VFCFinder: Pairing Security Advisories and Patches - Trevor Dunlap; Elizabeth Lin; William Enck; Bradley Reaves (Proceedings of the 19th ACM Asia Conference on Computer and Communications Security, ASIA CCS 2024, Singapore, July 1-5, 2024, 2024)

RANsacked: A Domain-Informed Approach for Fuzzing LTE and 5G RAN-Core Interfaces - Nathaniel Bennett; Weidong Zhu; Benjamin Simon; Ryon Kennedy; William Enck; Patrick Traynor; Kevin R. B. Butler (Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, CCS 2024, Salt Lake City, UT, USA, October 14-18, 2024, 2024)

Examining Cryptography and Randomness Failures in Open-Source Cellular Cores - K. Virgil English; Nathaniel Bennett; Seaver Thorn; Kevin R. B. Butler; William Enck; Patrick Traynor (Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy, CODASPY 2024, Porto, Portugal, June 19-21, 2024, 2024)

Pairing Security Advisories with Vulnerable Functions Using Open-Source LLMs - Trevor Dunlap; John Speed Meyers; Bradley Reaves; William Enck (Detection of Intrusions and Malware, and Vulnerability Assessment - 21st International Conference, DIMVA 2024, Lausanne, Switzerland, July 17-19, 2024, Proceedings, 2024)

UntrustIDE: Exploiting Weaknesses in VS Code Extensions - Elizabeth Lin; Igibek Koishybayev; Trevor Dunlap; William Enck; Alexandros Kapravelos (31st Annual Network and Distributed System Security Symposium, NDSS 2024, San Diego, California, USA, February 26 - March 1, 2024, 2024)

5GAC-Analyzer: Identifying Over-Privilege Between 5G Core Network Functions - Seaver Thorn; K. Virgil English; Kevin R. B. Butler; William Enck (Proceedings of the 17th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2024, Seoul, Republic of Korea, May 27-29, 2024, 2024)

GRASP: Hardening Serverless Applications through Graph Reachability Analysis of Security Policies - Isaac Polinsky; Pubali Datta; Adam Bates; William Enck (Proceedings of the ACM on Web Conference 2024, WWW 2024, Singapore, May 13-17, 2024, 2024)

Characterizing Dependency Update Practice of NPM, PyPI and Cargo Packages - Imranur Rahman; Nusrat Zahan; Stephen Magill; William Enck; Laurie A. Williams (CoRR, 2024)

S3C2 Summit 2024-03: Industry Secure Supply Chain Summit - Greg Tystahl; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

S3C2 Summit 2023-11: Industry Secure Supply Chain Summit - Nusrat Zahan; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

Software Bills of Materials Are Required. Are We There Yet? - Nusrat Zahan; Elizabeth Lin; Mahzabin Tamanna; William Enck; Laurie A. Williams (IEEE Secur. Priv., 2023)

Finding Fixed Vulnerabilities with Off-the-Shelf Static Analysis - Trevor Dunlap; Seaver Thorn; William Enck; Bradley Reaves (8th IEEE European Symposium on Security and Privacy, EuroS&P 2023, Delft, Netherlands, July 3-7, 2023, 2023)

MSNetViews: Geographically Distributed Management of Enterprise Network Security Policy - Iffat Anjum; Jessica Sokal; Hafiza Ramzah Rehman; Ben Weintraub; Ethan Leba; William Enck; Cristina Nita-Rotaru; Bradley Reaves (Proceedings of the 28th ACM Symposium on Access Control Models and Technologies, SACMAT 2023, Trento, Italy, June 7-9, 2023, 2023)

It's like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security - Marcel Fourné; Dominik Wermke; William Enck; Sascha Fahl; Yasemin Acar (44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, 2023, 2023)

ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions - Siddharth Muralee; Igibek Koishybayev; Aleksandr Nahapetyan; Greg Tystahl; Bradley Reaves; Antonio Bianchi; William Enck; Alexandros Kapravelos; Aravind Machiry (32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023, 2023)

PolyScope: Multi-Policy Access Control Analysis to Triage Android Scoped Storage - Yu Tsung Lee; Haining Chen; William Enck; Hayawardh Vijayakumar; Ninghui Li; Zhiyun Qian; Giuseppe Petracca; Trent Jaeger (CoRR, 2023)

S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit - Mindy Tran; Yasemin Acar; Michel Cucker; William Enck; Alexandros Kapravelos; Christian Kästner; Laurie A. Williams (CoRR, 2023)

S3C2 Summit 2023-02: Industry Secure Supply Chain Summit - Trevor Dunlap; Yasemin Acar; Michel Cucker; William Enck; Alexandros Kapravelos; Christian Kästner; Laurie A. Williams (CoRR, 2023)

S3C2 Summit 2023-06: Government Secure Supply Chain Summit - William Enck; Yasemin Acar; Michel Cukier; Alexandros Kapravelos; Christian Kästner; Laurie A. Williams (CoRR, 2023)

VFCFinder: Seamlessly Pairing Security Advisories and Patches - Trevor Dunlap; Elizabeth Lin; William Enck; Bradley Reaves (CoRR, 2023)

Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations - William Enck; Laurie A. Williams (IEEE Secur. Priv., 2022)

Analysis of Payment Service Provider SDKs in Android - Samin Yaseer Mahmud; K. Virgil English; Seaver Thorn; William Enck; Adam Oest; Muhammad Saad (Annual Computer Security Applications Conference, ACSAC 2022, Austin, TX, USA, December 5-9, 2022, 2022)

A Study of Application Sandbox Policies in Linux - Trevor Dunlap; William Enck; Bradley Reaves (SACMAT '22: The 27th ACM Symposium on Access Control Models and Technologies, New York, NY, USA, June 8 - 10, 2022, 2022)

Removing the Reliance on Perimeters for Security using Network Views - Iffat Anjum; Daniel Kostecki; Ethan Leba; Jessica Sokal; Rajit Bharambe; William Enck; Cristina Nita-Rotaru; Bradley Reaves (SACMAT '22: The 27th ACM Symposium on Access Control Models and Technologies, New York, NY, USA, June 8 - 10, 2022, 2022)

FReD: Identifying File Re-Delegation in Android System Services - Sigmund Albert Gorski III; Seaver Thorn; William Enck; Haining Chen (31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022, 2022)

ALASTOR: Reconstructing the Provenance of Serverless Intrusions - Pubali Datta; Isaac Polinsky; Muhammad Adil Inam; Adam Bates; William Enck (31st USENIX Security Symposium, USENIX Security 2022, Boston, MA, USA, August 10-12, 2022, 2022)

Reflections on a Decade of Mobile Security Research - William Enck (WiSec '22: 15th ACM Conference on Security and Privacy in Wireless and Mobile Networks, San Antonio, TX, USA, May 16 - 19, 2022, 2022)

Certificate Transparency in Google Chrome: Past, Present, and Future - Emily Stark; Joe DeBlasio; Devon O'Brien; Davide Balzarotti; William Enck; Samuel King; Angelos Stavrou (IEEE Secur. Priv., 2021)

Role-Based Deception in Enterprise Networks - Iffat Anjum; Mu Zhu; Isaac Polinsky; William Enck; Michael K. Reiter; Munindar P. Singh (CODASPY '21: Eleventh ACM Conference on Data and Application Security and Privacy, Virtual Event, USA, April 26-28, 2021, 2021)

Hey Alexa, is this Skill Safe?: Taking a Closer Look at the Alexa Skill Ecosystem - Christopher Lentzsch; Sheel Jayesh Shah; Benjamin Andow; Martin Degeling; Anupam Das; William Enck (28th Annual Network and Distributed System Security Symposium, NDSS 2021, virtually, February 21-25, 2021, 2021)

SCIFFS: Enabling Secure Third-Party Security Analytics using Serverless Computing - Isaac Polinsky; Pubali Datta; Adam Bates; William Enck (SACMAT '21: The 26th ACM Symposium on Access Control Models and Technologies, Virtual Event, Spain, June 16-18, 2021, 2021)

PolyScope: Multi-Policy Access Control Analysis to Compute Authorized Attack Operations in Android Systems - Yu Tsung Lee; William Enck; Haining Chen; Hayawardh Vijayakumar; Ninghui Li; Zhiyun Qian; Daimeng Wang; Giuseppe Petracca; Trent Jaeger (30th USENIX Security Symposium, USENIX Security 2021, August 11-13, 2021, 2021)

LeakyPick: IoT Audio Spy Detector - Richard Mitev; Anna Pazii; Markus Miettinen; William Enck; Ahmad-Reza Sadeghi (ACSAC '20: Annual Computer Security Applications Conference, Virtual Event / Austin, TX, USA, 7-11 December, 2020, 2020)

n-m-Variant Systems: Adversarial-Resistant Software Rejuvenation for Cloud-Based Web Applications - Isaac Polinsky; Kyle Martin; William Enck; Michael K. Reiter (CODASPY '20: Tenth ACM Conference on Data and Application Security and Privacy, New Orleans, LA, USA, March 16-18, 2020, 2020)

Do configuration management tools make systems more secure?: an empirical research plan - Md. Rayhanur Rahman; William Enck; Laurie A. Williams (Proceedings of the 7th Annual Symposium on Hot Topics in the Science of Security, HotSoS 2020, Lawrence, Kansas, USA, September 22-24, 2020, 2020)

Analysis of Access Control Enforcement in Android - William Enck (Proceedings of the 25th ACM Symposium on Access Control Models and Technologies, SACMAT 2020, Barcelona, Spain, June 10-12, 2020, 2020)

Kobold: Evaluating Decentralized Access Control for Remote NSXPC Methods on iOS - Luke Deshotels; Costin Carabas; Jordan Beichler; Razvan Deaconescu; William Enck (2020 IEEE Symposium on Security and Privacy, SP 2020, San Francisco, CA, USA, May 18-21, 2020, 2020)

Actions Speak Louder than Words: Entity-Sensitive Privacy Policy and Data Flow Analysis with PoliCheck - Benjamin Andow; Samin Yaseer Mahmud; Justin Whitaker; William Enck; Bradley Reaves; Kapil Singh; Serge Egelman (29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, 2020)

Cardpliance: PCI DSS Compliance of Android Applications - Samin Yaseer Mahmud; Akhil Acharya; Benjamin Andow; William Enck; Bradley Reaves (29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020, 2020)

Optimizing Vulnerability-Driven Honey Traffic Using Game Theory - Iffat Anjum; Mohammad Sujan Miah; Mu Zhu; Nazia Sharmin; Christopher Kiekintveld; William Enck; Munindar P. Singh (CoRR, 2020)

LeakyPick: IoT Audio Spy Detector - Richard Mitev; Anna Pazii; Markus Miettinen; William Enck; Ahmad-Reza Sadeghi (CoRR, 2020)

Role-Based Deception in Enterprise Networks - Iffat Anjum; Mu Zhu; Isaac Polinsky; William Enck; Michael K. Reiter; Munindar P. Singh (CoRR, 2020)

PolyScope: Multi-Policy Access Control Analysis to Triage Android Systems - Yu Tsung Lee; William Enck; Haining Chen; Hayawardh Vijayakumar; Ninghui Li; Daimeng Wang; Zhiyun Qian; Giuseppe Petracca; Trent Jaeger (CoRR, 2020)

Selected Papers From the 2018 USENIX Security Symposium - William Enck; Terry Benzel (IEEE Secur. Priv., 2019)

ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware - Sigmund Albert Gorski III; Benjamin Andow; Adwait Nadkarni; Sunil Manandhar; William Enck; Eric Bodden; Alexandre Bartel (Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy, CODASPY 2019, Richardson, TX, USA, March 25-27, 2019, 2019)

Thou Shalt Discuss Security: Quantifying the Impacts of Instructions to RFC Authors - Justin Whitaker; Sathvik Prasad; Bradley Reaves; William Enck (Proceedings of the 5th ACM Workshop on Security Standardisation Research Workshop, London, UK, November 11, 2019, 2019)

PolicyLint: Investigating Internal Privacy Policy Contradictions on Google Play - Benjamin Andow; Samin Yaseer Mahmud; Wenyu Wang; Justin Whitaker; William Enck; Bradley Reaves; Kapil Singh; Tao Xie (28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019, 2019)

HomeSnitch: behavior transparency and control for smart home IoT devices - T. J. OConnor; Reham Mohamed; Markus Miettinen; William Enck; Bradley Reaves; Ahmad-Reza Sadeghi (Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2019, Miami, Florida, USA, May 15-17, 2019, 2019)

Blinded and confused: uncovering systemic flaws in device telemetry for smart-home internet of things - T. J. OConnor; William Enck; Bradley Reaves (Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2019, Miami, Florida, USA, May 15-17, 2019, 2019)

ARF: identifying re-delegation vulnerabilities in Android system services - Sigmund Albert Gorski III; William Enck (Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2019, Miami, Florida, USA, May 15-17, 2019, 2019)

Hestia: simple least privilege network policies for smart homes - Sanket Goutam; William Enck; Bradley Reaves (Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2019, Miami, Florida, USA, May 15-17, 2019, 2019)

ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware - Sigmund Albert Gorski III; Benjamin Andow; Adwait Nadkarni; Sunil Manandhar; William Enck; Eric Bodden; Alexandre Bartel (CoRR, 2019)

n-m-Variant Systems: Adversarial-Resistant Software Rejuvenation for Cloud-Based Web Applications - Isaac Polinsky; Kyle Martin; William Enck; Michael K. Reiter (CoRR, 2019)

iOracle: Automated Evaluation of Access Control Policies in iOS - Luke Deshotels; Razvan Deaconescu; Costin Carabas; Iulia Manda; William Enck; Mihai Chiroiu; Ninghui Li; Ahmad-Reza Sadeghi (Proceedings of the 2018 on Asia Conference on Computer and Communications Security, AsiaCCS 2018, Incheon, Republic of Korea, June 04-08, 2018, 2018)

PivotWall: SDN-Based Information Flow Control - T. J. OConnor; William Enck; W. Michael Petullo; Akash Verma (Proceedings of the Symposium on SDN Research, SOSR 2018, Los Angeles, CA, USA, March 28-29, 2018, 2018)

27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018 - William Enck; Adrienne Porter Felt (USENIX Association, 2018)

Phonion: Practical Protection of Metadata in Telephony Networks - Stephan Heuser; Bradley Reaves; Praveen Kumar Pendyala; Henry Carter; Alexandra Dmitrienko; William Enck; Negar Kiyavash; Ahmad-Reza Sadeghi; Patrick Traynor (Proc. Priv. Enhancing Technol., 2017)

Analysis of SEAndroid Policies: Combining MAC and DAC in Android - Haining Chen; Ninghui Li; William Enck; Yousra Aafer; Xiangyu Zhang (Proceedings of the 33rd Annual Computer Security Applications Conference, Orlando, FL, USA, December 4-8, 2017, 2017)

SPOKE: Scalable Knowledge Collection and Attack Surface Analysis of Access Control Policy for Security Enhanced Android - Ruowen Wang; Ahmed M. Azab; William Enck; Ninghui Li; Peng Ning; Xun Chen; Wenbo Shen; Yueqiang Cheng (Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, AsiaCCS 2017, Abu Dhabi, United Arab Emirates, April 2-6, 2017, 2017)

A Study of Security Vulnerabilities on Docker Hub - Rui Shu; Xiaohui Gu; William Enck (Proceedings of the Seventh ACM Conference on Data and Application Security and Privacy, CODASPY 2017, Scottsdale, AZ, USA, March 22-24, 2017, 2017)

UiRef: analysis of sensitive user inputs in Android applications - Benjamin Andow; Akhil Acharya; Dengfeng Li; William Enck; Kapil Singh; Tao Xie (Proceedings of the 10th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2017, Boston, MA, USA, July 18-20, 2017, 2017)

11th USENIX Workshop on Offensive Technologies, WOOT 2017, Vancouver, BC, Canada, August 14-15, 2017 - William Enck; Collin Mulliner (USENIX Association, 2017)

Policy by Example: An Approach for Security Policy Specification - Adwait Nadkarni; William Enck; Somesh Jha; Jessica Staddon (CoRR, 2017)

A Study of Security Isolation Techniques - Rui Shu; Peipei Wang; Sigmund Albert Gorski III; Benjamin Andow; Adwait Nadkarni; Luke Deshotels; Jason Gionta; William Enck; Xiaohui Gu (ACM Comput. Surv., 2016)

*droid: Assessment and Evaluation of Android Application Analysis Tools - Bradley Reaves; Jasmine D. Bowers; Sigmund Albert Gorski III; Olabode Anise; Rahul Bobhate; Raymond Cho; Hiranava Das; Sharique Hussain; Hamza Karachiwala; Nolen Scaife; Byron Wright; Kevin R. B. Butler; et al. (ACM Comput. Surv., 2016)

SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles - Luke Deshotels; Razvan Deaconescu; Mihai Chiroiu; Lucas Davi; William Enck; Ahmad-Reza Sadeghi (Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria, October 24-28, 2016, 2016)

Preventing kernel code-reuse attacks through disclosure resistant code diversification - Jason Gionta; William Enck; Per Larsen (2016 IEEE Conference on Communications and Network Security, CNS 2016, Philadelphia, PA, USA, October 17-19, 2016, 2016)

Text analytics for security: tutorial - Tao Xie; William Enck (Proceedings of the Symposium and Bootcamp on the Science of Security, Pittsburgh, PA, USA, April 19-21, 2016, 2016)

A Study of Grayware on Google Play - Benjamin Andow; Adwait Nadkarni; Blake Bassett; William Enck; Tao Xie (2016 IEEE Security and Privacy Workshops, SP Workshops 2016, San Jose, CA, USA, May 22-26, 2016, 2016)

Practical DIFC Enforcement on Android - Adwait Nadkarni; Benjamin Andow; William Enck; Somesh Jha (25th USENIX Security Symposium, USENIX Security 16, Austin, TX, USA, August 10-12, 2016, 2016)

Proceedings of the 9th ACM Conference on Security & Privacy in Wireless and Mobile Networks, WISEC 2016, Darmstadt, Germany, July 18-22, 2016 - Matthias Hollick; Panos Papadimitratos; William Enck (ACM, 2016)

SandBlaster: Reversing the Apple Sandbox - Razvan Deaconescu; Luke Deshotels; Mihai Bucicoiu; William Enck; Lucas Davi; Ahmad-Reza Sadeghi (CoRR, 2016)

HideM: Protecting the Contents of Userspace Memory in the Face of Disclosure Vulnerabilities - Jason Gionta; William Enck; Peng Ning (Proceedings of the 5th ACM Conference on Data and Application Security and Privacy, CODASPY 2015, San Antonio, TX, USA, March 2-4, 2015, 2015)

Automatic Server Hang Bug Diagnosis: Feasible Reality or Pipe Dream? - Daniel Joseph Dean; Peipei Wang; Xiaohui Gu; William Enck; Guoliang Jin (2015 IEEE International Conference on Autonomic Computing, Grenoble, France, July 7-10, 2015, 2015)

AppContext: Differentiating Malicious and Benign Mobile App Behaviors Using Context - Wei Yang; Xusheng Xiao; Benjamin Andow; Sihan Li; Tao Xie; William Enck (37th IEEE/ACM International Conference on Software Engineering, ICSE 2015, Florence, Italy, May 16-24, 2015, Volume 1, 2015)

EASEAndroid: Automatic Policy Analysis and Refinement for Security Enhanced Android via Large-Scale Semi-Supervised Learning - Ruowen Wang; William Enck; Douglas S. Reeves; Xinwen Zhang; Peng Ning; Dingbang Xu; Wu Zhou; Ahmed M. Azab (24th USENIX Security Symposium, USENIX Security 15, Washington, D.C., USA, August 12-14, 2015, 2015)

TaintDroid: an information flow tracking system for real-time privacy monitoring on smartphones - William Enck; Peter Gilbert; Byung-Gon Chun; Landon P. Cox; Jaeyeon Jung; Patrick D. McDaniel; Anmol Sheth (Commun. ACM, 2014)

TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones - William Enck; Peter Gilbert; Seungyeop Han; Vasant Tendulkar; Byung-Gon Chun; Landon P. Cox; Jaeyeon Jung; Patrick D. McDaniel; Anmol N. Sheth (ACM Trans. Comput. Syst., 2014)

SEER: practical memory virus scanning as a service - Jason Gionta; Ahmed M. Azab; William Enck; Peng Ning; Xiaolan Zhang (Proceedings of the 30th Annual Computer Security Applications Conference, ACSAC 2014, New Orleans, LA, USA, December 8-12, 2014, 2014)

Tutorial: Text Analytics for Security - William Enck; Tao Xie (Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, Scottsdale, AZ, USA, November 3-7, 2014, 2014)

PREC: practical root exploit containment for android devices - Tsung-Hsuan Ho; Daniel Joseph Dean; Xiaohui Gu; William Enck (Fourth ACM Conference on Data and Application Security and Privacy, CODASPY'14, San Antonio, TX, USA - March 03 - 05, 2014, 2014)

Insecure behaviors on mobile devices under stress - Agnes Davis; Ashwin Shashidharan; Qian Liu; William Enck; Anne McLaughlin; Benjamin Watson (Proceedings of the 2014 Symposium and Bootcamp on the Science of Security, HotSoS 2014, Raleigh, NC, USA, April 08 - 09, 2014, 2014)

Improving mobile application security via bridging user expectations and application behaviors - Wei Yang; Xusheng Xiao; Rahul Pandita; William Enck; Tao Xie (Proceedings of the 2014 Symposium and Bootcamp on the Science of Security, HotSoS 2014, Raleigh, NC, USA, April 08 - 09, 2014, 2014)

Modeling and sensing risky user behavior on mobile devices - Qian Liu; Juhee Bae; Benjamin Watson; Anne McLaughlin; William Enck (Proceedings of the 2014 Symposium and Bootcamp on the Science of Security, HotSoS 2014, Raleigh, NC, USA, April 08 - 09, 2014, 2014)

DACSA: A Decoupled Architecture for Cloud Security Analysis - Jason Gionta; Ahmed M. Azab; William Enck; Peng Ning; Xiaolan Zhang (7th Workshop on Cyber Security Experimentation and Test, CSET '14, San Diego, CA, USA, August 18, 2014, 2014)

ASM: A Programmable Interface for Extending Android Security - Stephan Heuser; Adwait Nadkarni; William Enck; Ahmad-Reza Sadeghi (Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014, 2014)

NativeWrap: ad hoc smartphone application creation for end users - Adwait Nadkarni; Vasant Tendulkar; William Enck (7th ACM Conference on Security & Privacy in Wireless and Mobile Networks, WiSec'14, Oxford, United Kingdom, July 23-25, 2014, 2014)

An Application Package Configuration Approach to Mitigating Android SSL Vulnerabilities - Vasant Tendulkar; William Enck (CoRR, 2014)

Preventing accidental data disclosure in modern operating systems - Adwait Nadkarni; William Enck (2013 ACM SIGSAC Conference on Computer and Communications Security, CCS'13, Berlin, Germany, November 4-8, 2013, 2013)

AppsPlayground: automatic security analysis of smartphone applications - Vaibhav Rastogi; Yan Chen; William Enck (Third ACM Conference on Data and Application Security and Privacy, CODASPY'13, San Antonio, TX, USA, February 18-20, 2013, 2013)

WHYPER: Towards Automating Risk Assessment of Mobile Applications - Rahul Pandita; Xusheng Xiao; Wei Yang; William Enck; Tao Xie (Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013)

MAST: triage for market-scale mobile malware analysis - Saurabh Chakradeo; Bradley Reaves; Patrick Traynor; William Enck (Sixth ACM Conference on Security and Privacy in Wireless and Mobile Networks, WISEC'13, Budapest, Hungary, April 17-19, 2013, 2013)

SPSM'13, Proceedings of the 2013 ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, Co-located with CCS 2013, November 8, 2013, Berlin, Germany - William Enck; Adrienne Porter Felt; N. Asokan (ACM, 2013)

Semantically rich application-centric security in Android - Machigar Ongtang; Stephen E. McLaughlin; William Enck; Patrick D. McDaniel (Secur. Commun. Networks, 2012)

Abusing cloud-based browsers for fun and profit - Vasant Tendulkar; Ryan Snyder; Joe Pletcher; Kevin R. B. Butler; Ashwin Shashidharan; William Enck (28th Annual Computer Security Applications Conference, ACSAC 2012, Orlando, FL, USA, 3-7 December 2012, 2012)

CCS'12 co-located workshop summary for SPSM 2012 - William Enck; Xuxian Jiang (the ACM Conference on Computer and Communications Security, CCS'12, Raleigh, NC, USA, October 16-18, 2012, 2012)

SPSM'12, Proceedings of the Workshop on Security and Privacy in Smartphones and Mobile Devices, Co-located with CCS 2012, October 19, 2012, Raleigh, NC, USA - Ting Yu; William Enck; Xuxian Jiang (ACM, 2012)

Defending Users against Smartphone Apps: Techniques and Future Directions - William Enck (Information Systems Security - 7th International Conference, ICISS 2011, Kolkata, India, December 15-19, 2011, Procedings, 2011)

A Study of Android Application Security - William Enck; Damien Octeau; Patrick D. McDaniel; Swarat Chaudhuri (20th USENIX Security Symposium, San Francisco, CA, USA, August 8-12, 2011, Proceedings, 2011)

SPSM'11, Proceedings of the 1st ACM Workshop Security and Privacy in Smartphones and Mobile Devices, Co-located with CCS 2011, October 17, 2011, Chicago, IL, USA - Xuxian Jiang; Amiya Bhattacharya; Partha Dasgupta; William Enck (ACM, 2011)

Android's Security Framework-Understanding the Security of Mobile Phone Platforms - William Enck (Encyclopedia of Cryptography and Security, 2nd Ed, 2011)

ARP Spoofing - William Enck (Encyclopedia of Cryptography and Security, 2nd Ed, 2011)

Not So Great Expectations: Why Application Markets Haven't Failed Security - Patrick D. McDaniel; William Enck (IEEE Secur. Priv., 2010)

malnets: large-scale malicious networks via compromised wireless access points - Patrick Traynor; Kevin R. B. Butler; William Enck; Patrick D. McDaniel; Kevin Borders (Secur. Commun. Networks, 2010)

TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones - William Enck; Peter Gilbert; Byung-Gon Chun; Landon P. Cox; Jaeyeon Jung; Patrick D. McDaniel; Anmol Sheth (9th USENIX Symposium on Operating Systems Design and Implementation, OSDI 2010, October 4-6, 2010, Vancouver, BC, Canada, Proceedings, 2010)

Understanding Android Security - William Enck; Machigar Ongtang; Patrick D. McDaniel (IEEE Secur. Priv., 2009)

Configuration management at massive scale: system design and experience - William Enck; Thomas Moyer; Patrick D. McDaniel; Subhabrata Sen; Panagiotis Sebos; Sylke Spoerel; Albert G. Greenberg; Yu-Wei Eric Sung; Sanjay G. Rao; William Aiello (IEEE J. Sel. Areas Commun., 2009)

Mitigating attacks on open functionality in SMS-capable cellular networks - Patrick Traynor; William Enck; Patrick D. McDaniel; Thomas La Porta (IEEE/ACM Trans. Netw., 2009)

ASR: anonymous and secure reporting of traffic forwarding activity in mobile ad hoc networks - Heesook Choi; William Enck; Jaesheung Shin; Patrick D. McDaniel; Thomas F. La Porta (Wirel. Networks, 2009)

Semantically Rich Application-Centric Security in Android - Machigar Ongtang; Stephen E. McLaughlin; William Enck; Patrick D. McDaniel (Twenty-Fifth Annual Computer Security Applications Conference, ACSAC 2009, Honolulu, Hawaii, USA, 7-11 December 2009, 2009)

On lightweight mobile phone application certification - William Enck; Machigar Ongtang; Patrick D. McDaniel (Proceedings of the 2009 ACM Conference on Computer and Communications Security, CCS 2009, Chicago, Illinois, USA, November 9-13, 2009, 2009)

Exploiting open functionality in SMS-capable cellular networks - Patrick Traynor; William Enck; Patrick D. McDaniel; Thomas La Porta (J. Comput. Secur., 2008)

PinUP: Pinning User Files to Known Applications - William Enck; Patrick D. McDaniel; Trent Jaeger (Twenty-Fourth Annual Computer Security Applications Conference, ACSAC 2008, Anaheim, California, USA, 8-12 December 2008, 2008)

Defending Against Attacks on Main Memory Persistence - William Enck; Kevin R. B. Butler; Thomas Richardson; Patrick D. McDaniel; Adam D. Smith (Twenty-Fourth Annual Computer Security Applications Conference, ACSAC 2008, Anaheim, California, USA, 8-12 December 2008, 2008)

Realizing Massive-Scale Conditional Access Systems Through Attribute-Based Cryptosystems - Patrick Traynor; Kevin R. B. Butler; William Enck; Patrick D. McDaniel (Proceedings of the Network and Distributed System Security Symposium, NDSS 2008, San Diego, California, USA, 10th February - 13th February 2008, 2008)

Systemic Issues in the Hart InterCivic and Premier Voting Systems: Reflections on Project EVEREST - Kevin R. B. Butler; William Enck; Harri Hursti; Stephen E. McLaughlin; Patrick Traynor; Patrick D. McDaniel (2008 USENIX/ACCURATE Electronic Voting Workshop, EVT 2008, July 28-29, 2008, San Jose, CA, USA, Proceedings, 2008)

TARP: Ticket-based address resolution protocol - Wesam Lootah; William Enck; Patrick D. McDaniel (Comput. Networks, 2007)

Protecting users from "themselves" - William Enck; Sandra Julieta Rueda; Joshua Schiffman; Yogesh Sreenivasan; Luke St. Clair; Trent Jaeger; Patrick D. McDaniel (Proceedings of the 2007 ACM workshop on Computer Security Architecture, CSAW 2007, Fairfax, VA, USA, November 2, 2007, 2007)

Limiting Sybil Attacks in Structured P2P Networks - Hosam Rowaihy; William Enck; Patrick D. McDaniel; Thomas La Porta (INFOCOM 2007. 26th IEEE International Conference on Computer Communications, Joint Conference of the IEEE Computer and Communications Societies, 6-12 May 2007, Anchorage, Alaska, USA, 2007)

Configuration Management at Massive Scale: System Design and Experience - William Enck; Patrick D. McDaniel; Subhabrata Sen; Panagiotis Sebos; Sylke Spoerel; Albert G. Greenberg; Sanjay G. Rao; William Aiello (Proceedings of the 2007 USENIX Annual Technical Conference, USENIX ATC 2007, Santa Clara, CA, USA, June 17-22, 2007, 2007)

Password Exhaustion: Predicting the End of Password Usefulness - Luke St. Clair; Lisa Johansen; William Enck; Matthew Pirretti; Patrick Traynor; Patrick D. McDaniel; Trent Jaeger (Information Systems Security, Second International Conference, ICISS 2006, Kolkata, India, December 19-21, 2006, Proceedings, 2006)

Privacy Preserving Web-Based Email - Kevin R. B. Butler; William Enck; Jennifer Plasterr; Patrick Traynor; Patrick D. McDaniel (Information Systems Security, Second International Conference, ICISS 2006, Kolkata, India, December 19-21, 2006, Proceedings, 2006)

Mitigating attacks on open functionality in SMS-capable cellular networks - Patrick Traynor; William Enck; Patrick D. McDaniel; Thomas La Porta (Proceedings of the 12th Annual International Conference on Mobile Computing and Networking, MOBICOM 2006, Los Angeles, CA, USA, September 23-29, 2006, 2006)

TARP: Ticket-based Address Resolution Protocol - Wesam Lootah; William Enck; Patrick D. McDaniel (21st Annual Computer Security Applications Conference (ACSAC 2005), 5-9 December 2005, Tucson, AZ, USA, 2005)

Exploiting open functionality in SMS-capable cellular networks - William Enck; Patrick Traynor; Patrick D. McDaniel; Thomas F. La Porta (Proceedings of the 12th ACM Conference on Computer and Communications Security, CCS 2005, Alexandria, VA, USA, November 7-11, 2005, 2005)

Secure Reporting of Traffic Forwarding Activity in Mobile Ad Hoc Networks - Heesook Choi; William Enck; Jaesheung Shin; Patrick D. McDaniel; Thomas F. La Porta (2nd Annual International Conference on Mobile and Ubiquitous Systems (MobiQuitous 2005), 17-21 July 2005, San Diego, CA, USA, 2005)