Carnegie Mellon Silicon Valley - Web Security Research

Overview

The Web Security Group at Carnegie Mellon Silicon Valley is part of the CMU CyLab research and education center. Research projects focus on various aspects of browser and web application security, privacy, and performance.

Publications

Security

• Towards Short-Lived Certificates
  Emin Topalovic, Brennan Saeta, Lin-Shung Huang, Collin Jackson, and Dan Boneh
  In Web 2.0 Security and Privacy (W2SP 2012)
• The Case for Prefetching and Prevalidating TLS Server Certificates
  Emily Stark, Lin-Shung Huang, Dinesh Israni, Collin Jackson, and Dan Boneh
  In Proc. of the 19th Network and Distributed System Security Symposium (NDSS 2012)
• App Isolation: Get the Security of Multiple Browsers with Just One
  Eric Y. Chen, Jason Bau, Charles Reis, and Adam Barth, Collin Jackson
  In Proc. of the 18th ACM Conference on Computer and Communications Security (CCS 2011)
• Talking to Yourself for Fun and Profit
  Lin-Shung Huang, Eric Y. Chen, Adam Barth, Eric Rescorla, and Collin Jackson
  In Web 2.0 Security and Privacy (W2SP 2011)
• Protecting Browsers from Cross-Origin CSS Attacks
  Lin-Shung Huang, Zack Weinberg, Chris Evans, and Collin Jackson
  In Proc of the 17th ACM Conference on Computer and Communications Security (CCS 2010)
• Busting frame busting: a study of clickjacking vulnerabilities at popular sites
  Gustav Rydstedt, Elie Bursztein, Dan Boneh, and Collin Jackson
  In Proc. of the IEEE Oakland Web 2.0 Security and Privacy Workshop. (W2SP 2010)
• Critical Vulnerability in Browser Security Metrics
  Mustafa Acer, Collin Jackson
  In Proc. of the IEEE Oakland Web 2.0 Security and Privacy Workshop. (W2SP 2010)

Privacy

• I Still Know What You Visited Last Summer: Leaking browsing history via user interaction and side channel attacks
  Zack Weinberg, Eric Chen, Pavithra Ramesh Jayaraman, and Collin Jackson
  In Proc. of the IEEE Security and Privacy Symposium (Oakland 2011).
• An Analysis of Private Browsing Modes in Modern Browsers

  Gaurav Aggarwal, Elie Burzstein, Dan Boneh, and Collin Jackson

  In Proc. of the 19th USENIX Security Symposium. (USENIX Security 2010)