Bryan's Picture

Bryan Parno

My email address
Carnegie Mellon University
ECE Department
5000 Forbes Ave.
Pittsburgh, PA 15213-3890
I am a PhD student in the ECE Department at Carnegie Mellon. I work with my advisor, Adrian Perrig, and I am supported by NDSEG, DHS and the National Science Foundation. I studied Computer Science at Harvard University, and I currently focus on network and host-based security, as well as applied cryptography. My CV is available in pdf and postscipt.
Publications
  • Unidirectional Key Distribution Across Time and Space
    with Applications to RFID Security

    Ari Juels, Ravikanth Pappu and Bryan Parno, In Proceedings of the USENIX Security Symposium, July 30-August 1, 2008, San Jose, CA.
[pdf] [ps] [bib]
  • Bootstrapping Trust in a "Trusted" Platform
    Bryan Parno, In Proceedings of the 3rd USENIX Workshop on Hot Topics in Security (HotSec), July 29, 2008, San Jose, CA.
[pdf] [ps] [bib]
  • Flicker: An Execution Infrastructure for TCB Minimization
    Jonathan M. McCune, Bryan Parno, Adrian Perrig, Michael K. Reiter and Hiroshi Isozaki, In Proceedings of the ACM European Conference on Computer Systems (EuroSys), April 1-4, 2008, Glasgow, Scotland.
[pdf] [ps] [bib] [website]
  • SNAPP: Stateless Network-Authenticated Path Pinning
    Bryan Parno, Adrian Perrig and David Andersen, In Proceedings of the ACM Symposium on Information, Computer and Communications Security (ASIACCS), March 18-20, 2008, Tokyo, Japan.
    An earlier version is available as Technical Report CMU-CyLab-07-013.
[pdf] [ps] [bib]



[pdf] [ps] [bib]
  • How Low Can You Go?:
    Recommendations for Hardware-Supported Minimal TCB Code Execution

    Jonathan M. McCune, Bryan Parno, Adrian Perrig, Michael K. Reiter and Arvind Seshadri, In Proceedings of the Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS), March 1-5, 2008, Seattle, WA.
[pdf] [ps] [bib] [website]
  • Countermeasures against Government-Scale Monetary Forgery
    Alessandro Acquisti, Nicolas Christin, Bryan Parno, and Adrian Perrig, In Proceedings of the Financial Cryptography and Data Security 12th International Conference, January 27-31, 2008, Cozumel, Mexico.
    An extended version is available as Technical Report CMU-CyLab-07-016.
[pdf] [ps] [bib]



[pdf] [bib]
  • Portcullis: Protecting Connection Setup from Denial-of-Capability Attacks
    Bryan Parno, Dan Wendlandt, Elaine Shi, Adrian Perrig, Bruce Maggs, and Yih-Chun Hu, In Proceedings of ACM SIGCOMM, August, 2007, Kyoto, Japan.
[pdf] [ps] [bib]
  • Minimal TCB Code Execution (Extended Abstract)
    Jonathan M. McCune, Bryan Parno, Adrian Perrig, Michael K. Reiter and Arvind Seshadri, In Proceedings of the 2007 IEEE Symposium on Security and Privacy, May 20-23, 2007, Oakland, CA.
[pdf] [ps] [bib] [website]
  • Browser Enhancements for Preventing Phishing Attacks
    Bryan Parno, Cynthia Kuo and Adrian Perrig, In Phishing and Counter-Measures : Understanding the Increasing Problem of Electronic Identity Theft., Markus Jakobsson and Steven Myers, Ed. Wiley-Interscience, 2006.
[pdf] [ps] [bib]
  • Secure Sensor Network Routing: A Clean-Slate Approach
    Bryan Parno, Mark Luk, Evan Gaustad, and Adrian Perrig, In Proceedings of the 2nd Conference on Future Networking Technologies (CoNEXT), December 4-7, 2006, Lisboa, Portugal.
[pdf] [ps] [bib] [website]
  • Phoolproof Phishing Prevention
    Bryan Parno, Cynthia Kuo and Adrian Perrig, Proceedings of the Financial Cryptography and Data Security 10th International Conference, February 27-March 2, 2006, Anguilla, British West Indies.
[pdf] [ps] [bib] [website]
  • Challenges in Securing Vehicular Networks
    Bryan Parno and Adrian Perrig, Proceedings of the Fourth Workshop on Hot Topics in Networks (HotNets-IV), November 14-15, 2005, College Park, MD.
[pdf] [ps] [bib]
  • FANFARE for the Common Flow
    Elaine Shi, Bryan Parno, Adrian Perrig, Yih-Chun Hu, Bruce Maggs, Technical Report CMU-CS-05-148, February 2005, Updated June 2005.
[pdf] [ps] [bib]
  • Distributed Detection of Node Replication Attacks in Sensor Networks   Updated
    Bryan Parno, Adrian Perrig and Virgil Gligor, Proceedings of the 2005 IEEE Symposium on Security and Privacy, May 8-11, 2005, Oakland, CA.
[pdf] [ps] [bib]
  • Defending a P2P Digital Preservation System
    Bryan Parno and Mema Rousoppoulos, IEEE Transactions on Dependable and Secure Computing, Volume 1, Number 4, pp. 209-222, December, 2004.
[pdf] [ps] [bib]
  • Internet Ballistics: Retrieving Forensic Data From Network Scans
    Bryan Parno and Tony Bartoletti, Poster Presented at the 13th USENIX Security Symposium, August 9-13, 2004, San Diego, CA.
[pdf] [ps] [bib]
  • Subverting LOCKSS
    Bryan Parno, Senior Thesis, April, 2004, Harvard University, Cambridge, MA.
[pdf] [ps] [bib]
  • An Analysis of Database-Driven Mail Servers
    Nick Elprin and Bryan Parno, Proceedings of the 17th Large Installation Systems Administration Conference, October 26-31, 2003, San Diego, CA.
[pdf] [ps] [bib]
Professional Activities
  • Program Committee, Financial Cryptography and Data Security Conference, 2009
  • Reviewer:
    • 22 Conferences and Workshops, including CCS, EuroSys, ICNP, NDSS, NSDI, OSDI, SenSys, SigComm, SOSP, SRDS, SRUTI, USENIX Security, and WiSe.
    • 7 Journals, including IEEE/ACM ToN, ACM TOIT, IEEE TMC, and IEEE TDSC.
Invited Talks
  • Distributed Detection of Node Replication Attacks in Sensor Networks
    ARO Workshop on Localization in Wireless Sensor Networks, June 13-14, 2005, Seattle, WA.
Courses
  • Quantum Computation and Information Theory (33-758) with Robert Griffiths
  • Algorithms in the Real World (15-853) with Guy Blelloch and Bruce Maggs
  • Foundations of Electronic Marketplaces (15-892) with Tuomas Sandholm
  • Graduate Algorithms (15-750) with Manuel Blum
  • Applied Cryptography (18-733) with Mike Reiter
  • Advanced Artificial Intelligence (15-780) with Mike Lewicki and Tuomas Sandholm
  • Hispanic Literature and Culture (82-345) with Kenya Dworkin
  • Probability and Statistics (36-625) with Valérie Ventura
  • Software Security (18-732) with Dawn Song
Teaching Experience
  • Teaching Assistant: Network Security (18-731) Professor Dawn Song
    Wrote and graded homeworks assignments and midterm exam. Assisted students with their final course projects. Presented a lecture.
  • Teaching Assistant: Introduction to Computer Security (18-730) Professor Mike Reiter
    Wrote and graded homeworks assignments, weekly quizes, midterm exam, and final exam. Presented a lecture.
  • Teaching Fellow: Computer Hardware (CS-141) Professor Woodward Yang
    Led lab sections covering the design, structure, and operation of digital computers, logic circuits and digital electronics, and computer architecture.
Recent Work Experience
  • Consultant VMware
    Advised on Trusted Computing strategy and development.
  • Research Intern RSA Laboratories
    Designed and formally analyzed protocols for user authentication, as well as for RFID security. Developed new secret-sharing techniques.
  • Research Intern Microsoft Research
    Investigated the use of virtualization to enhance security software. Developed modifications to Virtual PC and drivers for Windows XP.
  • Technical Scholar Lawrence Livermore National Labs
    Studied the use of wavelet techniques to provide ballistic information on network scanners.
  • Research Assistant Professor Michael Rabin
    Directed team's efforts to research and implement Professor Rabin's provably unbreakable Hyper-Encryption and Everlasting Security scheme.
  • Program Manager Microsoft
    Responsible for defining and driving product vision, design, and feature set of two PowerToys for Windows XP Media Center Edition, including the Playlist Editor.
  • Information Technology Chair The Harvard Crimson
    Led a team to maintain and expand website's offerings and provide support for newspaper's staff.
  • English as a Second Language (ESL) Instructor Chester County OIC
    Developed and implemented an English curriculum for a class of recent immigrants from Mexico, adapting instruction to accommodate a wide range of skill levels.
  • Technical Support Analyst United Messaging
    Supported company's wide range of email systems and network solutions and managed and resolved customers' technical problems.
Projects
  • Graphics project to simulate smoke and fire using volumetric fluid modeling.
  • Photo Gallery