IEEE Symposium on Security and Privacy Workshops ieee-security

This page collects links to media coverage of papers in the 2012 IEEE Symposium on Security and Privacy.

If you know of articles that should be linked here, e-mail them to Ulf Lindqvist.

[SoK] The quest to replace passwords: A framework for comparative evaluation of web authentication schemes
Joseph Bonneau (University of Cambridge), Cormac Herley (Microsoft Research), Paul C. van Oorschot (Carleton U), and Frank Stajano (University of Cambridge)

Worth Reading: Passwords, guessed, replaced, still with us, The H, May 25, 2012.

The science of guessing: analyzing an anonymized corpus of 70 million passwords
Joseph Bonneau (University of Cambridge)

Over 55-year-olds pick better Internet passwords, (blog), June 6, 2012.

Indonesia has weakest computer passwords: Researcher, Jakarta Post, June 4, 2012.

Need a secure password? Ask someone over 55: Study shows older people have safer log-ins (unless they are from Indonesia), Daily Mail, June 2, 2012.

People over 55 pick more secure passwords than 25-year-olds, Fox News, June 1, 2012.

Over-55s pick passwords twice as secure as teenagers', New Scientist, June 1, 2012.

Worth Reading: Passwords, guessed, replaced, still with us, The H, May 25, 2012.

Dissecting Android Malware: Characterization and Evolution
Yajin Zhou and Xuxian Jiang (North Carolina State University)

Researchers Mapping Android Malware Genome, Tom's Guide, May 28, 2012.

Academia joins in battling Android malware, CSO, May 29, 2012.

CompSci eggheads to map Android malware genome, The Register, May 23, 2012.

Android Malware Genome Project wants to fight malware by understanding it, The Verge, May 23, 2012.

Researchers 'Map' Android Malware Genome, Dark Reading, May 22, 2012.

NCSU researcher takes fight against Android malware global, WRAL Tech Wire, May 22, 2012.

Announcing the Android Malware Genome Project, The Abstract, May 22, 2012.

Off-Path TCP Sequence Number Inference Attack - How Firewall Middleboxes Reduce Security
Zhiyun Qian and Z. Morley Mao (University of Michigan)

Firewalls used to hack into FB, Twitter accounts: Study,, May 23, 2012.

How Firewalls help hackers break into Facebook, Twitter, Firstpost, May 22, 2012.

Smartphone Carriers Vunerable To Traffic Hijacking Claims University, SmartHouse, May 22, 2012.

Got An AT&T iPhone? It May Be Vulnerable To Cellular Hijacking, Cult of Mac, May 21, 2012.

Busted: When security tools fail, CSO Online, May 21, 2012.

Smartphone hijacking vulnerability affects AT&T, 47 other carriers, Ars Technica, May 21, 2012.

Cell network security holes revealed, with an app to test your carrier,, May 21, 2012.

Don't Trust Satellite Phones: A Security Analysis of Two Satphone Standards
Benedikt Driessen, Ralf Hund, Carsten Willems, Christof Paar, Thorsten Holz (Ruhr-University Bochum, Germany)

Crypto crack makes satellite phones vulnerable to eavesdropping, Ars Technica, February 8, 2012.

Signing Me onto Your Accounts through Facebook and Google: a Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services
Rui Wang (Indiana University Bloomington), Shuo Chen (Microsoft Research), and XiaoFeng Wang (Indiana University Bloomington)

Researchers discover "worrisome" authentication flaws in many online services, sites, ZDNet, March 16, 2012.

Web Services Single Sign-On Contain Big Flaws, Dark Reading, March 19, 2012.

Trial finds EIGHT WAYS to defeat Google, PayPal and other SSOs, The Register, March 20, 2012.

Flawed sign-in services from Google and Facebook imperil user accounts, Ars Technica, March 26, 2012.

On the Feasibility of Internet-Scale Author Identification
Arvind Narayanan and Hristo Paskov (CS, Stanford), Neil Zhenqiang Gong, John Bethencourt, Emil Stefanov, Eui Chul Richard Shin and Dawn Song (EECS, UC Berkeley)

How Anonymous Are Your Online Posts?, InformationWeek, February 22, 2012.


Advertisement for the 2012 symposium and workshops.

News Bulletins

The IEEE S&P 2012 Organizing Committee has awarded 24 student travel grants to students from a wide variety of institutions, diverse backgrounds, and first time attendees. Awardees include women, undergraduates and students from minority serving institutions. Student travel grants are funded with contributions from the National Science Foundation, The IEEE Technical Committee on Security and Privacy, and Google.

Conference News
Panel Preparation
May 22, 2012
Participants who wish to prepare for the discussion on Science of Security on Wednesday afternoon should take a look at the Wikipedia entry on "Strong Inference", link. In particular, if you have time, skim Platt's paper.
Best Paper Awards!
May 22, 2012 Congratulations to the paper award winners.
Best paper award: Don't Trust Satellite Phones
Best student paper award sponsored by Google: Memento
Best practical paper award sponsored by IEEE Security and Privacy Magazine: User-Driven Access Control
Short Talks Announced
May 17, 2012
The eleven short talks for the Tuesday evening session have been announced. The list is available here.
Airport Westin Shuttle Schedule Posted
May 15, 2012
The schedule for the shuttle between the Westing San Francisco Airport and the Westin St. Francis has been posted on the travel page and the hotels page.
Poster Abstracts Added
May 14, 2012
Abstracts for (almost) all the posters in the Monday evening poster session can be viewed here.
Special Rebate Offer!
April 22, 2012
$100 off of the symposium price, for anyone paying full price in his/her category and staying at the Airport Westin and registering with our room block. See the hotels page for more details.
Call for Short Talks posted
April 20, 2012
The Call for Short Talks has been posted on the Call for Papers page. The deadline for submission of abstracts is May 11, 2012.
List of accepted posters available
April 15, 2012
The list of accepted posters can now be viewed posters. The poster session will be Monday, May 21 from 5:45-8:00pm.
Panel of experts formed
April 6, 2012
The panel discussion on Wednesday afternoon will be titled: "How can a focus on "science" advance research in cybersecurity?". Discussion will be moderated by Carl Landwehr. See the program for a detailed description and list of distinguished panelists.
Student Travel Grants Awarded
April 5, 2012
The IEEE S&P 2012 Organizing Committee has awarded 24 student travel grants. More information is available in the "News Bulletin" section of the press page.
Registration Open
March 1, 2012
Registration for the 2012 symposium is now open.
Program Posted
February 22, 2012
The conference program has been posted.
Hotel Booking Available
February 13, 2012
Hotel details have been posted. There are room blocks available at two San Francisco area hotels. Conference registration information will follow shortly.
Call For Posters
February 13, 2012
Adam Chlipala has been named as this years Poster Session Chair. Poster submission details have been posted. The deadline for abstracts is April 6, 2012.
Tentative Skeleton Program Posted
January 28, 2012
Program details are still being finalized. Attendees from past years should be aware that the conference is likely to continue later into Wednesday afternoon than in prior years.
Student Travel Grants
January 10, 2012
Information for students who wish to apply for travel grants is now posted here.
2012 Donors Rolling In
December 16, 2011
Many have already generously donated to the 2012 symposium. Information about donating and the benefits therein can be found here.
2011 Proceedings Available Online
November 1, 2011
All the papers for the 2011 symposium have been made available free of charge at
New Venue Confirmed!
October 10, 2011
The 2012 conference will be held at the Westin St. Francis. Detailed hotel and travel information has been posted on the travel page.
Call For Donors Posted
September 12, 2011
Information about donating to the IEEE Symposium on Security and Privacy and the IEEE Security and Privacy Workshops has been posted here.
Call For Papers Posted
August 12, 2011
The 2012 IEEE Symposium on Security and Privacy Call for Papers is now posted here.
Workshop Proposal Deadlines Approaching
August 11, 2011
IEEE S&P Workshop proposals have been accepted, but room is still available, and the deadline, August 15, 2011, is approaching for the second round of proposals. More information available here.
New Website Up
June 21, 2011
The new version of the 2012 conference website is now up.

Find ieeesp2012 on Facebook Follow IEEE_SP2012 on Twitter

Found an error? E-mail