IEEE Security and Privacy.
  1 (3): 75--79. May/June 2003.
  

• S.W. Smith.
  "Fairy Dust, Secrets and the Real World."
  IEEE Security and Privacy.
  1 (1): 89--93. January/February 2003.
  

Selected Other Publications

• K.-H. Baek, S. Bratus, S.Sinclair, S.W. Smith.
  Dumbots: Unexpected Botnets through Networked Embedded Devices.
  Computer Science Technical Report TR2007-591. Dartmouth College. June 2007.
  

• A. Iliev, S.W. Smith.
  Towards Tiny Trusted Third Parties.
  Computer Science Technical Report TR2005-547. Dartmouth College. August 2005.
  

• A. Iliev, S.W. Smith.
  More Efficient Secure Function Evaluation Using Tiny Trusted Third Parties.
  Computer Science Technical Report TR2005-551. Dartmouth College. July 2005.
  

• K.-H. Baek, S.W. Smith and D. Kotz.
  A Survey of WPA and 802.11i RSN Authentication Protocols.
  Computer Science Technical Report TR2004-524. Dartmouth College. November 2004.
  

• J. Marchesini,S.W. Smith, O. Wildand Rich MacDonald.
  Experimenting with TCPA/TCG Hardware, Or: How I Learned to Stop Worrying and Love The Bear.
  Computer Science Technical Report TR2003-476. Dartmouth College. December 2003.
  

• E. Ye, Y. Yuan, S.W. Smith.
  Web Spoofing Revisited: SSL and Beyond.
  Computer Science Technical Report TR2002-417. Dartmouth College. February 2002.
  

• S.W. Smith.
  "Effective PKI Requires Effective HCI."
  ACM Workshop on Human-Computer Interaction and Security Systems.
  April 2003.
  

• S.W. Smith.
  "Expressing and Enforcing Robust Behavior for Electronic Objects."
  The Federal Networking Council/MIT Internet Privacy and Security Workshop.
  Los Alamos Unclassified Release LA-UR-96-1238. Haystack Observatory. May 1996.
  

• S.W. Smith.
  Secure Coprocessing Applications and Research Issues.
  Los Alamos Unclassified Release LA-UR-96-2805, 1996.
  

• S.W. Smith.
  A Theory of Distributed Time.
  Computer Science Technical Report CMU-CS-93-231. Carnegie Mellon University. December 1993
  

• S.W. Smith, C. Sturtivant.
  Fixed Points in Spectral Complexity.
  Computer Science Technical Report CMU-CS-92-190. Carnegie Mellon University. October 1992.
  

• S.W. Smith, J.D. Tygar.
  Signed Vector Timestamps: A Secure Protocol for Partial Order Time.
  Computer Science Technical Report CMU-CS-93-116. Carnegie Mellon University. October 1991 (version of February 1993).
  

Dissertations

• S.W. Smith.
  Secure Distributed Time for Secure Distributed Protocols
  (Ph.D. Thesis, CMU; J.D. Tygar, advisor). Computer Science Technical Report CMU-CS-94-177. Carnegie Mellon University. September 1994.
  

• S.W. Smith.
  The Apparent Link Between Typability and Computational Complexity in &lambda-Calculus
  (Senior thesis, Princeton; A. Appel, advisor). June 1987.
  

Back to Sean's Home Page

Maintained by Sean Smith, sws@cs.dartmouth.edu