Jefferson's Wheel

I was invited by the Jefferson-Madison Regional Library to give a talk on talks for their in-service day (November 11). Giving a talk about giving talks is always a somewhat daunting, meta-circular task, but I guess I’ve learned a thing or two about this over the hundreds of talks I’ve given (and apparently what I did for them last year was good enough to get invited to do this).

A summary of the talk is here: Meta Talk: How to Give a Talk So Good You’ll Be Asked to Give Talks About Nothing (including the slides I used as PPTX and PDF).

Yikan Chen presented his work on Auditing Information Leakage for Distance Metrics at the Third IEEE Conference on Privacy, Security, Risk and Trust today.

The slides are here: [PPTX] [PDF]

Here are the slides from my talk in cs6190, our seminar for new graduate students: [PPTX] [PDF]

Links from the talk:

• http://www.mightbeevil.com — secure computation with garbled circuits
• CommonContacts Android Secure Computation Demo
• Research group mailing list
• Publications

Yuchen Zhou presented Protecting Private Web Content from Embedded Scripts at ESORICS in Belgium.

His talk slides are here: [PPTX] [PDF]

Videos from all the talks at USENIX Security are now available on the conference site.

Here are the talks by UVa people:

• Peter Chapman (HotSec Workshop): Privacy-Preserving Applications on Smartphones and Q & A (extensive discussion session, including the other two talks in the session)
• Pieter Hooimeijer: Fast and Precise Sanitizer Analysis with BEK
• Adrienne Porter Felt (now at UC Berkeley): Permission Re-Delegation: Attacks and Defenses
• Michael Dietz (now at Rice University): QUIRE: Lightweight Provenance for Smart Phone Operating Systems
• Yan Huang: Faster Secure Two-Party Computation Using Garbled Circuits

I would also highly recommend Collin Jackson’s invited talk on Crossing the Chasm: Pitching Security Research to Mainstream Browser Vendors.

Yan Huang’s talk on Faster Secure Two-Party Computation Using Garbled Circuits at USENIX Security 2011 is now available: [PPTX] [PDF].

You can also download our framework and try our Android demo application.

Peter Chapman presented our paper on Privacy-Preserving Applications on Smartphones at the 6th USENIX Workshop on Hot Topics in Security today. Here are the talk slides [PDF].

The CommonContacts demonstration app is now available in the Android Market.

Project Website

Yan Huang presented Private Editing Using Untrusted Cloud Services at the Second International Workshop on Security and Privacy in Cloud Computing in Minneapolis this morning.

Here are the slides from his talk: [PPTX, PDF].
The full paper is also available: [PDF, 10 pages].

Jonathan Burket presented GuardRails at USENIX WebApps 2011. Here are his slides: [PPTX] [PDF]

See http://guardrails.cs.virginia.edu for more information and to download GuardRails.

The Special Issue of IEEE Security and Privacy Magazine that I co-edited with Sal Stolfo on The Science of Security is now available.

It includes:

• David Evans and Sal Stolfo. Guest Editor’s Introduction: The Sciecne of Security [PDF].
• Sal Stolfo, Steven Bellovin, and David Evans. Measuring Security [PDF]

as well as three selected special issue articles: Security Modeling and Analysis (by Jason Bau and John Mitchell), On Adversary Models and Compositional Security (by Anupam Datta, Jason Franklin, Deepak Garg, Limin Jia, and Dilsun Kaynar), and Provable Security in the Real World (by Jean Paul Degabriele, Kenneth G. Paterson, and Gaven J. Watson).

I also gave a presentation about A Research Agenda for Scientific Foundations of Security at the NITRD Federal Cyber-Security Research event organized at Oakland 2011. 25 May 2011, Berkeley CA. [PPTX, PDF]