David Molnar
RESEARCHER
.
My interests are primarily in software security, cryptography, and electronic privacy. More recently I have started exploring mobile devices and cloud security.
I work in the Security and Privacy group let by Helen Wang. I also work with Patrice Godefroid, Ella Bounimova, and Michael Levin on the Scalable Automated Guided Execution (SAGE) project. Before MSR, I spent several years at Berkeley, where I finished a PhD with David Wagner.
Projects
Videos
Publications
- Margus Veanes, Pieter Hooimeijer, Benjamin Livshits, David Molnar, and Nikolaj Bjorner, Symbolic Finite State Transducers: Algorithms and Applications, in POPL’12, ACM SIGPLAN, January 2012
- Margus Veanes, David Molnar, Benjamin Livshits, and Lubomir Litchev, Generating Fast String Manipulating Code Through Transducer Exploration and SIMD Integration, no. MSR-TR-2011-124, November 2011
- Pieter Hooimeijer, Benjamin Livshits, David Molnar, Prateek Saxena, and Margus Veanes, Fast and Precise Sanitizer Analysis with BEK, in USENIX Security'11, August 2011
- nikolaj bjorner, pieter hooimeijer, benjamin livshits, david molnar, and margus veanes, Symbolic Finite State Transducers: Algorithms and Applications, no. MSR-TR-2011-85, 14 July 2011
- Raluca Ada Popa, Jacob R. Lorch, David Molnar, Helen J. Wang, and Li Zhuang, Enabling Security in Cloud Storage SLAs with CloudProof, in USENIX Annual Technical Conference, USENIX, June 2011
- Margus Veanes, David Molnar, and Benjamin Livshits, Decision Procedures for Composition and Equivalence of Symbolic Finite State Transducers, no. MSR-TR-2011-32, 14 March 2011
- Pieter Hooimeijer, Benjamin Livshits, David Molnar, Prateek Saxena, and Margus Veanes, BEK: Modeling Imperative String Operations with Symbolic Transducers, no. MSR-TR-2010-154, 26 November 2010
- Prateek Saxena, David Molnar, and Benjamin Livshits, ScriptGard: Preventing Script Injection Attacks in Legacy Web Applications with Automatic Sanitization, no. MSR-TR-2010-128, 20 September 2010
- Pieter Hooimeijer, Margus Veanes, Prateek Saxena, and David Molnar, Modeling Imperative String Operations with Transducers, no. MSR-TR-2010-96, July 2010
- David Molnar and Stuart Schechter, Self Hosting vs. Cloud Hosting: Accounting for the security impact of hosting in the cloud, in Proceedings of the Ninth Workshop on the Economics of Information Security (WEIS 2010), Microsoft Research, 8 June 2010
Program Committees
I've been honored to serve on these program committees. For conferences and workshops coming up, please consider sending us your work for review!
- IEEE Symposium on Security and Privacy 2012
- Financial Cryptography 2012
- Network Distributed Security Symposium 2012




