News

  • Apr 16, 2023. I will be on the PC for IEEE Symposium on Security and Privacy (S&P) 2024. Consider submitting.

  • Jan 27, 2023. Our paper, "Applying Accessibility Metrics to Measure the Threat Landscape for Users with Disabilities", is accepted for publication in NDSS Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb).

  • Jan 27, 2023. Our paper, "Why do Internet Devices Remain Vulnerable? A Survey with System Administrators ", is accepted for publication in NDSS Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb).

  • Jun 23, 2022. Our paper, "Certificate Root Stores---An Area of Unity or Disparity?", is accepted for publication in CSET.

  • Mar 15, 2022. I will be on the PC for IEEE Symposium on Security and Privacy (S&P) 2023. Consider submitting.

  • Feb 11, 2022. Our paper, "Characterizing the Adoption of Security.txt Files and their Applications to Vulnerability Notification", is accepted for publication in NDSS Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb).

  • Sep 10, 2021. I will be on the PC for IEEE European Symposium on Security and Privacy (EuroS&P) 2022. Consider submitting.

  • May 22, 2021. Our paper, "Is Real-time Phishing Eliminated with FIDO? Social Engineering Downgrade Attacks against FIDO Protocols", is accepted for publication in USENIX Security.

  • Apr 8, 2021. I am invited to give a talk at Madiba Security Research Group, Concordia University (host: Mohammad Mannan).

  • Apr 1, 2021. I will be on the PC for Workshop on Cyber Security Experimentation and Test (CSET) 2021. Consider submitting.

  • Mar 18, 2021. I am invited to give a talk at the annual Technology Sessions with Universal Film Technology, NBC Universal Pictures, Los Angeles, USA.

  • Feb 7, 2021. Two papers accepted for publication to NDSS Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb): "Empirical Scanning Analysis of Censys and Shodan" and "Comparative Analysis of the DoT with HTTPS Certificate Ecosystems". Congratulations Ali and Chris!

  • Sep 10, 2020. I will be on the PC for IEEE European Symposium on Security and Privacy (EuroS&P) 2021. Consider submitting.

  • Feb 26, 2020. Our paper, "SoK: Delegation and Revocation, the Missing Links in the Web's Chain of Trust", is accepted for publication in IEEE EuroS&P.

  • Feb 16, 2020. I will be on the PC for USENIX Workshop on Cyber Security Experimentation and Test (CSET) 2020. Consider submitting.

  • Dec 15, 2019. I will be on the PC for ACM Conference on Computer and Communications Security (CCS) 2020. Consider submitting.

  • Oct 24, 2019. I will be on the PC for IEEE European Symposium on Security and Privacy (EuroS&P) 2020. Consider submitting.

  • Feb 24, 2019. I will be in San Diego, USA this week to attend the Network and Distributed System Security Symposium (NDSS 2019).

  • Feb 10, 2019. Our paper, "Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes", is accepted for publication in IEEE TDSC.

  • Feb 7, 2019. I am invited to give a talk at the Département d'Informatique et d'Ingénierie, Université du Québec en Outaouais (host: Mohand Allili).

  • Jan 18, 2019. Our paper, "UWB-ED: Distance Enlargement Attack Detection in Ultra-Wideband", is accepted for publication in USENIX Security.

  • Oct 13, 2018. I will be on the PC for IEEE European Symposium on Security and Privacy (EuroS&P) 2019. Consider submitting.

  • Aug 20, 2018. I will be in Budapest, Hungary this week to attend ACM SIGCOMM conference (SIGCOMM 2018).

  • May 17, 2018. Our paper, "Comparative Analysis of Control Plane Security of SDN and Conventional Networks", is accepted for publication in IEEE COMST.

  • May 9, 2018. Our work on mutual server and client location verification is featured in the APNIC Internet Registry blog.

  • March 26, 2018. I will be in Berlin, Germany this week to attend Passive and Active Measurement Conference (PAM 2018).

  • March 19, 2018. Our USENIX ;login: article about using secure Internet measurements to geolocate clients and servers now appeared in the Spring 2018 issue.

  • March 7, 2018. I am invited to give a talk at the School of Computer Science, Carleton University (host: Doug Howe).

  • February 7, 2018. I am invited to give a talk at the Lassonde School of Engineering, York University (host: Jarek Gryz).

  • February 5, 2018. I am invited to give a talk at the Information Security Research Group, University of Ottawa (host: Carlisle Adams).

  • December 1, 2017. I joined the System Security group of ETH Zürich, Switzerland, as a Senior Research Scientist.

  • August 14, 2017. I will be in Vancouver, BC this week attending the 26th USENIX Security Symposium. I will also give a short talk in the Lightning Session about Server Location Verification (SLV).

  • August 1, 2017. Our paper, "Server Location Verification and Server Location Pinning: Augmenting TLS Authentication", is accepted for publication in ACM TOPS.

  • July 4, 2017. I am invited to give a talk at the Institut für Informationssicherheit, ETH Zürich (host: Srđan Čapkun). I will also give a talk on the 6th at IBM Zürich.

  • June 13, 2017. I am invited to give a talk at the School of Computing Science, Simon Fraser University (host: Mohamed Hefeeda).

  • May 3, 2017. I am invited to give a talk at the Computer System Lab, University of Toronto (host: David Lie).

  • April 4, 2017. Our AsiaCCS paper "Accurate Manipulation of Delay-based Internet Geolocation" received a Distinguished Paper Award at the ACM AsiaCCS 2017 conference.

  • April 1, 2017. I will be in Abu Dhabi, UAE this week to attend AsiaCCS 2017. I will also present our paper "Accurate Manipulation of Delay-based Internet Geolocation".

  • January 25, 2017. Our paper, "Accurate Manipulation of Delay-based Internet Geolocation", is accepted for publication in ACM AsiaCCS.

  • August 28, 2016. Our paper, "Location Verification of Wireless Internet Clients: Evaluation and Improvements", is accepted for publication in IEEE TETC.

  • May 22, 2016. I will be in San Jose, CA this week to attend IEEE S&P 2016. I will also present our poster "Verifying Geographic Location Presence of Internet Clients".

  • February 7, 2016. Our work on Internet location verification is featured in The Globe and Mail.

  • November 1, 2015. Our paper, "What lies beneath? Analyzing automated SSH bruteforce attacks.", is accepted for publication in Passwords 2015.

  • June 14, 2015. Our paper, "CPV: Delay-based Location Verification for the Internet", is accepted for publication in IEEE TDSC.

  • March 6, 2015. Our paper, "Accurate One-Way Delay Estimation with Reduced Client-Trustworthiness", is accepted for publication in the IEEE Communications Letters.

  • October 29, 2014. Just learned that our CNS paper "Location Verification on the Internet" was among top 4% of all submissions, and was Nominated for Best Paper Award at the IEEE CNS 2014 conference.

  • October 28, 2014. I will be in San Francisco, CA this week to attend CNS 2014. I will also present our paper "Location Verification on the Internet".

  • October 21, 2014. Glad to know that our CNS paper "Location Verification on the Internet" is featured in the quarterly cybersecurity knowledge digest of SERENE-RISC Smart Security Network in Canada.

  • August 5, 2014. Our paper, "Taxing the Queue: Hindering Middleboxes from Unauthorized Large-Scale Traffic Relaying", is accepted for publication in the IEEE Communications Letters.

  • June 14, 2014. Our paper, "Location Verification on the Internet: Towards Enforcing Location-aware Access Policies Over Internet Clients", is accepted for publication in the 2014 IEEE CNS conference.

  • July 14, 2013. I will be in Calgary, AB this week for the ISSNet summer security week.

  • April 30, 2013. Our paper, "A Survey on Forensic Event Reconstruction Systems", is accepted for publication in the International Journal of Information and Computer Security.

  • April 23, 2013. I will be in Vancouver, BC for a meeting with our industrial partner. Then, on April 23rd, I'll go to Victoria, BC to attend the 5th annual 2013 ISSNet Workshop, and present our recent work on location-verification of Internet clients.

  • August 7, 2012. I am in Bellevue, WA for the next 4 days attending the 21st USENIX Security Symposium.

  • July 22, 2012. I am in Halifax, NS this week for the 2012 ISSNet summer school.

  • April 24, 2012. I will be in Kingston, ON for the next 3 days attending the 4th annual 2012 ISSNet Workshop.