diff options
Diffstat (limited to 'paper/directions.bib')
| -rw-r--r-- | paper/directions.bib | 325 |
1 files changed, 325 insertions, 0 deletions
diff --git a/paper/directions.bib b/paper/directions.bib new file mode 100644 index 0000000..95b5ebf --- /dev/null +++ b/paper/directions.bib @@ -0,0 +1,325 @@ +@article{saxena01, + author = {Saxena, Nitesh and Ekberg, Jan-Erik and Kostiainen, Kari and Asokan, N.}, + journal = {Proceedings of the 2006 IEEE Symposium on Security and Privacy (S\&P{\rq}06)}, + localfile = {resources/saxena01.pdf}, + publisher = {IEEE}, + title = {Secure Device Pairing based on a Visual Channel}, + x-color = {#009966}, + year = {2006} +} + +@article{he01, + author = {He, Debiao and Kumar, Neeraj and Lee, Jong-Hyouk and Sherratt, R. Simon}, + journal = {IEEE Transactions on Consumer Electronics}, + localfile = {resources/he01.pdf}, + month = feb, + number = {1}, + pages = {30--37}, + publisher = {IEEE}, + title = {Enhanced Three-factor Security Protocol for Consumer USB Mass Storage Devices}, + volume = {60}, + x-color = {#009966}, + year = {2014} +} + +@article{loe01, + author = {Loe, Edwin Lupito and Hsiao, Hsu-Chun and Kim, Tiffany Hyun-Jin and Lee, Shao-Chuan and Cheng, Shin-Ming}, + localfile = {resources/loe01.pdf}, + title = {SandUSB: An Installation-Free Sandbox For USB Peripherals}, + x-color = {#009966}, + year = {2016} +} + +@article{bates01, + author = {Tian, Dave (Jing) and Bates, Adam and Butler, Kevin}, + journal = {ACSAC}, + localfile = {resources/bates01.pdf}, + month = dec, + title = {Defending Against Malicious USB Firmware with GoodUSB}, + x-color = {#009966}, + year = {2015} +} + +@article{kobsa01, + author = {Kobsa, Alfred and Sonawalla, Rahim and Tsudik, Gene and Uzun, Ersin and Wang, Yang}, + journal = {Symposium on Usable Privacy and Security (SOUPS)}, + localfile = {resources/kobsa01.pdf}, + month = jul, + title = {Serial Hook-ups: A Comparative Usability Study of Secure Device Pairing Methods}, + x-color = {#009966}, + year = {2009} +} + +@article{kang01, + author = {Kang, Myung and Saiedian, Hossein}, + journal = {Information Security Journal "A Global Perspective"}, + localfile = {resources/kang01.pdf}, + number = {4}, + pages = {166--185}, + publisher = {taylor\&francis}, + title = {USBWall: A novel security mechanism to protect against maliciously reprogrammed USB devices}, + volume = {26}, + x-color = {#009966}, + year = {2017} +} + +@article{wang01, + author = {Wang, Zhaohui and Johnson, Ryan and Stavrou, Angelos}, + localfile = {resources/wang01.pdf}, + title = {Attestation \& Authentication for USB Communications}, + x-color = {#009966}, + year = {2012} +} + +@techreport{uzun01, + author = {Uzun, Ersin and Karvonen, Kristiina and Asokan, N.}, + institution = {Nokia Research Center}, + localfile = {resources/uzun01.pdf}, + location = {Helsinki, Finland}, + title = {Usability Analysis of Secure Pairing Methods}, + x-color = {#009966}, + year = {2007} +} + +@article{weinstein01, + author = {Weinstein, David and Kovah, Xeno and Dyer, Scott}, + institution = {The MITRE Corporation}, + localfile = {resources/weinstein01.pdf}, + title = {SeRPEnT: Secure Remote Peripheral Encryption Tunnel}, + x-color = {#009966}, + year = {2012} +} + +@article{srivaths01, + author = {Ravi, Srivaths and Raghunathan, Anand and Kocher, Paul and Hattangady, Sunil}, + journal = {ACM Transactions on Embedded Computing Systems}, + localfile = {resources/srivaths01.pdf}, + month = aug, + number = {3}, + pages = {461--491}, + publisher = {ACM}, + title = {Security in Embedded Systems: Design Challenges}, + volume = {3}, + x-color = {#009966}, + year = {2004} +} + +@article{arun01, + author = {Kumar, Arun and Saxena, Nitesh and Tsudik, Gene and Uzun, Ersin}, + institution = {Polytechnic Institute of New York Univesity \& University of California, Irvine}, + localfile = {resources/arun01.pdf}, + title = {Caveat Emptor: A Comparative Study of Secure Device Pairing Methods}, + x-color = {#009966}, + year = {2009} +} + +@techreport{perrin01, + author = {Perrin, Trevor}, + localfile = {resources/perrin01.pdf}, + month = jul, + number = {Rev. 34}, + title = {The Noise Protocol Framework}, + x-color = {#009966}, + year = {2018} +} + +@article{angel01, + author = {Angel, Sebastian and Wahby, Riad S. and Leners, Joshua B. and Blumberg, Andrew J.}, + journal = {Proceedings of the 25th USENIX Security Symposium}, + localfile = {resources/angel01.pdf}, + month = aug, + pages = {397--414}, + publisher = {USENIX Association}, + title = {Defending against Malicious Peripherals with Cinch}, + x-color = {#009966}, + year = {2016} +} + +@article{su01, + author = {Su, Yang and Genkin, Daniel and Ranasinghe, Damith and Yarom, Yuval}, + isbn = {978-1-931971-40-9}, + journal = {Proceedings of the 26th USENIX Security Symposium}, + localfile = {resources/su01.pdf}, + month = aug, + pages = {1145--1161}, + publisher = {USENIX Association}, + title = {USB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs}, + x-color = {#009966}, + year = {2017} +} + +@misc{tian01, + author = {Tian, Dave and Scaife, Nolen and Bates, Adam and Butler, Kevin and Traynor, Patrick}, + institution = {University of Florida}, + journal = {USENIX Security}, + localfile = {resources/tian01.pdf}, + location = {Austin, Texas}, + month = aug, + title = {Making USB Great Again with USBFILTER}, + x-color = {#009966}, + year = {2016} +} + +@article{neugschwandtner01, + author = {Neugschwandtner, Matthias and Beitler, Anton and Kurmus, Anil}, + institution = {IBM Research Zurich}, + journal = {EUROSEC'16}, + localfile = {resources/neugschwandtner01.pdf}, + location = {London, United Kingdom}, + month = apr, + publisher = {ACM}, + title = {A Transparent Defense Against USB Eavesdropping Attacks}, + x-color = {#009966}, + year = {2016} +} + +@misc{misc01, + number = {Editor{\rq}s Draft, 21 November 2018}, + title = {WebUSB API}, + url = {https://wicg.github.io/webusb/}, + x-color = {#009966}, + year = {2018} +} + +@article{griscioli01, + author = {Griscioli, Federico and Pizzonia, Maurizio and Sacchetti, Marco}, + institution = {Roma Tre University}, + localfile = {resources/griscioli01.pdf}, + publisher = {IEEE}, + title = {USBCheckIn: Preventing BadUSB Attacks by Forcing Human-Device Interaction}, + x-color = {#009966}, + year = {2017} +} + +@misc{usb01, + editor = {Dunstan, Bob and Ismail, Abdul and Wallick, Stephanie}, + localfile = {resources/usb01.pdf}, + number = {Revision 1.0 with ECN and Errata through July 24, 2017}, + publisher = {7 USB 3.0 Promoter Group}, + title = {Universal Serial Bus Type-C Authentication Specification}, + x-color = {#009966}, + year = {2017} +} + +@article{kobeissi01, + author = {Kobeissi, Nadim and Bhargavan, Karthikeyan}, + localfile = {resources/kobeissi1.pdf}, + month = {dec}, + title = {Noise Explorer: Fully Automated Modeling and Verification for Arbitrary Noise Protocols}, + url = {https://eprint.iacr.org/2018/766.pdf}, + x-color = {#009966}, + year = {2018} +} + +@misc{rfc2104, + author = {Krawczyk, H. and Bellare, M. and Canetti, R.}, + month = {feb}, + title = {RFC2104 - HMAC: Keyed-Hashing for Message Authentication}, + url = {https://tools.ietf.org/html/rfc2104}, + x-color = {#009966}, + year = {1997} +} + +@proceedings{schiermeier01, + author = {Schiermeier, Andreas}, + journal = {26th Chaos Communication Congress}, + localfile = {resources/schiermeier01.pdf}, + title = {TAN-Generatoren mit optischer Schnittstelle (Flickercode)}, + url = {http://web.archive.org/web/20130309011417/http://www.hbci-zka.de/dokumente/spezifikation_deutsch/Belegungsrichtlinien%20TAN-Generator%20ve1.3%20final%20version.pdf}, + x-color = {#009966}, + year = {2009} +} + +@misc{schiermeier02, + author = {Schiermeier, Andreas}, + title = {Vom {\"U}berweisungsauftrag zur TAN}, + url = {https://web.archive.org/web/20181213014203/https://wiki.ccc-ffm.de/projekte:tangenerator:start}, + x-color = {#009966}, + year = {2018} +} + +@article{braun01, + author = {Braun, Lars-Dominik}, + title = {chipTAN Flickercodes}, + url = {https://web.archive.org/web/20181213014441/https://6xq.net/flickercodes/}, + x-color = {#009966}, + year = {2012} +} + +@proceedings{tan01, + author = {Tan, Joshua and Bauer, Lujo and Bonneau, Joseph and Cranor, Lorrie Faith and Thomas, Jeremy and Ur, Blase}, + journal = {Proceedings of the 2017 CHI Conference on Human Factors in Computing Systems}, + localfile = {resources/tan01.pdf}, + location = {Denver, CO, USA}, + month = may, + publisher = {ACM}, + title = {Can Unicorns Help Users Compare Crypto Key Fingerprints?}, + x-color = {#009966}, + year = {2017} +} + +@inproceedings{chalkias01, + abstract = {Key establishment protocols are among the most important security mechanisms via which two or more parties can encrypt their communications over an insecure network. This paper is concerned with the vulnerability of one-pass two-party key establishment protocols to key-compromise impersonation (K-CI) attacks. The latter may occur once an adversary has obtained the long-term private key of an honest party, and represent a serious --- but often underestimated --- threat, because a successful impersonation attack may result in far greater harm than the reading of past and future conversations. Our aim is to describe two main classes of K-CI attacks that can be mounted against all of the best-known one-pass protocols, including MQV and HMQV. We show that one of the attacks described can be somewhat avoided (though not completely eliminated) through the combined use of digital signatures and time-stamps; however, there still remains a class of K-CI threats for which there is no obvious solution.}, + address = {Berlin, Heidelberg}, + author = {Chalkias, K. and Baldimtsi, F. and Hristu-Varsakelis, D. and Stephanides, G.}, + booktitle = {E-business and Telecommunications}, + editor = {Filipe, Joaquim and Obaidat, Mohammad S.}, + isbn = {978-3-540-88653-2}, + localfile = {resources/chalkias01.pdf}, + pages = {227--238}, + publisher = {Springer Berlin Heidelberg}, + title = {Two Types of Key-Compromise Impersonation Attacks against One-Pass Key Establishment Protocols}, + x-color = {#009966}, + year = {2009} +} + +@inproceedings{dechand01, + address = {Austin, TX}, + author = {Dechand, Sergej and Sch{\"u}rmann, Dominik and Busse, Karoline and Acar, Yasemin and Fahl, Sascha and Smith, Matthew}, + booktitle = {25th {USENIX} Security Symposium ({USENIX} Security 16)}, + isbn = {978-1-931971-32-4}, + localfile = {resources/dechand01.pdf}, + pages = {193--208}, + publisher = {{USENIX} Association}, + title = {An Empirical Study of Textual Key-Fingerprint Representations}, + url = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/dechand}, + x-color = {#009966}, + year = {2016} +} + +@techreport{rfc1654, + author = {Zimmermann, P. and Callas, J.}, + editor = {Johnston, A.}, + howpublished = {Internet Requests for Comments}, + institution = {{RFC Editor}}, + issn = {2070-1721}, + month = apr, + number = 6189, + pages = {1--115}, + publisher = {{RFC Editor}}, + title = {ZRTP: Media Path Key Agreement for Unicast Secure RTP}, + type = {{RFC}}, + url = {https://tools.ietf.org/html/rfc6189}, + x-color = {#009966}, + year = {2011} +} + +@misc{usbguard01, + author = {others}, + title = {USBGuard}, + url = {https://usbguard.github.io/}, + x-color = {#009966}, + year = {2019} +} + +@inproceedings{demaine01, + author = {Demaine, Erik D}, + booktitle = {International Symposium on Mathematical Foundations of Computer Science}, + localfile = {resources/demaine01.pdf}, + organization = {Springer}, + pages = {18--33}, + title = {Playing games with algorithms: Algorithmic combinatorial game theory}, + x-color = {#009966}, + year = {2001} +} + |