All aspects of theory of computation, including crypto, Streaming Algorithms;
Routing and Network Algorithms;
Metric Embeddings;
Search and Classification Problems on High-Dimensional Data.
For more infomration see:

http://www.cs.ucla.edu/~rafail/Rafail-research-statement.pdf

Theory and algorithms for machine learning. Topics include:
- Design and analysis of algorithms for clustering data streams
- Climate Informatics: a new subfield on machine learning for climate science
- Online learning, and learning from data streams (including in semi- or unsupervised settings)
- Privacy-preserving machine learning
- Active learning

My research interests are in security and algorithmic number theory. In the field of security, my research is currently focused on wireless security (ad hoc networking, wireless standards, roaming and handover), privacy enhancing technologies (in particular fairness in privacy-preserving multi-party computations), biometrics (cryptographic key generation from biometrics based on secret sharing techniques), and security economics. In algorithmic number theory, my research is centered on lattice theory (in particular on developing new algorithms and heuristics for lattice basis reduction) and exploring the effective use of GPUs.

My current research interests lie in the intersection of three fields: database; privacy and security; XML and web. In particular, I’m interested in:

• Information security and privacy
• Privacy and security for smart grid systems
• Healthcare informatics

Developing and ensuring the reliability and security of software systems by developing innovative software architectures, languages, and tools.

My work i is broadly at the intersection of HCI and Information Retrieval/Data Mining. I generally work with extremely large datasets of text (Web, large collections of scientific texts, historical collections of books), behavior (click and search logs), and networks (social systems, Web, P2P, etc.). My work tends to have both an empirical descriptive/modeling component as well as a system-building component (leveraging what know to build better systems). Current areas of focus include:

- Temporal-informatics – providing front ends to users who have data-extraction needs for time-varying data (e.g., http://www.cond.org/zoetrope.html)

- Meme mutation – how information mutates as it moves through networks

- Scientific data evolution – mining large collections of scientific literature to detect evolution and emergence

- Collaborative analytics/visualization – building systems to support users without a great deal of statistical and visual literacy in understanding data

- Privacy – how perceptions shape behavior

My interests are in the area of computer security: how can we build secure systems, and how can we be confident that the resulting systems will be secure?

I am looking for a strong postdoc to work in one of the following areas:

Smartphone security, especially security of 3rd-party apps. The goal is to support 3rd-party smartphone apps securely and lay a solid foundation for smartphone security.

Usable security for phones. To build secure phone platforms, we need to take a user-centered perspective. I warmly welcome applications or interest from researchers in the area of HCI, usability, human factors, or usability evaluation. No prior background in security needed: you bring the usability knowledge, I’ll bring the security background.

Measuring security. Can we experimentally measure the effectiveness of various security technologies? For instance, it would be useful if we could measure the effect on security of programming languages, frameworks, and tools for developers.

Electronic voting. Can we improve the auditability, usability, or effectiveness of electronic voting technologies? Can we securely vote over the Internet?

I am also interested in general in usable security, software security, and systems security, and I welcome applicants. Also, feel free to contact me separately about paid postdoc positions, apart from the CIFellows program.

Dr. Angelos Stavrou is Assistant Professor in the Computer Science Department and a member of the Center for Secure Information Systems at George Mason University, Fairfax, Virginia. He received his M.Sc. in Electrical Engineering, M.Phil. and Ph.D. (with distinction) in Computer Science all from Columbia University. He also holds an M.Sc. in theoretical Computer Science from University of Athens, and a B.Sc. in Physics with distinction from University of Patras, Greece. His current research interests include security and reliability for distributed systems, security principles for virtualization, and anonymity with a focus on building and deploying large-scale systems. He is a member of the ACM, the IEEE, and USENIX.

Over the past few years, Dr. Stavrou’s research has focused on two aspects of security: Systems’ Security and Reliability. In the context of the first, he is working with NIST as part of the DARPA “Transformative Applications” project that involves securing Android mobile phone devices against kernel-level attacks. Furthermore, Stavrou is the GMU PI participating along with Columbia, Stanford, and Symantec in the IARPA “StoneSoup” effort. In addition, the PI is funded by DARPA under the CyberGenome project to perform analysis on the phylogenetic origins of malware. Dr. Stavrou is currently supported by a NSF Trustworthy Computing (NSF-CNS- 0915291) grant on “Scalable Malware Analysis using Lightweight Virtualization”. This effort seeks efficient methods to collect and analyze the nature of Internet malfeasance.

Contact him at email obfuscated – click to reveal.

My research is focused on engineering secure systems. In particular, I am interested in designing secure but highly efficient systems. Currently, I am exploring techniques for securing cloud computing and social networks. I am also interested in securing provenance, and trustworthy database and storage systems.

Digital integrated circuits, computer arithmetic, cryptography accelerators, computer architecture.

Harvey Mudd College is a top-rated undergraduate teaching college. Our focus is on excellence in undergraduate teaching. Research largely complements this focus by providing undergraduates a chance to work on important unsolved problems. A CI Fellow at HMC would be heavily involved in undergraduate education in areas such as digital design and computer architecture, VLSI, microprocessor-based systems, and senior Clinic projects. An opportunity exists for a 2-year visiting position from 2011-2013.

My research focuses on programming languages, with applications to software engineering and security. The general goal of my research is to help developers rapidly construct software that is reliable, maintainable, and secure. In the past, I have done research on points-to analysis; type qualifiers; foreign function interfaces; data race detection; network protocol implementations; modularity for C; and ownership systems, among others. Currently, I am working on several research directions, including studying typing scripting languages, working on program synthesis, and studying security on Android.

All of my work involves both theory and practical implementations of software tools.

In addition to the topics above, I would be happy to explore related ideas for projects.

machine learning and applied cryptography to improve privacy, security, and fraud detection in the cloud, in social networks, and in ubiquitous computing applications

The Colorado State University team (Massey/Papadopoulos) is particularly interested in researchers interested in Future Internet design and Named Data Networking/Content Centric Network/Information Centric Networking.

My research interests include computer system security and embedded systems with emphasis on applications to implantable medical devices and low-power, RFID-scale computers. We publish in venues such as IEEE Oakland, USENIX Security, ASPLOS, SIGCOMM, USENIX FAST, and MobiSys. We also publish in computing journals, medical journals, and workshops such as IEEE Trans. on Computers, ACM HotPower, and USENIX HealthSec.

A postdoc would interact with a half dozen energetic PhD students and be provided the resources to increase his or her publication pipeline. He or she would be provided training helpful to establish funding for one’s research career. The research would also involve regular interactions with collaborators at MIT, Berkeley, and the Harvard Medical School—providing the postdoc with special opportunities to interact with influential researchers from several schools.

The postdoc would also have access to about a million dollars worth of equipment for embedded systems research: differential power analysis workstations, scopes, signal generators, logic analyzers, FPGA boards, software radios, custom-built tools for measuring power, custom-built programmable RFID tags, explanted medical devices, etc.

About the Security & Privacy Research (SPQR) Lab: http://spqr.cs.umass.edu/

The SPQR Lab focuses on research topics of interest to the security and embedded systems communities, often with emphasis on matters of social relevance. Half of the graduated students are women. Student honors include best paper awards from USENIX Security and Oakland.  Half of the PhD students have NSF graduate research fellowships. The research results have been featured in the New York Times, NPR, and MIT Technology Review. The publications also prompted rethinking at the Food and Drug Administration, the Federal Reserve system, and the Federal Trade Commission.

The Department of Computer Science by the Numbers: The CS department has 42 faculty, 230 graduate students, 294 undergraduate majors, and 1,600 classroom students. Our partnerships within UMass and the Five College System provide unique collaboration opportunities (and jobs). For the 2009 fiscal year, CS research funding exceeded $15.9 million. CS researchers consumed 16,026 cups of coffee (caffeinated) and 2,601 cups of decaf followed by tea and
mocha. Various types of espresso have a cult following.

http://www.cs.umass.edu/

About the Amherst area: The Amherst/Northampton area is beautiful, cosmopolitan, liberal and cited as #1 of the top 5 college towns in the USA! The area offers diverse cultural activities, excellent restaurants and amazing natural surroundings. Home to the Five Colleges—Amherst College, Hampshire, Mt. Holyoke, Smith, and the University of Massachusetts—the area is full of educated folks. 42% have graduate degrees—nearly the highest percentage in America. Proximity to Boston and New York provides further options for collaboration and recreation.

The University of Massachusetts is an Affirmative Action/Equal Opportunity Employer. Women and members of minority groups are encouraged to apply.

My overarching research goal is to use program analysis to ensure software quality of real-world applications, even at industrial scale. My current focus is on the use of tightly coupled static and dynamic program analyses for object-oriented systems. My most recent project focused on performance diagnosis of framework-based systems. We are currently exploring applications of these analyses to problems of security and debugging. We are interested in validating behavioral properties of multi-language applications (e.g., Java and Javascript). There are interesting open research questions about the analysis paradigm being explored such as “In what sense is our dataflow solution ‘safe’?” and “How can we add precision to such analyses?”

The research in our group (PROLANGS@VT) is characterized by problem definition and algorithm design followed by extensive empirical validation. We emphasize finding techniques effective and practical for real applications. Background in program analysis is desirable. Person must be self-motivated and willing to take the initiative in research. Primary responsibility to strengthen research group and help with research supervision of grad students and undergrad students under REU support.

My research interests are in data management, cloud computing, computer games, data mining, and data privacy.

My primary research interests lie at the intersection of privacy, security, data analysis, and data management. I am very interested in the field of secure information sharing and its various applications; as also the application of secure computation technologies to business processes such as supply chain management and optimization. Our lab looks at different aspects of privacy, such as privacy in graph structured data, privacy in location based services, medical health record privacy etc. We are also interested in the use of data mining techniques to enhance security, such as in Role Engineering. As such, our lab looks at fundamental data mining problems such as boolean matrix factorization and the use of these for solving domain issues such as those in access control.

Please visit my webpage for more information.

The newest research projects include secure computing over private data in different contexts such as cloud computing, biometric matching, social and health networks, and others. Other work focuses on anonymous authentication, key management, and other privacy-related topics.

My interests span programming languages, runtime systems, and operating systems, with a particular focus on systems that transparently improve reliability, security, and performance.

* Reliability and Security

I am interested in systems that transparently improve the reliability and security of deployed systems. Examples of this work include systems that can survive bugs, or even repair themselves by fixing bugs automatically. One of these projects, DieHard, was the direct inspiration for Windows 7′s Fault-Tolerant Heap. Other related projects include Exterminator, Archipelago, and DieHarder. Ongoing work includes systems to protect applications from security attacks with low overhead, and high-performance information flow tracking (“tainting”) to track / prevent information leakage.

* Concurrency

I am interested in systems that improve the performance or correctness of concurrent applications running on multi-CPU / multicore computers. Examples of this work include Hoard, a scalable memory manager that is in use in a number of large commercial settings (e.g., British Telecom, Credit Suisse, Royal Bank of Canada, Cisco…), and Grace, a system that automatically eliminates concurrency errors like race conditions and deadlocks.

My research interests are on database indexing and data mining, database security, multimedia indexing, and probabilistic and uncertain data management.

My research interests are very broad, covering all aspects of enterprise security. I am currently particularly interested in insider threat research, the application of anomaly detection to improving security algorithms, usable security (particularly in large data centers), and improvements in identity and access management. Other related areas include visualization of data for security purposes, security as it pertains to cloud services, and data leak prevention. A postdoc will be expected to help define an appropriate research direction based on a combination of personal interest and ongoing consultation and collaboration with CA researchers and the applicable business units.

Researchers at the Lab work closely with the security business unit to ensure that the research is going in a direction that is likely to produce results that can be used to improve products and thus impact the security postures of our clients. (CA products are currently used by 98% of the Fortune 1000.)

This position provides the opportunity for a postdoc to perform research that has the possibility of improving security for a large number of government and private organizations internationally, as well as providing the opportunity to publish in journals, present at conferences, and patent innovations.

The following are my current projects:
1. Formal verification of embedded firmware (NSF funded)
2. Formal foundations of execution models for exascale computing (DARPA funded)
3. Analytics and activity-based intelligence (DARPA funded)
4. New paradigms in machine learning and complex event processing with applications to oil industry and agriculture (funded by BP and the State of Louisiana)

Recently completed projects:
1. Program synthesis and service-based systems (ONR and NRL funded)
2. Reliable middleware (NRL funded)

My research interests span a broad range of topics in computer security, network security, distributed systems, and applied cryptography. I am driven by practical problems and am interested in addressing problems from a variety of angles, from the underlying theory through design, implementation, measurement and usability. Currently active projects in my group are in the areas of cloud security; network monitoring and intrusion detection; software security; security applications of mobile devices; fault-tolerant and scalable distributed systems, and data anonymization, to name a few. Please see my web page for more information.

My research interests include
a) Automatic speech recognition: I work on all apsects of automatic speech recognition and speech-based biometrics. I am also one of the project leads for the popular CMU Sphinx open-source suite of speech tools. I also work on noise-robustness, multi-channel speech processing, and estimation of paralinguistic and contextual cues in speech. I am also interested in retrieval of spoken data and retrieval with spoken queries.

b) Computer audition: My interest lies in helping a computer understand the world through sound. This includes aspects of sound classification, source separation, and various decomposition techniques, but also higher-level inferences such as context/location determination (e.g. have we heard this guy before, and “where was this recorded and what else was happening”).

c) Multimedia analysis: This relates to (b) above, and includes image analyses and determination of audio-video association, semantic associations, and retrieval.

d) Security and privacy: Speech is probably the most popular form of communication between humans. The majority of the *private* communication in this world has also probably done through speech. Yet, in the large literature on techniques for privacy and security speech remains largely unaddressed. In this project I work on developing privacy-preserving techniques for speech processing. My group’s work includes aspects of signal processing, secure function evaluation and cryptography.

The primary focus of my research is the computer-aided verification and validation of computer systems, including concurrent and distributed systems; security, network and wireless protocols; software systems; biological systems; and safety-critical and embedded systems. Current research projects include the use of Hybrid Automata to Model and Analyze Cardiac-Cell Networks; a Process Algebra for Mobile Ad Hoc Network Protocols; Probabilistic Model Checking of Security Protocols; and Runtime Monitoring of Software Systems with Controllable Overhead.

Our lab looks at the design and analysis of security and privacy mechanisms for Internet-scale systems. Some of our major thrusts are scalable systems for anonymous communication and analysis of encrypted traffic and its impact on privacy and security, and the protection of privacy in social networks. We are also looking at security and privacy issues in emerging applications, such smart phones, smart buildings, and smart grids.

Please visit my web page for more information about our research.

My research interests include
a) Automatic speech recognition: I work on all apsects of automatic speech recognition and speech-based biometrics. I am also one of the project leads for the popular CMU Sphinx open-source suite of speech tools. I also work on noise-robustness, multi-channel speech processing, and estimation of paralinguistic and contextual cues in speech. I am also interested in retrieval of spoken data and retrieval with spoken queries.

b) Computer audition: My interest lies in helping a computer understand the world through sound. This includes aspects of sound classification, source separation, and various decomposition techniques, but also higher-level inferences such as context/location determination (e.g. have we heard this guy before, and “where was this recorded and what else was happening”).

c) Multimedia analysis: This relates to (b) above, and includes image analyses and determination of audio-video association, semantic associations, and retrieval.

d) Security and privacy: Speech is probably the most popular form of communication between humans. The majority of the *private* communication in this world has also probably done through speech. Yet, in the large literature on techniques for privacy and security speech remains largely unaddressed. In this project I work on developing privacy-preserving techniques for speech processing. My group’s work includes aspects of signal processing, secure function evaluation and cryptography.

It is now widely recognized that current commercial many-core systems are simply not good enough: most programmers can’t handle them. Therefore, alternatives must be developed. Anticipating this problem over a decade ago, the Explicit Multi-Threading (XMT) framework has been under development at the University of Maryland. XMT is a general-purpose many-core computing platform with the vision of a 1000-core chip that is easy to program but does not compromise on performance.

XMT is built to support the PRAM theory of parallel algorithm, which is second in its wealth only to the serial algorithms. Since four decades of parallel computing research provided no real alternative to the PRAM, the XMT project sought to draft specifications for the general-purpose many-core desktop of the future, by first inventing hardware and software support for the abstractions developed by PRAM algorithmics — a task deemed impossible by architecture researchers prior to the accomplishments of the XMT project.

A 2010 status report of XMT appears in U. Vishkin, Using simple abstraction for reinventing computing for parallelism, CACM, January 2011. Order of magnitude speedups, dramatic advantages on teachability from middle school to graduate courses have been demonstrated. And favorable student ranking for achieving speedups relative to standard platforms have been demonstrated.

So far, XMT has spanned applications, parallel algorithms, compilers, HW/SW and education of parallelism. Research opportunities building on this promising foundation include now also CS education, bioinformatics, machine learning and other applications, security, OS, and SW architectures.

There is so much more to the potential of many-core parallel computing than the horizons of commercial hardware offer!

My research interests include
a) Automatic speech recognition: I work on all apsects of automatic speech recognition and speech-based biometrics. I am also one of the project leads for the popular CMU Sphinx open-source suite of speech tools. I also work on noise-robustness, multi-channel speech processing, and estimation of paralinguistic and contextual cues in speech. I am also interested in retrieval of spoken data and retrieval with spoken queries.

b) Computer audition: My interest lies in helping a computer understand the world through sound. This includes aspects of sound classification, source separation, and various decomposition techniques, but also higher-level inferences such as context/location determination (e.g. have we heard this guy before, and “where was this recorded and what else was happening”).

c) Multimedia analysis: This relates to (b) above, and includes image analyses and determination of audio-video association, semantic associations, and retrieval.

d) Security and privacy: Speech is probably the most popular form of communication between humans. The majority of the *private* communication in this world has also probably done through speech. Yet, in the large literature on techniques for privacy and security speech remains largely unaddressed. In this project I work on developing privacy-preserving techniques for speech processing. My group’s work includes aspects of signal processing, secure function evaluation and cryptography.

Please see my web page cited above.

Broadly speaking, my research interests are in the fields of systems and networking. I am motivated to produce real systems that have practical value to users and researchers. Because experimentation is central to both systems and networking research, much of my energy has gone into creating top-quality experimental environments. Designing these environments raises a wide variety of research problems, and I have worked in a diverse set of areas including distributed systems, combinatorial optimization, security, networking, simulation, and embedded systems. A large fraction of my research has been done in the context of the Emulab testbed; I have been a primary architect and implementor of this system since 2000.

I am one of the leads of the Flux Research Group, a large group that includes faculty, full time research staff, postdocs, graduate students, and undergraduates.

Current projects include:

(Emulab): Improving the scale, scope, security, and realism of network testbed environments

(ProtoGENI): Project to build the next generation of network research and deployment environments, using distributed systems design principles and federated identity and authorization

(PRObE): Large testbed for systems, networking, cloud, and HPC researchers, built from a retired supercomputer

(Network Testbed Mapping Problem): Solvers for the complex constraint satisfaction and optimization problem of mapping requested topologies in network testbeds and clouds onto the available resources

(OS/GPU integration): Making use of the parallel computation offered by a GPU from the operating system

Information assurance, cybersecurity, social networking

My primary interests involves Machine Learning applied to hard problems in computer security, where adversaries are clever, and the data available is overwhelming. The range of problems spans the human aspects of security to advanced polymorhpic shellcode engines to privacy-preserving deep packet inspection.

Several new projects are currently under development dealing with software source analytics, embedded device insecurity, clean-slate design of security computer systems, and FOG computing. FOG computing (www.cs.columbial.edu/ids/FOG) the automatic generation of believable, bogus, “decoy” information placed in the cloud along with otherwise true information to hide what is true from what is bogus. This strategy provides a “fog” of misinformation to protect sensitive, real information in the cloud!

Several PostDoc positions are immediately available to conduct research on two new DARPA projects (CRASH and ADAMS programs) and an AFOSR contract dealing with security of software of unknown provenance.

This is a general invitation on behalf of the Information Systems Research Community at NJIT. We have a large variety of NSF-funded and other research projects in HCC and III (human-centered computing / information integration & informatics) topics. Details are on individual faculty pages, accessible through http://is.njit.edu/people/faculty.php – see the research keywords listed here and on the faculty pages.

The development and application of network design algorithms, network modeling and simulation methods, network control mechanisms, information assurance and infrastructure protection techniques to a variety of network technologies.

Video processing, image processing, filter banks and wavelets, image analysis and understanding, 3D – multiview signal processing, machine learning, signal processing for medical devices, 3D video processing and communications.

Iris biometrics, 3D face recognition, biometric and identical twins, face recognition in video, video analytics in autism therapy, disaster damage assessment from aerial images.

Attacks and counter measures in newly emerging cognitive radio networks;
Protocols for cognitive radio networking and performance analysis;
Psycholinguistic data mining from text data for deception detection;
Video steganography and steganalysis

Formal methods in general and software security in particular, including: ad hoc network and mobile application security; fine-grained confidentiality/integrity policies integrated with access control; program analysis, verification, and transformation; correctness by construction, refinement and refactoring; methodology for formal specification of system components.

My research lies in the areas of
- personalized systems and user modeling (with applications in information environments, expert finders, personal health maintenance, and user interfaces for disabled and elderly people)
- privacy, in the context of personalized systems, awareness systems, etc.
- the usability of security solutions
- the usability and usefulness of information visualization systems

CIFellows can work on existing projects in these areas or carry out their own research programs.

We have broad interests in the general area of programming languages and compilers, formal methods, language-based security, program verification, operating system verification, proof assistants, automated theorem proving, and software engineering. Members of our research group are working on building certified OS kernels and compilers, developing new programming languages for writing certified programs, and designing new program logics for reasoning about general safety, liveness, and information flow properties.

security economics, e-crime, malware, applications of machine learning to security and networking, measuring/modeling availability, storage management and security for cloud/data center computing, embedded security, physical security, applications of social network data, troubleshooting networks, security applications of computer vision, measuring security

Cloud Computing
Energy Savings
Information Assurance
Applied Cryptography
Network Security
Trusted Hardware

Cloud Computing
Energy Savings
Information Assurance
Applied Cryptography
Network Security
Trusted Hardware

Our goal is to understand how currently-available and emerging non-volatile memories can enable new applications, improve performance, and increase efficiency. To understand the impact of these technologies, we construct prototype hardware and software systems, including one of the world’s first phase-change memory storage arrays.

We are particularly interested in the interaction between storage system hardware and software, and we have shown careful engineering in both areas is essential to fully utilize the raw performance that these technologies can provide. For instance, we have shown that implementing some components of the file system in hardware can dramatically increase throughput, reduce latency, and save power.

We take an interdisciplinary approach to improving application level performance. For instance, upcoming projects include implementing specialized file system, database, and application components to fully exploit the performance that our prototype systems can deliver and to understand how these software systems must change in light of fast non-volatile memories. We are working closely with experts in each of these fields at UCSD and at other universities.

I am currently interested in distributed algorithms deployed on a complex network of coupled processors. Other interests include using parallel architectures such as GPU to speed up image processing operations.

Computer security and privacy, with a special interest toward emerging technologies, mobile devices, and human values.

My research concerns the practical issues in constructing robust, secure, and efficient computer systems. I see myself as a generalist — I am attracted to biggest problem I can find, regardless of area. We have active early-stage projects in: peer-to-peer systems as an alternative to cloud computing; architectures to improve Internet reliability and security; and systems for automated diagnosis and repair of Internet reliability.

The past three post-docs in my group are now on the faculty at UMass, Duke and NYU-Poly.

Seeking postdoc for computer security research. Research webpage at http://security.ece.cmu.edu, professional webpage at http://www.ece.cmu.edu/~dbrumley

Active in the areas of next generation Internet architecture, Unmanned Aircraft Systems, wireless networking, network security, optical networking, traffic management and quality of service in data networks. A distinguishing factor of my research is its relevance to the Industry. Have actively participated in industry forums like RTCA, WiMAX Forum, IEEE Standards group, ATM Forum and Internet Engineering Task Force and have made over 200 contributions that ensured that my research was implemented and not just published as papers. My research has influenced the directions of Traffic Management and Testing working groups of ATM Forum. Rank among the top 50 in Citeseer’s list of Most Cited Authors in Computer Science. Google Scholar lists over 12500+ citations to my publications. Am a co-inventor of the DECbit scheme, which has been implemented in various forms in DECnet, OSI, Frame Relay, and ATM Networks, and TCP/IP networks (ECN).

I study motivations and incentives in social media. Specifically, I look at why people contribute to social media systems, and how the underlying technology can influences those motivations and the resulting behavior. I have a major NSF-funded project studying crowdfunding websites (like Kickstarter.com), trying to understand why people contribute, and how we can better design such websites so that people participate. I’m also involved in studying why people make computer security related decisions, looking in particular at their mental models of what threats exist.

In the past, I have been interested in many aspects of computer systems, especially operating systems, networking, and mobile and distributed systems. Current directions I’m looking to push forward include understanding what the mega datacenter and cloud model mean for the future of operating systems, exploring the challenges faced by increasingly high-speed local and wide area wireless technologies, and understanding how to improve the performance and robustness of distributed systems by leveraging the power of social networks.

My research lies in the intersection of AI (ML, agents, text mining, Semantic Web) and Systems (Mobile/Pervasive computing, Web, distributed systems). As recent examples, our group has developed Policy controlled BGP routers that use agent negotiation for automatic fault detection and recovery, Context aware mobile systems for surgery, Social media analytics that factor in both network features and link semantics, Systems that base information sharing decisions on context and policies, System to determine context in mobile systems that respects privacy constraints, and MANETs/CyberPhysical systems whose security/intrusion detection posture is modulated by context.

My research focuses on enhancing the security and performance of computer systems in practical situations. My work targets problems that impact millions of users or mitigates issues with emerging technologies. I build systems and, whenever appropriate, use extensive live deployments to validate their practicality in real settings. Conference and journal publications are an important aspect of impact. But in many cases much more can be done. I believe one should validate and demonstrate the applicability of the research to real world problems. This means that much of my work spans multiple fields, primarily systems and security.

I am interested in mentoring a bright and hard working post doc. My work tends to be quite broad, so the area of work can vary according to the post doc’s interests.

I am interested in many elements of computer and network security, particularly computer forensic analysis, intrusion detection, vulnerability analysis, electronic voting, smart grid security, the insider threat, security policy modeling, and empirical studies of security.

My research is in computer security. A typical theme of my work is unlocking cryptography’s potential for helping secure systems in practice. This requires understanding threat models and the behavior of systems under attack, developing security-aware system designs, and adapting cryptography, in a theoretically sound way, to meet the requirements of practical use.

My work centers on two areas:
1. Often domestic interactions involve technology and center around gender norms, which makes homes highly gendered spaces. Gender is critical not just in our interpersonal relationships but in how we interact with our environment. The objects and technologies in our homes themselves are gendered, and we respond to social norms regarding gender in our interactions with them. We have additional gender norms surrounding programming of technology devices in the work place, which in turn affect programming of these gendered technologies in the home. As we increasingly introduce programmable technologies into the home, gendered attitudes become enmeshed in how we discuss and use these technologies.

I use ethnographic approaches to create grounded theory that examine gender and domestic end-user programming for computer security, amongst other things. My work discusses how the relationship between technology and identity is negotiated, especially gendered identity and the presentation of an individual’s technical ability. Further, I explore what this negotiation process means for design and evaluation of new technologies.

2. I enjoy working with teams to engage in participatory design in the ubicomp and tangible computing space trying to take the next step beyond fieldwork to create prototypes and engage in iterative interface design. I believe there is work to be done to discuss how the UCD process for ubicomp differs from GUI design, and this needs to be documented and discussed further in the academic literature. This innovative work has led me to recognize the limited applicability of existing usability evaluation methods (UEM), which were largely developed for GUIs. Thus I have developed a strong interest in adapting existing techniques and establishing new methods for evaluating these emerging technologies.

In recent work, we have developed network coding techniques that allow us to exploit fundamental wireless properties to improve network performance. Traditionally, these properties )broadcast, interference, variable channels etc) have been considered to be hindrances, instead we show via analyses and implementation how they can be harnessed to significantly network throughput. Currently, we are working on designing new wireless systems that automatically adapt to channel and network conditions, hardware and software substrates that allow us to virtualize wireless networks, ultra low power and wideband cognitive radio systems, and systems for distributed mobile sensing.

My research focuses at the CyLab Usable Privacy and Security Laboratory focusses on usable privacy and security. My current projects fall into several overlapping areas: privacy decision making (including applications of P3P), user-controllable security and privacy (including location-sharing privacy and file access control in the home), and usable cyber trust indicators. See the CUPS website for more information.

Mobile and wireless networks, peer-to-peer systems, network security, Internet architecture, virtualization.

My research interests cover a broad range of systems topics, centering on distributed operating systems but extending into networking, programming languages, and formal systems. The common motivating theme throughout my research is to discover ways to build computing systems that “just work” in the widest possible variety of practical scenarios: to rethink and generalize traditional algorithms, system structures, and protocols so as to eliminate technical restrictions that frequently limit the utility, applicability, or scalability of these systems. Current projects include:

1. Tng: a next-generation transport protocol architecture, which decomposes traditional transport layer functions such as endpoint naming, congestion control, and application-visible semantics to improve communication flexibility, performance, and security while remaining backward-compatible with the current Internet.

2. Determinator: an experimental multiprocessor, distributed operating system that creates an environment in which anything an application computes is exactly repeatable – even if the application consists of many cooperating processes running different executables in parallel, such as a parallel make. Atop a minimal microkernel that enforces this determinism guarantee, a user-space runtime uses distributed systems techniques to emulate familiar shared-state abstractions such as Unix processes, global file systems, and shared memory multithreading.

3. Dissent: a new anonymous peer-to-peer messaging protocol for small, decentralized online groups, which offers not only provable anonymity and integrity but also provable resistance to anonymous denial-of-service attacks (e.g., anonymous spam, “jamming”, or other disruption).

My chief research focus is programmer productivity. I develop theoretical and practical techniques and tools for helping people to create, understand, and modify software systems; I perform significant experiments at scale; and I distribute tools to programmers and researchers. My research spans software engineering, programming language design, type theory, static and dynamic program analysis, testing, security, and development environments. My results often stem from cross-fertilization between traditionally separate research areas: experimental vs. theoretical, syntactic vs. semantic, static vs. dynamic, exact vs. inferred, proven vs. statistically likely. Overall, I am to make it easier — and more fun — for programmers to build robust, reliable, secure, and correct software.

I briefly mention several current research thrusts. More details are available at my webpage, http://www.cs.washington.edu/homes/mernst/.

Programming language design and type systems: My research focuses on bringing new capabilities to real languages in a backward-compatible way (which is critical for evaluation and adoption), and building implementations to assess their utility. This pragmatic approach promises to aid both today’s and tomorrow’s programmers, and makes results more likely to have practical impact. The work includes type systems, type inference, and frameworks.

Security: My research addresses three distinct practical problems: measuring unintended disclosure of private data, creating exploits for unknown security vulnerabilities, and fixing bugs that underlie zero-day exploits.

Debugging: Dynamic analysis is complementary to static analysis: although dynamic analysis is often unsound, it can also be more precise, scalable, and applicable to legacy programs. My work applies dynamic analysis, with good effect, to problems that in the past have only been addressed statically, such as type inference and refactoring. It is also useful for reproducing crashes and for reducing false positives in bug-finding tools.

Testing: A common theme in my research is exploiting impoverished test suites. Users seem willing to write small test suites or to supply a few sample executions, but they are reluctant or unable to write more comprehensive or more focused test suites. My research automates these and other testing tasks. The research spans test generation, test selection, test classification, and test execution.

I am interested in designing and implementing large-scale distributed systems that are robust and easy to write applications against. I have worked on a variety of projects including a distributed persistent object store, a secure distributed serverless file system using Byzantine fault tolerance, diagnostics in wireless networking, object-relational mapping framework, and a distributed auto-partitioning lease manager for datacenter servers – the last two pieces of work shipped as part of commercial products/large-scale online services. I am currently working on another highly-scalable distributed system that can make certain aspects of Web programs much more efficient and easier to program.

My research spans the following broad topics in the field of computer systems:

•Computer Architecture and Compilers – I am interested in a wide range of aspects involving the intersection of architecture and compilers. My specific focus is on performance, power consumption, and reliability issues for embedded and multi-core processors.
•Reconfigurable Computing – I look into uses of reconfigurable computing as a general enabling technology. Specifically, I focus on the acceleration of various diverse application domains such as cryptography, image and video processing, and data mining, as well as the use of multi-FPGA platforms for fast system prototyping.
•Security – I study the use of automation to address various aspects of security and trust. Past projects in this area include the design and analysis of compiler and architectural approaches to improve software security, as well as an investigation into design methodologies that reduce the effectiveness of side-channel attacks on hardware/software systems.

I am interested cryptography and data privacy, and their connections to diverse fields such as information theory, combinatorics, quantum mechanics and statistics. Recently, I’ve focused on a few specific topics:

* Privacy-preserving publication of statistical data
* Cryptography based on noisy secrets (”fuzzy cryptography”)
* Efficient two- and multi-party protocols for tasks such as agreement, commitment and secure function evaluation.
* Quantum cryptography, and quantum information theory

More and more computer systems are built as integral parts of many of today’s systems and devices to monitor and control their functions and operations. These embedded/networked systems often operate in environments where safety is a major concern. These computer systems must be highly dependable and timely. My teaching and research focus on building these real-time, embedded systems, and cyber-physical systems. Research topics include: scheduling, formal verification, networking, power-aware techniques, real-time security, and software engineering.

IT economics, strategy, and policy issues, including economics of network architectures (e.g., incentive-centered design, industry structure, competition and innovation policy, clean-slate design); economics of information security (e.g., rational behavior, interdependent security, insurance versus protection, risk management); peer-to-peer (p2p) incentive mechanisms and business models; information and communication technologies and development (ICTD).

My research explores hardware and software tradeoffs to improve system performance, system reliability, and system security. The use of digital integrated circuits (ICs) for mission-critical, safety, defense, and communication applications has highlighted the need for enhanced reliability and improved security. As fabrication technology advances, digital ICs will become more vulnerable to soft errors from strikes by ionized particles. However, mitigation strategies that focus only upon devices or logic gates will consume excessive amounts of area and power, and could limit performance. At the same time, there is a constant threat of hardware and software tampering through malicious activity. Inherent architectural vulnerabilities must be removed to reduce the probability of a successful attack. My current work includes: (1) hardware synthesis techniques to mitigate soft errors in the microarchitecture and (2) detection of hardware trojans in fabricated circuits.

My primary interests are in the relations between cryptographic primitives and assumptions. I also have interests in new types of attacks the present themselves due to the changing nature of ubiquitous computing, and its infrastructure. Finally, I am interested in the use of cryptography (specifically applied forms of secure multi-party computing) in security heath care records and wearable sensors.

My research interests and expertise are in how to build dependable distributed systems. I approach this problem from a systems perspective with liberal adaptation of results from the analytical side. The problems that motivate our research are why do distributed systems break when subjected to natural errors or man-made errors (malicious or operational). Knowing this, how can we build runtime mechanisms that will make it possible to prevent the errors from becoming user-visible failures. The work involves systems building, systems breaking, conducting rigorous experiments, and learning insights about real systems from these experiments. Specific applications so far have come from: grid systems, large-scale parallel applications, Voice over IP (VoIP) systems, web services, embedded wireless networks, and wireless sensor-actuator systems.

Security, privacy, applied cryptography, mobile, emerging technologies, cloud security

A CI Fellow will be part of the Cryptography Research Group at the IBM T.J.Watson Research Lab. Other group members are: Craig Gentry, Shai Halevi, Charanjit Jutla, Hugo Krawczyk and Tal Rabin. We are involved in a variety of research projects: from the theoretical foundations of cryptography to the design and implementation of cryptographic protocols. We have ongoing research projects in Homomorphich Encryption, Cloud Computing Security, Cryptographic Hash Design, Leakage-Resilient Cryptography, Key Exchange Protocols and Secure Protocols for Mobile Ad-Hoc Networks. Visit the group page at www.research.ibm.com/security for more information.

My main research focus is on Software and Systems Security. It is driven by practical problems, and emphasizes building real systems. It draws on principles and techniques from programming languages and compilers, algorithms and operating systems to address problems such as:

* Binary analysis and instrumentation for security applications
* Principled and proactive defenses against malware and untrusted code
* Source-code analysis/transformation to mitigate software vulnerabilities (memory errors, SQL injection, XSS, …)
* Attack isolation and recovery; Self-healing systems
* High-performance intrusion detection (network and host-based)

Please visit Secure Systems Laboratory (http://seclab.cs.sunysb.edu/) for a detailed description.

Programming models, languages and compilers for efficient parallel execution.

My research interests include many aspects of file systems and storage. Ongoing and recent projects have explored archival storage systems, metadata and file system search, file system reliability and security, highly scalable storage systems for HPC, and the use of new memory technologies in the storage stack. My broader interests include distributed systems issues in operating systems and security.

UC Santa Cruz is a member of the newly-formed Center for Research in Intelligent Storage (CRIS), which is an NSF and industry-funded industry-university cooperative research center (I/UCRC). This center will strengthen existing ties that the UCSC Storage Systems Research Center has with industry in Silicon Valley (45 minutes away) and elsewhere, providing strong collaboration opportunities with cutting edge researchers in industry.

public-key cryptography; design and analysis of cryptographic protocols

1. Designing efficient algorithms for networking, security, and database applications. My current focus is on efficient packet processing algorithms used on core Internet devices such as routers and IDS/IPSes.

2. Designing efficient privacy preserving protocols for practical problems. My current focus is on privacy and integrity preserving queries.

More information is on my homepage http://www.cse.msu.edu/~alexliu/

Security printing and imaging provides brand differentiation, brand protection and anti-counterfeiting through novel security algorithms, printing approaches and image analysis technologies. As stated above, these involve cross-disciplinary research in Security algorithms, Steganography, Next-generation printing, Inspection, Authentication, Image processing, Document processing, Medical imaging, Classification, Biometrics, Machine Vision, Track and Trace.

I’m currently working on secure cloud computing/storage and cryptography.

My research focuses on the secure and private management of large-scale data. A main goal of my work is to allow for the accurate analysis of data under strong privacy guarantees. Recent efforts have focused on improved mechanisms for differentially private analysis of tabular data, social networks and graph data, as well as transactional trace data.

I am also interested in techniques for improving the security of database management systems, including database forensics, enforcement of retention policies, and models for the protection of audit logs.

Applicants with knowledge of graph or network models, social network analysis, or an interest in differential privacy are particularly encouraged to apply.

My group works on modelling molecular systems that process information
through sensing, computing, and motion; our focus has been on
catalytic DNA systems, such as logic gates, circuits, and nanorobots.
We are interested in both formal and quantitative models. We
collaborate with experimentalists at UNM and other institutions. We
are also interested in programming languages (design and
implementation, molecular or not, especially of functional languages),
algebraic aspects of fluid mixing, and sensor array data analysis.

The goal of my research is to find ways to help programmers create correct, reliable, and secure software. To address these issues, I work on methods to manipulate programs and analyze their properties. Often these have taken the form of frameworks that apply to general classes of problems.

Much of my current focus is on methods to analyze machine code (a.k.a. “binaries” or “stripped executables”), but I am also interested in other challenging program-analysis problems, such as analysis of concurrent programs and programs that use linked data structures.

My research interests are in the application of formal methods to system-level design. Specifically, development of semantics and language-based techniques for representing, synthesizing and verifying complex, heterogeneous systems. Of specific interest is investigating system-level impacts of security requirements on high-assurance systems, and techniques for synthesizing such systems from specifications. My current applications include defining a coalgebraic semantics for the Rosetta specification language and using Rosetta to specify, synthesize and verify elements of high-assurance operating systems, software defined radios, and smart grid components.

Static analysis of complex software systems, with the goal of optimizing, securing and parallelizing such systems.

Right now, my group is working on a range of projects, including accelerating classical static analysis with GPUs, automatic parallelization of functional programs, deep shape analysis of object-oriented programs and software understanding tools for legacy code.

We’re also making foundational thrusts aimed at improving the speed and precision of static analyzers in general.

I’d be happy to mentor CIFellows with interests in or a near any of these topics. Please contact if interested!

My primary research area is the foundations of cryptography. Topics I am interested in include (but are not limited to) the following: cryptographic complexity, secure computation, black box reductions and separations, strong public key encryption, privacy preserving data mining, secure search, security against hardware attacks, provable security for practical systems, connections of cryptography, differential privacy and learning theory.

My research interests include cryptography, lattices, coding theory, algorithms, and computational complexity. A particular focus is on designing cryptographic schemes whose security can be based on the apparent intractability of lattice problems.

My research focuses on network and systems’ security and privacy. I am particularly interested in privacy-enhancing technologies such as anonymizing networks, security in peer-to-peer networks, security of smartphones and their sensors, and security and privacy issues in social networking applications.

My research interests are in network and computer security. In particular, finding methods to fight botnets, malware, and their effects are my primary interest. Applied cryptography and graph structures in the context of command and control infrastructures for malware networks is the subject of recent research, including protocol reverse engineering and botnet detection. The use of GPUs for the purpose of network security, such as intrusion detection or signature matching, and the privacy in online social networks (e.g. Facebook, Myspace) are also topics of interest.

My research focuses on security and privacy issues in data management. I also work on semi-structured databases, data mining, and applications of data management techniques on networks.

Research in network science. Focus areas include: (1) development of a network measurement science for communication networks and social networks with a particular emphasis on techniques for characterizing graphs from measurements, (2) development of simple network resource allocation mechanisms robust to faults and workload changes, (3) security in wireless networks, (4) modeling and understanding dynamic networks including mobile networks and social networks.

Our group works on design and implementation aspects of security in embedded systems design. We work on secure embedded hardware and software required to implement secure prototocols and cryptography. Where needed, we develop appropriate countermeasures against physical attacks. Our team’s expertise covers multiple abstraction levels, including circuits, hardware micro-architecture, firmware, and platform-specific software. We also work on methodologies, with a focus on the trade-off between system performance, system cost, and system security.

Current research topics include: compilation using many-core CPUs (including GPUs), high-ILP microarchitectures, parallel libraries for biomedical imaging, hardware/software reliability, virtualization performance, architectural features for security, and intrusion detection and taint analysis.

Theory and algorithms for machine learning. Past and ongoing topics include online learning (including in active and unsupervised settings), active learning, and privacy-preserving machine learning. We are also working on new applications of machine learning, for example, to climate science.

We are looking for postdocs in machine learning, theory, Climate Informatics, privacy/security, or related areas.

General interests are Applied Cryptography and Network Security

Some on-going projects:
- Privacy in suspicious MANETs
- Privacy of Internet naming, e.g., DNS
- Usable security in the context of device pairing, sensors, RFID
- Security in unattended WSNs
- Typo-squatting and passive phishing mitigation
- Security in DTNs
- Privacy-Preserving Information Transfer
- Robust group key management

Pseudorandom sequences play a central role in the design of many technologies: high speed stream ciphers; CDMA systems; quasi-Monte Carlo; etc. A major goal is to improve the toolkit of pseudorandom sequence generators.

Much of our focus is on private key cryptography. In both block ciphers and stream ciphers certain building blocks are used. We are interested in high speed generators of statistically random sequences and vector valued sequences.

In a stream cipher pseduorandom keystreams must be unpredictable from known prefixes. Very fast pseudorandom sequence generators with moderate size states are used, eg linear feedback shift registers (LFSRs). While LFSRs are weak cryptographically, techniques have been developed
for generating pseudorandom sequences using LFSRs as components. Much effort has been invested in analyzing the statistical randomness and
cryptographic properties of these sequences.

In 1993 Mark Goresky and I invented a new class of high speed sequence generators, feedback with carry shift registers (FCSRs). FCSRs are analyzed
by N-adic methods where LFSRs are analyzed by power series methods. FCSRs
have been used in quasi-Monte Carlo integration and in stream ciphers. They
have high resistance to algebraic attacks.

Many basic properties of FCSR/MWC sequences have been explored and
determined, while a whole zoo of related algebraic feedback shift
register (AFSR) pseudorandom sequence generators has been discovered,
whose analysis often requires sophisticated mathematical techniques.
This enterprise has vastly increased our supply of pseudorandom sequences.
Further analysis of FCSRs and generalizations and design of generators based
on them are focuses of this proposal.

In a block cipher, the input typically is modified through a series of rounds.
Each round commonly consists of some simple linear mixing operations
(perhaps a permutation of the bits) plus some highly nonlinear function
applied to small blocks of input symbols. Usually the blocks are small
enough that the nonlinear functions can be implemented by table lookup
so that we need not worry about the complexity of its computation. Again,
nonlinearity properties of the (usually Boolean) functions lead to resistance
to various attacks. A second focus of this proposal is the design and analysis
of highly nonlinear functions, especially using N-adic algebra.

In this project we address new, innovative issues
concerning FCSR sequences, their generalizations, and applications.
The main research goals of the proposed project are the following.

- The development of cryptographically secure stream ciphers which
incorporate FCSR and AFSR (see below) sequences.

- The solution of the “register synthesis problem” for more general
classes of AFSRs, an essential step in understanding the
security of a large class of stream ciphers.

- The identification of new classes of AFSR sequences with good
randomness properties for use in pseudo Monte Carlo applications.

- The development of new classes of highly nonlinear functions for
use in block ciphers and stream ciphers.

- Based on the arithmetic or “with-carry” paradigm, the development
of new tools for the analysis of nonlinear functions.

- The extension of various ideas and methods in cryptography to
vector valued functions and sequence generators.

1) Sybil attacks and social networks: The state-of-art countermeasures against sybil attacks use social networks. I’m looking for someone with graph theory background for the modeling and analysis of social networks.

2) Privacy in medical database: The current HIPAA and all other policy evaluation for database doesn’t provide guarantees for the compliance. My project gives a new way of writing policies, evaluating policies, and also evaluating the policy evaluation engine. I’m looking for someone with database background for query containment and rewriting problems and beyond.

3) Policy management in cloud computing: Our project solves the question of how to find a good consortium of resource providers given the price (or what’s equivalent). In general this problem is hard to optimize and yet solvable in reasonable time. I’m looking for someone with programming experience in cloud computing or grid computing for experiments and extensions.

4) Malicious script detection: We are combining the data mining into security in the web browser. I’m looking for someone with data mining background so that we can try many different ways of mining and combining them.

I have specific research projects in the following areas: secure multi-party computation, database privacy, security protocols for ad-hoc networks, and foundations of game theory and cryptography. However, I am also broadly interested in several areas of (applied) computer and network security, as well as certain areas of theoretical computer science. Feel free to contact me to discuss specific research plans.

My research lies in the areas of Information Assurance, Applied Cryptography and Network Security. I build systems mainly, but I enjoy ellegant foundations, especially if of the very rare practical variety.

Broadly speaking, my research interests are in computer networks and their security. I am currently interested in understanding how Internet fraudsters provision cybercrime infrastructures. Toward this goal, I conduct large-scale Internet measurements involving many aspects of infrastructure provisioning, including the DNS. Analyzing and storing vast quantities of data is a natural side effect of such measurements.

My current research interests include : Network management, Configuration management, Network measurements, Network Security, Routing and Data plane interactions, Traffic analysis, Network data mining, Performance analysis and troubleshooting

Recent research papers are at : www.research.att.com/~sen