I work in the Security and Privacy Research Group in Microsoft Research, Redmond.  My current research interests lie somewhere in the intersection of operating systems and web security. 

I completed my Ph.D. in 2009 at the University of Washington in the Computer Science and Engineering department.  My advisers were Steve Gribble and Hank Levy, and my dissertation work focused on understanding and defending against web-borne security threats. 

I can be reached at <alexmos [at] microsoft [dot] com>.

Publications

• Enabling Fine-Grained Permissions for Augmented Reality Applications With Recognizers
  Suman Jana, David Molnar, Alexander Moshchuk, Alan Dunn, Benjamin Livshits, Helen J. Wang, and Eyal Ofek
  Proceedings of the 22nd USENIX Security Symposium, August 2013.
• Operating System Support for Augmented Reality Applications
  Loris D'Antoni, Alan Dunn, Suman Jana, Tadayoshi Kohno, Benjamin Livshits, David Molnar, Alexander Moshchuk, Eyal Ofek, Franziska Roesner, Scott Saponas, Margus Veanes, and Helen J. Wang
  14th Workshop on Hot Topics in Operating Systems (HotOS), May 2013.
• Lightweight Server Support for Browser-Based CSRF Protection
  Alexei Czeskis, Alexander Moshchuk, Tadayoshi Kohno, Helen J. Wang
  Proceedings of the International World Wide Web Conference (WWW), May 2013.
• Clickjacking: Attacks and Defenses
  Lin-Shung Huang, Alexander Moshchuk, Helen J. Wang, Stuart Schechter, Collin Jackson
  Proceedings of the 21st USENIX Security Symposium, August 2012.
• User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems
  Franziska Roesner, Tadayoshi Kohno, Alexander Moshchuk, Bryan Parno, Helen J. Wang, Crispin Cowan
  Proceedings of IEEE Symposium on Security and Privacy (Oakland), May 2012.
  Best Practical Paper award.
• Practical End-to-End Web Content Integrity
  Kapil Singh, Helen J. Wang, Alexander Moshchuk, Collin Jackson, and Wenke Lee
  Proceedings of the International World Wide Web Conference (WWW), April 2012. 
• Permission Re-Delegation: Attacks and Defenses
  Adrienne Porter Felt, Helen Wang, Alex Moshchuk, Steven Hanna, and Erika Chin
  Proceedings of the 20th USENIX Security Symposium, August 2011.
• On the Incoherencies in Web Browser Access Control Policies
  Kapil Singh, Alexander Moshchuk, Helen J. Wang, and Wenke Lee.
  Proceedings of IEEE Symposium on Security and Privacy (Oakland), May 2010.
• Convergence of Desktop and Web Applications on a Multi-Service OS
  Helen J. Wang, Alexander Moshchuk, Alan Bush.
  4th USENIX Workshop on Hot Topics in Security (HotSec), August 2009.
• The Multi-Principal OS Construction of the Gazelle Web Browser
  Helen J. Wang, Chris Grier, Alexander Moshchuk, Samuel T. King, Piali Choudhury, Herman Venter.
  Proceedings of the 18th USENIX Security Symposium, August 2009.
• Studying Spamming Botnets Using Botlab
  John P. John, Alexander Moshchuk, Steven D. Gribble, and Arvind Krishnamurthy.
  Proceedings of the 6th USENIX Symposium on Networked Systems Design and Implementation (NSDI), April 2009.
• Flashproxy: Transparently Enabling Rich Web Content via Remote Execution
  Alexander Moshchuk, Steven D. Gribble, and Henry M. Levy.
  Proceedings of the Sixth International Conference on Mobile Systems, Applications, and Services (MobiSys), June 2008. Best paper runner-up.
• Organizing and Sharing Distributed Personal Web-Service Data
  Roxana Geambasu, Cherie Cheung, Alexander Moshchuk, Steven D. Gribble, and Henry M. Levy.
  Proceedings of the 15th International World Wide Web Conference (WWW), April 2008.
• Metadata Management Engine for Data Integration with Reverse-Engineering Support
  Michael Gubanov, Phil Bernstein, and Alexander Moshchuk.
  Proceedings of the 24th International Conference on Data Engineering (ICDE), April 2008. (poster paper)
• SpyProxy: Execution-based Detection of Malicious Web Content
  Alexander Moshchuk, Tanya Bragin, Damien Deville, Steven D. Gribble, and Henry M. Levy.
  Proceedings of the 16th Annual USENIX Security Symposium, August 2007.
• A Crawler-based Study of Spyware on the Web
  Alexander Moshchuk, Tanya Bragin, Steven D. Gribble, and Henry M. Levy.
  Proceedings of the 13th Network and Distributed Systems Security Symposium (NDSS), February 2006.

Reports

• User-Driven Access Control: Rethinking Permission Granting in Modern Operating Systems
  Franziska Roesner, Tadayoshi Kohno, Alexander Moshchuk, Bryan Parno, and Helen J. Wang
  MSR-TR-2011-91, August 2, 2011 (subsumed by Oakland 2012 paper above)
• HTTPi for Practical End-to-End Web Content Integrity
  Kapil Singh, Helen J. Wang, Alexander Moshchuk, Collin Jackson, and Wenke Lee
  MSR-TR-2011-63, May 12, 2011 (subsumed by WWW 2012 paper above)
• Resource Management for Web Applications in ServiceOS
  Alexander Moshchuk, Helen J. Wang
  MSR-TR-2010-56, May 18, 2010
• Understanding and Defending Against Web-borne Security Threats
  Alexander Moshchuk
  Ph.D. Dissertation, September 2009

Personal

I was born and grew up in Moscow, Russia. Before coming to Seattle, I spent four wonderful undergraduate years at Cornell University in sunny Ithaca, NY, double-majoring in computer science and electrical engineering.  In my free time, you can find me skiing and playing ice hockey, and when it's warmer and sunnier I switch to hiking, tennis, and soccer.  I've been playing piano since I was 9 and still practice regularly.  I'm also a frequent traveler and enjoy listening to classical music.