Software Security

How Should We Make Software Secure?

University of Washington, Microsoft Research, and Carnegie Mellon University Summer Institute

June 15–18, 2003

horizontal rule

Home
Up
Schedule
Challenge Problems
Contact Information

Dirk Balfanz

Dirk has joined The Research Center Formerly Known as Xerox PARC in 2001 after graduating from Princeton University, where he worked on mobile-code and distributed-systems security. Whilst at PARC, he has mostly worked on usable security, i.e. security mechanisms that users would actually use, as opposed to security mechanisms users find confusing or annoying.

horizontal rule

Steve Bellovin

Steven M. Bellovin received a B.A. degree from Columbia University, and an M.S. and Ph.D. in Computer Science from the University of North Carolina at Chapel Hill. While a graduate student, he helped create netnews; for this, he and the other perpetrators were awarded the 1995 Usenix Lifetime Achievement Award. He joined AT&T Bell Laboratories in 1982. Despite the fact that he has not changed jobs, he is now at AT&T Labs Research, working on networks, security, and why the two don't get along. He is an AT&T Fellow and a member of the National Academy of Engineering.

Bellovin is the co-author of ``Firewalls and Internet Security: Repelling the Wily Hacker'', and holds several patents on cryptographic and network protocols. He served on National Research Council study committees on information systems trustworthiness and the privacy implications of authentication technologies; he was also a member of the information technology subcommittee of an NRC study group on science versus terrorism. He was a member of the Internet Architecture Board from 1996-2002; he is currently the co-director of the Security Area of the IETF. He also works on public policy questions relating to cryptography, Internet security, and the Internet in general.

horizontal rule

Brian Bershad

Brian is a faculty member at the University of Washington. His research interests are distributed systems, operating systems, and computer architecture. Recently, he's been focused on trying to make systems that are a little bit easier to use, and break a little bit less often than the ones he's used to.

horizontal rule

Christian Collberg

Christian Collberg is an Assistant Professor of Computer Science at the University of Arizona. Prior to joining Arizona he spent five years on the faculty at the University of Auckland, New Zealand, and before that he received his Ph.D. from Lund University in Sweden.

His main research interest is in how to apply techniques from the compilers and programming languages area to other areas and how to bring ideas from other areas into compilers and programming languages. He is currently developing the SandMark tool for the study of software protection techniques. It will eventually implement every published software watermarking, code obfuscation, and tamperproofing algorithm as well as tools for attacking and analyzing these algorithms.

In the past Christian has developed a tool for the automatic retargeting of compilers and the AlgoVista search engine for programmers. AlgoVista allows you to draw the query "What if I have this graph A and I want to turn it into this other graph B, what problem am I looking for?" to which AlgoVista might answer "It looks like you're shrinking the biconnected components of the underlying graph, and here are some links to information about this problem." Having recently discovered several cases of self-plagiarism, he is currently developing the Self-Plagiarism Tool SPlaT. Currently, SPlaT is a web spider that visits Computer Science Professors' web sites to search for research papers where the concept of "reuse" has been taken too far. Future versions will be used as a refereeing aid to help determine how close a submitted paper is to papers previously published by the same author.

In his copious spare time Christian sings, plays lead guitar, and writes songs for the Computer Science Department's band, The Undecidables. He also likes to tinker with the recording studio he is building in his living room.

horizontal rule

Crispin Cowan

Crispin Cowan leads Immunix Technologies research and DARPA (Defense Advanced Research Projects Agency) projects for WireX. He holds a formerly full-time and continuing part-time research professor position with the Oregon Graduate Institute, Department of Computer Science and Engineering. Dr. Cowan developed Immunix, a host security/survivability technology project for DARPA that includes prominent technologies like StackGuard. He holds a Ph.D. from the University of Western Ontario and a Masters of Mathematics from the University of Waterloo.

horizontal rule

John DeTreville

John DeTreville is a Senior Researcher at Microsoft Research, where he currently studies platforms and technologies for security, privacy, and authorization. He has also worked at DEC’s Systems Research Center, AT&T’s Bell Labs, and elsewhere. His work is much discussed on the Internet as leading to, for example, “a Digital Dark Age: a period of innovative stagnation where the majority of the world's computing population will become unwitting subjects and indentured servants to the profiteering desires of the new corporate ruling class.”

horizontal rule

Carl Ellison

Carl M. Ellison is a Senior Security Architect with the Corporate Technology Group of Intel Corporation. His current research is devoted to delegatable, distributed, public-key authorization. His concentration on security has been a side-effect of a more general career focus on the design of distributed and fault tolerant systems.

horizontal rule

Matt Franklin

Matt Franklin is an Associate Professor in the Computer Science Department at U. C. Davis. Before coming to Davis in July 2000, he worked at various industrial research labs (Xerox PARC in Palo Alto, CA; AT&T Labs in Florham Park, NJ; AT&T Bell Labs in Murray Hill, NJ). He received a Ph.D. in Computer Science from Columbia University in February 1994. His research interests include cryptography, security, and distributed computing. Jon Pincus has not beaten him at Boggle for almost twenty years.

horizontal rule

Li Gong

Li Gong is Managing Director of Sun Microsystems's Engineering and Research Institute based in Beijing, China. Prior to this assignment, he served as Chief Architect and Engineering Director for Java Security and Networking, Java Embedded Server, and JXTA, for which he has a dozen or so patents issued or pending and authored or coauthored three books. Prior to Sun, he worked at SRI and ORA. He served as both Program Chair and General Chair for IEEE Symposium on Security and Privacy, ACM Conference on Computer and Communications Security, and IEEE Computer Security Foundations Workshop. He received BS and MS from Tsinghua University, Beijing, and PhD from University of Cambridge. He is Associate Editor-in-Chief of IEEE Internet Computing, Associate Editor of ACM Transactions on Information and Systems Security, and a Guest Chair Professor at Tsinghua.

horizontal rule

Steven Gribble

Steven D. Gribble joined the Computer Science and Engineering Department of the University of Washington as an Assistant Professor in November of 2000, after receiving his Ph.D. from UC Berkeley under Professor Eric Brewer. Steve's research interests include the design and operation of robust, scalable Internet infrastructure and services, applications of virtual machines, mobile computing, distributed systems, and operating systems. He received his B.Sc. in Computer Science and Physics from the University of British Columbia, and his M.S. in Computer Science from UC Berkeley. He is an ACM and USENIX member, and was a co-founder of ProxiNet, Inc. (now a division of PumaTech).

horizontal rule

Matthias Jacob

Matthias Jacob is a Ph.D. candidate in Computer Science at Princeton University under supervision of Ed Felten. He received an M.A. in Computer Science from Princeton in 2000 and a B.S. in Computer Science from University of Karlsruhe in Germany in 1997. His research interests include systems security, software protection, tamper-resistant software, and code obfuscation. At the moment he is working with the security group at Stanford.

horizontal rule

Somesh Jha

Somesh Jha received his B.Tech from Indian Institute of Technology, New Delhi in Electrical Engineering. He received his Ph.D. in Computer Science from Carnegie Mellon University in 1996. Currently, Somesh Jha is an Assistant Professor in the Computer Sciences Department at the University of Wisconsin (Madison), which he joined in 2000. His work focuses on analysis of security protocols, survivability analysis, intrusion detection, and analyzing malicious code.

horizontal rule

Dick Kemmerer

Dick Kemmerer is a Professor and past Chair of the Department of Computer Science at UCSB. His research interests are in computer and network security and reliability, privacy issues, the specification and verification of systems, specification language design, and software engineering.  Dick is a past Editor-in-Chief of IEEE Transactions on Software Engineering. He has served as a member of several National Academy of Science committees on Computer Security. He has also served as a member of the National Computer Security Center's Formal Verification Working Group and was a member of the NIST's Computer and Telecommunications Security Council. Dick is also a past Chair of the IEEE Technical Committee on Security and Privacy and a past member of the Advisory Board for the ACM's Special Interest Group on Security, Audit, and Control, and a member of Microsoft's Trustworthy Computing Academic Advisory Board. He has written numerous papers on the subjects of computer security, and he is the author of the book "Formal Specification and Verification of an Operating System Security Kernel" and a co-author of "Computers at Risk: Safe Computing in the Information Age." He is a Fellow of the IEEE Computer Society and a Fellow of the Association for Computing Machinery.

horizontal rule

Angelos Keromytis

Angelos Keromytis has been an Assistant Professor in the Computer Science Department at Columbia University since 2001. He received his M.Sc. and Ph.D. in Computer Science from the University of Pennsylvania (2001), and his B.Sc. from the University of Crete, Greece (1996). His research revolves around end-point security mechanisms, cryptographic protocols, and operating system support for security.

horizontal rule

Darko Kirovski

Darko Kirovski received his Ph.D. degree from the Computer Science Department at the University of California in Los Angeles in January 2001. He joined Microsoft Research in April 2000. His research interests include: secure systems, software delivery, multimedia processing and applications, intellectual property protection, and embedded system design. He has been awarded the 1998-2000 Microsoft Graduate Research Fellowship, the 1999-2000 ACM/IEEE Design Automation Conference Graduate Scholarship, and the 2001 ACM Outstanding PhD dissertation in Electronic Design Automation Award. He has received the Best Paper Award at the ACM Multimedia 2002.

horizontal rule

Larry Koved

Larry Koved is a Research Staff Member and the manager of the Java and Web Services Security department (http://www.research.ibm.com/javasec/), a part of the Networking Security, Privacy and Cryptography department at the IBM Thomas J. Watson Research Center in Yorktown Heights, NY (http://www.research.ibm.com/compsci/security/index.html). He collaborated with Li Gong on the design of the Java Authentication and Authorization Services (JAAS). Subsequently he worked on the Enterprise JavaBeans (EJB) V1.1 security architecture. Recently he agreed to co-author a book on J2EE security that will be published later this year by Addison-Wesley. With his colleagues in IBM Research, he has developed a set of static analysis tools to analyze large Java and C programs for the purpose of identifying coding defects and security characteristics of programs. Larry has published over twenty-five articles and technical reports on topics ranging from user interface technologies, virtual reality, hypertext, and mobile computing, to static analysis of Java code and security. His current interests include security of mobile code, component software and static analysis of programs and libraries.

horizontal rule

Jim Larus

Jim Larus is a Senior Research at Microsoft Research, where he leads the Software Productivity Tools group. He’s been a professor (at Univ. Wisconsin-Madison) and has worked in a variety of areas, all of which have some tenuous connection to programming languages or compilers (parallel programming, computer architecture, performance measurement, and most recently software tools). He blames this on his advisor in graduate school, whose plan file contained the line: “Apply compiler technology to everything: when your only tool is a hammer, everything looks like a nail.”

horizontal rule

Butler Lampson

Butler Lampson is an Architect at Microsoft Corporation and an Adjunct Professor of Computer Science and Electrical Engineering at MIT. He was on the faculty at Berkeley, at the Computer Science Laboratory at Xerox PARC, and at Digital’s Systems Research Center. He has worked on computer architecture, local area networks, raster printers, page description languages, operating systems, remote procedure call, programming languages and their semantics, programming in the large, fault-tolerant computing, transaction processing, computer security, and WHSIWYG editors. He was one of the designers of the SDS 940 time-sharing system, the Alto personal distributed computing system, the Xerox 9700 laser printer, two-phase commit protocols, the Autonet LAN, and several programming languages.

He received an AB from Harvard University, a PhD in EECS from the University of California at Berkeley, and honorary ScD’s from the Eidgenoessische Techniche Hochschule, Zurich and the University of Bologna. He holds a number of patents on networks, security, raster printing, and transaction processing. He is a member of the National Academy of Engineering and a Fellow of the Association for Computing Machinery and the American Academy of Arts and Sciences. He received the ACM’s Software Systems Award in 1984 for his work on the Alto, the IEEE Computer Pioneer award in 1996, and the Turing Award in 1992.

horizontal rule

Steve Lipner

Steve Lipner has worked in computer and network security since 1970. His career spans the roles of researcher, consultant, development manager, technologist and business unit manager. Steve has also experienced the evolution of security from a research and government backwater to the stuff of newspaper headlines. At Microsoft, Steve has served as manager of the Microsoft Security Response Center, leader of the Secure Windows Initiative team, and manager of the Security Business Unit’s strategy team. He was one of the leaders of the Microsoft Windows Division “security push” and the development of Microsoft’s secure product development lifecycle. His goal is to see the Security Response Center become as unnecessary as the Maytag repairman. Steve holds S.B. and S.M. degrees in civil engineering from M.I.T. and attended the Harvard Business School Program for Management Development.

horizontal rule

Tom Longstaff

Dr. Tom Longstaff is currently leading research in network security for the Networked Systems Survivability Program at the Software Engineering Institute (SEI). As a member of the CERT® Coordination Center (an incident handling team at the SEI), Tom has daily access to the most up-to-date information on Internet security, product vulnerabilities, and intruder profiles in existence. Since 1992, Tom has been using real-world issues and problems to drive a research agenda that includes Internet architectures, security tool development, intruder modeling, and other basic research areas. In his active collaboration with researchers in other areas of software engineering, Tom's research brings a real-world focus to the abstract area of security engineering.

Since 1997, Tom has been investigating topics related to information survivability and critical national infrastructure protection. Publication areas include an overview of information survivability, survivability requirements, survivability in trade-off analysis, and coming attractions in information survivability. Tom has supervised Ph.D. work on information survivability and critical national infrastructures. His Survivable Network Technology project sponsors an annual workshop on information survivability that brings together computer science experts from around the world to focus on survivability issues.

Prior to coming to the Software Engineering Institute, Tom was the technical director at the Computer Incident Advisory Capability (CIAC) at Lawrence Livermore National Laboratory in Livermore, California. He completed a Ph.D. in 1991 at the University of California, Davis in software environments. His dissertation topic concerned automatic software connectivity based on a constraint-based system of data attributes. Tom received a B.A. in Physics and Mathematics from Boston University in 1983, and an M.S. in computer science from the University of California, Davis in 1986.

horizontal rule

Udi Manber

Udi Manber is Vice President and Chief Algorithms Officer at Amazon.com. Before joining Amazon in 2002, he was Chief Scientist at Yahoo!, and before that he was a Professor of Computer Science at the University of Arizona where he worked on software tools, in particular for search. He is the author of over 50 technical articles, a best-selling algorithms book, and several popular software packages. He received three best-paper awards, a teaching award, a Presidential Young Investigator Award in 1985, and the USENIX Software Tools User Group Award in 1999.

horizontal rule

John Manferdelli

John Manferdelli has worked as a senior researcher, software architect, product unit manager and general manager at Microsoft. He has contributed include the development of the next-generation secure computing base technologies and the rights management capabilities currently integrated into Windows, for which he was the original architect. He also has worked in Microsoft Research and in the SQL Server Group. He joined Microsoft in February 1995 when it acquired his company, Natural Language Inc. based in Berekeley.

At Natural Language, Manferdelli was the founder and, at various times vice president of R&D and CEO. Other positions he has held include staff engineer at TRW Inc., computer scientist and mathematician at Lawrence Livermore National Laboratory, and principal investigator at Bell Labs. He was also an adjunct associate professor at Stevens Institute of Technology. 

Manferdelli has a bachelor’s degree in physics from Cooper Union for the Advancement of Science and Art and a Ph.D. in mathematics from the University of California, Berkeley.

horizontal rule

Gary McGraw

Gary McGraw, Ph.D. is the Chief Technology Officer at Cigital <www.cigital.com>. Dr. McGraw is a noted authority on software security and has co-authored four popular books: Java Security: Hostile Applets, Holes, & Antidotes (Wiley, 1996) and Securing Java: Getting down to business with mobile code (Wiley, 1999) with Prof. Ed Felten of Princeton; Software Fault Injection: Inoculating Programs Against Errors (Wiley, 1998) with Cigital co-founder and Chief Scientist Dr. Jeffrey Voas; and Building Secure Software (Addison-Wesley, 2001) with John Viega.  Dr. McGraw regularly contributes to popular trade publications and is often quoted in national press articles.  He writes a monthly column on software security for Software Development magazine and is a department editor for IEEE Security and Privacy magazine.

Working with Professional Services and Cigital Labs, Dr. McGraw sets Software Quality Management technology strategy and oversees the Cigital technology transfer process. His aim is to bridge the gap between cutting-edge science and real-world applicability, and to transfer advanced technologies for use in the field.  In addition to consulting with major commercial e-commerce vendors, including Visa, Mastercard and the Federal Reserve, he founded Cigital’s Software Security Group and chairs the Cigital Corporate Technology Council. 

Dr. McGraw began his career as a Research Scientist, and he continues to pursue research in software security. He has written over fifty peer-reviewed technical publications, and serves as principal investigator on grants from Air Force Research Labs, DARPA, National Science Foundation, and NIST's Advanced Technology Program.  He holds a dual Ph.D. in Cognitive Science and Computer Science from Indiana University and a BA in Philosophy from UVa. 

Dr. McGraw is a member of the Technical Advisory Boards of Counterpane, Cenzic, and Indigo.  He also serves as an Advisor to the UC Davis Department of Computer Science and is a member of the IEEE Security and Privacy Task Force. 

horizontal rule

Catherine Meadows

Catherine Meadows has been head of the Formal Methods Section in the Center for High Assurance Computer Systems at the Naval Research Laboratory since 1994. She is the principal designer of the NRL Protocol Analyzer, one of the first software tools to be used successfully for cryptographic protocol analysis, and has long been one of the leading figures in this area. She is has worked extensively with the Internet Engineering Task Force (IETF) on the formal verification of their security protocols, having performed formal analyses of the Internet Key Exchange (IKE) protocol and the Group Domain of Interpretation (GDOI) secure multicast protocol. She is currently working on an analysis of IKE Version 2, and is serving on the IETF Security Directorate, an advisory board on security matters. She has published more than 85 papers on formal methods, cryptography, and security. She has been program chair of the Computer Security Foundations Workshop, the IEEE Symposium on Security and Privacy, and the IEEE Symposium on High Assurance System Engineering, as well as many others. She is a co-editor-in-chief of the International Journal on Information Security, and is also serving as vice-chair of IFIP Working Group 1.7 on Foundations of Security Analysis and Design. Prior to becoming head of the Formal Methods Section she was a member of the technical staff at NRL from 1985 on, and prior to that she was an assistant professor of mathematics at Texas A&M University from 1981 to 1985. Dr. Meadows received a B.A. in mathematics from the University of Chicago in 1975 and a Ph.D. in mathematics from the University of Illinois in 1981.

horizontal rule

Andrew Myers

Andrew Myers is an Assistant Professor of Computer Science at Cornell University. He received the Ph.D. degree in Electrical Engineering and Computer Science from the Massachusetts Institute of Technology, Cambridge, in 1999. His research interests include computer security, programming languages, and distributed object systems. His recent work on language-based information flow has focused on systems and languages that are expressive and practical.

horizontal rule

Adrian Perrig

Adrian Perrig is an Assistant Professor at Carnegie Mellon University. He earned his PhD in Computer Science from Carnegie Mellon University, and spent three years during his PhD with his advisor Doug Tygar at University of California at Berkeley. He received his BS in Computer Engineering from the Swiss Federal Institute of Technology in Lausanne (EPFL). Adrian's research interests revolve around building secure systems and include network security, security for sensor networks and mobile applications.

horizontal rule

Jon Pincus

As Architect for the Correctness team within the Microsoft Research Programmers' Productivity Research Center, Jon Pincus has developed and deployed program analysis-based tools such as PREfix and PREfast, as well as worked with product groups in the areas of security and reliability and impressed people with his Halloween costumes. Prior to that, he was founder and CTO at Intrinsa (acquired by Microsoft along with PREfix and the rest of the company's assets). Backtracking a little, after receiving the appropriate degrees from the appropriate institutions, he worked in Design Automation (placement and routing for ICs, CAD frameworks) at GE Calma and EDA Systems. Spending a year based in Munich as an Application Engineer gave him a new appreciation for the importance of software quality; being nine time zones away from the home office and trying to communicate in your non-native language can change your perspective. After being acquired by Digital Equipment Corporation, he wound up as the Technical Director of Document Management, but lost his voice mail privileges in the process. He left Digital on April Fools Day, 1994, to begin work on the technology and company that eventually became PREfix and Intrinsa, respectively.

horizontal rule

Radha Poovendran

Radha received B.Tech EE from IIT Bombay, MS EE from University of Michigan and PhD. EE from University of Maryland. He is currently an assistant professor at University of Washington which he joined in 2000. He is interested in problems in routing and security in energy-constrained broadcast networks. His recent work has focused on incorporating the impact of lower layer effects on the security protocols. He also works on information theoretic settings of security problems.

horizontal rule

Niels Provos

Niels Provos is an experimental computer scientist conducting research in steganography and in computer and network security. He is a Ph.D. candidate at the University of Michigan and an active contributor to open source projects.

horizontal rule

Mike Reiter

Michael K. Reiter is a Professor of Electrical & Computer Engineering and Computer Science at Carnegie Mellon University in Pittsburgh, Pennsylvania, USA. He received the B.Sc. degree in mathematical sciences from the University of North Carolina in 1989, and the M.Sc. and Ph.D. degrees in computer science from Cornell University in 1991 and 1993, respectively. He joined AT&T Bell Labs in 1993 and became a founding member of AT&T Labs--Research when NCR and Lucent Technologies (including Bell Labs) were split away from AT&T in 1996. He returned to Bell Labs in 1998 as Director of Secure Systems Research, and then joined Carnegie Mellon in 2001. His research interests include all areas of computer and communications security and distributed computing.

horizontal rule

Jim Roskind

Jim Roskind was born and raised in the highest crime neighborhood in NYC, in the South Bronx, where security, attack, and vulnerability involved much more than software. Eventually he attended Bronx HS of Science, and later MIT, where he received his SBEE, SBCS, SMEECS, and PhD EECS (1983), with a focus on data communication networks, fault tolerance, and some distributed algorithms (including CoOp work at Bell Laboratories).  After graduating, he joined Harris Corp where he worked on digital IC design for (then) super-VLSI and (then) ultrafast GaAs. For 10 years that followed Jim worked as an independent software contractor across a wide range of projects including developing compilers and word processors, automating tests for system software, as well integration of full-text retrieval with (then new) CDROM technology and WYSIWYG rendering (at Interleaf),  In 1994 he co-founded InfoSeek, lead the engineering team, and was their Chief Scientist. In 1995 Jim joined pre-IPO upstart Netscape, and eventually became involved with Java as their Java Security Architect.  He helped evolve and design Netscape's Java security model, and lead response teams on most all of the Netscape browser security issues (firedrills).  Jim was later promoted to Chief Scientist for Netscape, and is now VP/CTO AOL Technology Development. His notable open source contributions include a YACCable C++ Grammar, and the Python Profiler.  His current primary interests include his daughter Brianna age 2.5, and 4 month old son Dylan.  His endless interests include how to design and build "better" systems and to facilitate writing "better" code by mortals, which of course includes code that is "safe" to use.
 

horizontal rule

Stefan Savage

Stefan Savage is an Assistant Professor in the Computer Science and Engineering Department at U.C. San Diego. He received his PhD in 2001 from the University of Washington and previously was a research staff member at Carnegie Mellon University. Stefan is consistently out of touch with his own research interests: he used to focus on operating systems issues, only to find himself identified as a networking researcher, but since embracing networking he's been told that he's a computer security person. When not visiting workshops, he attends committees and participates in study groups. He is slowly learning how to say "no" with increased frequency.

horizontal rule

Fred Schneider

FRED B. SCHNEIDER joined the Cornell faculty in 1978, where is now Professor and Director of the Information Assurance Institute. His research is intended to support the construction of concurrent and distributed systems for high-integrity and mission-critical settings--settings where fault-tolerance and security are critical.

Schneider has served as editor-in-chief of Distributed Computing, and he currently serves as co-managing editor of the Springer-Verlag Texts and Monographs in Computer Science series and Associate Editor-in-Chief of IEEE Security and Privacy, as well as being a member of the editorial boards for ACM Computing Surveys, High Integrity Systems, Information Processing Letters, and Annals of Software Engineering. He is co-author (with D. Gries) of the introductory text, "A Logical Approach to Discrete Math", author of the monograph, "On Concurrent Programming", and chaired the NRC study on Information Systems Trustworthiness as well as editing their final report "Trust in Cyberspace".

A fellow of the Association for Computing Machinery and the American Association for the Advancement of Science, Schneider is also a professor-at-large at the University of Tromso (Norway). Schneider has served on technical advisory boards for Cigital Inc, Intel Corporation, Microsoft Corporation, and Sun Microsystems. Schneider also serves in a senior advisory position with Fast Search and Transfer ASA ("FAST") on matters of reliability and security.

horizontal rule

Dan Simon

  • BMath., Waterloo (1986)
  • MSc., PhD. Toronto (1993)
  • MS since 1994, MSR since 1997 
  • Research interests: Systems and Network Security, Cryptography, Quantum computation
  • horizontal rule

    Dawn Song

    Dawn Song is an Assistant Professor at Carnegie Mellon University. Dawn's research interest is in computer security and applied cryptography, including Internet security, systems security, software security, and database security.

    horizontal rule

    Doug Tygar

    Doug Tygar is a Professor of Computer Science and Information Management at the University of California, Berkeley.  He works in computer security, privacy, and electronic commerce.

    horizontal rule

    David Wagner

    David Wagner is an Assistant Professor in the Computer Science Division at the University of California at Berkeley with extensive experience in computer security and cryptography. He and his Berkeley colleagues are known for discovering a wide variety of security vulnerabilities in various cellphone standards, 802.11 wireless networks, and other widely deployed systems. In addition, David was a co-designer of one of the Advanced Encryption Standard candidates, and he remains active in the areas of systems security, cryptography, and privacy.

    horizontal rule

    Dan S. Wallach

    Dan S. Wallach is an assistant professor of computer science at Rice University. Wallach studies security mechanisms for controlling malicious mobile code; he helped design Netscape's stack inspection architecture, now standard in systems from Sun, Microsoft, and other vendors. More recently, he has been studying security issues that occur in peer-to-peer networking systems, which need to be robust, even when some nodes in the network might want to take advantage of the network, getting more resources out than they put in. He also has an interest in finding all the holes in systems that seem inherently doomed to failure, including music copy protection systems and paperless electronic voting systems. This sort of work tends to require more legal and political craftwork than actual technical effort, but it's every bit as important for the world we seem to be living in.

    horizontal rule

    Chenxi Wang

    Chenxi Wang is a member of the research faculty for Electrical and Computer Engineering at Carnegie Mellon University. She received her Ph.D. in Computer Science from the University of Virginia in 2001. Her research interests are in distributed system security and information dissemination networks. Chenxi has served on the program committee for ACSAC, New Security Paradigms Workshop and ACM's Electronic Privacy Workshop. She is the recipient of ACM DC chapter's Samuel Alexander award for outstanding Ph.D. candidates in 1999.

    horizontal rule

    Jeannette Wing

    Jeannette M. Wing is a Professor of Computer Science at Carnegie Mellon University. She is the Associate Dean for Academic Affairs for the School of Computer Science and the Associate Department Head for the Computer Science Ph.D. Program. She received her S.B. and S.M. degrees in Electrical Engineering and Computer Science in 1979 and her Ph.D. degree in Computer Science in 1983, all from the Massachusetts Institute of Technology. Professor Wing's general research interests are in the areas of specification and verification, concurrent and distributed systems, and programming languages. Her current focus is on tools and techniques for analyzing software security.  She is spending a one-year sabbatical at Microsoft Research, Redmond, working with Jon Pincus on a model of attack surfaces, a problem inspired by work done by Mike Howard.  She serves on the Trustworthy Computing Scientific Advisory Board for Microsoft.  Professor Wing is an ACM Fellow and an IEEE Fellow.

    horizontal rule

    John Zahorjan

    horizontal rule

    horizontal rule

    Home | Attendees | Schedule | Challenge Problems | Contact Information

    For problems or questions regarding this website contact wing@microsoft.com
    Last updated: 04/03/03.