Deian Stefan

Publication Activity (10 Years)

Years Active: 2007-2024
Publications (10 Years): 56

Top Topics

Web Applications

Method Invocation

Information Flow Control

Top Venues

Proc. ACM Program. Lang.

USENIX Security Symposium

Publications

Leo Cao, Luoxi Meng, Deian Stefan, Earlence Fernandes
Stateful Least Privilege Authorization for the Cloud. USENIX Security Symposium (2024)
Hosein Yavarzadeh, Archit Agarwal, Max Christman, Christina Garman, Daniel Genkin, Andrew Kwong, Daniel Moghimi, Deian Stefan, Kazem Taram, Dean M. Tullsen
Pathfinder: High-Resolution Control-Flow Attacks Exploiting the Conditional Branch Predictor. ASPLOS (3) (2024)
Karthikeyan Bhargavan, Jonathan Protzenko, Andreas Rossberg, Deian Stefan
Foundations of WebAssembly (Dagstuhl Seminar 23101). Dagstuhl Reports 13 (3) (2023)
Hosein Yavarzadeh, Mohammadkazem Taram, Shravan Narayan, Deian Stefan, Dean M. Tullsen
Half&Half: Demystifying Intel's Directional Branch Predictors for Fast, Secure Partitioned Execution. SP (2023)
Marco Vassena, Alejandro Russo, Deepak Garg, Vineet Rajani, Deian Stefan
From Fine- to Coarse-Grained Dynamic Information Flow Control and Back. Found. Trends Program. Lang. 8 (1) (2023)
Shravan Narayan, Tal Garfinkel, Mohammadkazem Taram, Joey Rudek, Daniel Moghimi, Evan Johnson, Chris Fallin, Anjo Vahldiek-Oberwagner, Michael LeMay, Ravi Sahita, Dean M. Tullsen, Deian Stefan
Going beyond the Limits of SFI: Flexible and Secure Hardware-Assisted In-Process Isolation with HFI. ASPLOS (3) (2023)
Matthew Kolosick, Basavesh Ammanaghatta Shivakumar, Sunjay Cauligi, Marco Patrignani, Marco Vassena, Ranjit Jhala, Deian Stefan
Robust Constant-Time Cryptography. CoRR (2023)
Evan Johnson, Evan Laufer, Zijie Zhao, Dan Gohman, Shravan Narayan, Stefan Savage, Deian Stefan, Fraser Brown
WaVe: a verifiably secure WebAssembly sandboxing runtime. SP (2023)
Alexandra E. Michael, Anitha Gollamudi, Jay Bosamiya, Evan Johnson, Aidan Denlinger, Craig Disselkoen, Conrad Watt, Bryan Parno, Marco Patrignani, Marco Vassena, Deian Stefan
MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code. Proc. ACM Program. Lang. 7 (POPL) (2023)
Hosein Yavarzadeh, Mohammadkazem Taram, Shravan Narayan, Deian Stefan, Dean M. Tullsen
Half&Half: Demystifying Intel's Directional Branch Predictors for Fast, Secure Partitioned Execution. SP (2023)
Michael Smith, Peter Snyder, Moritz Haller, Benjamin Livshits, Deian Stefan, Hamed Haddadi
Blocked or Broken? Automatically Detecting When Privacy Interventions Break Websites. CoRR (2022)
Michael Smith, Peter Snyder, Moritz Haller, Benjamin Livshits, Deian Stefan, Hamed Haddadi
Blocked or Broken? Automatically Detecting When Privacy Interventions Break Websites. Proc. Priv. Enhancing Technol. 2022 (4) (2022)
Marco Vassena, Alejandro Russo, Deepak Garg, Vineet Rajani, Deian Stefan
From Fine- to Coarse-Grained Dynamic Information Flow Control and Back, a Tutorial on Dynamic Information Flow. CoRR (2022)
Alexandra E. Michael, Anitha Gollamudi, Jay Bosamiya, Craig Disselkoen, Aidan Denlinger, Conrad Watt, Bryan Parno, Marco Patrignani, Marco Vassena, Deian Stefan
MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code. CoRR (2022)
Sunjay Cauligi, Craig Disselkoen, Daniel Moghimi, Gilles Barthe, Deian Stefan
SoK: Practical Foundations for Software Spectre Defenses. IEEE Symposium on Security and Privacy (2022)
Matthew Kolosick, Shravan Narayan, Evan Johnson, Conrad Watt, Michael LeMay, Deepak Garg, Ranjit Jhala, Deian Stefan
Isolation without taxation: near-zero-cost transitions for WebAssembly and SFI. Proc. ACM Program. Lang. 6 (POPL) (2022)
Sunjay Cauligi, Marco Guarnieri, Daniel Moghimi, Deian Stefan, Marco Vassena
A Turning Point for Verified Spectre Sandboxing. CoRR (2022)
Sunjay Cauligi, Craig Disselkoen, Daniel Moghimi, Gilles Barthe, Deian Stefan
SoK: Practical Foundations for Spectre Defenses. CoRR (2021)
Michael Smith, Peter Snyder, Benjamin Livshits, Deian Stefan
SugarCoat: Programmatically Generating Privacy-Preserving, Web-Compatible Resource Replacements for Content Blocking. CCS (2021)
Shravan Narayan, Craig Disselkoen, Deian Stefan
Tutorial: Sandboxing (unsafe) C code with RLBox. SecDev (2021)
John Renner, Alex Sanchez-Stern, Fraser Brown, Sorin Lerner, Deian Stefan
Scooter & Sidecar: a domain-specific approach to writing secure database migrations. PLDI (2021)
Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean M. Tullsen, Deian Stefan
Swivel: Hardening WebAssembly against Spectre. CoRR (2021)
Rami Gökhan Kici, Klaus von Gleissenthall, Deian Stefan, Ranjit Jhala
Solver-Aided Constant-Time Circuit Verification. CoRR (2021)
Klaus von Gleissenthall, Rami Gökhan Kici, Deian Stefan, Ranjit Jhala
Solver-Aided Constant-Time Hardware Verification. CCS (2021)
Evan Johnson, David Thien, Yousef Alhessi, Shravan Narayan, Fraser Brown, Sorin Lerner, Tyler McMullen, Stefan Savage, Deian Stefan
Доверя'й, но проверя'й: SFI safety for native-compiled Wasm. NDSS (2021)
Nico Lehmann, Rose Kunkel, Jordan Brown, Jean Yang, Niki Vazou, Nadia Polikarpova, Deian Stefan, Ranjit Jhala
STORM: Refinement Types for Secure Web Applications. OSDI (2021)
Matthew Kolosick, Shravan Narayan, Conrad Watt, Michael LeMay, Deepak Garg, Ranjit Jhala, Deian Stefan
Isolation Without Taxation: Near Zero Cost Transitions for SFI. CoRR (2021)
Marco Vassena, Craig Disselkoen, Klaus von Gleissenthall, Sunjay Cauligi, Rami Gökhan Kici, Ranjit Jhala, Dean M. Tullsen, Deian Stefan
Automatically eliminating speculative leaks from cryptographic code with blade. Proc. ACM Program. Lang. 5 (POPL) (2021)
Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean M. Tullsen, Deian Stefan
Swivel: Hardening WebAssembly against Spectre. USENIX Security Symposium (2021)
Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric Rahm, Sorin Lerner, Hovav Shacham, Deian Stefan
Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version). CoRR (2020)
Fraser Brown, Deian Stefan, Dawson R. Engler
Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code. USENIX Security Symposium (2020)
Marco Vassena, Klaus von Gleissenthall, Rami Gökhan Kici, Deian Stefan, Ranjit Jhala
Automatically Eliminating Speculative Leaks With Blade. CoRR (2020)
Nadia Polikarpova, Deian Stefan, Jean Yang, Shachar Itzhaky, Travis Hance, Armando Solar-Lezama
Liquid information flow control. Proc. ACM Program. Lang. 4 (ICFP) (2020)
Tal Garfinkel, Shravan Narayan, Craig Disselkoen, Hovav Shacham, Deian Stefan
The Road to Less Trusted Code: Lowering the Barrier to In-Process Sandboxing. login Usenix Mag. 45 (4) (2020)
Fraser Brown, John Renner, Andres Nötzli, Sorin Lerner, Hovav Shacham, Deian Stefan
Towards a verified range analysis for JavaScript JITs. PLDI (2020)
Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric Rahm, Sorin Lerner, Hovav Shacham, Deian Stefan
Retrofitting Fine Grain Isolation in the Firefox Renderer. USENIX Security Symposium (2020)
Sunjay Cauligi, Craig Disselkoen, Klaus von Gleissenthall, Dean M. Tullsen, Deian Stefan, Tamara Rezk, Gilles Barthe
Constant-time foundations for the new spectre era. PLDI (2020)
Klaus von Gleissenthall, Rami Gökhan Kici, Deian Stefan, Ranjit Jhala
IODINE: Verifying Constant-Time Execution of Hardware. USENIX Security Symposium (2019)
Jean-Pierre Talpin, Jean-Joseph Marty, Shravan Narayan, Deian Stefan, Rajesh Gupta
Towards verified programming of embedded devices. DATE (2019)
Marco Vassena, Alejandro Russo, Deepak Garg, Vineet Rajani, Deian Stefan
From fine- to coarse-grained dynamic information flow control and back. Proc. ACM Program. Lang. 3 (POPL) (2019)
Sunjay Cauligi, Gary Soeller, Brian Johannesmeyer, Fraser Brown, Riad S. Wahby, John Renner, Benjamin Grégoire, Gilles Barthe, Ranjit Jhala, Deian Stefan
FaCT: a DSL for timing-sensitive computation. PLDI (2019)
Marco Vassena, Gary Soeller, Peter Amidon, Matthew Chan, John Renner, Deian Stefan
Foundations for Parallel Information Flow Control Runtime Systems. POST (2019)
Klaus von Gleissenthall, Rami Gökhan Kici, Alexander Bakst, Deian Stefan, Ranjit Jhala
Pretend synchrony: synchronous verification of asynchronous distributed programs. Proc. ACM Program. Lang. 3 (POPL) (2019)
Shravan Narayan, Tal Garfinkel, Sorin Lerner, Hovav Shacham, Deian Stefan
Gobi: WebAssembly as a Practical Path to Library Sandboxing. CoRR (2019)
Klaus von Gleissenthall, Rami Gökhan Kici, Deian Stefan, Ranjit Jhala
Iodine: Verifying Constant-Time Execution of Hardware. CoRR (2019)
Conrad Watt, John Renner, Natalie Popescu, Sunjay Cauligi, Deian Stefan
CT-wasm: type-driven secure cryptography for the web ecosystem. Proc. ACM Program. Lang. 3 (POPL) (2019)
Craig Disselkoen, John Renner, Conrad Watt, Tal Garfinkel, Amit Levy, Deian Stefan
Position Paper: Progressive Memory Safety for WebAssembly. HASP@ISCA (2019)
Sunjay Cauligi, Craig Disselkoen, Klaus von Gleissenthall, Deian Stefan, Tamara Rezk, Gilles Barthe
Towards Constant-Time Foundations for the New Spectre Era. CoRR (2019)
Conrad Watt, John Renner, Natalie Popescu, Sunjay Cauligi, Deian Stefan
CT-Wasm: Type-Driven Secure Cryptography for the Web Ecosystem. CoRR (2018)
Marc Andrysco, Andres Nötzli, Fraser Brown, Ranjit Jhala, Deian Stefan
Towards Verified, Constant-time Floating Point Operations. CCS (2018)
Michael Smith, Craig Disselkoen, Shravan Narayan, Fraser Brown, Deian Stefan
Browser history re: visited. WOOT @ USENIX Security Symposium (2018)
Sunjay Cauligi, Gary Soeller, Fraser Brown, Brian Johannesmeyer, Yunlu Huang, Ranjit Jhala, Deian Stefan
FaCT: A Flexible, Constant-Time Programming Language. SecDev (2017)
Fraser Brown, Shravan Narayan, Riad S. Wahby, Dawson R. Engler, Ranjit Jhala, Deian Stefan
Finding and Preventing Bugs in JavaScript Bindings. IEEE Symposium on Security and Privacy (2017)
Daniel B. Giffin, Amit Levy, Deian Stefan, David Terei, David Mazières, John C. Mitchell, Alejandro Russo
Hails: Protecting data privacy in untrusted web applications. J. Comput. Secur. 25 (4-5) (2017)
Deian Stefan, David Mazières, John C. Mitchell, Alejandro Russo
Flexible dynamic information flow control in the presence of exceptions. J. Funct. Program. 27 (2017)
Toby C. Murray, Deian Stefan
PLAS'16: ACM SIGPLAN 11th Workshop on Programming Languages and Analysis for Security. CCS (2016)
Pablo Buiras, Deian Stefan, Alejandro Russo
On Dynamic Flow-Sensitive Floating-Label Systems. CoRR (2015)
Stefan Heule, Devon Rifkin, Alejandro Russo, Deian Stefan
The Most Dangerous Code in the Browser. HotOS (2015)
Stefan Heule, Deian Stefan, Edward Z. Yang, John C. Mitchell, Alejandro Russo
IFC Inside: Retrofitting Languages with Dynamic Information Flow Control (Extended Version). CoRR (2015)
Stefan Heule, Deian Stefan, Edward Z. Yang, John C. Mitchell, Alejandro Russo
IFC Inside: Retrofitting Languages with Dynamic Information Flow Control. POST (2015)
Deian Stefan, Edward Z. Yang, Petr Marchenko, Alejandro Russo, David Herman, Brad Karp, David Mazières
Protecting Users by Confining JavaScript with COWL. OSDI (2014)
Deian Stefan, Amit Levy, Alejandro Russo, David Mazières
Building secure systems with LIO (demo). Haskell (2014)
Deian Stefan, David Mazières
Building Secure Systems with LIO (Demo). PLAS@ECOOP (2014)
Pablo Buiras, Deian Stefan, Alejandro Russo
On Dynamic Flow-Sensitive Floating-Label Systems. CSF (2014)
Amit A. Levy, David Terei, Deian Stefan, David Mazières
Demo proposal: making web applications -XSafe. Haskell (2014)
Edward Z. Yang, Deian Stefan, John C. Mitchell, David Mazières, Petr Marchenko, Brad Karp
Toward Principled Browser Security. HotOS (2013)
Deian Stefan, Pablo Buiras, Edward Z. Yang, Amit Levy, David Terei, Alejandro Russo, David Mazières
Eliminating Cache-Based Timing Attacks with Instruction-Based Scheduling. ESORICS (2013)
Pablo Buiras, Amit Levy, Deian Stefan, Alejandro Russo, David Mazières
A Library for Removing Cache-Based Attacks in Concurrent Information Flow Systems. TGC (2013)
John C. Mitchell, Rahul Sharma, Deian Stefan, Joe Zimmerman
Information-Flow Control for Programming on Encrypted Data. CSF (2012)
Daniel B. Giffin, Amit Levy, Deian Stefan, David Terei, David Mazières, John C. Mitchell, Alejandro Russo
Hails: Protecting Data Privacy in Untrusted Web Applications. OSDI (2012)
Kui Xu, Huijun Xiong, Chehai Wu, Deian Stefan, Danfeng Yao
Data-Provenance Verification For Secure Hosts. IEEE Trans. Dependable Secur. Comput. 9 (2) (2012)
John C. Mitchell, Rahul Sharma, Deian Stefan, Joe Zimmerman
Information-flow control for programming on encrypted data. IACR Cryptol. ePrint Arch. 2012 (2012)
Deian Stefan, Xiaokui Shu, Danfeng (Daphne) Yao
Robustness of keystroke-dynamics based biometrics against synthetic forgeries. Comput. Secur. 31 (1) (2012)
Deian Stefan, Alejandro Russo, Pablo Buiras, Amit Levy, John C. Mitchell, David Mazières
Addressing covert termination and timing channels in concurrent information flow systems. ICFP (2012)
Deian Stefan, Alejandro Russo, John C. Mitchell, David Mazières
Flexible Dynamic Information Flow Control in the Presence of Exceptions CoRR (2012)
Deian Stefan, Alejandro Russo, John C. Mitchell, David Mazières
Flexible dynamic information flow control in Haskell. Haskell (2011)
Deian Stefan, Alejandro Russo, David Mazières, John C. Mitchell
Disjunction Category Labels. NordSec (2011)
Alex Bain, John C. Mitchell, Rahul Sharma, Deian Stefan, Joe Zimmerman
A Domain-Specific Language for Computing on Encrypted Data (Invited Talk). FSTTCS (2011)
Alex Bain, John C. Mitchell, Rahul Sharma, Deian Stefan, Joe Zimmerman
A Domain-Specific Language for Computing on Encrypted Data. IACR Cryptol. ePrint Arch. 2011 (2011)
Deian Stefan, Danfeng Yao
Keystroke-dynamics authentication against synthetic forgeries. CollaborateCom (2010)
Shahram Khazaei, Simon Knellwolf, Willi Meier, Deian Stefan
Improved Linear Differential Attacks on CubeHash. AFRICACRYPT (2010)
Dag Arne Osvik, Joppe W. Bos, Deian Stefan, David Canright
Fast Software AES Encryption. FSE (2010)
Joppe W. Bos, Deian Stefan
Performance Analysis of the SHA-3 Candidates on Exotic Multi-core Architectures. CHES (2010)
Deian Stefan
Hardware Framework for the Rabbit Stream Cipher. Inscrypt (2009)
Joppe W. Bos, Dag Arne Osvik, Deian Stefan
Fast Implementations of AES on Various Platforms. IACR Cryptol. ePrint Arch. 2009 (2009)
Hassan Edrees, Brian Cheung, McCullen Sandora, David B. Nummey, Deian Stefan
Hardware-Optimized Ziggurat Algorithm for High-Speed Gaussian Random Number Generators. ERSA (2009)
Huijun Xiong, Prateek Malhotra, Deian Stefan, Chehai Wu, Danfeng Yao
User-Assisted Host-Based Detection of Outbound Malware Traffic. ICICS (2009)
Deian Stefan, David B. Nummey, Jared Harwayne-Gidansky, Ishaan L. Dalal
On Parallelizing the CryptMT Stream Cipher. VTC Spring (2008)
Ishaan L. Dalal, Deian Stefan, Jared Harwayne-Gidansky
Low discrepancy sequences for Monte Carlo simulations on reconfigurable platforms. ASAP (2008)
Ishaan L. Dalal, Deian Stefan
A hardware framework for the fast generation of multiple long-period random number streams. FPGA (2008)
Deian Stefan
Prostate ultrasound image processing. ACM Crossroads 13 (3) (2007)