Catherine M. and James E. Allchin Early Career
Assistant Professor,
School of Computer Science,
College of Computing,
Georgia Tech

• CV
• email
• https://github.com/tsgates ( ★)
• PGP Key
• SSLab / GTS3 / IISP / r00timentary

Contacts

Room 3142,
Klaus Advanced Computing Building,
266 Ferst Dr NW,
Atlanta GA 30332-0765
(404) 385-2934

Research Interests

Systems Security, Operating Systems, Programming Languages, and Distributed Systems.

Teaching

Fall 2018:	Information Security Lab (CS 6265)
Fall 2017:	Information Security Lab (CS 6265)
Fall 2016:	Information Security Lab (CS 6265)
Spring 2016:	Design Operating Systems (CS 3210)
Fall 2015:	Information Security Lab (CS 6265)
Fall 2014:	Topics in Building Secure Systems (CS 8803)

Publications (all/18/17/16/15/...)

1. Stopping Memory Disclosures via Diversification and Replicated Execution. [ paper ]
   Kangjie Lu, Meng Xu, Chengyu Song, Taesoo Kim, and Wenke Lee.
   IEEE Transactions on Dependable and Secure Computing (TDSC),
   October 2018.
2. Enforcing Unique Code Target Property for Control-Flow Integrity. [ paper | slides ]
   Hong Hu, Chenxiong Qian, Carter Yagemann, Simon P. Chung, Bill Harris, Taesoo Kim, and Wenke Lee.
   In Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS 2018),
   Toronto, Canada, October 2018.
3. SGX-Tor: A Secure and Practical Tor Anonymity Network With SGX Enclaves. [ paper | code ]
   Seongmin Kim, Juhyeng Han, Jaehyeong Ha, Taesoo Kim, and Dongsu Han.
   IEEE/ACM Transactions on Networking (ToN), Volumn. 26, No. 5, pp. 2174-2187,
   October 2018.
4. QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing. [ paper | slides | code ]
   Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, and Taesoo Kim.
   In Proceedings of the 27th USENIX Security Symposium (Security 2018),
   Baltimore, MD, August 2018. Distinguished Paper Award
   CVE-2017-6836, CVE-2017-8891, CVE-2017-12878, CVE-2017-17080, CVE-2017-17081, …
5. Efficient Data Flow Tagging and Tracking for Refinable Cross-host Attack Investigation. [ paper | slides ]
   Yang Ji, Sangho Lee, Mattia Fazzini, Joey Allen, Evan Downing, Taesoo Kim, Alessandro Orso, and Wenke Lee.
   In Proceedings of the 27th USENIX Security Symposium (Security 2018),
   Baltimore, MD, August 2018.
6. Scaling Guest OS Critical Sections with eCS. [ paper | slides | code ]
   Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
   In Proceedings of the 2018 USENIX Annual Technical Conference (ATC 2018),
   Boston, MA, July 2018.
7. Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels. [ paper | slides | code ]
   Meng Xu, Chenxiong Qian, Kangjie Lu, Michael Backes, and Taesoo Kim.
   In Proceedings of the 39th IEEE Symposium on Security and Privacy (S&P 2018),
   San Francisco, CA, May 2018. CVE-2017-15037
8. A Scalable Ordering Primitive for Multicore Machines. [ paper | slides | code ]
   Sanidhya Kashyap, Changwoo Min, Kangnyeon Kim, and Taesoo Kim.
   In Proceedings of the 13rd ACM European Conference on Computer Systems (EuroSys 2018),
   Porto, Portugal, April, 2018.
9. SOLROS: A Data-Centric Operating System Architecture for Heterogeneous Computing. [ paper | slides ]
   Changwoo Min, Woon-Hak Kang, Mohan Kumar Sanidhya Kashyap, Steffen Maass, Heeseung Jo, and Taesoo Kim.
   In Proceedings of the 13rd ACM European Conference on Computer Systems (EuroSys 2018),
   Porto, Portugal, April, 2018.
10. LATR: Lazy Translation Coherence. [ paper | slides | code ]
    Mohan Kumar, Steffen Maass, Sanidhya Kashyap, Jan Vesely, Zi Yan, Taesoo Kim, Abhishek Bhattacharjee, and Tushar Krishna.
    In Proceedings of the 23rd ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2018),
    Williamsburg, VA, March, 2018.
11. Prevention of Cross-update Privacy Leaks on Android. [ paper ]
    Beumjin Cho, Sangho Lee, Meng Xu, Sangwoo Ji, Taesoo Kim, and Jong Kim.
    Computer Science and Information Systems 15(1),
    January 2018.
12. Designing New Operating Primitives to Improve Fuzzing Performance. [ paper | slides | code ]
    Wen Xu, Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 23th ACM Conference on Computer and Communications Security (CCS 2017),
    Dallas, TX, October 2017. Mozilla Research
13. RAIN: Refinable Attack Investigation with On-demand Inter-Process Information Flow Tracking. [ paper | slides ]
    Yang Ji, Sangho Lee, Evan Downing, Weiren Wang, Mattia Fazzini, Taesoo Kim, Alex Orso, and Wenke Lee.
    In Proceedings of the 23th ACM Conference on Computer and Communications Security (CCS 2017),
    Dallas, TX, October 2017. GT News Horizons
14. Checking Open-Source License Violation and 1-day Security Risk at Large Scale. [ paper | slides | code ]
    Ruian Duan, Ashish Bijlani, Meng Xu, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 23th ACM Conference on Computer and Communications Security (CCS 2017),
    Dallas, TX, October 2017.
15. SGX-Bomb: Locking Down the Processor via Rowhammer Attack. [ paper | slides | code ]
    Yeongjin Jang, Jaehyuk Lee, Sangho Lee, and Taesoo Kim.
    In Proceedings of the 2nd Workshop on System Software for Trusted Execution (SysTEX 2017),
    Shanghai, China, October 2017. Hacker News
16. FLSCHED: A Lockless and Lightweight Approach to OS Scheduler for Xeon Phi. [ paper | slides ]
    Heeseung Jo, Woonhak Kang, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 8th Asia-Pacific Workshop on Systems (APSys 2017),
    Mumbai, India, September 2017.
17. Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing. [ paper | slides | code ]
    Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, and Marcus Peinado.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017. Intel SGX Research
18. Hacking in Darkness: Return-oriented Programming against Secure Enclaves. [ paper | slides | code ]
    Jaehyuk Lee, Jinsoo Jang, Yeongjin Jang, Nohyun Kwak, Yeseul Choi, Changho Choi, Taesoo Kim, Marcus Peinado, and Brent B. Kang.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017. Intel SGX Research
19. Efficient Protection of Path-Sensitive Control Security. [ paper | slides ]
    Ren Ding, Chenxiong Qian, Chengyu Song, Bill Harris, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017.
20. PlatPal: Detecting Malicious Documents with Platform Diversity. [ paper | slides | code ]
    Meng Xu and Taesoo Kim.
    In Proceedings of the 26th USENIX Security Symposium (Security 2017),
    Vancouver, Canada, August 2017.
21. AVPASS: Leaking and Bypassing Antivirus Detection Model Automatically. [ slides | code ]
    Jinho Jung, Chanil Jeon, Max Wolotsky, Insu Yun, and Taesoo Kim.
    BlackHat USA 2017,
    Las Vegas, NV, Auguest 2017. DARK Reading 1/2/3, WIRED
22. Scalable NUMA-aware Blocking Synchronization Primitives. [ paper | slides | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 2017 USENIX Annual Technical Conference (ATC 2017),
    Santa Clara, CA, July 2017.
23. CAB-Fuzz: Practical Concolic Testing Techniques for COTS Operating Systems. [ paper | slides ]
    Su Yong Kim, Sangho Lee, Insu Yun, Wen Xu, Byoungyoung Lee, Youngtae Yun, and Taesoo Kim.
    In Proceedings of the 2017 USENIX Annual Technical Conference (ATC 2017),
    Santa Clara, CA, July 2017. CVE-2015-6098, CVE-2016-0040, CVE-2016-7219
24. Bunshin: Compositing Security Mechanisms through Diversification. [ paper | slides | code ]
    Meng Xu, Kangjie Lu, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 2017 USENIX Annual Technical Conference (ATC 2017),
    Santa Clara, CA, July 2017.
25. Mosaic: Processing a Trillion-Edge Graph on a Single Machine. [ paper | slides | code ]
    Steffen Maass, Changwoo Min, Sanidhya Kashyap, Woonhak Kang, Mohan Kumar, and Taesoo Kim.
    In Proceedings of the 12st ACM European Conference on Computer Systems (EuroSys 2017),
    Belgrade, Serbia, April, 2017. Best Student Paper Award
    The Next Platform, Hacker News 1/2, GT News, The morning paper
26. Enhancing Security and Privacy of Tor's Ecosystem by using Trusted Execution Environments. [ paper | slides | code ]
    Seongmin Kim, Juhyeng Han, Jaehyeong Ha, Taesoo Kim, and Dongsu Han.
    In Proceedings of the 14th USENIX Symposium on Networked Systems Design and Implementation (NSDI 2017),
    Boston, MA, March 2017. Intel SGX Research
27. SGX-Shield: Enabling Address Space Layout Randomization for SGX Programs. [ paper | slides | code ]
    Jaebaek Seo, Byoungyoung Lee, Sungmin Kim, Ming-Wei Shih, Insik Shin, Dongsu Han, and Taesoo Kim.
    In Proceedings of the 2017 Network and Distributed System Security Symposium (NDSS 2017),
    San Diego, CA, February 2017. Intel SGX Research
28. T-SGX: Eradicating Controlled-Channel Attacks Against Enclave Programs. [ paper | slides | code ]
    Ming-Wei Shih, Sangho Lee, Taesoo Kim, and Marcus Peinado.
    In Proceedings of the 2017 Network and Distributed System Security Symposium (NDSS 2017),
    San Diego, CA, February 2017. Intel SGX Research
29. Fast, Scalable and Secure Onloading of Edge Functions using AirBox. [ paper | slides ]
    Ketan Bhardwaj, Ming-Wei Shih, Pragya Agarwal, Ada Gavrilovska, Taesoo Kim, and Karsten Schwan.
    In Proceedings of the 1st IEEE/ACM Symposium on Edge Computing (SEC 2017),
    Washington, DC, October 2016. Patent: WO2018026841A1
30. UniSan: Proactive Kernel Memory Initialization to Eliminate Data Leakages. [ paper | slides | code ]
    Kangjie Lu, Chengyu Song, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2016),
    Vienna, Austria, October 2016. CVE-2016-5243, CVE-2016-5244, CVE-2016-4569, CVE-2016-4578, CVE-2016-4569, CVE-2016-4485, CVE-2016-4486, CVE-2016-4482, AndroidID-28620568, AndroidID-28619338, AndroidID-28620324, AndroidID-28673002, AndroidID-28672819, AndroidID-28672560, AndroidID-28616963, …
31. Breaking Kernel Address Space Layout Randomization with Intel TSX. [ paper | slides | code ]
    Yeongjin Jang, Sangho Lee, and Taesoo Kim.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2016),
    Vienna, Austria, October 2016. Hacker News, LWN, Attacking Windows 10 by IOActive, Google Project Zero, Microsoft
32. Provably-Secure Remote Memory Attestation for Heap Overflow Protection. [ paper ]
    Alexandra Boldyreva, Taesoo Kim, Richard J. Lipton, and Bogdan Warinschi.
    In Proceedings of the 10th Conference on Security and Cryptography for Networks (SCN 2016),
    Amalfi, Italy, August, 2016.
33. Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques. [ paper ]
    Meng Xu, Chengyu Song, Yang ji, Ming-Wei Shih, Kangjie Lu, Cong Zheng, Ruian Duan, Yeongjin Jang, Byoungyoung Lee, Chenxiong Qian, Sangho Lee, and Taesoo Kim.
    ACM Computing Surveys (CSUR 2016), Volumn 49-2,
    August, 2016.
34. APISan: Sanitizing API Usages through Semantic Cross-checking. [ paper | slides | code ]
    Insu Yun, Changwoo Min, Xujie Si, Yeongjin Jang, Taesoo Kim, and Mayur Naik.
    In Proceedings of the 25th USENIX Security Symposium (Security 2016),
    Austin, TX, August, 2016. Top 10 Finalists, CSAW16
    TGC/News, CVE-2016-5636
35. Breaking Kernel Address Space Layout Randomization (KASLR) with Intel TSX. [ paper | slides | code ]
    Yeongjin Jang, Sangho Lee, and Taesoo Kim.
    BlackHat USA 2016,
    Las Vegas, NV, Auguest 2016. Hacker News, LWN, Attacking Windows 10 by IOActive, Google Project Zero, Microsoft
36. Understanding Manycore Scalability of File Systems. [ paper | slides | code ]
    Changwoo Min, Sanidhya Kashyap, Steffen Maass, Woonhak Kang, and Taesoo Kim.
    In Proceedings of the 2016 USENIX Annual Technical Conference (ATC 2016),
    Denver, CO, June 2016.
37. Instant OS Updates via Userspace Checkpoint-and-Restart. [ paper | slides ]
    Sanidhya Kashyap, Changwoo Min, Byoungyoung Lee, Taesoo Kim, and Pavel Emelyanov.
    In Proceedings of the 2016 USENIX Annual Technical Conference (ATC 2016),
    Denver, CO, June 2016. Linux Plumbers Conference 2015, CRIU
38. HDFI: Hardware-Assisted Data-flow Isolation. [ paper | slides | code ]
    Chengyu Song, Hyungon Moon, Monjur Alam, Insu Yun, Byoungyoung Lee, Taesoo Kim, Wenke Lee, and Yunheung Paek.
    In Proceedings of the 37th IEEE Symposium on Security and Privacy (S&P 2016),
    San Jose, CA, May 2016.
39. MetaSync: Coordinating Storage Across Multiple File Synchronization Services. [ paper | slides | code ]
    Seungyeop Han, Haichen Shen, Taesoo Kim, Arvind Krishnamurthy, Thomas Anderson, and David Wetherall.
    IEEE Internet Computing (IEEE IC 2016),
    May/June 2016.
40. S-NFV: Securing NFV States by using SGX. [ paper | slides | code ]
    Ming-Wei Shih, Mohan Kumar, Taesoo Kim, Ada Gavrilovska.
    In Proceedings of the 1st ACM International Workshop on Security in SDN and NFV,
    New Orleans, LA, March 2016. Best paper, invited to present at the NFV World Congress
    Intel SGX Research
41. OpenSGX: An Open Platform for SGX Research. [ paper | slides | code ]
    Prerit Jain, Soham Desai, Seongmin Kim, Ming-Wei Shih, JaeHyuk Lee, Changho Choi, Youjung Shin, Taesoo Kim, Brent B. Kang and Dongsu Han.
    In Proceedings of the 2016 Network and Distributed System Security Symposium (NDSS 2016),
    San Diego, CA, February 2016. Wikipedia: Software Guard Extensions, Intel SGX Research
42. Enforcing Kernel Security Invariants with Data Flow Integrity. [ paper | slides | code ]
    Chengyu Song, Byoungyoung Lee, Kangjie Lu, William R. Harris, Taesoo Kim and Wenke Lee.
    In Proceedings of the 2016 Network and Distributed System Security Symposium (NDSS 2016),
    San Diego, CA, February 2016.
43. FlexDroid: Enforcing In-App Privilege Separation in Android. [ paper | slides ]
    Jaebaek Seo, Daehyeok Kim, Donghyun Cho, Taesoo Kim and Insik Shin.
    In Proceedings of the 2016 Network and Distributed System Security Symposium (NDSS 2016),
    San Diego, CA, February 2016.
44. Opportunistic Spinlocks: Achieving Virtual Machine Scalability in the Clouds. [ paper | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    ACM SIGOPS Operating Systems Review (OSR), Volumn 50-1,
    January 2016. LWN: qspinlock in Linux
45. A First Step Towards Leveraging Commodity Trusted Execution Environments for Network Applications. [ paper | slides | code ]
    Seongmin Kim, Youjung Shin, Jaehyung Ha, Taesoo Kim, and Dongsu Han.
    In Proceedings of the 14th ACM Workshop on Hot Topics in Networks (HotNets 2015),
    Philadelphia, PA, November 2015.
46. UCognito: Private Browsing without Tears. [ paper | slides | code ]
    Meng Xu, Yeongjin Jang, Xinyu Xing, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2015),
    Denver, CO, October 2015. Observer Innovation
47. ASLR-Guard: Stopping Address Space Leakage for Code Reuse Attacks. [ paper | slides | code ]
    Kangjie Lu, Chengyu Song, Byoungyoung Lee, Simon P. Chung, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2015),
    Denver, CO, October 2015. Dagstuhl Seminar
48. Breaking and Fixing VoLTE: Exploiting Hidden Data Channels and Mis-implementations. [ paper | slides ]
    Hongil Kim, Dongkwan Kim, Minhee Kwon, Hyungseok Han, Yeongjin Jang, Dongsu Han, Taesoo Kim, and Yongdae Kim.
    In Proceedings of the 22nd ACM Conference on Computer and Communications Security (CCS 2015),
    Denver, CO, October 2015. Android Security, CERT, Networkworld, Softpedia, pocketnow, VoIPshield, VU#943167, CVE-2015-6614
49. Cross-checking Semantic Correctness: The Case of Finding File System Bugs. [ paper | slides | code ]
    Changwoo Min, Sanidhya Kashyap, Byoungyoung Lee, Chengyu Song, and Taesoo Kim.
    In Proceedings of the 25th ACM Symposium on Operating Systems Principles (SOSP 2015),
    Monterey, CA, October 2015. Bug Report
50. Type Casting Verification: Stopping an Emerging Attack Vector. [ paper | slides | code ]
    Byoungyoung Lee, Chengyu Song, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 24th USENIX Security Symposium (Security 2015),
    Washington, DC, August 2015. 2015 Internet Defense Prize ($100k Prize)
    Top 10 Finalists, CSAW15
    Internet Defense Prize, USENIX Update, Facebook, ZDNet, We Live Security, Science 2.0, hys.org, Scientific Computing, IT Pro Portal, Laboratory Equipment, Gizbot, Science Codex, Business Standard, ECN magazine, The Times of India, CanIndia News, New Indian Express, InfoSec, Social Times, The Register, CTV News, Threat Post, TNW News, The Security Ledger, Georgia Tech News Center, ScienceDaily, Milton Security, ACM TECHNEWS, Gadget 360, SC Magazine, IHS Engineering 360, CVE-2014-1594, …
51. Scalability in the Clouds! A Myth or Reality? [ paper | slides | code ]
    Sanidhya Kashyap, Changwoo Min, and Taesoo Kim.
    In Proceedings of the 6th Asia-Pacific Workshop on Systems (APSys 2015),
    Tokyo, Japan, July 2015. Best paper, nominated to Operating Systems Review (OSR)
    LWN: qspinlock in Linux
52. Lightweight Application-Level Crash Consistency on Transactional Flash Storage. [ paper | slides ]
    Changwoo Min, Woon-Hak Kang, Taesoo Kim, Sang-Won Lee, and Young Ik Eom.
    In Proceedings of the 2015 USENIX Annual Technical Conference (ATC 2015),
    Santa Clara, CA, July 2015.
53. MetaSync: File Synchronization Across Multiple Untrusted Storage Services. [ paper | slides | code ]
    Seungyeop Han, Haichen Shen, Taesoo Kim, Arvind Krishnamurthy, Thomas Anderson, and David Wetherall.
    In Proceedings of the 2015 USENIX Annual Technical Conference (ATC 2015),
    Santa Clara, CA, July 2015.
54. Preventing Use-after-free with Dangling Pointers Nullification. [ paper | slides | code ]
    Byoungyoung Lee, Chengyu Song, Yeongjin Jang, Tielei Wang, Taesoo Kim, Long Lu, and Wenke Lee.
    In Proceedings of the 2015 Network and Distributed System Security Symposium (NDSS 2015),
    San Diego, CA, February 2015. Best Applied Security Research Paper (CSAW15)
    
55. RFVP: Rollback-Free Value Prediction with Safe-to-Approximate Loads. [ paper ]
    Amir Yazdanbakhsh, Gennady Pekhimenko, Bradley Thwaites, Hadi Esmaeilzadeh, Taesoo Kim, Onur Mutlu, and Todd C Mowry.
    SCS Technical Report GT-CS-15-01, Georgia Institute of Technology,
    Atlanta, GA, January 2015.
56. Identifying Information Disclosure in Web Applications with Retroactive Auditing. [ paper | slides | code ]
    Haogang Chen, Taesoo Kim, Xi Wang, M. Frans Kaashoek, and Nickolai Zeldovich.
    In Proceedings of the 11th Symposium on Operating Systems Design and Implementation (OSDI 2014),
    Broomfield, CO, October 2014.
57. Abusing Performance Optimization Weaknesses to Bypass ASLR. [ slides ]
    Byoungyoung Lee, Yeongjin Jang, Tielei Wang, Chengyu Song, Long Lu, Taesoo Kim, and Wenke Lee.
    BlackHat USA 2014,
    Las Vegas, NV, Auguest 2014. Phrack, ISS Source, IT Researches, Embedded
58. Automatic Intrusion Recovery with System-wide History. [ paper | slides ]
    Taesoo Kim.
    Ph.D. Thesis, Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science,
    Cambridge, MA, June 2014.
59. MetaSync: File Synchronization Across Multiple Untrusted Storage Services. [ paper | code ]
    Seungyeop Han, Haichen Shen, Taesoon Kim, Arvind Krishnamurthy, Thomas Anderson, and David Wetherall.
    Technical Report UW-CSE-14-05-02, University of Washington Computer Science and Engineering,
    Seattle, WA, May 2014.
60. From Zygote to Morula: Fortifying Weakened ASLR on Android. [ paper | slides | code ]
    Byoungyoung Lee, Long Lu, Tielei Wang, Taesoo Kim, and Wenke Lee.
    In Proceedings of the 35th IEEE Symposium on Security and Privacy (S&P 2014),
    San Jose, CA, May 2014. LWN, Copperhead
61. Asynchronous Intrusion Recovery for Interconnected Web Services. [ paper | slides | code ]
    Ramesh Chandra, Taesoo Kim, and Nickolai Zeldovich.
    In Proceedings of the 24th ACM Symposium on Operating Systems Principles (SOSP 2013),
    Farmington, PA, November 2013.
62. Optimizing Unit Test Execution in Large Software Programs using Dependency Analysis. [ paper | slides ]
    Taesoo Kim, Ramesh Chandra, and Nickolai Zeldovich.
    In Proceedings of the 4th Asia-Pacific Workshop on Systems (APSys 2013),
    Singapore, July 2013.
63. Security Bugs in Embedded Interpreters. [ paper | slides ]
    Haogang Chen, Cody Cutler, Taesoo Kim, Yandong Mao, Xi Wang, Nickolai Zeldovich, and M. Frans Kaashoek.
    In Proceedings of the 4th Asia-Pacific Workshop on Systems (APSys 2013),
    Singapore, July 2013.
64. Practical and Effective Sandboxing for Non-root Users. [ paper | slides | code ]
    Taesoo Kim and Nickolai Zeldovich.
    In Proceedings of the 2013 USENIX Annual Technical Conference (ATC 2013),
    San Jose, CA, June 2013. Hacker News, Wikipedia: seccomp, Coders Grid, AlternativeTo, TorProject
65. Efficient Patch-based Auditing for Web Application Vulnerabilities. [ paper | slides | code ]
    Taesoo Kim, Ramesh Chandra, and Nickolai Zeldovich.
    In Proceedings of the 10th Symposium on Operating Systems Design and Implementation (OSDI 2012),
    Hollywood, CA, October 2012.
66. System-Level Protection Against Cache-based Side Channel Attacks in the Cloud. [ paper | slides ]
    Taesoo Kim, Marcus Peinado, and Gloria Mainar-Ruiz.
    In Proceedings of the 21st USENIX Security Symposium (Security 2012),
    Bellevue, WA, August 2012.
67. Recovering from Intrusions in Distributed Systems with Dare. [ paper | slides | code ]
    Taesoo Kim, Ramesh Chandra, and Nickolai Zeldovich.
    In Proceedings of the 3rd Asia-Pacific Workshop on Systems (APSys 2012),
    Seoul, South Korea, July 2012.
68. Intrusion Recovery for Database-backed Web Applications. [ paper | slides | code ]
    Ramesh Chandra, Taesoo Kim, Meelap Shah, Neha Narula, and Nickolai Zeldovich.
    In Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP 2011),
    Cascais, Portugal, October 2011.
69. Intrusion Recovery using Selective Re-execution. [ paper | slides | code ]
    Taesoo Kim, Xi Wang, Nickolai Zeldovich, and M. Frans Kaashoek.
    In Proceedings of the 9th Symposium on Operating Systems Design and Implementation (OSDI 2010),
    Vancouver, Canada, October 2010. Network World
70. Making Linux Protection Mechanisms Egalitarian with UserFS. [ paper | slides ]
    Taesoo Kim and Nickolai Zeldovich.
    In Proceedings of the 19th USENIX Security Symposium (Security 2010),
    Washington, DC, August 2010.

Updated: Sun Oct 28 18:43:17 2018