Santiago Torres-Arias

Publication Activity (10 Years)

Years Active: 2014-2024
Publications (10 Years): 27

Top Topics

Bullwhip Effect

Influencing Factors

Top Venues

J. Comput. Secur.

USENIX Security Symposium

Publications

Taylor R. Schorlemmer, Kelechi G. Kalu, Luke Chigges, Kyung Myung Ko, Eman Abdul-Muhd Abu Isghair, Saurabh Baghi, Santiago Torres-Arias, James C. Davis
Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors. CoRR (2024)
Austen Knapp, Emmanuel Wamuo, Minhajul Alam Rahat, Santiago Torres-Arias, Gedare Bloom, Yanyan Zhuang
Should Smart Homes Be Afraid of Evil Maids? : Identifying Vulnerabilities in IoT Device Firmware. CCWC (2024)
Taylor R. Schorlemmer, Ethan H. Burmane, Kelechi G. Kalu, Santiago Torres-Arias, James C. Davis
Establishing Provenance Before Coding: Traditional and Next-Gen Signing. CoRR (2024)
Chinenye L. Okafor, James C. Davis, Santiago Torres-Arias
DiVerify: Diversifying Identity Verification in Next-Generation Software Signing. CoRR (2024)
Eman Abu Ishgair, Marcela S. Melara, Santiago Torres-Arias
SoK: A Defense-Oriented Evaluation of Software Supply Chain Security. CoRR (2024)
Kelechi G. Kalu, Tanya Singla, Chinenye Okafor, Santiago Torres-Arias, James C. Davis
An Industry Interview Study of Software Signing for Supply Chain Security. CoRR (2024)
Chinenye Okafor, Taylor R. Schorlemmer, Santiago Torres-Arias, James C. Davis
SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties. CoRR (2024)
Hongying Dong, Hao Shu, Vijay Prakash, Yizhe Zhang, Muhammad Talha Paracha, David R. Choffnes, Santiago Torres-Arias, Danny Yuxing Huang, Yixin Sun
Behind the Scenes: Uncovering TLS and Server Certificate Practice of IoT Device Vendors in the Wild. IMC (2023)
Marcela S. Melara, Santiago Torres-Arias
A Viewpoint on Software Supply Chain Security: Are We Getting Lost in Translation? IEEE Secur. Priv. 21 (6) (2023)
Marcela S. Melara, Santiago Torres-Arias, Laurent Simon
SCORED '23: Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses. CCS (2023)
Ayushi Sharma, Shashank Sharma, Santiago Torres-Arias, Aravind Machiry
Rust for Embedded Systems: Current State, Challenges and Open Problems. CoRR (2023)
Kelsey Merrill, Zachary Newman, Santiago Torres-Arias, Karen R. Sollins
Speranza: Usable, Privacy-friendly Software Signing. CCS (2023)
Paschal C. Amusuo, Kyle A. Robinson, Santiago Torres-Arias, Laurent Simon, James C. Davis
Preventing Supply Chain Vulnerabilities in Java with a Fine-Grained Permission Manager. CoRR (2023)
Kelsey Merrill, Zachary Newman, Santiago Torres-Arias, Karen R. Sollins
Speranza: Usable, privacy-friendly software signing. CoRR (2023)
Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
Towards verifiable web-based code review systems. J. Comput. Secur. 31 (2) (2023)
Santiago Torres-Arias, Daniel E. Geer, John Speed Meyers
A Viewpoint on Knowing Software: Bill of Materials Quality When You See It. IEEE Secur. Priv. 21 (6) (2023)
Chinenye Okafor, Taylor R. Schorlemmer, Santiago Torres-Arias, James C. Davis
SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties. SCORED@CCS (2022)
Zachary Newman, John Speed Meyers, Santiago Torres-Arias
Sigstore: Software Signing for Everybody. CCS (2022)
Santiago Torres-Arias, Marcela Melara, Laurent Simon
SCORED '22: ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses. CCS (2022)
Sangat Vaidya, Santiago Torres-Arias, Justin Cappos, Reza Curtmola
Bootstrapping Trust in Community Repository Projects. SecureComm (2022)
Kevin Gallagher, Santiago Torres-Arias, Nasir D. Memon, Jessica Feldman
COLBAC: Shifting Cybersecurity from Hierarchical to Horizontal Designs. NSPW (2021)
Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
Towards adding verifiability to web-based Git repositories. J. Comput. Secur. 28 (4) (2020)
Sangat Vaidya, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
Commit Signatures for Centralized Version Control Systems. SEC (2019)
Santiago Torres-Arias, Hammad Afzali, Trishank Karthik Kuppusamy, Reza Curtmola, Justin Cappos
in-toto: Providing farm-to-table guarantees for bits and bytes. USENIX Security Symposium (2019)
Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos
le-git-imate: Towards Verifiable Web-based Git Repositories. AsiaCCS (2018)
Santiago Torres-Arias, Anil Kumar Ammula, Reza Curtmola, Justin Cappos
On Omitting Commits and Committing Omissions: Preventing Git Metadata Tampering That (Re)introduces Software Vulnerabilities. USENIX Security Symposium (2016)
Trishank Karthik Kuppusamy, Santiago Torres-Arias, Vladimir Diaz, Justin Cappos
Diplomat: Using Delegations to Protect Community Repositories. NSDI (2016)
Santiago Torres-Arias, Justin Cappos
PolyPasswordHasher: Improving Password Storage Security. login Usenix Mag. 39 (6) (2014)