Steven J. Murdoch :: website updates

Update: 22 September 2011

Thu, 22 Sep 2011 00:00:00 +0000

Added “Wall 2.0”, an article published in The European, in both German and the original English.

Update: 20 April 2011

Wed, 20 Apr 2011 00:00:00 +0000

Added a few missing talks and my paper at FC11.

Update: 22 November 2010

Mon, 22 Nov 2010 00:00:00 +0000

The slides for my guest lecture in the Part II Security course – “Anonymity and Censorship Resistance” – are now available.

Update: 26 October 2010

Tue, 26 Oct 2010 00:00:00 +0000

Added new poster (Anonymous Communications and Censorship Resistance, Royal Society Web Science meeting) and talk (Chip and PIN is Broken, ISSE GI-Sicherheit 2010).

Update: 21 October 2010

Thu, 21 Oct 2010 00:00:00 +0000

Updated professional activities: added CCS 2011 and PETS 2011 (program committee member) and FC 2011 (general chair).

Update: 19 August 2010

Thu, 19 Aug 2010 00:00:00 +0000

The updated version of my paper at the 2008 Security Protocols Workshop – “Hardened Stateless Session Cookies” – is now available.

Update: 09 August 2010

Mon, 09 Aug 2010 00:00:00 +0000

The slides from my presentation at the International Crime Science Conference are now available.

Update: 04 August 2010

Wed, 04 Aug 2010 00:00:00 +0000

My paper “Impact of Network Topology on Anonymity and Overhead in Low-Latency Anonymity Networks”, presented at the Privacy Enhancing Technologies Symposium (PETS 2010), is now available.

Update: 07 June 2010

Mon, 07 Jun 2010 00:00:00 +0000

My book chapter, Destructive Activism: The Double-Edged Sword of Digital Tactics, appearing in Digital Activism Decoded: The New Mechanics of Change, is now online. It is also available for sale on Amazon UK and Amazon US.

Update: 19 May 2010

Wed, 19 May 2010 00:00:00 +0000

The slides from my presentation at IEEE Security and Privacy (Oakland) are now available, and the final paper (Chip and PIN is Broken) is also online.

Update: 26 February 2010

Fri, 26 Feb 2010 00:00:00 +0000

My article for the Digital Evidence and Electronic Signature Law Review, “Reliability of Chip & PIN evidence in banking disputes” is now available.

Update: 17 February 2010

Wed, 17 Feb 2010 00:00:00 +0000

The slides for my presentation at Achieving Sustainable Improvements in the Security of Retail Payments, hosted by the Federal Reserve Bank of Philadelphia, “Chip & PIN: 5 years on”, are now available.

Update: 11 February 2010

Thu, 11 Feb 2010 00:00:00 +0000

Published draft of my paper “Chip and PIN is Broken”, to be presented at the 2010 IEEE Symposium on Security & Privacy. See also our blog post, press release and FAQ. This work was featured on BBC Newsnight (YouTube video).

Update: 26 January 2010

Tue, 26 Jan 2010 00:00:00 +0000

Added pre-proceedings draft of my paper “Verified by Visa and MasterCard SecureCode: or, How Not to Design Authentication”, presented at Financial Cryptography and Data Security '10.

Update: 03 January 2010

Sun, 03 Jan 2010 00:00:00 +0000

The slides for my presentation at the Chaos Communication Congress (26C3), “Optimised to fail: Card readers for online banking”, are now available.

Update: 30 December 2009

Wed, 30 Dec 2009 00:00:00 +0000

Added pre-proceedings draft of my paper “A Case Study on Measuring Statistical Data in the Tor Anonymity Network”, to be presented at the Workshop on Ethics in Computer Security Research.

Update: 08 December 2009

Tue, 08 Dec 2009 00:00:00 +0000

My article in the November/December 2009 issue of the IEEE Security & Privacy magazine, “Failures of Tamper-Proofing in PIN Entry Devices”, is now available.

Update: 29 November 2009

Sun, 29 Nov 2009 00:00:00 +0000

Added RSS feed for site updates, and linked to my Twitter feed.

Update: 28 November 2009

Sat, 28 Nov 2009 00:00:00 +0000

Updated programme committee memberships, added FCS-PrivMod 2010, and CCS 2010.

Update: 04 November 2009

Wed, 04 Nov 2009 00:00:00 +0000

The slides for my guest lecture in the Part II Security course – “Anonymity and Censorship Resistance” – are now available.

Update: 03 September 2009

Thu, 03 Sep 2009 00:00:00 +0000

Added two new talks, given at the Cambridge Crime Symposium: Verified by Visa and MasterCard SecureCode and Evidence in Fraud Cases: Complexity and Access.

Update: 25 May 2009

Mon, 25 May 2009 00:00:00 +0000

Replaced main photo with a portrait by Roland Eva. Added photo archive.

Update: 19 May 2009

Tue, 19 May 2009 00:00:00 +0000

Added new programme committee membership for WPES 2009 and updated other entries.

Update: 04 May 2009

Mon, 04 May 2009 00:00:00 +0000

Released v0.1 of screentimelock, a simple utility that locks GNU screen for a time period, to reduce the temptation to always check mail, IRC, and Twitter.

Update: 01 April 2009

Wed, 01 Apr 2009 00:00:00 +0000

The slides for my talk at Microsoft Research, Cambridge – “System-Level Failures in Security” – are now available.

Update: 20 March 2009

Fri, 20 Mar 2009 00:00:00 +0000

Published two patent applications, originally filed in September 2007: Dynamic Host Configuration Protocol and Secure Network Location Awareness.

Update: 15 March 2009

Sun, 15 Mar 2009 00:00:00 +0000

Updated professional activities, including new programme committee membership for Financial Cryptography 2010.

Update: 04 March 2009

Wed, 04 Mar 2009 00:00:00 +0000

Published the slides and papers for some presentations which I forgot to link to from their respective pages:

Internet censorship in China, Inter-Disciplinary China Studies Forum: Annual Conference, Cambridge, UK, 14 April 2007
Chip and Spin, Girton Neighbourhood Watch, Girton, UK, 15 May 2007
The Future of Anonymity and Censorship Resistant Publishing, FIDIS/IFIP Internet Security & Privacy Summer School (keynote), Brno, Czech Republic, 01–07 September 2008
On the Origins of a Thesis, International Workshop on Security and Trust Management (keynote), Trondheim, Norway, 16–17 June 2008

Update: 25 February 2009

Wed, 25 Feb 2009 00:00:00 +0000

The paper and slides for “Optimised to fail: Card readers for online banking”, presented at Financial Cryptography, are now available. See also the associated blog post.

Update: 11 February 2009

Wed, 11 Feb 2009 00:00:00 +0000

The slides for “Freedom of Speech and the Internet”, presented at Cambridge University Amnesty International, are now available.

Update: 30 December 2008

Tue, 30 Dec 2008 00:00:00 +0000

The slides for my presentation at the Chaos Communication Congress (25C3), “Security Failures in Smart Card Payment Systems: Tampering the Tamper-Proof”, are now available.

Update: 14 November 2008

Fri, 14 Nov 2008 00:00:00 +0000

The slides for my guest lecture in the Part II Security course, “Anonymity and Censorship Resistance”, are now available.

Update: 31 October 2008

Fri, 31 Oct 2008 00:00:00 +0000

The slides for “Internet censorship and how it is resisted” presented at the Cambridge University Student Pugwash Society, are now available.

Update: 31 October 2008

Fri, 31 Oct 2008 00:00:00 +0000

The slides for “The convergence of ATM and online transactions” presented at ATM Security 2008, are now available.

Update: 14 October 2008

Tue, 14 Oct 2008 00:00:00 +0000

The slides and paper for “An Improved Clock-skew Measurement Technique for Revealing Hidden Services” presented at the 2008 USENIX Security Symposium, are now available.

Update: 30 September 2008

Tue, 30 Sep 2008 00:00:00 +0000

The full text of “Tools and Technology of Internet Filtering” is now available. This is a book chapter from Access Denied: The Practice and Policy of Global Internet Filtering, which publishes the results of the OpenNet Initative survey of Internet filtering.

Update: 23 July 2008

Wed, 23 Jul 2008 00:00:00 +0000

The slides and paper for “Metrics for Security and Performance in Low-Latency Anonymity Systems”, presented at the 2008 Privacy Enhancing Technologies Symposium, are now available.

Update: 18 May 2008

Sun, 18 May 2008 00:00:00 +0000

The slides and paper for “Thinking Inside the Box: System-level Failures of Tamper Proofing”, presented at the 2008 IEEE Symposium on Security and Privacy, are now available.

Update: 17 April 2008

Thu, 17 Apr 2008 00:00:00 +0000

My paper, “Hardened Stateless Session Cookies”, presented at the Cambridge Protocols Workshop 2008, is now available.

Update: 19 March 2008

Wed, 19 Mar 2008 00:00:00 +0000

My paper, “Securing Network Location Awareness with Authenticated DHCP”, presented at SecureComm 2007, is now available.

Update: 26 February 2008

Tue, 26 Feb 2008 00:00:00 +0000

For more information on the BBC Newsnight coverage of our Chip & PIN story, see our background website and press release. Full details can be found in our academic paper, to be presented at the IEEE Symposium on Security and Privacy.

Update: 29 December 2007

Sat, 29 Dec 2007 00:00:00 +0000

The slides from my talk at 24C3, “Relay attacks on card payment: vulnerabilities and defences”, are now available.

Update: 17 December 2007

Mon, 17 Dec 2007 00:00:00 +0000

My article, “Shifting Borders”, published in the current issue of Index on Censorship (DOI link), is now available.

Update: 07 December 2007

Fri, 07 Dec 2007 00:00:00 +0000

My PhD thesis, “Covert channel vulnerabilities in anonymity systems”, has now been published as UCAM-CL-TR-706.

Update: 19 November 2007

Mon, 19 Nov 2007 00:00:00 +0000

The slides from my talk at the 2007 Workshop on Trustworthy Elections, "Experiences as an e-counting election observer in the UK", are now available.

Update: 14 September 2007

Fri, 14 Sep 2007 00:00:00 +0000

The slides from my invited talk at EuroBSDCon 2007, held in Copenhagen, Denmark today, are now available.

Update: 05 July 2007

Thu, 05 Jul 2007 00:00:00 +0000

My slides, from the presentation of "Sampled Traffic Analysis by Internet-Exchange-Level Adversaries", at the PET Workshop, held in Ottawa, Canada last month, are now available.

Update: 15 June 2007

Fri, 15 Jun 2007 00:00:00 +0000

On 11 June 2007, I gave a talk to the COSIC group at K.U. Leuven – "EMV flaws and fixes: vulnerabilities in smart card payment systems". The slides from this talk are now available.

Update: 28 May 2007

Mon, 28 May 2007 00:00:00 +0000

The pre-proceedings version of my paper, co-authored with Piotr Zieliński – "Sampled Traffic Analysis by Internet-Exchange-Level Adversaries" – is now available. This paper is to be presented at the PET Workshop, Ottawa, Canada, 20–22 June 2007.

Update: 21 May 2007

Mon, 21 May 2007 00:00:00 +0000

The final version of my paper, co-authored with Saar Drimer – "Keep Your Enemies Close: Distance bounding against smartcard relay attacks" – is now available. This paper is to be presented at USENIX Security, Boston, MA, USA, 6–10 August 2007.

Update: 07 February 2007

Wed, 07 Feb 2007 00:00:00 +0000

For further information on the Chip & PIN relay attack, as featured on Watchdog, please see this press release and our summary of the attack.

Update: 27 December 2006

Wed, 27 Dec 2006 00:00:00 +0000

The slides from my talk – “Detecting temperature through clock skew”, presented at the 23rd Chaos Communication Congress, are now online. This presentation is based on the paper “Hot or Not: Revealing Hidden Services by their Clock Skew”, for which I wrote some software to perform remote clock skew analysis. The source code for these tools is now available.

Update: 21 December 2006

Thu, 21 Dec 2006 00:00:00 +0000

The slides from my talk – “Out of Character: Are the Chinese Creating a Second Internet?” are now online. They are from a presentation I gave at a workshop of the Inter-Disciplinary China Studies Forum, held in the University of Cambridge.

Update: 19 December 2006

Tue, 19 Dec 2006 00:00:00 +0000

Links added to conferences I am on the program committee for: PET 2007 and ACM CCS 2007.

Update: 13 December 2006

Wed, 13 Dec 2006 00:00:00 +0000

The slides from my talk – “Censorship resistant technologies” – are now online. They are from a presentation I gave at the Horizon Seminar: Risk, Threat & Detection, held in the University of Cambridge.