Paul C. van Oorschot

发表

Software Security—Exploits and Privilege Escalation

Paul C. van Oorschot, 2020 .

Evaluation in the absence of absolute ground truth: toward reliable evaluation methodology for scan detectors

Paul C. van Oorschot, Mansour Alsaleh, 2012, International Journal of Information Security.

Addressing the Problem of Undetected Signature Key Compromise

Paul C. van Oorschot, Mike Just, 1999, NDSS.

Science, Security and Academic Literature: Can We Learn from History?

Paul C. van Oorschot, P. V. Oorschot, 2017, MTD@CCS.

A second look at the usability of click-based graphical passwords

Robert Biddle, Paul C. van Oorschot, Sonia Chiasson, 2007, SOUPS '07.

Accurate Manipulation of Delay-based Internet Geolocation

Paul C. van Oorschot, AbdelRahman Abdou, Ashraf Matrawy, 2017, AsiaCCS.

On the Security of Iterated Message Authentication Codes

Bart Preneel, Paul C. van Oorschot, B. Preneel, 1999, IEEE Trans. Inf. Theory.

Software Security and Systematizing Knowledge

Paul C. van Oorschot, 2019, IEEE Secur. Priv..

Coding Theory And Cryptology

Alfred Menezes, Paul C. van Oorschot, 1999, Handbook of Discrete and Combinatorial Mathematics.

A White-Box DES Implementation for DRM Applications

Paul C. van Oorschot, Stanley Chow, Philip A. Eisen, 2002, Digital Rights Management Workshop.

Blockchains and Stealth Tactics for Teaching Security

Paul C. van Oorschot, P. V. Oorschot, 2020, IEEE Secur. Priv..

Weighing Down "The Unbearable Lightness of PIN Cracking"

Paul C. van Oorschot, Mohammad Mannan, 2008, Financial Cryptography.

Extending cryptographic logics of belief to key agreement protocols

Paul C. van Oorschot, P. V. Oorschot, 1993, CCS '93.

On key distribution via true broadcasting

Evangelos Kranakis, Danny Krizanc, Paul C. van Oorschot, 1994, CCS '94.

Proceedings of the 2017 New Security Paradigms Workshop

Konstantin Beznosov, Paul C. van Oorschot, Thomas A. Longstaff, 2017, NSPW.

Location verification on the Internet: Towards enforcing location-aware access policies over Internet clients

Paul C. van Oorschot, AbdelRahman Abdou, Ashraf Matrawy, 2014, 2014 IEEE Conference on Communications and Network Security.

Influencing users towards better passwords: persuasive cued click-points

Alain Forget, Robert Biddle, Paul C. van Oorschot, 2008, BCS HCI.

System security, platform security and usability

Paul C. van Oorschot, 2010, STC@CCS.

Intrusion Detection and Network-Based Attacks

Paul C. van Oorschot, 2020 .

A monitoring system for detecting repeated packets with applications to computer worms

Paul C. van Oorschot, Miguel Vargas Martin, Jean-Marc Robert, 2006, International Journal of Information Security.

Web and Browser Security

Paul C. van Oorschot, 2020 .

Secure Public Instant Messaging

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2004, PST.

Discovering Packet Structure through Lightweight Hierarchical Clustering

Paul C. van Oorschot, Ashraf Matrawy, Hajime Inoue, 2008, 2008 IEEE International Conference on Communications.

Persuasion for Stronger Passwords: Motivation and Pilot Study

Alain Forget, Robert Biddle, Paul C. van Oorschot, 2008, PERSUASIVE.

Complexity Issues for Public Key Cryptography

Ian F. Blake, Paul C. van Oorschot, Scott A. Vanstone, 1988 .

Highlights from the 2005 New Security Paradigms Workshop

Richard Ford, Mark Bush, Alex Boulatov, 2005, 21st Annual Computer Security Applications Conference (ACSAC'05).

Proceedings of the 2015 New Security Paradigms Workshop

Rainer Böhme, Paul C. van Oorschot, Mohammad Mannan, 2015, NSPW.

Passwords: If We're So Smart, Why Are We Still Using Them?

Paul C. van Oorschot, Cormac Herley, Andrew S. Patrick, 2009, Financial Cryptography.

BP: Formal Proofs, the Fine Print and Side Effects

Paul C. van Oorschot, Toby C. Murray, 2018, 2018 IEEE Cybersecurity Development (SecDev).

Cryptographic Building Blocks

Paul C. van Oorschot, 2020 .

Key Management Techniques

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

Operating System Security and Access Control

Paul C. van Oorschot, 2020 .

Quantifying the security advantage of password expiration policies

Paul C. van Oorschot, Sonia Chiasson, P. V. Oorschot, 2015, Des. Codes Cryptogr..

Parallel Collision Search with Cryptanalytic Applications

Paul C. van Oorschot, Michael J. Wiener, P. V. Oorschot, 2013, Journal of Cryptology.

An Introduction to Error Correcting Codes with Applications

Paul C. van Oorschot, Scott A. Vanstone, P. V. Oorschot, 1989 .

A Protocol for Secure Public Instant Messaging

Paul C. van Oorschot, Mohammad Mannan, 2006, Financial Cryptography.

Exploring the Usability of CAPTCHAS on Smartphones: Comparisons and Recommendations

Paul C. van Oorschot, Sonia Chiasson, Gerardo Reynaga, 2015 .

Untangling Security and Privacy

Paul C. van Oorschot, 2020, IEEE Secur. Priv..

Introduction and Fundamentals

Paul C. van Oorschot, Scott A. Vanstone, C. H. Bartholomew, 2010 .

Subgroup Refinement Algorithms for Root Finding in GF(q)

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1992, SIAM J. Comput..

On Purely Automated Attacks and Click-Based Graphical Passwords

Julie Thorpe, Amirali Salehi-Abari, Paul C. van Oorschot, 2008, 2008 Annual Computer Security Applications Conference (ACSAC).

Bibliography of Papers from Selected Cryptographic Forums

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996 .

Authentication and authenticated key exchanges

Paul C. van Oorschot, Whitfield Diffie, Michael J. Wiener, 1992, Des. Codes Cryptogr..

Detecting intra-enterprise scanning worms based on address resolution

Evangelos Kranakis, Paul C. van Oorschot, David Whyte, 2005, 21st Annual Computer Security Applications Conference (ACSAC'05).

TwoStep: An Authentication Method Combining Text and Graphical Passwords

Paul C. van Oorschot, Tao Wan, P. V. Oorschot, 2009, MCETECH.

Revisiting network scanning detection using sequential hypothesis testing

Paul C. van Oorschot, Mansour Alsaleh, P. V. Oorschot, 2012, Secur. Commun. Networks.

Exploring User Reactions to New Browser Cues for Extended Validation Certificates

Robert Biddle, Paul C. van Oorschot, Andrew S. Patrick, 2008, ESORICS.

Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism

Alain Forget, Elizabeth Stobert, Robert Biddle, 2012, IEEE Transactions on Dependable and Secure Computing.

Pretty Secure BGP, psBGP

Evangelos Kranakis, Paul C. van Oorschot, Tao Wan, 2005, NDSS.

Markets for zero-day exploits: ethics and implications

Serge Egelman, Paul C. van Oorschot, Cormac Herley, 2013, NSPW '13.

Design Choices and Security Implications in Implementing Diffie-Hellman Key Agreement

Paul C. van Oorschot, 1995, IMACC.

Public-Key Certificate Management and Use Cases

Paul C. van Oorschot, 2020 .

Security visualization tools and IPv6 addresses

Paul C. van Oorschot, David Barrera, 2009, 2009 6th International Workshop on Visualization for Cyber Security.

Hardware-assisted circumvention of self-hashing software tamper resistance

Paul C. van Oorschot, Anil Somayaji, Glenn Wurster, 2005, IEEE Transactions on Dependable and Secure Computing.

Analysis, Implications, and Challenges of an Evolving Consumer IoT Security Landscape

Paul C. van Oorschot, Christopher Bellman, P. V. Oorschot, 2019, 2019 17th International Conference on Privacy, Security and Trust (PST).

CPV: Delay-Based Location Verification for the Internet

Paul C. van Oorschot, AbdelRahman Abdou, Ashraf Matrawy, 2017, IEEE Transactions on Dependable and Secure Computing.

Proceedings of the 17th conference on Security symposium

Paul C. van Oorschot, 2008 .

Authentication Protocols and Key Establishment

Paul C. van Oorschot, 2020 .

Security analysis of the message authenticator algorithm (MAA)

Bart Preneel, Paul C. van Oorschot, Vincent Rumen, 1997, Eur. Trans. Telecommun..

Improving Implementable Meet-in-the-Middle Attacks by Orders of Magnitude

Paul C. van Oorschot, Michael J. Wiener, P. V. Oorschot, 1996, CRYPTO.

SoK: Science, Security and the Elusive Goal of Security as a Scientific Pursuit

Paul C. van Oorschot, Cormac Herley, P. V. Oorschot, 2017, 2017 IEEE Symposium on Security and Privacy (SP).

A geometric approach to root finding in GF(qm)

Paul C. van Oorschot, Scott A. Vanstone, P. V. Oorschot, 1989, IEEE Trans. Inf. Theory.

A Known Plaintext Attack on Two-Key Triple Encryption

Paul C. van Oorschot, Michael J. Wiener, P. V. Oorschot, 1991, EUROCRYPT.

MDx-MAC and Building Fast MACs from Hash Functions

Bart Preneel, Paul C. van Oorschot, B. Preneel, 1995, CRYPTO.

ERROR CORRECTION TECHNIQUES and DIGITAL AUDIO RECORDING

Paul C. van Oorschot, Scott A. Vanstone, 1989 .

Letter to the Editor

Paul C. van Oorschot, Cormac Herley, John D. McLean, 2018, IEEE Secur. Priv..

Secure Software Installation on Smartphones

Paul C. van Oorschot, David Barrera, P. V. Oorschot, 2011, IEEE Security & Privacy.

User interface design affects security: patterns in click-based graphical passwords

Alain Forget, Robert Biddle, Paul C. van Oorschot, 2009, International Journal of Information Security.

The developer is the enemy

Paul C. van Oorschot, Glenn Wurster, P. V. Oorschot, 2009, NSPW '08.

Parallel collision search with application to hash functions and discrete logarithms

Paul C. van Oorschot, Michael J. Wiener, P. V. Oorschot, 1994, CCS '94.

Localization of credential information to address increasingly inevitable data breaches

Paul C. van Oorschot, Mohammad Mannan, 2008, NSPW '08.

On instant messaging worms, analysis and countermeasures

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2005, WORM '05.

Securing Email pdf

Jeremy Clark, Daniel Zappala, Scott Ruoti, 2018, ArXiv.

Tracking Darkports for Network Defense

Evangelos Kranakis, Paul C. van Oorschot, David Whyte, 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).

Comparative Analysis and Framework Evaluating Web Single Sign-on Systems

Paul C. van Oorschot, Furkan Alaca, P. V. Oorschot, 2018, ACM Comput. Surv..

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects

Robert Biddle, Tara Whalen, Paul C. van Oorschot, 2011, IEEE Transactions on Information Forensics and Security.

Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes pdf

Paul C. van Oorschot, AbdelRahman Abdou, Furkan Alaca, 2017, IEEE Transactions on Dependable and Secure Computing.

System configuration as a privilege

Paul C. van Oorschot, Glenn Wurster, 2009 .

A methodology for empirical analysis of permission-based security models and its application to android

Paul C. van Oorschot, Hilmi Günes Kayacik, Anil Somayaji, 2010, CCS '10.

Human-Seeded Attacks and Exploiting Hot-Spots in Graphical Passwords

Julie Thorpe, Paul C. van Oorschot, 2007, USENIX Security Symposium.

White-Box Cryptography and an AES Implementation

Paul C. van Oorschot, Stanley Chow, Philip A. Eisen, 2002, Selected Areas in Cryptography.

Understanding and improving app installation security mechanisms through empirical analysis of android

Jeremy Clark, Paul C. van Oorschot, David Barrera, 2012, SPSM '12.

VideoTicket: detecting identity fraud attempts via audiovisual certificates and signatures

Andy Adler, Paul C. van Oorschot, Deholo Nali, 2008, NSPW '07.

Accurate One-Way Delay Estimation With Reduced Client Trustworthiness

Paul C. van Oorschot, AbdelRahman Abdou, Ashraf Matrawy, 2015, IEEE Communications Letters.

Heuristics for the evaluation of captchas on smartphones

Paul C. van Oorschot, Sonia Chiasson, Gerardo Reynaga, 2015, BCS HCI.

Privacy-Enhanced SharingofPersonalContentontheWeb

Paul C. van Oorschot, Mohammad Mannan, 2008 .

Hash Functions and Data Integrity

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

Session details: Network security

Paul C. van Oorschot, 2008, CCS 2008.

On Diffie-Hellman Key Agreement with Short Exponents

Paul C. van Oorschot, Michael J. Wiener, P. V. Oorschot, 1996, EUROCRYPT.

Graphical Password Authentication Using Cued Click Points

Robert Biddle, Paul C. van Oorschot, Sonia Chiasson, 2007, ESORICS.

Accommodating IPv6 Addresses in Security Visualization Tools *

Paul C. van Oorschot, David Barrera, 2011, Inf. Vis..

The Internet of Things: Security Challenges

Sean W. Smith, Paul C. van Oorschot, P. V. Oorschot, 2019, IEEE Secur. Priv..

Taxing the Queue: Hindering Middleboxes From Unauthorized Large-Scale Traffic Relaying

Paul C. van Oorschot, AbdelRahman Abdou, Ashraf Matrawy, 2015, IEEE Communications Letters.

A control point for reducing root abuse of file-system privileges

Paul C. van Oorschot, Glenn Wurster, P. V. Oorschot, 2010, CCS '10.

On the security and usability of dynamic cognitive game CAPTCHAs

Chengcui Zhang, Niharika Sachdeva, Nitesh Saxena, 2017, J. Comput. Secur..

Network scan detection with LQS: a lightweight, quick and stateful algorithm

Paul C. van Oorschot, Mansour Alsaleh, P. V. Oorschot, 2011, ASIACCS '11.

A Protocol for Secure Public Instant Messaging (Extended Version)

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2006 .

Patents and Standards

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

Digital Objects as Passwords

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2008, HotSec.

A Discussion on Security Education in Academia

Robert K. Cunningham, Jeremy Clark, Reihaneh Safavi-Naini, 2018, CCS.

Baton: certificate agility for android's decentralized signing infrastructure

Jeremy Clark, Paul C. van Oorschot, David Barrera, 2014, WiSec '14.

Selected areas in cryptography

Evangelos Kranakis, Paul C. van Oorschot, 1997 .

Pass-thoughts: authenticating with our minds

Julie Thorpe, Paul C. van Oorschot, Anil Somayaji, 2005, NSPW '05.

Usability of anonymous web browsing: an examination of Tor interfaces and deployability

Jeremy Clark, Paul C. van Oorschot, Carlisle M. Adams, 2007, SOUPS '07.

A Research Agenda Acknowledging the Persistence of Passwords

Paul C. van Oorschot, Cormac Herley, P. V. Oorschot, 2012, IEEE Security & Privacy.

CROO: A Universal Infrastructure and Protocol to Detect Identity Fraud

Paul C. van Oorschot, Deholo Nali, P. V. Oorschot, 2008, ESORICS.

Proceedings of the 17th USENIX Security Symposium, July 28-August 1, 2008, San Jose, CA, USA

Paul C. van Oorschot, 2008, USENIX Security Symposium.

Public-Key Encryption

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

On Identity Theft and a Countermeasure based on Digital Uniqueness and Location Cross-Checking?

Paul C. van Oorschot, Stuart G. Stubblebine, 2005 .

A Usability Study and Critique of Two Password Managers

Robert Biddle, Paul C. van Oorschot, Sonia Chiasson, 2006, USENIX Security Symposium.

Security and Usability Challenges of Moving-Object CAPTCHAs: Decoding Codewords in Motion

Jan-Michael Frahm, Yi Xu, Paul C. van Oorschot, 2012, USENIX Security Symposium.

On unifying some cryptographic protocol logics

Paul F. Syverson, Paul C. van Oorschot, P. Syverson, 1994, Proceedings of 1994 IEEE Computer Society Symposium on Research in Security and Privacy.

Reducing threats from flawed security APIs: The banking PIN case

Paul C. van Oorschot, Mohammad Mannan, 2009, Comput. Secur..

Pseudorandom Bits and Sequences

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

Revisiting password rules: facilitating human management of passwords

Paul C. van Oorschot, Leah Zhang-Kennedy, Sonia Chiasson, 2016, 2016 APWG Symposium on Electronic Crime Research (eCrime).

Exploiting predictability in click-based graphical passwords

Julie Thorpe, Paul C. van Oorschot, 2011, J. Comput. Secur..

Exposure Maps: Removing Reliance on Attribution During Scan Detection

Evangelos Kranakis, Paul C. van Oorschot, David Whyte, 2006, HotSec.

SOMA: mutual approval for included content in web pages

Paul C. van Oorschot, Anil Somayaji, Terri Oda, 2008, CCS.

Key Establishment Protocols

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

Mercury: Recovering Forgotten Passwords Using Personal Devices

David Lie, Paul C. van Oorschot, Mohammad Mannan, 2011, Financial Cryptography.

Securing the Destination-Sequenced Distance Vector Routing Protocol (S-DSDV)

Evangelos Kranakis, Paul C. van Oorschot, Tao Wan, 2004, ICICS.

Computer Security and the Internet - Tools and Jewels

Paul C. van Oorschot, 2020, Information Security and Cryptography.

Baseline functionality for security and control of commodity IoT devices and domain-controlled device lifecycle management pdf

Ahmad-Reza Sadeghi, Paul C. van Oorschot, Markus Miettinen, 2018, ArXiv.

Passwords and the evolution of imperfect authentication

Frank Stajano, Joseph Bonneau, Paul C. van Oorschot, 2015, Commun. ACM.

Exploration and Field Study of a Browser-based Password Manager using Icon-based Passwords ?

Kemal Bicakci, Paul C. van Oorschot, Nart Bedin Atalay, 2011 .

Towards secure design choices for implementing graphical passwords

Julie Thorpe, Paul C. van Oorschot, P. V. Oorschot, 2004, 20th Annual Computer Security Applications Conference.

Improving text passwords through persuasion

Alain Forget, Robert Biddle, Paul C. van Oorschot, 2008, SOUPS '08.

Measuring SSL Indicators on Mobile Browsers: Extended Life, or End of the Road?

Patrick Traynor, Paul C. van Oorschot, Chaitrali Amrutkar, 2012, ISC.

Passwords for Both Mobile and Desktop Computers Appendix

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2012, Login: The Usenix Magazine.

Leveraging personal devices for stronger password authentication from untrusted computers

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2011, J. Comput. Secur..

Basic Concepts and Principles

Paul C. van Oorschot, 2020 .

Exploring usability effects of increasing security in click-based graphical passwords

Alain Forget, Elizabeth Stobert, Robert Biddle, 2010, ACSAC '10.

Secure Client and Server Geolocation over the Internet

Paul C. van Oorschot, AbdelRahman Abdou, 2018, login Usenix Mag..

What Lies Beneath? Analyzing Automated SSH Bruteforce Attacks

Paul C. van Oorschot, AbdelRahman Abdou, David Barrera, 2015, PASSWORDS.

An Administrator's Guide to Internet Password Research

Paul C. van Oorschot, Cormac Herley, Dinei A. F. Florêncio, 2014, LISA.

The Future of Authentication

Markus Jakobsson, Paul C. van Oorschot, Dirk Balfanz, 2012, IEEE Security & Privacy.

Self-Signed Executables: Restricting Replacement of Program Binaries by Malware

Paul C. van Oorschot, Glenn Wurster, 2007, HotSec.

Tapas: design, implementation, and usability evaluation of a password manager

Jeremy Clark, Paul C. van Oorschot, Sonia Chiasson, 2012, ACSAC '12.

Back to the Future: Revisiting IPv6 Privacy Extensions

Paul C. van Oorschot, David Barrera, Glenn Wurster, 2011, login Usenix Mag..

DNS-based Detection of Scanning Worms in an Enterprise Network

Evangelos Kranakis, Paul C. van Oorschot, David Whyte, 2005, NDSS.

An Empirical Evaluation of Security Indicators in Mobile Web Browsers

Patrick Traynor, Paul C. van Oorschot, Chaitrali Amrutkar, 2015, IEEE Transactions on Mobile Computing.

Modern key agreement techniques

Rainer A. Rueppel, Paul C. van Oorschot, 1994, Comput. Commun..

A survey and analysis of TLS interception mechanisms and motivations pdf

Paul C. van Oorschot, Xavier de Carné de Carnavalet, 2020, ArXiv.

System Security, Platform Security and Usability (Extended Abstract)

Paul C. van Oorschot, 2010 .

Purely Automated Attacks on PassPoints-Style Graphical Passwords

Julie Thorpe, Amirali Salehi-Abari, Paul C. van Oorschot, 2010, IEEE Transactions on Information Forensics and Security.

Privacy-enhanced sharing of personal content on the web

Paul C. van Oorschot, Mohammad Mannan, 2008, WWW.

Handbook of Applied Cryptography

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 2018 .

User Authentication—Passwords,Biometrics and Alternatives

Paul C. van Oorschot, 2020 .

A Comparison of Practical Public Key Cryptosystems Based on Integer Factorization and Discrete Logarithms

Paul C. van Oorschot, 1990, CRYPTO.

On predictive models and user-drawn graphical passwords

Julie Thorpe, Paul C. van Oorschot, P. V. Oorschot, 2008, TSEC.

Firewalls and Tunnels

Paul C. van Oorschot, 2020 .

A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation

Kemal Bicakci, Paul C. van Oorschot, 2011, NSPW '11.

Countering unauthorized code execution on commodity kernels: A survey of common interfaces allowing kernel code modification

Trent Jaeger, Paul C. van Oorschot, Glenn Wurster, 2011, Comput. Secur..

Cryptographic Information Recovery Using Key Recover

Paul C. van Oorschot, Michael Willett, Michael Smith, 2000, Comput. Secur..

CAPS: Smoothly Transitioning to a More Resilient Web PKI

Bryan Parno, Paul C. van Oorschot, Stephanos Matsumoto, 2020, ACSAC.

Analysis of BGP prefix origins during Google's May 2005 outage

Paul C. van Oorschot, Tao Wan, P. V. Oorschot, 2006, Proceedings 20th IEEE International Parallel & Distributed Processing Symposium.

Revisiting Defenses against Large-Scale Online Password Guessing Attacks

Paul C. van Oorschot, Mansour Alsaleh, Mohammad Mannan, 2012, IEEE Transactions on Dependable and Secure Computing.

Onboarding and Software Update Architecture for IoT Devices

Paul C. van Oorschot, Hemant Gupta, 2019, 2019 17th International Conference on Privacy, Security and Trust (PST).

Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android

Paul C. van Oorschot, Mohammad Mannan, 2012, login Usenix Mag..

Revisiting Software Protection

Paul C. van Oorschot, 2003, ISC.

Internet geolocation: Evasion and counterevasion

Paul C. van Oorschot, James A. Muir, 2009, CSUR.

Pushing on string

Paul C. van Oorschot, Cormac Herley, Dinei A. F. Florêncio, 2016, Commun. ACM.

Multiple password interference in text passwords and click-based graphical passwords

Alain Forget, Elizabeth Stobert, Robert Biddle, 2009, CCS.

Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2007, Financial Cryptography.

A generic attack on checksumming-based software tamper resistance

Paul C. van Oorschot, Anil Somayaji, Glenn Wurster, 2005, 2005 IEEE Symposium on Security and Privacy (S&P'05).

S-RIP: A Secure Distance Vector Routing Protocol

Evangelos Kranakis, Paul C. van Oorschot, Tao Wan, 2004, ACNS.

The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes

Frank Stajano, Joseph Bonneau, Paul C. van Oorschot, 2012, 2012 IEEE Symposium on Security and Privacy.

On the temporal authentication of digital data

Evangelos Kranakis, Paul C. van Oorschot, Mike Just, 1999 .

On the Security of Two MAC Algorithms

Bart Preneel, Paul C. van Oorschot, B. Preneel, 1996, EUROCRYPT.

Graphical passwords: Learning from the first twelve years

Robert Biddle, Paul C. van Oorschot, Sonia Chiasson, 2012, CSUR.

Special Issue: Selected Areas in Cryptography - Introduction

Evangelos Kranakis, Paul C. van Oorschot, 1997, Des. Codes Cryptogr..

Centered Discretization with Application to Graphical Passwords

Robert Biddle, Paul C. van Oorschot, Sonia Chiasson, 2008, UPSEC.

Deadbolt: locking down android disk encryption

Paul C. van Oorschot, David Barrera, Adam Skillen, 2013, SPSM '13.

Reducing Unauthorized Modification of Digital Objects

Paul C. van Oorschot, Glenn Wurster, P. V. Oorschot, 2012, IEEE Transactions on Software Engineering.

Mitigating Network Denial-of-Service Through Diversity-Based Traffic Management

Paul C. van Oorschot, Ashraf Matrawy, Anil Somayaji, 2005, ACNS.

Number-Theoretic Reference Problems

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996 .

Exploration and Field Study of a Password Manager Using Icon-Based Passwords

Kemal Bicakci, Paul C. van Oorschot, Nart Bedin Atalay, 2011, Financial Cryptography Workshops.

Device fingerprinting for augmenting web authentication: classification and analysis of methods

Paul C. van Oorschot, Furkan Alaca, P. V. Oorschot, 2016, ACSAC.

Addressing Online Dictionary Attacks with Login Histories and Humans-in-the-Loop (Extended Abstract)

Paul C. van Oorschot, Stuart G. Stubblebine, 2004, Financial Cryptography.

Message authentication by integrity with public corroboration

Paul C. van Oorschot, P. V. Oorschot, 2005, NSPW '05.

Countering Identity Theft Through Digital Uniqueness, Location Cross-Checking, and Funneling

Paul C. van Oorschot, Stuart G. Stubblebine, 2005, Financial Cryptography.

Best Practices for IoT Security: What Does That Even Mean? pdf

Paul C. van Oorschot, Christopher Bellman, P. V. Oorschot, 2020, ArXiv.

Some Computational Aspects of Root Finding in GF(qm)

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1988, ISSAC.

Browser interfaces and extended validation SSL certificates: an empirical study

Robert Biddle, Tara Whalen, Paul C. van Oorschot, 2009, CCSW '09.

On interdomain routing security and pretty secure BGP (psBGP)

Evangelos Kranakis, Paul C. van Oorschot, Tao Wan, 2007, TSEC.

Security Analysis and Related Usability of Motion-Based CAPTCHAs: Decoding Codewords in Motion

Jan-Michael Frahm, Yi Xu, Paul C. van Oorschot, 2014, IEEE Transactions on Dependable and Secure Computing.

Some Special Linear Codes

Paul C. van Oorschot, Scott A. Vanstone, 1989 .

Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks

Evangelos Kranakis, Paul C. van Oorschot, David Whyte, 2006, 2006 22nd Annual Computer Security Applications Conference (ACSAC'06).

Security and usability: the gap in real-world online banking

Paul C. van Oorschot, Mohammad Mannan, P. V. Oorschot, 2008, NSPW '07.

Three-Way Dissection of a Game-CAPTCHA: Automated Attacks, Relay Attacks, and Usability pdf

Wei-bang Chen, Chengcui Zhang, Niharika Sachdeva, 2013, ArXiv.

On splitting sets in block designs and finding roots of polynomials

Paul C. van Oorschot, Scott A. Vanstone, P. V. Oorschot, 1990, Discret. Math..

Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts

Paul C. van Oorschot, Cormac Herley, Dinei A. F. Florêncio, 2014, USENIX Security Symposium.

Server Location Verification (SLV) and Server Location Pinning: Augmenting TLS Authentication pdf

Paul C. van Oorschot, AbdelRahman Abdou, 2017, TOPS.

Identification and Entity Authentication

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

Overview of Cryptography

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1996, Handbook of Applied Cryptography.

On countering online dictionary attacks with login histories and humans-in-the-loop

Paul C. van Oorschot, Stuart G. Stubblebine, 2006, TSEC.

Graphical Dictionaries and the Memorable Space of Graphical Passwords

Julie Thorpe, Paul C. van Oorschot, P. V. Oorschot, 2004, USENIX Security Symposium.

A three-way investigation of a game-CAPTCHA: automated attacks, relay attacks and usability

Wei-bang Chen, Chengcui Zhang, Niharika Sachdeva, 2014, AsiaCCS.

Secure Routing Protocols Using Consistency Checks and S-RIP

Evangelos Kranakis, Paul C. van Oorschot, Tao Wan, 2003 .

Science of Security: Combining Theory and Measurement to Reflect the Observable

Paul C. van Oorschot, Cormac Herley, P. V. Oorschot, 2018, IEEE Security & Privacy.

Applications of combinatorial designs in computer science

Charles J. Colbourn, Paul C. van Oorschot, P. V. Oorschot, 1989, CSUR.

An Alternate Explanation of two BAN-logic "failures"

Paul C. van Oorschot, P. V. Oorschot, 1994, EUROCRYPT.

2013 IEEE Symposium on Security and Privacy SoK: SSL and HTTPS: Revisiting past challenges and evaluating certificate trust model enhancements

Jeremy Clark, Paul C. van Oorschot, Jeremy Clark, 2022 .

Computer Security and the Internet - Tools and Jewels from Malware to Bitcoin, Second Edition

Paul C. van Oorschot, 2021, Information Security and Cryptography.

Empirical Analysis and Privacy Implications in OAuth-based Single Sign-On Systems

Paul C. van Oorschot, Sonia Chiasson, Srivathsan G. Morkonda, 2021, WPES@CCS.

SoK: Password-Authenticated Key Exchange -- Theory, Practice, Standardization and Real-World Lessons

Feng Hao, Paul C. van Oorschot, F. Hao, 2022, IACR Cryptol. ePrint Arch..

Exploring Privacy Implications in OAuth Deployments pdf

Paul C. van Oorschot, Sonia Chiasson, Srivathsan G. Morkonda, 2021, ArXiv.

Coevolution of Security's Body of Knowledge and Curricula

Paul C. van Oorschot, 2021, IEEE Secur. Priv..

Toward Unseating the Unsafe C Programming Language

Paul C. van Oorschot, 2021, IEEE Secur. Priv..

Improving Security Visualization with Exposure Map Filtering

Paul C. van Oorschot, Mansour Alsaleh, David Barrera, 2008, 2008 Annual Computer Security Applications Conference (ACSAC).

Handbook of Applied Crytography.@@@The Crytographic Imagination: Secret Writing from Edgar Poe to the Internet.

Alfred Menezes, Paul C. van Oorschot, Scott A. Vanstone, 1999 .