Reading List

Disclaimers:

This list should be used only for choosing the papers to present (or a course project). We are not going to read and discuss all listed papers in class.
You can download the local copies only from a UW host. You can also download a file with all the papers.
The topics are ordered randomly; we will likely discuss them in a different order in class.

Location Sharing

On The Impact of Real-Time Feedback on Users' Behaviour in Mobile Location-Sharing Applications. Jedrzejczyk et al. SOUPS 2010. [local]
Rethinking Location Sharing: Exploring the Implications of Social-Driven vs. Purpose-Driven Location Sharing. Tang et al. UbiComp 2010. [local]
Empirical Models of Privacy in Location Sharing. Toch et al. Ubicomp 2010. [local]
I Don't Mind Being Logged, but Want to Remain in Control: A Field Study of Mobile Activity and Context Logging. Kärkkäinen et al. CHI 2010. [local]

Location Privacy

Exploring End User Preferences for Location Obfuscation, Location-Based Services, and the Value of Location. Bernheim Brush et al. UbiComp 2010. [local]
PrETP: Privacy-Preserving Electronic Toll Pricing. Balasch et al. USENIX Security 2010. [local]
SMILE: Encounter-Based Trust for Mobile Social Services. Manweiler et al. CCS 2009. [local]

Location Proofs

Mobile User Location-specific Encryption (MULE): Using Your Office as Your Password. Studer and Perrig. WiSec 2010. [local]
Dude where's that IP? Circumventing Measurement-based IP Geolocation. Gill et al. USENIX Security 2010. [local]
Ensemble: Cooperative Proximity-based Authentication. Kalamandeen et al. MobiSys 2010. [local]

Attacks

Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study. Rouf et al. USENIX Security 2010. [local]
Experimental Security Analysis of a Modern Automobile. Koscher et al. Oakland 2010. [local]
Chip and PIN is Broken. Murdoch et al. Oakland 2010. [local]
What's in a Name? Evaluating Statistical Attacks on Personal Knowledge Questions. Bonneau et al. FC 2010. [local]

Privacy-preserving Computation

SEPIA: Privacy-Preserving Aggregation of Multi-Domain Network Events and Statistics. Burkhart et al. USENIX Security 2010. [local]
P4P: Practical Large-Scale Privacy-Preserving Distributed Computation Robust against Malicious Users. Duan et al. USENIX Security 2010. [local]
SCiFI - A System for Secure Face Identification. Osadchy et al. Oakland 2010. [local]

Differential Privacy

Privacy Integrated Queries. McSherry. SIGMOD 2009. [local]
Airavat: Security and Privacy for MapReduce. Roy et al. NSDi 2010. [local]
Differentially Private Aggregation of Distributed Time-Series with Transformation and Encryption. Rastogi and Nath. SIGMOD 2010. [local]
Differentially-Private Network Trace Analysis. McSherry and Mahajanl. SIGCOMM 2010. [local]

Privacy

An Analysis of Private Browsing Modes in Modern Browsers. Aggarwal et al. USENIX Security 2010. [local]
ZKPDL: A Language-Based System for Efficient Zero-Knowledge Proofs and Electronic Cash. Meiklejohn et al. USENIX Security 2010. [local]
Privacy Diffusion on the Web: A Longitudinal Perspective. Krishnamurthy et al. WWW 2009. [local]
Adnostic: Privacy Preserving Targeted Advertising. Toubiana et al. NDSS 2010. [local]
The Wi-Fi Privacy Ticker: Improving Awareness & Control of Personal Information Exposure on Wi-Fi. Consolvo et al. UbiComp 2010. [local]
Privacy-Preserving P2P Data Sharing with OneSwarm. Isdal et al. SIGCOMM 2010. [local]

Cloud Computing

When Good Randomness Goes Bad: Virtual Machine Reset Vulnerabilities and Hedging Deployed Cryptography. Ristenpart and Yilek. NDSS 2010. [local]
HAIL: A High-Availability and Integrity Layer for Cloud Storage. Bowers et al. CCS 2009. [local]
Hey, You, Get Off My Cloud! Exploring Information Leakage in Third-Party Compute Clouds. Ristenpart et al. CCS 2009. [local]

Security for Smartphones

TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. Enck et al. OSDI 2010. [local]
Smudge Attacks on Smartphone Touch Screens. Aviv et al. WOOT 2010. [local]
Beyond Kernel-level Integrity Measurement: Enabling Remote Attestation for the Android Platform. Nauman et al. TRUST 2010. [local]

Voting Technologies

Security Analysis of India's Electronic Voting Machines. Prasad et al. CCS 2010. [local]
Can DREs Provide Long-Lasting Security? The Case of Return-Oriented Programming and the AVC Advantage. Prasad et al. EVT/WOTE 2009. [local]
Efficient User-Guided Ballot Image Verification. Cordero et al. EVT/WOTE 2010. [local]
Scantegrity II Municipal Election at Takoma Park: The First E2E Binding Governmental Election with Ballot Privacy. Carback et al. USENIX Security 2010. [local]

Security Economics

Re: CAPTCHAs - Understanding CAPTCHA-Solving Services in an Economic Context. Motoyama et al. USENIX Security 2010. [local]
On Non-Cooperative Location Privacy: A Game-Theoretic Analysis. Freudiger et al. CCS 2009. [local]
So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users. Herley. NSPW 2009. [local]
Where Do Security Policies Come From? Florêncio et al. SOUPS 2010. [local]

Security and Privacy Policies

Visual vs. Compact: A Comparison of Privacy Policy Interfaces. Lipford et al. CHI 2010. [local]
Standardizing Privacy Notices: An Online Study of the Nutrition Label Approach. Kelley et al. CHI 2010. [local]
I'm Allowing What? Disclosing the authority applications demand of users as a condition of installation. Tam et al. Microsoft Research Technical Report 2010. [local]

Online Social Networking

RT @IWantPrivacy: Widespread Violation of Privacy Settings in the Twitter Social Network. Meeder et al. W2SP 2010. [local]
unFriendly: Multi-party Privacy Risks in Social Networks . Thomas et al. PETS 2010. [local]
A Practical Attack to De-anonymize Social Network Users. Wondracek et al. Oakland 2010. [local]
Lockr: Better Privacy for Social Networks. Tootoonchian et al. CoNEXT 2009. [local]
Persona: An Online Social Network with User-Defined Privacy. Baden et al. SIGCOMM 2009. [local]
Privacy Wizards for Social Networking Sites. Fang and LeFevre. WWW 2010. [local]
Moving Beyond UnTagging: Photo Privacy in a Tagged World. Besmer and Lipford. CHI 2010. [local]