Software Protection and Application Security

• Security Issues in Instant Messaging

  • M. Mannan, P. C. van Oorschot. A Protocol for Secure Public Instant Messaging. Financial Cryptography and Data Security (FC'06). Feb. 2006
  • M. Mannan, P. C. van Oorschot. On Instant Messaging Worms, Analysis and Countermeasures. ACM Workshop on Rapid Malcode (WORM'05). Nov. 2005
  • M. Mannan, P. C. van Oorschot. Secure Public Instant Messaging: A Survey. Privacy, Security and Trust (PST'04). Oct. 2004

• Software Protection and Application Security

  • A. Main, P.C. van Oorschot. Software Protection and Application Security: Understanding the Battleground (Version of Dec. 31, 2003). International Course on State of the Art and Evolution of Computer Security and Industrial Cryptography, Heverlee, Belgium, June 2003. Proceedings (revised papers): Springer LNCS (to appear).
  • P.C. van Oorschot. Revisiting Software Protection (invited paper) (Version of July 30, 2003). 6th International Information Security Conference (ISC 2003), Bristol, UK, October 2003. Proceedings: pp.1-13, Springer LNCS 2851 (2003)

• Whitebox Cryptography

  • S. Chow, P. Eisen, H. Johnson, P.C. van Oorschot. White-Box Cryptography and an AES Implementation. SAC 2002 - 9th Annual Workshop on Selected Areas in Cryptography, Aug.15-16 2002, St. John's, Canada. Proceedings (revised papers): pp.250-270, Springer LNCS 2595 (2003).
  • S. Chow, P. Eisen, H. Johnson, P.C. van Oorschot. A White-Box DES Implementation for DRM Applications. ACM CCS-9 Workshop DRM 2002 - 2nd ACM Workshop on Digital Rights Management, Nov.18 2002, Wash. D.C. Proceedings (revised papers): pp.1-15, Springer LNCS 2696 (2003).

• Software Tamper Resistance

  • P. van Oorschot, A. Somayaji, G. Wurster. Hardware-assisted Circumvention of Self-hashing Software Tamper Resistance. IEEE Transactions on Dependable and Secure Computing. Jun. 2005
  • G. Wurster, P. van Oorschot, A. Somayaji. A Generic Attack on Checksumming-based Software Tamper Resistance. IEEE Symposium on Security and Privacy. May. 2005