Paul C. van Oorschot

ORCID

Publication Activity (10 Years)

Years Active: 1988-2024
Publications (10 Years): 57

Top Venues

CoRR

IEEE Secur. Priv.

IEEE Trans. Dependable Secur. Comput.

AsiaCCS

Publications

Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
Influences of displaying permission-related information on web single sign-on login decisions. Comput. Secur. 139 (2024)
Frank Piessens, Paul C. van Oorschot
Side-Channel Attacks: A Short Tour. IEEE Secur. Priv. 22 (2) (2024)
Feng Hao, Samiran Bag, Liqun Chen, Paul C. van Oorschot
Owl: An Augmented Password-Authenticated Key Exchange Scheme. IACR Cryptol. ePrint Arch. 2023 (2023)
David Barrera, Christopher Bellman, Paul C. van Oorschot
A close look at a systematic method for analyzing sets of security advice. J. Cybersecur. 9 (1) (2023)
Xavier de Carné de Carnavalet, Paul C. van Oorschot
A Survey and Analysis of TLS Interception Mechanisms and Motivations: Exploring how end-to-end TLS is made "end-to-me" for web traffic. ACM Comput. Surv. 55 (13s) (2023)
Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
Influences of Displaying Permission-related Information on Web Single Sign-On Login Decisions. CoRR (2023)
Paul C. van Oorschot
Memory Errors and Memory Safety: C as a Case Study. IEEE Secur. Priv. 21 (2) (2023)
Christopher Bellman, Paul C. van Oorschot
Systematic analysis and comparison of security advice as datasets. Comput. Secur. 124 (2023)
Paul C. van Oorschot
Memory Errors and Memory Safety: A Look at Java and Rust. IEEE Secur. Priv. 21 (3) (2023)
David Barrera, Christopher Bellman, Paul C. van Oorschot
Security Best Practices: A Critical Analysis Using IoT as a Case Study. ACM Trans. Priv. Secur. 26 (2) (2023)
Christopher Bellman, Paul C. van Oorschot
Systematic Analysis and Comparison of Security Advice Datasets. CoRR (2022)
Paul C. van Oorschot
Security as an Artificial Science, System Administration, and Tools. IEEE Secur. Priv. 20 (6) (2022)
Paul C. van Oorschot
A View of Security as 20 Subject Areas in Four Themes. IEEE Secur. Priv. 20 (1) (2022)
David Barrera, Christopher Bellman, Paul C. van Oorschot
A Close Look at a Systematic Method for Analyzing Sets of Security Advice. CoRR (2022)
Feng Hao, Paul C. van Oorschot
SoK: Password-Authenticated Key Exchange - Theory, Practice, Standardization and Real-World Lessons. AsiaCCS (2022)
David Barrera, Christopher Bellman, Paul C. van Oorschot
Security Best Practices: A Critical Analysis Using IoT as a Case Study. CoRR (2022)
Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
SSOPrivateEye: Timely Disclosure of Single Sign-On Privacy Design Differences. CoRR (2022)
Paul C. van Oorschot
Coevolution of Security's Body of Knowledge and Curricula. IEEE Secur. Priv. 19 (5) (2021)
Furkan Alaca, AbdelRahman Abdou, Paul C. van Oorschot
Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes. IEEE Trans. Dependable Secur. Comput. 18 (2) (2021)
Jeremy Clark, Paul C. van Oorschot, Scott Ruoti, Kent E. Seamons, Daniel Zappala
SoK: Securing Email - A Stakeholder-Based Analysis. Financial Cryptography (1) (2021)
Srivathsan G. Morkonda, Paul C. van Oorschot, Sonia Chiasson
Exploring Privacy Implications in OAuth Deployments. CoRR (2021)
Srivathsan G. Morkonda, Sonia Chiasson, Paul C. van Oorschot
Empirical Analysis and Privacy Implications in OAuth-based Single Sign-On Systems. WPES@CCS (2021)
Paul C. van Oorschot
Toward Unseating the Unsafe C Programming Language. IEEE Secur. Priv. 19 (2) (2021)
Feng Hao, Paul C. van Oorschot
SoK: Password-Authenticated Key Exchange - Theory, Practice, Standardization and Real-World Lessons. IACR Cryptol. ePrint Arch. 2021 (2021)
Paul C. van Oorschot
Blockchains and Stealth Tactics for Teaching Security. IEEE Secur. Priv. 18 (5) (2020)
Christopher Bellman, Paul C. van Oorschot
Best Practices for IoT Security: What Does That Even Mean? CoRR (2020)
Stephanos Matsumoto, Jay Bosamiya, Yucheng Dai, Paul C. van Oorschot, Bryan Parno
CAPS: Smoothly Transitioning to a More Resilient Web PKI. ACSAC (2020)
Xavier de Carné de Carnavalet, Paul C. van Oorschot
A survey and analysis of TLS interception mechanisms and motivations. CoRR (2020)
Paul C. van Oorschot
Untangling Security and Privacy. IEEE Secur. Priv. 18 (2) (2020)
Furkan Alaca, Paul C. van Oorschot
Comparative Analysis and Framework Evaluating Web Single Sign-on Systems. ACM Comput. Surv. 53 (5) (2020)
Paul C. van Oorschot
Software Security and Systematizing Knowledge. IEEE Secur. Priv. 17 (3) (2019)
Hemant Gupta, Paul C. van Oorschot
Onboarding and Software Update Architecture for IoT Devices. PST (2019)
AbdelRahman Abdou, Paul C. van Oorschot
Secure Client and Server Geolocation Over the Internet. CoRR (2019)
Christopher Bellman, Paul C. van Oorschot
Analysis, Implications, and Challenges of an Evolving Consumer IoT Security Landscape. PST (2019)
Paul C. van Oorschot, Sean W. Smith
The Internet of Things: Security Challenges. IEEE Secur. Priv. 17 (5) (2019)
John D. McLean, Cormac Herley, Paul C. van Oorschot
Letter to the Editor. IEEE Secur. Priv. 16 (3) (2018)
Toby C. Murray, Paul C. van Oorschot
BP: Formal Proofs, the Fine Print and Side Effects. SecDev (2018)
AbdelRahman Abdou, Paul C. van Oorschot
Secure Client and Server Geolocation over the Internet. login Usenix Mag. 43 (1) (2018)
AbdelRahman Abdou, Paul C. van Oorschot
Server Location Verification (SLV) and Server Location Pinning: Augmenting TLS Authentication. ACM Trans. Priv. Secur. 21 (1) (2018)
Markus Miettinen, Paul C. van Oorschot, Ahmad-Reza Sadeghi
Baseline functionality for security and control of commodity IoT devices and domain-controlled device lifecycle management. CoRR (2018)
AbdelRahman Abdou, Paul C. van Oorschot, Tao Wan
Comparative Analysis of Control Plane Security of SDN and Conventional Networks. IEEE Commun. Surv. Tutorials 20 (4) (2018)
Cormac Herley, Paul C. van Oorschot
Science of Security: Combining Theory and Measurement to Reflect the Observable. IEEE Secur. Priv. 16 (1) (2018)
Jeremy Clark, Paul C. van Oorschot, Scott Ruoti, Kent E. Seamons, Daniel Zappala
Securing Email. CoRR (2018)
Furkan Alaca, Paul C. van Oorschot
Comparative Analysis and Framework Evaluating Web Single Sign-On Systems. CoRR (2018)
Kevin R. B. Butler, Robert K. Cunningham, Paul C. van Oorschot, Reihaneh Safavi-Naini, Ashraf Matrawy, Jeremy Clark
A Discussion on Security Education in Academia. CCS (2018)
AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
CPV: Delay-Based Location Verification for the Internet. IEEE Trans. Dependable Secur. Comput. 14 (2) (2017)
Furkan Alaca, AbdelRahman Abdou, Paul C. van Oorschot
Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes. CoRR (2017)
AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
Location Verification of Wireless Internet Clients: Evaluation and Improvements. IEEE Trans. Emerg. Top. Comput. 5 (4) (2017)
Paul C. van Oorschot
Science, Security and Academic Literature: Can We Learn from History? MTD@CCS (2017)
Tao Wan, AbdelRahman Abdou, Paul C. van Oorschot
A Framework and Comparative Analysis of Control Plane Security of SDN and Conventional Networks. CoRR (2017)
AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
Accurate Manipulation of Delay-based Internet Geolocation. AsiaCCS (2017)
Cormac Herley, Paul C. van Oorschot
SoK: Science, Security and the Elusive Goal of Security as a Scientific Pursuit. IEEE Symposium on Security and Privacy (2017)
Manar Mohamed, Song Gao, Niharika Sachdeva, Nitesh Saxena, Chengcui Zhang, Ponnurangam Kumaraguru, Paul C. van Oorschot
On the security and usability of dynamic cognitive game CAPTCHAs. J. Comput. Secur. 25 (3) (2017)
AbdelRahman Abdou, Paul C. van Oorschot
Server Location Verification and Server Location Pinning: Augmenting TLS Authentication. CoRR (2016)
Dinei Florêncio, Cormac Herley, Paul C. van Oorschot
Pushing on string: the 'don't care' region of password strength. Commun. ACM 59 (11) (2016)
Furkan Alaca, Paul C. van Oorschot
Device fingerprinting for augmenting web authentication: classification and analysis of methods. ACSAC (2016)
Leah Zhang-Kennedy, Sonia Chiasson, Paul C. van Oorschot
Revisiting password rules: facilitating human management of passwords. eCrime (2016)
Chaitrali Amrutkar, Patrick Traynor, Paul C. van Oorschot
An Empirical Evaluation of Security Indicators in Mobile Web Browsers. IEEE Trans. Mob. Comput. 14 (5) (2015)
AbdelRahman Abdou, David Barrera, Paul C. van Oorschot
What Lies Beneath? Analyzing Automated SSH Bruteforce Attacks. PASSWORDS (2015)
Sonia Chiasson, Paul C. van Oorschot
Quantifying the security advantage of password expiration policies. Des. Codes Cryptogr. 77 (2-3) (2015)
AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
Taxing the Queue: Hindering Middleboxes From Unauthorized Large-Scale Traffic Relaying. IEEE Commun. Lett. 19 (1) (2015)
Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
Passwords and the evolution of imperfect authentication. Commun. ACM 58 (7) (2015)
Gerardo Reynaga, Sonia Chiasson, Paul C. van Oorschot
Heuristics for the evaluation of captchas on smartphones. BCS HCI (2015)
AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
Accurate One-Way Delay Estimation With Reduced Client Trustworthiness. IEEE Commun. Lett. 19 (5) (2015)
AbdelRahman Abdou, Ashraf Matrawy, Paul C. van Oorschot
Location verification on the Internet: Towards enforcing location-aware access policies over Internet clients. CNS (2014)
Dinei Florêncio, Cormac Herley, Paul C. van Oorschot
An Administrator's Guide to Internet Password Research. LISA (2014)
Manar Mohamed, Niharika Sachdeva, Michael Georgescu, Song Gao, Nitesh Saxena, Chengcui Zhang, Ponnurangam Kumaraguru, Paul C. van Oorschot, Wei-bang Chen
A three-way investigation of a game-CAPTCHA: automated attacks, relay attacks and usability. AsiaCCS (2014)
David Barrera, Daniel McCarney, Jeremy Clark, Paul C. van Oorschot
Baton: certificate agility for android's decentralized signing infrastructure. WISEC (2014)
Yi Xu, Gerardo Reynaga, Sonia Chiasson, Jan-Michael Frahm, Fabian Monrose, Paul C. van Oorschot
Security Analysis and Related Usability of Motion-Based CAPTCHAs: Decoding Codewords in Motion. IEEE Trans. Dependable Secur. Comput. 11 (5) (2014)
Dinei Florêncio, Cormac Herley, Paul C. van Oorschot
Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts. USENIX Security Symposium (2014)
Adam Skillen, David Barrera, Paul C. van Oorschot
Deadbolt: locking down android disk encryption. SPSM@CCS (2013)
Mansour Alsaleh, Paul C. van Oorschot
Evaluation in the absence of absolute ground truth: toward reliable evaluation methodology for scan detectors. Int. J. Inf. Sec. 12 (2) (2013)
Serge Egelman, Cormac Herley, Paul C. van Oorschot
Markets for zero-day exploits: ethics and implications. NSPW (2013)
Manar Mohamed, Niharika Sachdeva, Michael Georgescu, Song Gao, Nitesh Saxena, Chengcui Zhang, Ponnurangam Kumaraguru, Paul C. van Oorschot, Wei-bang Chen
Three-Way Dissection of a Game-CAPTCHA: Automated Attacks, Relay Attacks, and Usability. CoRR (2013)
Jeremy Clark, Paul C. van Oorschot
SoK: SSL and HTTPS: Revisiting Past Challenges and Evaluating Certificate Trust Model Enhancements. IEEE Symposium on Security and Privacy (2013)
David Barrera, Jeremy Clark, Daniel McCarney, Paul C. van Oorschot
Understanding and improving app installation security mechanisms through empirical analysis of android. SPSM@CCS (2012)
Dirk Balfanz, Richard Chow, Ori Eisen, Markus Jakobsson, Steve Kirsch, Scott Matsumoto, Jesus Molina, Paul C. van Oorschot
The Future of Authentication. IEEE Secur. Priv. 10 (1) (2012)
Mansour Alsaleh, Paul C. van Oorschot
Revisiting network scanning detection using sequential hypothesis testing. Secur. Commun. Networks 5 (12) (2012)
Mohammad Mannan, Paul C. van Oorschot
Passwords for Both Mobile and Desktop Computers Appendix. login Usenix Mag. 37 (4) (2012)
Daniel McCarney, David Barrera, Jeremy Clark, Sonia Chiasson, Paul C. van Oorschot
Tapas: design, implementation, and usability evaluation of a password manager. ACSAC (2012)
Robert Biddle, Sonia Chiasson, Paul C. van Oorschot
Graphical passwords: Learning from the first twelve years. ACM Comput. Surv. 44 (4) (2012)
Cormac Herley, Paul C. van Oorschot
A Research Agenda Acknowledging the Persistence of Passwords. IEEE Secur. Priv. 10 (1) (2012)
Joseph Bonneau, Cormac Herley, Paul C. van Oorschot, Frank Stajano
The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes. IEEE Symposium on Security and Privacy (2012)
Mansour Alsaleh, Mohammad Mannan, Paul C. van Oorschot
Revisiting Defenses against Large-Scale Online Password Guessing Attacks. IEEE Trans. Dependable Secur. Comput. 9 (1) (2012)
Sonia Chiasson, Elizabeth Stobert, Alain Forget, Robert Biddle, Paul C. van Oorschot
Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism. IEEE Trans. Dependable Secur. Comput. 9 (2) (2012)
Chaitrali Amrutkar, Patrick Traynor, Paul C. van Oorschot
Measuring SSL Indicators on Mobile Browsers: Extended Life, or End of the Road? ISC (2012)
Yi Xu, Gerardo Reynaga, Sonia Chiasson, Jan-Michael Frahm, Fabian Monrose, Paul C. van Oorschot
Security and Usability Challenges of Moving-Object CAPTCHAs: Decoding Codewords in Motion. USENIX Security Symposium (2012)
Mohammad Mannan, Paul C. van Oorschot
Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android. login Usenix Mag. 37 (4) (2012)
Paul C. van Oorschot, Glenn Wurster
Reducing Unauthorized Modification of Digital Objects. IEEE Trans. Software Eng. 38 (1) (2012)
Robert Biddle, Mohammad Mannan, Paul C. van Oorschot, Tara Whalen
User Study, Analysis, and Usable Security of Passwords Based on Digital Objects. IEEE Trans. Inf. Forensics Secur. 6 (3-2) (2011)
Mohammad Mannan, Paul C. van Oorschot
Leveraging personal devices for stronger password authentication from untrusted computers. J. Comput. Secur. 19 (4) (2011)
Mohammad Mannan, David Barrera, Carson D. Brown, David Lie, Paul C. van Oorschot
Mercury: Recovering Forgotten Passwords Using Personal Devices. Financial Cryptography (2011)
David Barrera, Paul C. van Oorschot
Secure Software Installation on Smartphones. IEEE Secur. Priv. 9 (3) (2011)
Paul C. van Oorschot, Julie Thorpe
Exploiting predictability in click-based graphical passwords. J. Comput. Secur. 19 (4) (2011)
Kemal Bicakci, Nart Bedin Atalay, Mustafa Yuceel, Paul C. van Oorschot
Exploration and Field Study of a Password Manager Using Icon-Based Passwords. Financial Cryptography Workshops (2011)
Kemal Bicakci, Paul C. van Oorschot
A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation. NSPW (2011)
Trent Jaeger, Paul C. van Oorschot, Glenn Wurster
Countering unauthorized code execution on commodity kernels: A survey of common interfaces allowing kernel code modification. Comput. Secur. 30 (8) (2011)
David Barrera, Glenn Wurster, Paul C. van Oorschot
Back to the Future: Revisiting IPv6 Privacy Extensions. login Usenix Mag. 36 (1) (2011)
Mansour Alsaleh, Paul C. van Oorschot
Network scan detection with LQS: a lightweight, quick and stateful algorithm. AsiaCCS (2011)
David Barrera, Paul C. van Oorschot
Accommodating IPv6 Addresses in Security Visualization Tools. Inf. Vis. 10 (2) (2011)

Paul C. van Oorschot.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Paul C. van Oorschot