Research Students of David Evans

PhD Students

Yan Huang, PhD candidate — using extra cores for security
Karsten Nohl, PhD expected Fall 2008 — RFID privacy and security (winner of ECE Rader Graduate Research Award, 2008)
Reverse-Engineering a Cryptographic RFID Tag (with Starbug, and Henryk Plotz), to appear in USENIX Security 2008, August 2008.
Hiding in Groups: On the Expressiveness of Privacy Distributions, 23rd International Information Security Conference (SEC 2008), Milan, Italy, September 2008. [PDF]
Quantifying Information Leakage in Tree-Based Hash Protocols, Eigth International Conference on Information and Communications Security (ICICS), Raleigh, North Carolina, December 2006. [PDF] [Technical Report (UVA-CS-2006-20): PDF]
Jeffrey Shirley, PhD candidate — user-intent based access control

Undergraduate Researchers

Sam Block (summer 2008) — N-Variant systems
Richard Hsu (summer 2008) — scene-based CAPTCHAs
Rachel Lathbury (summer 2008) — linguistics and security
Paul DiOrio (summer 2008) — linguistics and security

Prospective Students

I am always happy to exchange email with UVa students looking for research projects. My primary research area is computer security which includes software security, applications of cryptography, system security and network security. I will also supervise outstanding students interested in other areas.

If you are a current UVa undergraduate student, visit our research group blog to learn about what is going on in our group, and send me an email to arrange a meeting. All students are also welcome (and encouraged) to attend our Security Research Lunches. Visit http://groups.google.com/group/uva-cs-sec to sign up for the mailing list. I generally prefer to find first or second year students so you have sufficient time to do something interesting before you graduate, but I have also been known to accept exceptional third or fourth year students.

If you are a current UVa graduate student looking for a research advisor, look at my research websites and some of our papers. If the kind of work we do seems interesting to you, contact me to arrange a meeting, preferably to discuss some of your own original research ideas.

If you are interested in coming to UVa to do a graduate degree, please feel free to contact me (but it would be a good idea to read my advice for prospective students first). I will be on sabbatical for the 2008-2009 academic year, but looking for new students who are planning to start PhD programs in fall 2009.

Graduated PhD Students

Nathanael Paul — UVA PhD 2008
Thesis: Disk-Level Malware Detection, May 2008
Selected Papers:
Thermal Attacks on Storage Systems (with Sudhanva Gurumurthi), 14th NASA Goddard, 23rd IEEE Conference on Mass Storage Systems and Technologies, College Park, Maryland, May 2006. [PDF]
Where's the FEEB?: The Effectiveness of Instruction Set Randomization (with Ana Nora Sovarel), 14th USENIX Security Symposium, Baltimore, MD, August 2005. [PDF, HTML]
.NET Security: Lessons Learned and Missed from Java, Twentieth Annual Computer Security Applications Conference (ACSAC 2004), December 2004, Tucson, Arizona. [PDF]
Election Security: Perception and Reality, IEEE Security and Privacy, January-February 2004. [PDF]
Authentication for Remote Voting (with Avi Rubin and Dan Wallach), Workshop on Human-Computer Interaction and Security Systems, April 2003. [PDF]
First employment: Postdoc, Vrije Universiteit Amsterdam (Andrew Tanenbaum)
Jinlin Yang — UVA PhD 2007
Selected Papers:
Perracotta: Mining Temporal API Rules From Imperfect Traces (with Jinlin Yang, Deepali Bhardwaj, Thirumalesh Bhat, and Manuvir Das). ICSE 2006. May 2006.
Software: Perracotta
First Employment: Microsoft Center for Software Excellence (Redmond, WA)

Graduated Masters Students

Benjamin Cox — UVA MCS 2006
Security through Redundant Data Diversity , 38th IEEE/IFPF International Conference on Dependable Systems and Networks, Anchorage, Alaska, June 2008. [PDF]
N-Variant Systems: A Secretless Framework for Security through Diversity , 15th USENIX Security Symposium, Vancouver, BC, August 2006. Talk slides: [PPT, PDF]
Software: N-Variant Systems Framework
First employment: Northrop Grumman (Charlottesville, VA)
Ana Nora Sovarel — UVA MCS 2006
Automatic Identification and Protection of Security-Critical Data
Where's the FEEB?: The Effectiveness of Instruction Set Randomization, USENIX Security 2005, August 2005. [PDF] [HTML]
First employment: UVa Hospital (Medical Informatics)
Lingxuan Hu — 2004
Localization for Mobile Sensor Networks, Tenth Annual International Conference on Mobile Computing and Networking (ACM MobiCom 2004). [PDF] Talk Slides [PPT]
Using Directional Antennas to Prevent Wormhole Attacks, Network and Distributed System Security Symposium, February 2004. [PDF]
Secure Aggregation for Wireless Networks, Workshop on Security and Assurance in Ad hoc Networks. January, 2003. [PDF]
Software: MCL Simulator (Monte Carlo Localization)
First employment: Microsoft (Redmond, WA)
Selvin George — UVA MCS 2003
EnviroTrack: Towards an Environmental Computing Paradigm for Distributed Sensor Networks, The 24th International Conference on Distributed Computing Systems. Tokyo, Japan. March 23-26, 2004. [PDF]
A Biological Programming Model for Self-Healing, First ACM Workshop on Survivable and Self-Regenerative Systems, October 2003. [PDF]
A Biologically Inspired Programming Model for Self-Healing Systems, Workshop on Self-Healing Systems (WOSS'02), November, 2002. [PDF]
Software: CellSim
First employment: Yahoo!
Greg Yukl — UVA MCS 2003
In-Line Source Code Generation
David Larochelle — UVA MCS 2002
Statically Detecting Likely Buffer Overflow Vulnerabilities, 2001 USENIX Security Symposium, Aug 2001. (PDF, HTML, 13 pages)
Software: Splint
First employment: Ounce Labs
Joel Winstead — UVA MS 2002
MS Thesis: Structured Exception Semantics for Parallel Loops, January 2002.
First employment: Cigital
Weilin Zhong — UVA MCS 2002
When Ants Attack: Security Issues for Stigmergic Systems, UVA TR 2002-23.
First employment: Cigital (Current employment: Aspect Security)
Andrew Twyman — MIT MEng '99 (co-supervised with John Guttag)
MEng Thesis: Flexible Code Safety for Win32 (winner of MIT Masterworks Prize)
Software: Naccio (Win32)
First Employment: Maker Communications (acquired by Conexant)
Current Employment: Liquid Machines

Undergraduate Research Alumni

Currently in PhD Programs

John Calandrino (2002) — University of North Carolina (PhD expected 2009) (working with James Anderson on real-time scheduling for multicore platforms) (RTSS 2006: [PDF], Euromicro 2007: [PDF])
Adrienne Felt (2006-2008) — UC Berkeley; privacy protection for social networking APIs, mashup security issues; CRA Outstanding Undergraduate Award Finalist 2008; SEAS Outstanding Student Award 2008
Christopher Frost (2003-2004) — UCLA (working on the Featherstich File System Project with Eddie Kohler) (SOSP 2007 paper: [PDF])
Salvatore Guarnieri (2003-2006) — University of Washington (working on securing software with Dan Grossman and Yoshi Kohno); CRA Outstanding Undergraduate Award Finalist in 2006
William (GJ) Halfond (2002) — Georgia Tech (working on web application security with Alessandro Orso) (FSE 2007: [PDF], TSE 2007: [PDF], FSE 2006: [PDF], ASE 2005: [PDF], WODA 2005: [PDF]
Felipe Huici (2001) - University College London (working on mitigating denial-of-service attacks with Mark Handley and Brad Karp) (SIGCOMM Review 2007 paper: [PDF])
Jonathan McCune (2001-2003) — CMU (PhD expected 2009) (working with Adrian Perrig and Mike Reiter on trusted computing) (EuroSys 2008: [PDF], ASPLOS 2008: [PDF], Oakland 2007: [PDF], USENIX Tech 2006: [PDF], Oakland 2005 (Seeing is Believing): [PDF], Oakland 2005 (Detection of Denial of Message Attacks): [PDF]); CRA Outstanding Undergraduate Honorable Mentionee in 2003
Matt Spear (2005-2006) — UC Davis (working with Karl Levitt and Felix Wu on peer-to-peer security) (Infocom 2008: [PDF], ICC 2008: [PDF])

Other Alumni

Meghan Knoll (summer 2007) — spyware
Carly Simpson (summer 2007) — security applications of GPUs
Michael Peck (2003-2004) — Johns Hopkins University
David Friedman (2002) — Johns Hopkins University
Adam Trost (2001-2002) — UVa Law School
Ryan Persaud (2001) — UCSD

Completed Senior Theses

2006:

2005: 2004: 2003: 2002: 2001: