Publications

• Books
• Edited Volumes
• Journal and Magazine Articles
• Conference Papers
• Work-in-Progress Papers
• Book Chapters
• Selected Other Publications
• Dissertations

Erdos number: 3

• Smith → Pedersen → Faber → Erdos
• Smith → Rockmore → Babai (and others) → Erdos

Books Sean W. Smith. The Internet of Risky Things: Trusting the Devices that Surround Us. O'Reilly. 2017. Sean W. Smith, John C. Marchesini. The Craft of System Security. Addison-Wesley. 2007. Chinese language version. Pearson Education Asia and Tsinghua University Press. 2009 Sean W. Smith. Trusted Computing Platforms: Design and Applications. New York: Springer. 2005. Chinese language version. Tsinghua University Press, October 2006.

Edited Volumes A. Acquisti, S.W. Smith, A.-R. Sadeghi (editors). Trust and Trustworthy Computing: Third International Conference, TRUST 2010, Proceedings. Springer-Verlag LNCS 6101. June 2010. S.J. Stolfo, S.M. Bellovin, S. Hershkop, A. Keromytis, S. Sinclair, and S.W. Smith (editors). Insider Attack and Cyber Security: Beyond the Hacker. Springer-Verlag, Advances in Information Security 39. 2008. C. Ellison. W.T. Polk, N. Hastings, S.W. Smith (editors). 2nd Annual PKI Research Workshop Proceedings. NIST Special Publication NISTIR 7085. 2004. S.W. Smith, W.T. Polk, N. Hastings (editors). 1st Annual PKI Research Workshop Proceedings. NIST Special Publication 800-62. 2003.

• S. Ali, P. Anantharaman, Z. Lucas and S. Smith.
  "What We Have Here Is Failure to Validate: Summer of LangSec."
  IEEE Security and Privacy. May/June 2021.

• S.W. Smith
  "Securing the IoT: An Ongoing Challenge."
  IEEE Computer.
  53 (6) June 2020.

• P. van Oorschot and S.W. Smith.
  "The Internet of Things: Security Challenges (Guest Editors' Introduction)."
  IEEE Security and Privacy..
  17 (5): 7-9. Sept/Oct 2019

• S.W. Smith, J.S. Erickson.
  "Never Mind Pearl Harbor--What about a Cyber Love Canal?"
  IEEE Security and Privacy.
  13 (2): 94--98. March/April 2015.

• S.W. Smith and R. Koppel.
  "Healthcare Information Technology's Relativity Problems: A Typology of How Patients' Physical Reality, Clinicians' Mental Models, and Healthcare Information Technology Differ."
  Journal of the American Medical Informatics Association.
  21: 117-131, 2014.
  (This got named a ``best paper'' twice!)

• D. Anthony et al.
  "Securing Information Technology in Healthcare."
  IEEE Security and Privacy.
  11(6): 25—33. Nov/Dec 2013.

• J. Blythe, R. Koppel, S.W. Smith.
  "Circumvention of Security: Good Users do Bad Things."
  IEEE Security and Privacy.
  11 (5): 80--83. September/October 2013.

• J. Cooley and S.W. Smith.
  "Privacy-Preserving Screen Capture: Towards Closing the Loop for Health IT Usability."
  Journal of Biomedical Informatics.
  46 (4): 721--733. August 2013.

• N. Golmie et al.
  "Guest Editorial: Smart Grid Communications."
  IEEE Journal on Selected Areas in Communications.
  31 (7): 1169--1171. July 2013.

• S.W. Smith
  "Security and Cognitive Bias: Exploring the Role of the Mind."
  IEEE Security and Privacy.
  10 (5): 75--78. September/October 2012.

• J. Reeves, A. Ramaswamy, M. Locasto, S. Bratus, S.W. Smith.
  "Intrusion Detection for Resource-Constrained Embedded Control Systems in the Power Grid."
  International Journal of Critical Infrastructure Protection.
  5 (2): 74--83. July 2012.

• S.W. Smith.
  "Room at the Bottom: Authenticated Encryption on Slow Legacy Networks."
  IEEE Security and Privacy.
  9 (4):60-63. July/August 2011.

• P. Tsang, M. Au, A. Kapadia, S.W. Smith.
  "BLAC: Revoking Repeatedly Misbehaving Anonymous Users without Relying on TTPs."
  ACM Transactions on Information and Systems Security.
  13(4):1--33. December 2010.

• S. Bratus, J. Oakley, A. Ramaswamy, S.W. Smith, and M. Locasto.
  "Katana: Towards Patching as a Runtime Part of the Compiler-Linker-Loader Toolchain."
  International Journal of Secure Software Engineering.
  1(3):1-17. 2010. "Best Paper."

• M. Pala, S.W. Smith.
  "PRQP: Finding the PKI Needles in the Internet Haystack."
  Journal of Computer Security.
  18(3). 2010.

• S.Sinclair and S.W. Smith.
  "What's Wrong with Access Control in the Real World?"
  IEEE Security and Privacy.
  8 (4): 74-77. July/August 2010.
  

• D. Anthony, S.W. Smith, T. Williamson.
  "Reputation and Reliability in Collective Goods: The Case of the Online Encyclopedia Wikipedia."
  Rationality and Society.
  21 (3): 283--306. 2009.

• M. Pala, S. Cholia, S. Rea, S.W. Smith.
  "Interoperable PKI Data Distribution in Computational Grids."
  International Journal of Grid and High Performance Computing.
  1(2): 56--73. April-June 2009.

• S. King and S.W. Smith.
  "Virtualization and Security: Back to the Future."
  IEEE Security and Privacy.
  6 (5): 15. September/October 2008.
  

• C. Masone, S.W. Smith.
  "Towards Usefully Secure Email."
  IEEE Technology and Society (Special Issue on Security and Usability)
  26 (12): 25-34. Spring 2007.
  

• M. Zhao, S.W. Smith, D. Nicol.
  "The Performance Impact of BGP Security."
  IEEE Network.
  19 (6): 42--48. November/December 2005.
  

• S.W. Smith.
  "Pretending that Systems are Secure.".
  IEEE Security and Privacy.
  3 (6): 73-76. November/December 2005.
  

• S. Sinclair, S.W. Smith.
  "The TIPPI Point: Towards Trustworthy Interfaces."
  IEEE Security and Privacy.
  3 (4): 68-71. July/August 2005.
  

• G. Vanrenen, S.W. Smith, J. Marchesini.
  "Distributing Security-Mediated PKI."
  International Journal of Information Security.
  In press; online version published July 2005. (A revised and extended version of our EuroPKI 2004 paper.)
  

• E. Ye, S.W. Smith, D. Anthony.
  "Trusted Paths for Browsers."
  ACM Transactions on Information System Security.
  8 (2): 153-186. May 2005. (A revised and extended version of Usenix Security paper.)
  

• S.W. Smith.
  "Turing is from Mars, Shannon is from Venus: Computer Science and Computer Engineering."
  IEEE Security and Privacy.
  3 (2): 66-69. March/April 2005.
  

• A. Iliev, S.W. Smith.
  "Protecting User Privacy via Trusted Computing at the Server."
  IEEE Security and Privacy.
  3 (2): 20--28. March/April 2005. (A revised and extended version of two of our conference papers.)
  

• J. Marchesini, S.W. Smith, M. Zhao.
  "Keyjacking: the Surprising Insecurity of Client-side SSL."
  Computers and Security.
  4 (2): 109-123. March 2005. (A revised and extended version of our PKI03 paper.)
  

• S.W. Smith.
  "Probing End-User IT Security Practices---via Homework."
  The Educause Quarterly.
  27(4): 68--71. November 2004.
  

• S.W. Smith.
  "Magic Boxes and Boots: Security in Hardware."
  IEEE Computer.
  37 (10): 106--109. October 2004.
  

• S.W. Smith.
  "Outbound Authentication for Programmable Secure Coprocessors."
  International Journal of Information Security.
  3(1): 28--41. October 2004. (Revised version of my ESORICS paper.)
  

• D.M. Nicol, S.W. Smith, M. Zhao.
  "Evaluation of Efficient Security for BGP Route Announcements using Parallel Simulation."
  Simulation Modelling Practice and Theory.
  12 (3-4): 187--216. July 2004. (Special issue on "Modeling and simulation of distributed systems and networks.")
  

• S.W. Smith, E. Spafford.
  "Grand Challenges in Information Security: Process and Output."
  IEEE Security and Privacy.
  2 (1): 69--71. January/February 2004.
  

• S.W. Smith.
  "A Funny Thing Happened on the Way to the Marketplace."
  IEEE Security and Privacy.
  1 (6), 74--78. November/December 2003.
  

• A. Shubina, S.W. Smith.
  "Using Caching for Browsing Anonymity."
  ACM SIGecom Exchanges.
  Volume 4.2, pp 11--20. Summer 2003.
  

• S.W. Smith.
  "Humans in the Loop: Human-Computer Interaction and Security."
  IEEE Security and Privacy.
  1 (3): 75--79. May/June 2003.
  

• S.W. Smith.
  "Fairy Dust, Secrets and the Real World."
  IEEE Security and Privacy.
  1 (1): 89--93. January/February 2003.
  

• A. Perrig, S.W. Smith, D. Song, J.D. Tygar.
  "SAM: A Flexible and Secure Auction Architecture using Trusted Hardware."
  eJETA.org: The Electronic Journal for E-Commerce Tools and Applications.
  Vol 1, Issue 1. January 2002.
  

• J. Dyer, M. Lindemann, R. Perez, R. Sailer, S.W. Smith, L. van Doorn, S. Weingart.
  "Building the IBM 4758 Secure Coprocessor."
  IEEE Computer.
  34: 57-66. October 2001.
  

• S.W. Smith, D. Safford.
  "Practical Server Privacy Using Secure Coprocessors."
  IBM Systems Journal (special issue on End-to-End Security)
  40: 683--695. 2001.
  

• S.W. Smith.
  "WebALPS: A Survey of E-Commerce Privacy and Security Applications."
  ACM SIGecom Exchanges.
  Volume 2.3, September 2001.
  

• S.W. Smith, S.H. Weingart.
  "Building a High-Performance, Programmable Secure Coprocessor."
  Computer Networks (Special Issue on Computer Network Security.)
  31: 831-860. April 1999.
  

• Sameed Ali, Sean Smith, Michael Locasto.
  "Weird Machines in Package Managers: A Case Study of Input Language Complexity and Emergent Execution in Software Systems."
  The Tenth IEEE Workshop on Language-Theoretic Security (LangSec2024), IEEE Security and Privacy Workshops (SPW).
  May 2024.
  

• J. Peter Brady, Sean Smith.
  "Parsing, Performance, and Pareto in Data Stream Security."
  The Tenth IEEE Workshop on Language-Theoretic Security (LangSec 2024), IEEE Security and Privacy Workshops (SPW).
  May 2024.
  

• Sameed Ali and Sean Smith.
  "A Survey of Parser Differential Anti-Patterns."
  The Ninth IEEE Workshop on Language-Theoretic Security (LangSec 2023), IEEE Security and Privacy Workshops (SPW).
  May 2023.
  

• Sameed Ali and Sean Smith.
  "A Secure Parser Generation Framework for IoT Protocols on Microcontrollers."
  The Eighth IEEE Workshop on Language-Theoretic Security (LangSec 2022), IEEE Security and Privacy Workshops (SPW).
  May 2022.
  

• Vijay Kothari, Prashant Anantharaman, Sean Smith, Briland Hitaj, Prashanth Mundkur, Natarajan Shankar, Letitia Li, Iavor Diatchki and William Harris.
  "Capturing the iccMAX calculatorElement: A Case Study on Format Design."
  The Eighth IEEE Workshop on Language-Theoretic Security (LangSec 2022), IEEE Security and Privacy Workshops (SPW).
  May 2022.
  

• Prashant Anantharaman, Anmol Chachra, Shikhar Sinha, Michael Millian, Bogdan Copos, Sean Smith and Michael Locasto.
  "A Communications Validity Detector for SCADA Networks."
  Critical Infrastructure Protection XV: 15th IFIP WG 11.10 International Conference ICCIP Revised Selected Papers.
  Presented March 2021; formally published Jan 2022.
  

• Z. Lucas, Joanna Liu, Prashant Anantharaman and Sean Smith.
  "Pegmatite: Parsing PEGs with Length Fields in Software and Hardware."
  The Seventh IEEE Workshop on Language-Theoretic Security (LangSec 2021).
  May 2021.

• N. Ramkumar et al.
  "Eyes on URLs: Relating Visual Behavior to Safety Decisions."
  12th ACM Symposium on Eye Tracking Research and Applications (ETRA2020).
  June 2020.

• I.R. Jenkins and S.W. Smith.
  "Distributed IoT Attestation via Blockchain."
  1st Workshop on Secure IoT, Edge and Cloud systems (SIoTEC '20)
  Proceedings of the 20th IEEE/ACM International Symposium on Cluster, Cloud, and Internet Computing
  May 2020.

• S. Ali, P. Anantharaman and S.W. Smith.
  "Armor Within: Defending against Vulnerabilities in Third-Party Libraries."
  The Sixth IEEE Workshop on Language-Theoretic Security (LangSec 2020)
  2020 IEEE Security and Privacy Workshops (SPW)
  May 2020.

• P. Mundkur, P. Anantharaman, S. Ali, L. Briesemeister, N. Shankar and S.W. Smith.
  "The Parsley Data Format Definition Language."
  The Sixth IEEE Workshop on Language-Theoretic Security (LangSec 2020)
  2020 IEEE Security and Privacy Workshops (SPW)
  May 2020.

• I.R. Jenkins, P. Anantharaman, R. Shapiro, J.P. Brady, S. Bratus and S.W. Smith.
  "Ghostbusting: Mitigating Spectre with Intraprocess Memory Isolation."
  HotSoS '20: Proceedings of the 7th Symposium on Hot Topics in the Science of Security.
  September 2020.

• P. Anantharaman, V. Kothari, J.P. Brady, I.R. Jenkins, S. Ali, M. Millian, R. Koppel, J. Blythe, S. Bratus, S.W. Smith.
  "Mismorphism: The Heart of the Weird Machine."
  Security Protocols XXVII: Twenty-seventh International Workshop on Security Protocols.
  Springer LNCS 12287. 2020.

• V. Kothari, P. Anantharaman, I.R. Jenkins, M. Millian, J.P. Brady, S. Ali, S. Bratus, J. Blythe, R. Koppel, S.W. Smith
  "Human-Computability Boundaries."
  Security Protocols XXVII: Twenty-seventh International Workshop on Security Protocols.
  Springer LNCS 12287. 2020.

• P. Anantharaman, K. Palani, S.W. Smith.
  "Scalable Identity and Key Management for Publish-Subscribe Protocols in the Internet-of-Things."
  9th International Conference on Internet of Things (IoT 2019)
  October 2019.
  

• M. Millian, P. Anantharaman, S. Bratus, S.W. Smith and M. Locasto.
  "A Roadmap for Converting an Electric Power Utility Network to Defend Against Crafted Inputs."
  Critical Infrastructure Protection XIII: 13th IFIP WG 11.10 International Conference ICCIP Revised Selected Papers.
  2019.

• J.P. Brady, S. Bratus and S.W. Smith.
  "Dynamic Repair of Mission-Critical Applications with Runtime Snap-Ins."
  Critical Infrastructure Protection XIII: 13th IFIP WG 11.10 International Conference ICCIP Revised Selected Papers.
  2019.

• P. Anantharaman, K. Palani, R. Brantley, G. Brown, S. Bratus and S.W. Smith.
  "PhasorSec: Protocol Security Filters for Wide Area Measurement Systems."
  IEEE SmartGridComm.
  October 2018.

• P. Anantharaman, J.P. Brady, P. Flathers, V. Kothari, M. Millian, W. Nisen, J. Reeves, N. Reitinger, and S.W. Smith
  "Going Dark: A Retrospective on the North American Blackout of 2038."
  New Security Paradigms Workshop.
  August 2018

• R. Koppel, J. Blythe, V. Kothari, S.W. Smith.
  "Security for the Collective Reality of the Smart Home."
  USENIX SOUPS: An Interactive Workshop on the Human aspects of Smarthome Security and Privacy (WSSP).
  August 2018.

• V. Kothari, S.W. Smith, J. Blythe, R. Koppel.
  "Data Privacy and the Elusive Goal of Empowering the User."
  ACM CHI: Moving beyond a “one-size fits all” approach: Exploring Individual Differences in Privacy.
  April 2018

• I.R. Jenkins, S. Bratus, S.W. Smith, M. Koo.
  "Reinventing the Privilege Drop: How Principled Preservation of Programmer Intent Would Prevent Security Bugs."
  ACM HotSoS.
  April 2018.

• P. Johnson, S. Bratus, S.W. Smith.
  "Protecting Against Malicious Bits On the Wire: Automatically Generating a USB Protocol Parser for a Production Kernel."
  Annual Computer Security Applications Conference (ACSAC)
  December 2017.

• R. Koppel, J. Blythe, V. Kothari, S.W. Smith.
  "Password Logbooks and what their Amazon Reviews Reveal about their Users' Motivations, Beliefs, and Behaviors."
  2nd European Workshop on Usable Security (EuroUSEC 2017).
  April 2017.

• C. Novak, J. Blythe, R. Koppel, V. Kothari, S.W. Smith.
  "Modeling Aggregate Security with User Agents that Employ Password Memorization Techniques."
  Who Are You?! Adventures in Authentication (WAY 2017); Symposium on Usable Privacy and Security.
  July 2017.

• P. Anantharaman, K. Palani, D. Nicol, S.W. Smith.
  "I am Joe's Fridge: Scalable Identity in the Internet of Things"
  IEEE International Conference on Internet of Things.
  December 2016.

• S. Bratus, M. Patterson, A. Crain, S. Hallberg, S.W. Smith.
  "Implementing a Vertically Hardened DNP3 Control Stack for Power Applications."
  ACSAC Industrial Control System Security Workshop.
  December 2016.

• R. Koppel, V. Kothari, S.W. Smith, J. Blythe.
  "Beyond Pleading With or Restricting Users to Achieve Cyber Security Goals: Approaches to Understanding and Responding to Circumvention." (Position paper)
  CRA CCC Sociotechnical Cybersecurity Workshop.
  December 2016.

• S.W. Smith, V. Kothari, J. Blythe, R. Koppel.
  "Flawed Mental Models Lead to Bad Cyber Security Decisions: Let’s Do a Better Job." (Position paper)
  CRA CCC Sociotechnical Cybersecurity Workshop.
  December 2016.

• J. Bangert, S. Bratus, R. Shapiro, J. Reeves, S.W. Smith, A. Shubina, M. Koo, M. Locasto
  "Sections Are Types, Linking Is Policy: Using the Loader Format for Expressing Programmer Intent." (White paper)
  BlackHat USA
  August 2016.
  (Extends and updates TR2013-727 below)

• R. Koppel, J. Blythe, V. Kothari, S.W. Smith.
  "Beliefs About Cybersecurity Rules and Passwords: A Comparison of Two Survey Samples of Cybersecurity Professionals Vs. Regular Users."
  Usenix SOUPS 2016 Security Fatigue Workshop.
  June 2016

• K. Palani, E. Holt, S.W. Smith.
  "Invisible and Forgotten: Zero-Day Blooms in the IoT"
  1st IEEE PerCom Workshop on Security, Privacy, and Trust in the IoT
  March 2016

• B. Korbar, J. Blythe, R. Koppel, V. Kothari, and S. Smith.
  "Validating an Agent-Based Model of Human Password Behavior"
  The AAAI-16 Workshop on Artificial Intelligence for Cyber Security (AICS).
  February 2016.

• S.W. Smith, R. Koppel, J. Blythe, V. Kothari.
  "Mismorphism: a Semiotic Model of Computer Security Circumvention"
  International Symposium on Human Aspects of Information Security and Assurance (HAISA 2015).
  July 2015. (Extended tech report here)

• J. Reeves and S.W. Smith.
  "Solving the Grid Defender's Dilemma: Tamper Protection for Distributed Cyber-Physical Systems"
  12th International Conference on Security and Cryptography.
  IEEE/ACM. June 2015. (Based in part on the ICMC paper below, because they ended up not publishing proceedings!)

• V. Kothari, J. Blythe, S.W. Smith, R. Koppel.
  "Measuring the Security Impacts of Password Policies Using Cognitive Behavioral Agent-Based Modeling."
  ACM Symposium and Bootcamp on the Science of Security (HotSoS).
  April 2015.

• S.W. Smith, R. Koppel, J. Blythe, V. Kothari.
  "Mismorphism: a Semiotic Model of Computer Security Circumvention (Poster Abstract)."
  ACM Symposium and Bootcamp on the Science of Security (HotSoS).
  April 2015.
  (Here is the long version.)

• R. Koppel, S.W. Smith, J. Blythe, V. Kothari.
  "Workarounds to Computer Access in Healthcare Organizations: You Want My Password or a Dead Patient?"
  Driving Quality in Informatics: Fulfilling the Promise.
  IOS Press, Studies In Health Technology and Informatics, Volume 208, pp 215-20, February 2015.

• J. Reeves, S.W. Smith.
  "Tamper Event Detection on Distributed Devices in Critical Infrastructure."
  3rd International Cryptographic Module Conference.
  Nov 2014. (But then they didn't publish the proceedings!)

• V. Kothari, J. Blythe, S.W. Smith, R. Koppel.
  "Agent-Based Modeling of User Circumvention of Security."
  ACySE '14: Proceedings of the 1st International Workshop on Agents and CyberSecurity.
  ACM. 2014.

• C. Qin, E. Freebairn and S.W. Smith.
  "Capability Exchange: Improving Access Control Usability in Health IT."
  2013 Usenix Workshop on Health Information Technologies.
  August 2013.

• S. Tan, R. Shapiro and S.W. Smith.
  "Electronic Prescription for Controlled Substances: A Cybersecurity Perspective."
  2013 Usenix Workshop on Health Information Technologies.
  August 2013.

• R. Shapiro, S. Bratus, and S.W. Smith
  "Weird Machines in ELF: A Spotlight on the Underappreciated Metadata."
  7th Usenix Workshop on Offensive Technologies.
  August 2013.

• J. Bangert, S. Bratus, R. Shapiro, and S.W. Smith, Dartmouth College
  "The Page-Fault Weird Machine: Lessons in Instruction-less Computation."
  7th Usenix Workshop on Offensive Technologies.
  August 2013.

• S. Bratus, T. Goodspeed, P. Johnson, S.W. Smith, R. Speers.
  "Perimeter-Crossing Buses: a New Attack Surface for Embedded Systems."
  7th Workshop on Embedded Systems Security (WESS 2012).
  October 2012.

• G. Weaver, S.W.Smith.
  "xutools: UNIX Commands for Processing Next-Generation Structured Text."
  USENIX 26th Large Installation System Administration Conference (LISA '12). December 2012.

• Y. Wang, S. Smith, A. Gettinger.
  "Access Control Hygiene and the Empathy Gap in Medical IT."
  USENIX HealthSec 2012.

• G. Weaver, S.W. Smith, R. Bobba, E. Rogers.
  "Re-Engineering Grep and Diff for NERC CIP."
  Proceedings of the Power and Energy Conference at Illinois 2012 (PECI 2012).
  IEEE Computer Society, February 2012.

• S.W. Smith.
  "Cryptographic Scalability Challenges in the Smart Grid."
  Innovative Smart Grid Technologies (ISGT 2012).
  IEEE Power Engineering Society. January 2012. (Position paper)

• T. Goodspeed, S. Bratus, R. Melgares, R. Speers, S.W.Smith.
  "Api-do: Tools for Exploring the Wireless Attack Surface in Smart Meters."
  45th Hawaii International Conference on System Sciences.
  IEEE. 2012. 2133--2140.

• J. Reeves, A. Ramaswamy, M. Locasto, S. Bratus, and S.W. Smith.
  "Lightweight Intrusion Detection for Resource-Constrained Embedded Control Systems."
  Critical Infrastructure V: Proceedings of the Fifth Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection.
  Springer, 2011. 31--46.

• R. Shapiro, S. Bratus, S.W. Smith.
  "Identifying Vulnerabilities in SCADA Systems via Fuzz-Testing."
  Critical Infrastructure V: Proceedings of the Fifth Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection.
  Springer, 2011. 57--72.

• G. Weaver, N. Foti, S. Bratus, D. Rockmore, and S.W. Smith
  "Using Hierarchical Change Mining to Manage Network Security Policy Evolution."
  Hot-ICE '11: Workshop on Hot Topics in Management of Internet, Cloud, and Enterprise Networks and Services.
  USENIX. March 2011.

• A. Iliev, S.W. Smith.
  "Small, Stupid and Scalable: Secure Computing with Faerieplay."
  The Fifth ACM Workshop on Scalable Trusted Computing (STC'10).
  October 2010. 41--52.

• K. Bailey, S.W. Smith.
  "Trusted Virtual Containers on Demand."
  The Fifth ACM Workshop on Scalable Trusted Computing (STC'10).
  October 2010. 53--72.

• A. Shubina, W. Ingersoll, S. Bratus, S.W. Smith.
  "Diversity of TPMs and their Effects on Development: A Case Study from Integrating the TPM into OpenSolaris."
  The Fifth ACM Workshop on Scalable Trusted Computing (STC'10).
  October 2010. 85--90.

• M. Pala, S. Sinclair, S.W. Smith.
  "PorKI: Portable PKI Credentials via Proxy Certificates."
  Public Key Infrastructures, Services and Applications: 7th European Workshop (EuroPKI 2011).
  Springer-Verlag LNCS 6711. 2011. 1--16.

• S. Bratus, M. Locasto, A. Ramaswamy, S.W. Smith.
  "VM-based Security Overkill: A Lament for Applied Systems Security Research."
  New Security Paradigms Workshop (NSPW 2010).
  ACM. 51--60.

• J. Cooley, S.W. Smith.
  "Dr. Jekyll or Mr. Hyde: Information Security in the Ecosystem of Healthcare."
  Position paper, USENIX Workshop on Health Security (HealthSec). August 2010.

• R. Solomakhin, P. Tsang, S.W. Smith.
  "Predictive YASIR: High Security with Lower Latency in Legacy SCADA."
  Critical Infrastructure IV: Proceedings of the Fifth Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection.
  Springer, 2010. 63--80.

• G. Weaver, S. Rea., S.W. Smith.
  "Computational Techniques for Increasing PKI Policy Comprehension by Human Analysts."
  IDtrust 2010: 9th Symposium on Identity and Trust on the Internet.
  ACM. 51--62.

• A. Ramaswamy, S. Bratus, M. Locasto, S.W. Smith.
  "Katana: A Hot Patching Framework for ELF Executables."
  Proceedings of the 4th International Workshop on Secure Software Engineering (SecSE 2010). Co-published in the International Conference on Availability, Reliability and Security. February 2010. 507 – 512

• S. Trudeau, S. Sinclair, S.W. Smith.
  "The Effects of Introspection on Creating Privacy Policy."
  WPES ’09: Proceedings of the 8th ACM Workshop on Privacy in the Electronic Society.
  1–10. November 2009

• G. Weaver, S. Rea, S.W. Smith.
  "A Computational Framework for Certificate Policy Operations."
  Public Key Infrastructure: EuroPKI 2009.
  Springer-Verlag LNCS 6391, 2010. 17--33.

• C. Masone, S.W. Smith.
  "ABUSE: PKI for Real-World Email Trust."
  Public Key Infrastructure: EuroPKI 2009.
  Springer-Verlag LNCS 6391, 2010. 146--162.

• S. Bratus, P. Johnson, M. Locasto, A. Ramaswamy, S.W. Smith.
  "The Cake is a Lie: Privilege Rings as a Policy Resource."
  Proceedings of the 2nd ACM Workshop on Virtual Machine Security.
  33–37. 2009

• S. Bratus. M. Locasto, A. Ramaswamy, and S.W. Smith.
  "Traps, Events, Emulation, and Enforcement: Managing the Yin and Yang of Virtualization-based Security".
  1st Workshop on Virtual Machine Security (VMSec).
  ACM. October 2008.

• K. Bailey, A. Kapadia, L. Vongsathorn and S.W. Smith.
  "TwoKind Authentication: Protecting Private Information in Untrustworthy Environments"
  Seventh ACM Workshop on Privacy in the Electronic Society (WPES '08)
  October 2008.
  (Extended version)

• P. Tsang, M.H. Au, A. Kapadia and S.W. Smith.
  "PEREA: Towards Practical TTP-Free Revocation in Anonymous Authentication."
  Proceedings of the 15th ACM Conference on Computer and Communication Security (CCS '08)
  October 2008.

• M. Pala and S.W. Smith.
  "PEACHES and Peers."
  Public Key Infrastructure: EuroPKI 2008.
  Springer-Verlag LNCS 5057. Pp. 223-238. 2008.

• P. Tsang and S.W. Smith.
  "YASIR: A Low-Latency, High-Integrity Security Retrofit for Legacy SCADA Systems."
  23rd International Information Security Conference (SEC 2008).
  Springer-Verlag LNCS. August 2008.

• S. Bratus, M. Locasto, A. Ramaswamy, and S.W. Smith.
  "New Directions for Hardware-assisted Trusted Computing Policies."
  Future of Trust in Computing: Proceedings of the First International Conference.
  30-37. 2009.

• P. Tsang and S.W. Smith.
  "PPAA: Peer-to-Peer Anonymous Authentication."
  6th International Conference on Applied Cryptography and Network Security (ACNS 2008).
  Springer-Verlag LNCS 5037. Pp. 55-74. June 2008.

• M. Pala, S. Cholia, S. Rea , S. W. Smith.
  "Extending PKI Interoperability in Computational Grids."
  STPG 2008: The First Workshop on Security, Trust and Privacy in Grid Environments.
  IEEE Computer Society. Pp. 645-650. May 2008.

• P. Tsang and S.W. Smith.
  "Secure Cryptographic Precomputation with Insecure Memory."
  4th Information Security Practice and Experience Conference (ISPEC 2008).
  Springer-Verlag LNCS 4991. Pp. 146-160. April 2008.

• P. Tsang and S.W. Smith.
  "Combating Spam and Denial-of-Service Attacks with Trusted Puzzle Solvers"
  4th Information Security Practice and Experience Conference (ISPEC 2008).
  Springer-Verlag LNCS 4991. Pp. 188-202. April 2008.

• S. Bratus, N. D'Cunha, E. Sparks, S.W. Smith.
  "TOCTOU, Traps, and Trusted Computing".
  Trusted Computing---Challenges and Applications (TRUST2008). (Best Paper)
  Springer-Verlag LNCS 4698. Pp. 14-32. 2008.

• S. Sinclair, S.W. Smith, S. Trudeau, M.E. Johnson, A. Portera.
  "Information Risk in Financial Institutions: Field Study and Research Roadmap."
  3rd International Workshop on Enterprise Applications and Services in the Finance Industry (FinanceCom 2007).
  Springer-Verlag Lecture Notes in Business Information Processing 4. Pp. 165-180. 2008.

• P. Tsang, S. Chow and S.W. Smith.
  "Batch Paring Delegation."
  International Workshop on Security (IWSEC2007).
  Springer-Verlag LNCS 4752. pp. 74--90.

• M. Au, A. Kapadia, P. Tsang, S.W. Smith.
  "Blacklistable Anonymous Credentials: Blocking Misbehaving Users without TTPs."
  Proceedings of the 14th ACM Conference on Computer and Communication Security (CCS '07).
  November 2007. pp 72--81.

• K.-H. Baek, S. Bratus, S. Sinclair, S.W. Smith.
  "Attacking and Defending Networked Embedded Devices."
  2nd Workshop on Embedded Systems Security (WESS 2007).
  October 2007.

• K. Bailey, L. Vongsathorn, A. Kapadia, C. Masone, S. W. Smith.
  "TwoKind Authentication: Usable Authenticators for Untrustworthy Environments (Poster Abstract)."
  Proceedings of the Third Symposium on Usable Privacy and Security (SOUPS '07).
  July 2007. 169--170.

• P. Johnson, A. Kapadia, P. Tsang, S.W. Smith.
  "Nymble: Anonymous IP-address Blocking."
  Privacy-Enhancing Technology 2007.
  Springer-Verlag LNCS 4776, 113--133.

• M. Pala and S.W. Smith.
  "AutoPKI: a PKI Resources Discovery System."
  Public Key Infrastructure: EuroPKI 2007.
  Springer-Verlag LNCS 4582, 154--169.

• N. Santos, S.W. Smith.
  "Limited Delegation for Client-Side SSL."
  6th Annual PKI Research and Development Workshop.
  NIST/NIH/Internet2. April 2007.
  

• S. Bratus, A. Ferguson, D. McIlroy, S.W. Smith.
  "Pastures: Towards Usable Security Policy Engineering."
  Proceedings of the Second International Conference on Availability, Reliability and Security (ARES 2007).
  IEEE Computer Society. 1052--1059. April 2007

• C. Masone, K.-H. Baek, S.W. Smith.
  "WSKE: Web Server Key Enabled Cookies."
  Usable Security (USEC).
  2007.
  

• A. Kapadia, P. Tsang, S.W. Smith.
  "Attribute-Based Publishing with Hidden Credentials and Hidden Policies."
  14th Annual Network and Distributed System Security Symposium (NDSS '07)
  179--192. February 2007.
  

• M. Zhao, S.W. Smith.
  "Modeling and Evaluation of Certification Path Discovery in the Emerging Global PKI."
  Public Key Infrastructure: EuroPKI 2006.
  Springer-Verlag LNCS.
  

• S. Sinclair, S.W. Smith.
  "PorKI: Making User PKI Safe on Machines of Heterogeneous Trustworthiness."
  21st Annual Computer Security Applications Conference.
  IEEE Computer Society. December 2005.
  

• M. Zhao, S.W. Smith and D. Nicol.
  "Aggregated Path Authentication for Efficient BGP Security."
  12th ACM Conference on Computer and Communications Security.
  November 2005.
  

• J. Marchesini, S.W. Smith.
  "SHEMP: Secure Hardware Enhanced MyProxy."
  Proceedings of Third Annual Conference on Privacy, Security and Trust.
  October 2005.
  

• K.-H. Baek, S.W. Smith.
  "Preventing Theft of Quality of Service on Open Platforms."
  First IEEE/CREATE-NET Workshop on Security and QoS in Communication Networks (IEEE/CREATE-NET SecQoS 2005).
  September 2005.
  

• J. Marchesini, S.W. Smith.
  "Modeling Public Key Infrastructure in the Real World."
  Public Key Infrastructure: EuroPKI 2005.
  Springer-Verlag LNCS. June 2005.
  

• M. Franklin, K. Mitcham, S.W. Smith, J. Stabiner, O. Wild.
  "CA-in-a-Box."
  Public Key Infrastructure: EuroPKI 2005.
  Springer-Verlag LNCS. 2005.
  

• M. Zhao, S.W. Smith, D. Nicol.
  "Evaluating the Performance Impact of PKI on BGP Security."
  4th Annual PKI Research and Development Workshop.
  NIST/NIH/Internet2. April 2005.
  

• J. Marchesini, S.W. Smith, O. Wild, J. Stabiner, A. Barsamian.
  "Open-Source Applications of TCPA Hardware."
  20th Annual Computer Security Applications Conference.
  IEEE Computer Society. December 2004.
  

• S. Nazareth, S.W. Smith.
  "Using SPKI/SDSI for Distributed Maintenance of Attribute Release Policies in Shibboleth."
  Proceedings of the IADIS International Conference WWW/Internet 2004.
  Volume 1. 218--226. October 2004.
  

• P. Seligman, S.W. Smith.
  "Detecting Unauthorized Use in Online Journal Archives: A Case Study."
  Proceedings of the IADIS International Conference WWW/Internet 2004.
  Volume 1. 209--217. October 2004.
  

• A. Shubina, S.W. Smith.
  "Design and Prototype of a Coercion-Resistant, Verifiable Electronic Voting System."
  Proceedings of Second Annual Conference on Privacy, Security and Trust.
  29--39. October 2004.
  

• S.W. Smith, C. Masone, S. Sinclair..
  "Expressing Trust in Distributed Systems: the Mismatch Between Tools and Reality."
  Forty-Second Annual Allerton Conference on Communication, Control, and Computing.
  September 2004.
  

• A. Iliev, S.W. Smith.
  "Private Information Storage with Logarithmic-space Secure Hardware."
  Information Security Management, Education, and Privacy.
  Kluwer. 201--216. 2004. (Proceedings of i-NetSec 04: 3rd Working Conference on Privacy and Anonymity in Networked and Distributed Systems.)
  

• Y. Ali, S.W. Smith.
  "Flexible and Scalable Public Key Security for SSH."
  Public Key Infrastructure: EuroPKI 2004.
  Springer-Verlag LNCS 3093. 43--56. June 2004.
  

• G. Vanrenen, S.W. Smith.
  "Distributing Security-Mediated PKI."
  Public Key Infrastructure: EuroPKI 2004.
  Springer-Verlag LNCS 3093. 218--231. June 2004.
  

• N. Goffee, S.H. Kim, S.W. Smith, P. Taylor, M. Zhao, J. Marchesini.
  "Greenpass: Decentralized, PKI-based Authorization for Wireless LANs."
  3rd Annual PKI Research and Development Workshop Proceedings.
  NIST/NIH/Internet2. NISTIR 7122. 26--41, 2004.
  

• J. Marchesini, S.W. Smith, M. Zhao.
  "Keyjacking: Risks of the Current Client-side Infrastructure."
  2nd Annual PKI Research Workshop Prooceedings.
  Internet2/NIST/NIH. April 2003.
  

• A. Iliev, S.W. Smith.
  "Privacy-Enhanced Credential Services."
  2nd Annual PKI Research Workshop Proceedings.
  NIST/NIH/Internet2. April 2003
  

• J. Marchesini, S.W. Smith.
  "Virtual Hierarchies: An Architecture for Building and Maintaining Efficient and Resilient Trust Chains."
  Proceedings of the 7th Nordic Workshop on Secure IT Systems---NORDSEC 2002.
  Karlstad University Studies. November 2002.
  

• S.W. Smith.
  "Outbound Authentication for Programmable Secure Coprocessors."
  Computer Security---ESORICS 2002.
  Springer-Verlag LNCS 2502. Pp. 72--89. October 2002.
  

• K. Kain, S.W. Smith, R. Asokan.
  "Digital Signatures and Electronic Documents: A Cautionary Tale."
  Advanced Communications and Multimedia Security.
  Kluwer Academic Publishers. Pp. 293--307. September 2002.
  

• E. Ye, S.W. Smith.
  "Trusted Paths for Browsers."
  11th USENIX Security Symposium.
  August 2002.
  

• A. Iliev, S.W. Smith.
  "Prototyping an Armored Data Vault: Rights Management on Big Brother's Computer."
  Privacy-Enhancing Technology 2002.
  Springer-Verlag LNCS 2482. 144--159 April 2002.
  

• S. Jiang, S.W. Smith, K. Minami.
  "Securing Web Servers against Insider Attack."
  17th Annual Computer Security Applications Conference.
  IEEE Computer Society. 265--276. December 2001.
  

• M. Lindemann, S.W. Smith.
  "Improving DES Hardware Throughput for Short Operations."
  10th USENIX Security Symposium
  67--81. August 2001.
  

• S.W. Smith, R. Perez, S.H. Weingart, V. Austel.
  "Validating a High-Performance, Programmable Secure Coprocessor."
  22nd National Information Systems Security Conference.
  October 1999.
  

• J. Dyer, R. Perez, S.W. Smith, M. Lindemann.
  "Application Support Architecture for a High-Performance, Programmable Secure Coprocessor."
  22nd National Information Systems Security Conference.
  October 1999.
  

• S.W. Smith, V. Austel.
  "Trusting Trusted Hardware: Towards a Formal Model for Programmable Secure Coprocessors."
  3rd USENIX Workshop on Electronic Commerce.
  August 1998.
  

• S.W. Smith, E. Palmer, S.H. Weingart.
  "Using a High-Performance, Programmable Secure Coprocessor."
  2nd International Conference on Financial Cryptography.
  Springer-Verlag LNCS 1465. 73--89. February 1998.
  

• S.W. Smith, P. Pedersen.
  "Organizing Electronic Services into Security Taxonomies."
  2nd USENIX Workshop on Electronic Commerce.
  1996.
  

• H. Gobioff, S.W. Smith, J.D. Tygar, B.S. Yee.
  "Smart Cards in Hostile Environments."
  2nd USENIX Workshop on Electronic Commerce.
  1996.
  

• S.W. Smith, D.B. Johnson.
  "Minimizing Timestamp Size for Completely Asynchronous Optimistic Recovery with Minimal Rollback"
  15th IEEE Symposium on Reliable Distributed Systems.
  October 1996.
  

• S.W. Smith, D.B. Johnson, J.D. Tygar.
  "Completely Asynchronous Optimistic Recovery with Minimal Rollbacks."
  25th IEEE International Symposium on Fault-Tolerant Computing.
  1995.
  

• S.W. Smith, J.D. Tygar.
  "Security and Privacy for Partial Order Time."
  ISCA Seventh International Conference on Parallel and Distributed Computing Systems.
  October 1994.
  

• M. Furst, J. Jackson, S. Smith.
  "Improved Learning of AC0 Functions."
  4th ACM Annual Workshop on Computational Learning Theory.
  1991.
  

• Ben Kallus and Sean Smith.
  "WIP: dippy gram: Grammar-Aware, Coverage-Guided Differential Fuzzing of URL Parsers."
  The Ninth IEEE Workshop on Language-Theoretic Security (LangSec 2023), IEEE Security and Privacy Workshops (SPW).
• Sameed Ali and Sean Smith.
  "WIP: A Verified Parser Generator for Microcontroller Applications."
  The Seventh IEEE Workshop on Language-Theoretic Security (LangSec 2021)
  May 2021.

• J. Peter Brady and Sean Smith.
  "WIP: Optimizing Data Mediation Placement with Pareto Analysis."
  The Seventh IEEE Workshop on Language-Theoretic Security (LangSec 2021).
  May 2021.

• P. Anantharaman and S.W. Smith.
  "WIP: On Session Languages."
  The Sixth IEEE Workshop on Language- Theoretic Security (LangSec 2020).
  May 2020

• J. Blythe, V. Kothari, S.W. Smith, R. Koppel.
  "Work in Progress: Usable Security vs. Workflow Realities."
  NDSS USEC 2018: Workshop on Usable Security.
  Feb 2018.

• P. Tsang, A. Kapadia, S.W. Smith.
  "Anonymous IP-Address Blocking in Tor with Trusted Computing." (Work in Progress)
  Second Workshop on Advances in Trusted Computing (WATC '06)
  November 2006.
  

• A. Iliev, S.W. Smith.
  "Faerieplay on Tiny Trusted Third Parties" (Work in Progress)
  Second Workshop on Advances in Trusted Computing (WATC '06)
  November 2006.
  

• Vijay H. Kothari, Prashant Anantharaman, Sean W. Smith.
  "Deconstructing security and privacy issues: The development of a logic for capturing mismorphisms."
  Cybersecurity and Cognitive Science.
  A. Moustafa, ed. Elsevier. 2022.

• P. Anantharaman et al.
  "Intent as a Secure Design Primitive."
  in Modeling and Design of Secure Internet of Things.
  Wiley/IEEE Press. August 2020.

• S.W. Smith.
  
  • "Attestation."
  • "Dynamic Root of Trust."
  • "Logic Bomb."
  • "Secure Coprocessor."
  • "Tamper Evidence."
  • "Zeroization."
  Encyclopedia of Cryptography and Security. Second edition. Springer. 2011.

• S.W. Smith.
  "Hardware Security Modules."
  in B. Rosenberg (editor).
  Handbook of Financial Cryptography and Security.
  Chapman and Hall/CRC. 2010. 257--278.

• D. Anthony, J. Kitts, C. Masone, S.W. Smith.
  "Internet Exchange and Types of Trust."
  In D. Latusek and A. Gerbasi (editors)
  Trust and Technology in a Ubiquitous Modern Environment: Theoretical and Methodological Perspectives.
  IGI Global. Forthcoming.

• S. Sinclair, S.W. Smith.
  "Preventative Directions For Insider Threat Mitigation Via Access Control.".
  In S .J. Stolfo, S.M. Bellovin, S. Hershkop, A. Keromytis, S. Sinclair, and S.W. Smith (editors).
  Insider Attack and Cyber Security: Beyond the Hacker.
  Springer-Verlag, Advances in Information Security 39. 2008. 173--202.

• S. Sinclair, S.W Smith.
  "Secure Dongles and PDAs."
  Phishing and Counter-measures: Understanding the Increasing Problem of Electronic Identity Theft (M. Jakobsson and S.A. Myers, editors).
  John Wiley. 2007. PP 407-420.
  

• S. Chari, P. Kermani, S.W. Smith, L. Tassiulas.
  "Security Issues in M-Commerce: A Usage-Based Taxonomy."
  E-Commerce Agents: Marketplace Solutions, Security Issues, and Supply and Demand.
  Springer-Verlag LNCS 2033, pp. 264-283. April 2001.
  

• Benjamin P. Kallus, Prashant Anantharaman, Michael E. Locasto, Sean W. Smith.
  The HTTP Garden: Discovering Parsing Vulnerabilities in HTTP/1.1 Implementations by Differential Fuzzing of Request Streams.
  arXiv Preprint, May 2024.

• I.R. Jenkins and S.W. Smith.
  Distributed IoT Attestation via Blockchain (Extended Version).
  Dartmouth College Computer Science Technical Report TR2020-877. March 2020.

• J. Bangert, S. Bratus, R. Shapiro, M. Locasto, J. Reeves, S.W. Smith, A. Shubina.
  ELFbac: Using the Loader Format for Intent-Level Semantics and Fine-Grained Protection.
  Computer Science Technical Report TR2013-727. Dartmouth College. June 2013.
  

• S. Sinclair, S.W. Smith.
  Access Control Realities As Observed in a Clinical Medical Setting.
  Computer Science Technical Report TR2012-714. Dartmouth College. April 2012.
  

• S. Bratus, M. Locasto, B. Otto, R. Shapiro, S. W. Smith, G. Weaver.
  Beyond SELinux: the Case for Behavior-Based Policy and Trust Languages.
  Computer Science Technical Report TR2011-701. Dartmouth College. August 2011.

• K.-H. Baek, S. Bratus, S.Sinclair, S.W. Smith.
  Dumbots: Unexpected Botnets through Networked Embedded Devices.
  Computer Science Technical Report TR2007-591. Dartmouth College. June 2007.
  

• A. Iliev, S.W. Smith.
  Towards Tiny Trusted Third Parties.
  Computer Science Technical Report TR2005-547. Dartmouth College. August 2005.
  

• A. Iliev, S.W. Smith.
  More Efficient Secure Function Evaluation Using Tiny Trusted Third Parties.
  Computer Science Technical Report TR2005-551. Dartmouth College. July 2005.
  

• K.-H. Baek, S.W. Smith and D. Kotz.
  A Survey of WPA and 802.11i RSN Authentication Protocols.
  Computer Science Technical Report TR2004-524. Dartmouth College. November 2004.
  

• J. Marchesini,S.W. Smith, O. Wild and Rich MacDonald.
  Experimenting with TCPA/TCG Hardware, Or: How I Learned to Stop Worrying and Love The Bear.
  Computer Science Technical Report TR2003-476. Dartmouth College. December 2003.
  

• E. Ye, Y. Yuan, S.W. Smith.
  Web Spoofing Revisited: SSL and Beyond.
  Computer Science Technical Report TR2002-417. Dartmouth College. February 2002.
  

• S.W. Smith.
  "Effective PKI Requires Effective HCI."
  ACM Workshop on Human-Computer Interaction and Security Systems.
  April 2003.
  

• S.W. Smith.
  "Expressing and Enforcing Robust Behavior for Electronic Objects."
  The Federal Networking Council/MIT Internet Privacy and Security Workshop.
  Los Alamos Unclassified Release LA-UR-96-1238. Haystack Observatory. May 1996.
  

• S.W. Smith.
  Secure Coprocessing Applications and Research Issues.
  Los Alamos Unclassified Release LA-UR-96-2805, 1996.
  

• S.W. Smith.
  A Theory of Distributed Time.
  Computer Science Technical Report CMU-CS-93-231. Carnegie Mellon University. December 1993
  

• S.W. Smith, C. Sturtivant.
  Fixed Points in Spectral Complexity.
  Computer Science Technical Report CMU-CS-92-190. Carnegie Mellon University. October 1992.
  

• S.W. Smith, J.D. Tygar.
  Signed Vector Timestamps: A Secure Protocol for Partial Order Time.
  Computer Science Technical Report CMU-CS-93-116. Carnegie Mellon University. October 1991 (version of February 1993).
  

• S.W. Smith.
  Secure Distributed Time for Secure Distributed Protocols
  (Ph.D. Thesis, CMU; J.D. Tygar, advisor). Computer Science Technical Report CMU-CS-94-177. Carnegie Mellon University. September 1994.
  

• S.W. Smith.
  The Apparent Link Between Typability and Computational Complexity in λ-Calculus
  (Senior thesis, Princeton; A. Appel, advisor). June 1987.
  

Back to Sean's Home Page

Maintained by Sean Smith, sws@cs.dartmouth.edu