William Enck

ORCID

Publication Activity (10 Years)

Years Active: 2005-2024
Publications (10 Years): 66

Top Venues

CoRR

USENIX Security Symposium

CODASPY

SACMAT

Publications

Trevor Dunlap, John Speed Meyers, Bradley Reaves, William Enck
Pairing Security Advisories with Vulnerable Functions Using Open-Source LLMs. DIMVA (2024)
Seaver Thorn, K. Virgil English, Kevin R. B. Butler, William Enck
5GAC-Analyzer: Identifying Over-Privilege Between 5G Core Network Functions. WISEC (2024)
Imranur Rahman, Nusrat Zahan, Stephen Magill, William Enck, Laurie A. Williams
Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages. CoRR (2024)
K. Virgil English, Nathaniel Bennett, Seaver Thorn, Kevin R. B. Butler, William Enck, Patrick Traynor
Examining Cryptography and Randomness Failures in Open-Source Cellular Cores. CODASPY (2024)
Trevor Dunlap, Elizabeth Lin, William Enck, Bradley Reaves
VFCFinder: Pairing Security Advisories and Patches. AsiaCCS (2024)
Greg Tystahl, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. CoRR (2024)
Isaac Polinsky, Pubali Datta, Adam Bates, William Enck
GRASP: Hardening Serverless Applications through Graph Reachability Analysis of Security Policies. WWW (2024)
Marcel Fourné, Dominik Wermke, William Enck, Sascha Fahl, Yasemin Acar
It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security. SP (2023)
Mindy Tran, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit. CoRR (2023)
Yu Tsung Lee, Haining Chen, William Enck, Hayawardh Vijayakumar, Ninghui Li, Zhiyun Qian, Giuseppe Petracca
PolyScope: Multi-Policy Access Control Analysis to Triage Android Scoped Storage. CoRR (2023)
Siddharth Muralee, Igibek Koishybayev, Aleksandr Nahapetyan, Greg Tystahl, Bradley Reaves, Antonio Bianchi, William Enck, Alexandros Kapravelos, Aravind Machiry
ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions. USENIX Security Symposium (2023)
William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2023-06: Government Secure Supply Chain Summit. CoRR (2023)
Trevor Dunlap, Elizabeth Lin, William Enck, Bradley Reaves
VFCFinder: Seamlessly Pairing Security Advisories and Patches. CoRR (2023)
Iffat Anjum, Jessica Sokal, Hafiza Ramzah Rehman, Ben Weintraub, Ethan Leba, William Enck, Cristina Nita-Rotaru, Bradley Reaves
MSNetViews: Geographically Distributed Management of Enterprise Network Security Policy. SACMAT (2023)
Trevor Dunlap, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
S3C2 Summit 2023-02: Industry Secure Supply Chain Summit. CoRR (2023)
Trevor Dunlap, Seaver Thorn, William Enck, Bradley Reaves
Finding Fixed Vulnerabilities with Off-the-Shelf Static Analysis. EuroS&P (2023)
Nusrat Zahan, Elizabeth Lin, Mahzabin Tamanna, William Enck, Laurie A. Williams
Software Bills of Materials Are Required. Are We There Yet? IEEE Secur. Priv. 21 (2) (2023)
Sigmund Albert Gorski III, Seaver Thorn, William Enck, Haining Chen
FReD: Identifying File Re-Delegation in Android System Services. USENIX Security Symposium (2022)
William Enck, Laurie A. Williams
Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations. IEEE Secur. Priv. 20 (2) (2022)
Samin Yaseer Mahmud, K. Virgil English, Seaver Thorn, William Enck, Adam Oest, Muhammad Saad
Analysis of Payment Service Provider SDKs in Android. ACSAC (2022)
William Enck
Reflections on a Decade of Mobile Security Research. WISEC (2022)
Iffat Anjum, Daniel Kostecki, Ethan Leba, Jessica Sokal, Rajit Bharambe, William Enck, Cristina Nita-Rotaru, Bradley Reaves
Removing the Reliance on Perimeters for Security using Network Views. SACMAT (2022)
Trevor Dunlap, William Enck, Bradley Reaves
A Study of Application Sandbox Policies in Linux. SACMAT (2022)
Pubali Datta, Isaac Polinsky, Muhammad Adil Inam, Adam Bates, William Enck
ALASTOR: Reconstructing the Provenance of Serverless Intrusions. USENIX Security Symposium (2022)
Iffat Anjum, Mu Zhu, Isaac Polinsky, William Enck, Michael K. Reiter, Munindar P. Singh
Role-Based Deception in Enterprise Networks. CODASPY (2021)
Christopher Lentzsch, Sheel Jayesh Shah, Benjamin Andow, Martin Degeling, Anupam Das, William Enck
Hey Alexa, is this Skill Safe?: Taking a Closer Look at the Alexa Skill Ecosystem. NDSS (2021)
Isaac Polinsky, Pubali Datta, Adam Bates, William Enck
SCIFFS: Enabling Secure Third-Party Security Analytics using Serverless Computing. SACMAT (2021)
Yu Tsung Lee, William Enck, Haining Chen, Hayawardh Vijayakumar, Ninghui Li, Zhiyun Qian, Daimeng Wang, Giuseppe Petracca, Trent Jaeger
PolyScope: Multi-Policy Access Control Analysis to Compute Authorized Attack Operations in Android Systems. USENIX Security Symposium (2021)
Emily Stark, Joe DeBlasio, Devon O'Brien, Davide Balzarotti, William Enck, Samuel King, Angelos Stavrou
Certificate Transparency in Google Chrome: Past, Present, and Future. IEEE Secur. Priv. 19 (6) (2021)
Md. Rayhanur Rahman, William Enck, Laurie A. Williams
Do configuration management tools make systems more secure?: an empirical research plan. HotSoS (2020)
Yu Tsung Lee, William Enck, Haining Chen, Hayawardh Vijayakumar, Ninghui Li, Daimeng Wang, Zhiyun Qian, Giuseppe Petracca, Trent Jaeger
PolyScope: Multi-Policy Access Control Analysis to Triage Android Systems. CoRR (2020)
Benjamin Andow, Samin Yaseer Mahmud, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, Serge Egelman
Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck. USENIX Security Symposium (2020)
William Enck
Analysis of Access Control Enforcement in Android. SACMAT (2020)
Isaac Polinsky, Kyle Martin, William Enck, Michael K. Reiter
n-m-Variant Systems: Adversarial-Resistant Software Rejuvenation for Cloud-Based Web Applications. CODASPY (2020)
Iffat Anjum, Mohammad Sujan Miah, Mu Zhu, Nazia Sharmin, Christopher Kiekintveld, William Enck, Munindar P. Singh
Optimizing Vulnerability-Driven Honey Traffic Using Game Theory. CoRR (2020)
Samin Yaseer Mahmud, Akhil Acharya, Benjamin Andow, William Enck, Bradley Reaves
Cardpliance: PCI DSS Compliance of Android Applications. USENIX Security Symposium (2020)
Luke Deshotels, Costin Carabas, Jordan Beichler, Razvan Deaconescu, William Enck
Kobold: Evaluating Decentralized Access Control for Remote NSXPC Methods on iOS. IEEE Symposium on Security and Privacy (2020)
Richard Mitev, Anna Pazii, Markus Miettinen, William Enck, Ahmad-Reza Sadeghi
LeakyPick: IoT Audio Spy Detector. CoRR (2020)
Iffat Anjum, Mu Zhu, Isaac Polinsky, William Enck, Michael K. Reiter, Munindar P. Singh
Role-Based Deception in Enterprise Networks. CoRR (2020)
Richard Mitev, Anna Pazii, Markus Miettinen, William Enck, Ahmad-Reza Sadeghi
LeakyPick: IoT Audio Spy Detector. ACSAC (2020)
Sanket Goutam, William Enck, Bradley Reaves
Hestia: simple least privilege network policies for smart homes. WiSec (2019)
Benjamin Andow, Samin Yaseer Mahmud, Wenyu Wang, Justin Whitaker, William Enck, Bradley Reaves, Kapil Singh, Tao Xie
PolicyLint: Investigating Internal Privacy Policy Contradictions on Google Play. USENIX Security Symposium (2019)
Sigmund Albert Gorski III, William Enck
ARF: identifying re-delegation vulnerabilities in Android system services. WiSec (2019)
Isaac Polinsky, Kyle Martin, William Enck, Michael K. Reiter
n-m-Variant Systems: Adversarial-Resistant Software Rejuvenation for Cloud-Based Web Applications. CoRR (2019)
Sigmund Albert Gorski III, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar, William Enck, Eric Bodden, Alexandre Bartel
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware. CODASPY (2019)
T. J. OConnor, Reham Mohamed, Markus Miettinen, William Enck, Bradley Reaves, Ahmad-Reza Sadeghi
HomeSnitch: behavior transparency and control for smart home IoT devices. WiSec (2019)
William Enck, Terry Benzel
Selected Papers From the 2018 USENIX Security Symposium. IEEE Secur. Priv. 17 (4) (2019)
Sigmund Albert Gorski III, Benjamin Andow, Adwait Nadkarni, Sunil Manandhar, William Enck, Eric Bodden, Alexandre Bartel
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware. CoRR (2019)
Justin Whitaker, Sathvik Prasad, Bradley Reaves, William Enck
Thou Shalt Discuss Security: Quantifying the Impacts of Instructions to RFC Authors. SSR (2019)
T. J. OConnor, William Enck, Bradley Reaves
Blinded and confused: uncovering systemic flaws in device telemetry for smart-home internet of things. WiSec (2019)
Luke Deshotels, Razvan Deaconescu, Costin Carabas, Iulia Manda, William Enck, Mihai Chiroiu, Ninghui Li, Ahmad-Reza Sadeghi
iOracle: Automated Evaluation of Access Control Policies in iOS. AsiaCCS (2018)
T. J. OConnor, William Enck, W. Michael Petullo, Akash Verma
PivotWall: SDN-Based Information Flow Control. SOSR (2018)
Haining Chen, Ninghui Li, William Enck, Yousra Aafer, Xiangyu Zhang
Analysis of SEAndroid Policies: Combining MAC and DAC in Android. ACSAC (2017)
Stephan Heuser, Bradley Reaves, Praveen Kumar Pendyala, Henry Carter, Alexandra Dmitrienko, William Enck, Negar Kiyavash, Ahmad-Reza Sadeghi, Patrick Traynor
Phonion: Practical Protection of Metadata in Telephony Networks. Proc. Priv. Enhancing Technol. 2017 (1) (2017)
Benjamin Andow, Akhil Acharya, Dengfeng Li, William Enck, Kapil Singh, Tao Xie
UiRef: analysis of sensitive user inputs in Android applications. WISEC (2017)
Ruowen Wang, Ahmed M. Azab, William Enck, Ninghui Li, Peng Ning, Xun Chen, Wenbo Shen, Yueqiang Cheng
SPOKE: Scalable Knowledge Collection and Attack Surface Analysis of Access Control Policy for Security Enhanced Android. AsiaCCS (2017)
Rui Shu, Xiaohui Gu, William Enck
A Study of Security Vulnerabilities on Docker Hub. CODASPY (2017)
Adwait Nadkarni, William Enck, Somesh Jha, Jessica Staddon
Policy by Example: An Approach for Security Policy Specification. CoRR (2017)
Benjamin Andow, Adwait Nadkarni, Blake Bassett, William Enck, Tao Xie
A Study of Grayware on Google Play. IEEE Symposium on Security and Privacy Workshops (2016)
Adwait Nadkarni, Benjamin Andow, William Enck, Somesh Jha
Practical DIFC Enforcement on Android. USENIX Security Symposium (2016)
Tao Xie, William Enck
Text analytics for security: tutorial. HotSoS (2016)
Razvan Deaconescu, Luke Deshotels, Mihai Bucicoiu, William Enck, Lucas Davi, Ahmad-Reza Sadeghi
SandBlaster: Reversing the Apple Sandbox. CoRR (2016)
Luke Deshotels, Razvan Deaconescu, Mihai Chiroiu, Lucas Davi, William Enck, Ahmad-Reza Sadeghi
SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles. CCS (2016)
Jason Gionta, William Enck, Per Larsen
Preventing kernel code-reuse attacks through disclosure resistant code diversification. CNS (2016)
Bradley Reaves, Jasmine D. Bowers, Sigmund Albert Gorski III, Olabode Anise, Rahul Bobhate, Raymond Cho, Hiranava Das, Sharique Hussain, Hamza Karachiwala, Nolen Scaife, Byron Wright, Kevin R. B. Butler, William Enck, Patrick Traynor
*droid: Assessment and Evaluation of Android Application Analysis Tools. ACM Comput. Surv. 49 (3) (2016)
Rui Shu, Peipei Wang, Sigmund Albert Gorski III, Benjamin Andow, Adwait Nadkarni, Luke Deshotels, Jason Gionta, William Enck, Xiaohui Gu
A Study of Security Isolation Techniques. ACM Comput. Surv. 49 (3) (2016)
Ruowen Wang, William Enck, Douglas S. Reeves, Xinwen Zhang, Peng Ning, Dingbang Xu, Wu Zhou, Ahmed M. Azab
EASEAndroid: Automatic Policy Analysis and Refinement for Security Enhanced Android via Large-Scale Semi-Supervised Learning. USENIX Security Symposium (2015)
Wei Yang, Xusheng Xiao, Benjamin Andow, Sihan Li, Tao Xie, William Enck
AppContext: Differentiating Malicious and Benign Mobile App Behaviors Using Context. ICSE (1) (2015)
Daniel Joseph Dean, Peipei Wang, Xiaohui Gu, William Enck, Guoliang Jin
Automatic Server Hang Bug Diagnosis: Feasible Reality or Pipe Dream? ICAC (2015)
Jason Gionta, William Enck, Peng Ning
HideM: Protecting the Contents of Userspace Memory in the Face of Disclosure Vulnerabilities. CODASPY (2015)
Stephan Heuser, Adwait Nadkarni, William Enck, Ahmad-Reza Sadeghi
ASM: A Programmable Interface for Extending Android Security. USENIX Security Symposium (2014)
Jason Gionta, Ahmed M. Azab, William Enck, Peng Ning, Xiaolan Zhang
DACSA: A Decoupled Architecture for Cloud Security Analysis. CSET (2014)
Agnes Davis, Ashwin Shashidharan, Qian Liu, William Enck, Anne McLaughlin, Benjamin Watson
Insecure behaviors on mobile devices under stress. HotSoS (2014)
William Enck, Peter Gilbert, Seungyeop Han, Vasant Tendulkar, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick D. McDaniel, Anmol N. Sheth
TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. ACM Trans. Comput. Syst. 32 (2) (2014)
Qian Liu, Juhee Bae, Benjamin Watson, Anne McLaughlin, William Enck
Modeling and sensing risky user behavior on mobile devices. HotSoS (2014)
Adwait Nadkarni, Vasant Tendulkar, William Enck
NativeWrap: ad hoc smartphone application creation for end users. WISEC (2014)
Vasant Tendulkar, William Enck
An Application Package Configuration Approach to Mitigating Android SSL Vulnerabilities. CoRR (2014)
William Enck, Peter Gilbert, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick D. McDaniel, Anmol Sheth
TaintDroid: an information flow tracking system for real-time privacy monitoring on smartphones. Commun. ACM 57 (3) (2014)
Jason Gionta, Ahmed M. Azab, William Enck, Peng Ning, Xiaolan Zhang
SEER: practical memory virus scanning as a service. ACSAC (2014)
William Enck, Tao Xie
Tutorial: Text Analytics for Security. CCS (2014)
Tsung-Hsuan Ho, Daniel Joseph Dean, Xiaohui Gu, William Enck
PREC: practical root exploit containment for android devices. CODASPY (2014)
Wei Yang, Xusheng Xiao, Rahul Pandita, William Enck, Tao Xie
Improving mobile application security via bridging user expectations and application behaviors. HotSoS (2014)
Adwait Nadkarni, William Enck
Preventing accidental data disclosure in modern operating systems. CCS (2013)
Saurabh Chakradeo, Bradley Reaves, Patrick Traynor, William Enck
MAST: triage for market-scale mobile malware analysis. WISEC (2013)
Rahul Pandita, Xusheng Xiao, Wei Yang, William Enck, Tao Xie
WHYPER: Towards Automating Risk Assessment of Mobile Applications. USENIX Security Symposium (2013)
Vaibhav Rastogi, Yan Chen, William Enck
AppsPlayground: automatic security analysis of smartphone applications. CODASPY (2013)
William Enck, Xuxian Jiang
CCS'12 co-located workshop summary for SPSM 2012. CCS (2012)
Vasant Tendulkar, Ryan Snyder, Joe Pletcher, Kevin R. B. Butler, Ashwin Shashidharan, William Enck
Abusing cloud-based browsers for fun and profit. ACSAC (2012)
Machigar Ongtang, Stephen E. McLaughlin, William Enck, Patrick D. McDaniel
Semantically rich application-centric security in Android. Secur. Commun. Networks 5 (6) (2012)
William Enck
Defending Users against Smartphone Apps: Techniques and Future Directions. ICISS (2011)
William Enck, Damien Octeau, Patrick D. McDaniel, Swarat Chaudhuri
A Study of Android Application Security. USENIX Security Symposium (2011)
Patrick Traynor, Kevin R. B. Butler, William Enck, Patrick D. McDaniel, Kevin Borders
compromised wireless access points. Secur. Commun. Networks 3 (2-3) (2010)
William Enck, Peter Gilbert, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick D. McDaniel, Anmol Sheth
TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. OSDI (2010)
Patrick D. McDaniel, William Enck
Not So Great Expectations: Why Application Markets Haven't Failed Security. IEEE Secur. Priv. 8 (5) (2010)
Machigar Ongtang, Stephen E. McLaughlin, William Enck, Patrick D. McDaniel
Semantically Rich Application-Centric Security in Android. ACSAC (2009)
Heesook Choi, William Enck, Jaesheung Shin, Patrick D. McDaniel, Thomas F. La Porta
ASR: anonymous and secure reporting of traffic forwarding activity in mobile ad hoc networks. Wirel. Networks 15 (4) (2009)
William Enck, Machigar Ongtang, Patrick D. McDaniel
Understanding Android Security. IEEE Secur. Priv. 7 (1) (2009)
Patrick Traynor, William Enck, Patrick D. McDaniel, Thomas La Porta
Mitigating attacks on open functionality in SMS-capable cellular networks. IEEE/ACM Trans. Netw. 17 (1) (2009)
William Enck, Machigar Ongtang, Patrick D. McDaniel
On lightweight mobile phone application certification. CCS (2009)
William Enck, Thomas Moyer, Patrick D. McDaniel, Subhabrata Sen, Panagiotis Sebos, Sylke Spoerel, Albert G. Greenberg, Yu-Wei Eric Sung, Sanjay G. Rao, William Aiello
Configuration management at massive scale: system design and experience. IEEE J. Sel. Areas Commun. 27 (3) (2009)

William Enck.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

William Enck