Shuo
Chen's
Presentations
- “Pretty-Bad-Proxy: An Overlooked
Adversary in Browsers’ HTTPS Deployments,” IEEE Symposium on Security
and Privacy, Oakland, WA, May 20th, 2009. (demo)
- “Understanding
the Challenges in Browser Logic Correctness,” Stanford Security Seminar, Stanford, CA, March 13th,
2008.
- “An Analysis of Browser Domain-Isolation
Bugs and A Light-Weight Transparent Defense Mechanism,” ACM Conference on Computer and
Communications Security, Alexandria, VA, Oct 30th, 2007. (demo)
- “A Systematic Approach to Uncover
Security Flaws in GUI Logic,” IEEE Symposium on Security and Privacy,
Oakland, WA, May 21st, 2007. (demo)
- “Browser Security: A New Research
Territory, ” CS seminars in Purdue University and University of
Illinois at Urbana-Champaign, April, 2007
- “Non-Control-Data Attacks Are
Realistic Threats,” USENIX Security Symposium, Baltimore, MD,
Aug. 4th, 2005.
- “Enhancing Security of Real-World
Systems with a Better Understanding of Threats,” (video)
job interview talk, Microsoft Research, Redmond, WA, 3/14/2005.
- “A Black-Box Tracing Technique to
Identify Causes of Least-Privilege Incompatibilities”. Network and
Distributed System Security Symposium (NDSS), San Diego, CA,
Feb. 4, 2005.
- "Formal Reasoning of Security
Vulnerabilities by Pointer Taintedness
Semantics". Given in Computer Engineering Seminar, Coordinated
Science Lab, UIUC, 10/12/2004.
- "A Finite State Machine
Methodology for Analyzing Security Vulnerabilities". Given in
IEEE International Conference on Dependable Systems and Networks, San
Francisco, June, 2003.
- "Secure Detection and Isolation of
TCP-unfriendly Flows" (Summer Project in Bell Labs). Given in the
Data Network Research Center, Bell Laboratories, Holmdel, New Jersey,
August, 2002.
- "Evaluating the Security Threat of
Instruction Corruptions in Firewalls". Given in IEEE
International Conference on Dependable Systems and Networks, Washington D.C., June, 2002.
- "Libsafe
for Windows" (Summer Project in Avaya Labs). Given in the Network
Software Research Department, Avaya Labs, Basking Ridge, New Jersey, August,
2001.
Other Related
Presentations
1. “Defeating Memory Corruption
Attacks via Pointer Taintedness Detection,” presented
by Jun Xu in IEEE International Conference on Dependable Systems and Networks,
Yokohama, Japan, June 30, 2005