News

Enabling Finger-touch-based Mobile User Authentication via Physical Vibrations on
IoT Devices
Xin Yang, Song Yang, Jian Liu, Chen Wang, Yingying Chen and Nitesh Saxena
In IEEE Transactions on Mobile Computing (TMC), 2020

Two-Factor Password-Authenticated Key Exchange with End-to-End Password Security.
Stanislaw Jarecki, Mohammed Jubur, Hugo Krawczyk, Maliheh Shirvanian, and Nitesh Saxena In ACM Transactions on Privacy and Security, 2020.

The acceptance rate for papers accepted in the first cycle = 17.8% (28/157)

• • EchoVib: Exploring Voice Authentication via Unique Non-Linear Vibrations of Short Replayed Speech
    Abhishek Anand, Jian Liu, Chen Wang, Maliheh Shirvanian, Nitesh Saxena and Yingying Chen
    In ACM Symposium on Information, Computer and Communications Security (AsiaCCS), June 2020.
  • HVAC: Evading Classifier-based Defenses in Hidden Voice Attacks
    Yi Wu, Xiangyu Xu, Payton Walker, Jian Liu, Nitesh Saxena, Yingying Chen and Jiadi Yu
    In ACM Symposium on Information, Computer and Communications Security (AsiaCCS), June 2020.

Dr. Saxena has a new NSF SaTC Medium (Transition to Practice) grant funded:

NSF Secure and Trustworthy Cyberspace Program Medium Grant, “Intrusion-Tolerant Outsourced Storage for Cyber-Infrastructure”, $900,000, Oct 2020 – Sep 2023, Lead PI.  Collaborative project with: UC Irvine.

This project will investigate the design and development of next generation, secure storage and authentication services that will be fully resistant against intrusions onto the services themselves.

• IvoriWatch: Exploring Transparent Integrity Verification of Remote User Input Leveraging Wearables
  Prakash Shrestha, Zengrui Liu and Nitesh Saxena.
  In Annual Computer Security Applications Conference (ACSAC), December 2020.
• Voicefox: Leveraging Inbuilt Transcription to Enhance the Security of Machine-Human Speaker Verification against Voice Synthesis Attacks
  Maliheh Shirvanian, Manar Mohammed, Abhishek Anand and Nitesh Saxena.
  In Annual Computer Security Applications Conference (ACSAC), December 2020.
• WearID: Low-Effort Wearable-Assisted Authentication of Voice Commands via Cross-Domain Comparison without Training
  Cong Shi, Yan Wang, Yingying Chen, Nitesh Saxena and Chen Wang.
  In Annual Computer Security Applications Conference (ACSAC), December 2020.

 
 

Zengrui Liu passed his PhD qualifiers: a systematic exposition of web browser fingerprinting. An important (though rather crowded) area, but with many big missing pieces.

Payton Walker rocked his PhD quals: a synthesization of passive side channel & active command injection attacks on voice interfaces. His work exposes a wide gap–what’s shown via controlled experiments in prior work may not meet the real-world parameterizations of these attacks.

 

Hacksaw: Biometric-Free Non-Stop Web Authentication in an Emerging World of Wearables. Prakash Shrestha and Nitesh Saxena In ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec), July 2020.

CRAPE: A Privacy- Enhanced Crash Reporting System. Kiavash Satvat, Mahshid Hosseimi, Maliheh Shirvanian and Nitesh Saxena In ACM Conference on Data and Application Security and Privacy (CODASPY), March 2020.