Publications

ISE analysts have produced and shared over 100 peer-reviewed articles, books, and other publications in the top refereed journals and conferences. At ISE, we encourage our analysts to pursue intellectual objectives including participation in cutting-edge research and writing high quality, peer-reviewed work.

ISE White Papers

September 8, 2008.   Engineering Heap Overflow Exploits with JavaScript.

July 19, 2007. Security Evaluation of Apple's iPhone.

May 3, 2005. Content Protection for Optical Media. A Comparison of Self-Protecting Digital Content and AACS.

Conference Presentations

"Real World Fuzzing". Toorcon 9.

Books

Brave New Ballot . Avi Rubin, Morgan Road Books, A Division of Random House.

Firewalls and Internet Security: Repelling the Wily Hacker. William R. Cheswick, Steven M. Bellovin, and Aviel D. Rubin.

Fuzzing for Software Security: Robustness Testing for Quality Assurance and Vulnerability. Ari Takanen, Jared D. Demott, Charles Miller.

Selected Academic Publications

M. Green, S. Hohenberger. Blind Identity-Based Encryption and Simulatable Oblivious Transfer. ASIACRYPT 2007.

G. Ateniese, R. Burns, R. Curtmola, J. Herring, L. Kissner, Z. Peterson and D. Song. Provable Data Possession at Untrusted Stores. Proc. Conference on Computer and Communication Security (CCS), ACM, 2007.

S. Bono, M. Green, A. Stubblefield, A. Juels, A. Rubin, M. Szydlo. Security Analysis of a Cryptographically-Enabled RFID Device. 14th USENIX Security Symposium, August 2005.

Security through Legality. Steven Bono, Matthew Green, Avi Rubin, Adam Stubblefield. Communications of the ACM, June 2006.

A. Stubblefield, J. Ioannidis, and A. Rubin, Using the Fluhrer, Mantin, and Shamir Attack to Break WEP, Proc. ISOC Symposium on Network and Distributed System Security, San Diego, California (February, 2002).