Uncategorized

Noisy Vibrational Pairing of IoT Devices
Abhishek Anand, and Nitesh Saxena
In IEEE Transactions on Dependable and Secure Computing (TDSC), Special Issue on Emerging Attacks and Solutions for Secure Hardware in the Internet of Things, 2018.
[pdf]

Home Alone: The Insider Threat of Unattended Wearables and A Defense using Audio Proximity.
Prakash Shrestha, Babins Shrestha and Nitesh Saxena
In IEEE Conference on Communications and Network Security (CNS), May/June 2018..

Extension of our “Wiretapping via Mimicry” paper from CCS 2014:
Short Voice Imitation Man-in-the-Middle Attacks on Crypto Phones: Defeating Humans and Machines
Maliheh Shirvanian, Dibya Mukhopadhyay and Nitesh Saxena
In  Journal of Computer Security (JCS), 2017.
[pdf]

Two-Factor Authentication with End-to-End Password Security.
Stanislaw Jarecki, Hugo Krawczyk, Maliheh Shirvanian and Nitesh Saxena
In International Conference on Practice and Theory of Public Key Cryptography (PKC), March 2018.
[pdf]

Keyboard Emanations in Remote Voice Calls: Password Leakage and Noise(less) Masking Defenses.
Abhishek Anand and Nitesh Saxena
In ACM Conference on Data and Application Security and Privacy (CODASPY), March 2018..
[pdf]

Congratulations to the SPIES team for “securing” a paper at the top conference in security.  A comprehensive demonstration of a hard negative result: mobile motion sensors may not pose a threat to speech privacy, unlike claimed by recent prominent work (e.g., Gyrophone).
Speechless: Analyzing the Threat to Speech Privacy from Smartphone Motion Sensors. Abhishek Anand, and Nitesh Saxena. In IEEE Symposium on Security and Privacy (IEEE S&P; Oakland), May 2018.

Great conference, acceptance rate 19.7% (48/244):
On the Pitfalls of End-to-End Encrypted Communications: A Study of Remote Key-Fingerprint Verification.
Maliheh Shirvanian, Nitesh Saxena and Jesvin James George.
In Annual Computer Security Applications Conference (ACSAC), December 2017; arXiv preprint arXiv:1707.05285, 2017/7/17.
[pdf]

A comprehensive survey paper on the nuts and bolts of the security of wearable computing. ACM Computing Surveys (CSUR) is a reputed venue publishing comprehensive, readable tutorials and survey papers that give guided tours through the literature and explain topics to those who seek to learn the basics of areas outside their specialties.

• An Offensive and Defensive Exposition of Wearable Computing
  Prakash Shrestha and Nitesh Saxena
  In ACM Computing Surveys (CSUR), 2017.
  [pdf]

Ajaya Neupane is the most recent PhD. graduate of the SPIES lab. Groundbreaking research http://spies.cs.uab.edu/neuro-security  (top-tier papers, NDSS14 best paper, NIJ/DoJ fellow). He is taking on a post-doctoral research scientist position at UC Riverside, working on UCR/CMU/PSU CyberSecurity Research Alliance project funded by ARL.
Congratulations and very best wishes for a bright future 🙂

 
 

 
The SPIES lab and collaborators have two papers accepted to ACM CCS 2017. Extremely fierce competition with only 151 papers making it to the program out of 836 submissions (an acceptance of just about 18%).

• CCCP: Closed Caption Crypto Phones to Resist MITM Attacks, Human Errors and Click-Through
  Maliheh Shirvanian and Nitesh Saxena
  ACM Conference on Computer and Communications Security (CCS), October/Novermber 2017.
  [pdf]
•  VibWrite: Towards Finger-input Authentication on Ubiquitous Surfaces via Physical Vibration.
  Jian Liu, Chen Wang, Yingying Chen and Nitesh Saxena
  In ACM Conference on Computer and Communications Security (CCS), October/Novermber 2017.
  [pdf]