Some Computational Aspects of Root Finding in GF(qm). - Alfred Menezes; Paul C. van Oorschot; Scott A. Vanstone (ISSAC, 1988)

Applications of Combinatorial Designs in Computer Science. - Charles J. Colbourn; Paul C. van Oorschot (ACM Comput. Surv., 1989)

A geometric approach to root finding in GF(qm). - Paul C. van Oorschot; Scott A. Vanstone (IEEE Trans. Inf. Theory, 1989)

A Comparison of Practical Public Key Cryptosystems Based on Integer Factorization and Discrete Logarithms. - Paul C. van Oorschot (CRYPTO, 1990)

A Known Plaintext Attack on Two-Key Triple Encryption. - Paul C. van Oorschot; Michael J. Wiener (EUROCRYPT, 1990)

On splitting sets in block designs and finding roots of polynomials. - Paul C. van Oorschot; Scott A. Vanstone (Discret. Math., 1990)

Authentication and Authenticated Key Exchanges. - Whitfield Diffie; Paul C. van Oorschot; Michael J. Wiener (Des. Codes Cryptogr., 1992)

Subgroup Refinement Algorithms for Root Finding in GF(q). - Alfred Menezes; Paul C. van Oorschot; Scott A. Vanstone (SIAM J. Comput., 1992)

Pair-Splitting Sets in AG(m, q). - Albrecht Beutelspacher; Dieter Jungnickel; Paul C. van Oorschot; Scott A. Vanstone (SIAM J. Discret. Math., 1992)

Extending Cryptographic Logics of Belief to Key Agreement Protocols. - Paul C. van Oorschot (CCS, 1993)

An Alternate Explanation of two BAN-logic "failures". - Paul C. van Oorschot (EUROCRYPT, 1993)

On Key Distribution via True Broadcasting. - Mike Just; Evangelos Kranakis; Danny Krizanc; Paul C. van Oorschot (CCS, 1994)

Parallel Collision Search with Application to Hash Functions and Discrete Logarithms. - Paul C. van Oorschot; Michael J. Wiener (CCS, 1994)

On unifying some cryptographic protocol logics. - Paul F. Syverson; Paul C. van Oorschot (S&P, 1994)

Modern key agreement techniques. - Rainer A. Rueppel; Paul C. van Oorschot (Comput. Commun., 1994)

MDx-MAC and Building Fast MACs from Hash Functions. - Bart Preneel; Paul C. van Oorschot (CRYPTO, 1995)

Design Choices and Security Implications in Implementing Diffie-Hellman Key Agreement. - Paul C. van Oorschot (IMACC, 1995)

Handbook of Applied Cryptography - Alfred Menezes; Paul C. van Oorschot; Scott A. Vanstone (CRC Press, 1996)

Improving Implementable Meet-in-the-Middle Attacks by Orders of Magnitude. - Paul C. van Oorschot; Michael J. Wiener (CRYPTO, 1996)

On Diffie-Hellman Key Agreement with Short Exponents. - Paul C. van Oorschot; Michael J. Wiener (EUROCRYPT, 1996)

On the Security of Two MAC Algorithms. - Bart Preneel; Paul C. van Oorschot (EUROCRYPT, 1996)

Special Issue: Selected Areas in Cryptography - Introduction. - Evangelos Kranakis; Paul C. van Oorschot (Des. Codes Cryptogr., 1997)

Security analysis of the message authenticator algorithm (MAA). - Bart Preneel; Vincent Rijmen; Paul C. van Oorschot (Eur. Trans. Telecommun., 1997)

Addressing the Problem of Undetected Signature Key Compromise. - Mike Just; Paul C. van Oorschot (NDSS, 1999)

Parallel Collision Search with Cryptanalytic Applications. - Paul C. van Oorschot; Michael J. Wiener (J. Cryptol., 1999)

On the Security of Iterated Message Authentication Codes. - Bart Preneel; Paul C. van Oorschot (IEEE Trans. Inf. Theory, 1999)

Coding Theory And Cryptology. - Alfred J. Menezes; Paul C. van Oorschot (Handbook of Discrete and Combinatorial Mathematics, 1999)

Cryptographic Information Recovery Using Key Recover. - Michael Smith 022; Paul C. van Oorschot; Michael Willett (Comput. Secur., 2000)

A White-Box DES Implementation for DRM Applications. - Stanley Chow; Philip A. Eisen; Harold Johnson; Paul C. van Oorschot (Digital Rights Management Workshop, 2002)

White-Box Cryptography and an AES Implementation. - Stanley Chow; Philip A. Eisen; Harold Johnson; Paul C. van Oorschot (Selected Areas in Cryptography, 2002)

Revisiting Software Protection. - Paul C. van Oorschot (ISC, 2003)

S-RIP: A Secure Distance Vector Routing Protocol. - Tao Wan 004; Evangelos Kranakis; Paul C. van Oorschot (ACNS, 2004)

Towards Secure Design Choices for Implementing Graphical Passwords. - Julie Thorpe; Paul C. van Oorschot (ACSAC, 2004)

Addressing Online Dictionary Attacks with Login Histories and Humans-in-the-Loop (Extended Abstract). - Stuart G. Stubblebine; Paul C. van Oorschot (Financial Cryptography, 2004)

Securing the Destination-Sequenced Distance Vector Routing Protocol (S-DSDV). - Tao Wan 004; Evangelos Kranakis; Paul C. van Oorschot (ICICS, 2004)

Secure Public Instant Messaging. - Mohammad Mannan; Paul C. van Oorschot (PST, 2004)

Graphical Dictionaries and the Memorable Space of Graphical Passwords. - Julie Thorpe; Paul C. van Oorschot (USENIX Security Symposium, 2004)

Mitigating Network Denial-of-Service Through Diversity-Based Traffic Management. - Ashraf Matrawy; Paul C. van Oorschot; Anil Somayaji (ACNS, 2005)

Highlights from the 2005 New Security Paradigms Workshop. - Simon N. Foley; Abe Singer; Michael E. Locasto; Stelios Sidiroglou; Angelos D. Keromytis; John P. McDermott; Julie Thorpe; Paul C. van Oorschot; Anil Somayaji; Richard Ford; Mark Bush; Alex Boulatov (ACSAC, 2005)

Detecting Intra-enterprise Scanning Worms based on Address Resolution. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (ACSAC, 2005)

Countering Identity Theft Through Digital Uniqueness, Location Cross-Checking, and Funneling. - Paul C. van Oorschot; Stuart G. Stubblebine (Financial Cryptography, 2005)

Pretty Secure BGP, psBGP. - Tao Wan 004; Evangelos Kranakis; Paul C. van Oorschot (NDSS, 2005)

DNS-based Detection of Scanning Worms in an Enterprise Network. - David Whyte; Evangelos Kranakis; Paul C. van Oorschot (NDSS, 2005)

Message authentication by integrity with public corroboration. - Paul C. van Oorschot (NSPW, 2005)

A Generic Attack on Checksumming-Based Software Tamper Resistance. - Glenn Wurster; Paul C. van Oorschot; Anil Somayaji (S&P, 2005)

On instant messaging worms, analysis and countermeasures. - Mohammad Mannan; Paul C. van Oorschot (WORM, 2005)

Pass-thoughts: Authenticating With Our Minds. - Julie Thorpe; Paul C. van Oorschot; Anil Somayaji (IACR Cryptol. ePrint Arch., 2005)

Hardware-Assisted Circumvention of Self-Hashing Software Tamper Resistance. - Paul C. van Oorschot; Anil Somayaji; Glenn Wurster (IEEE Trans. Dependable Secur. Comput., 2005)

Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (ACSAC, 2006)

A Protocol for Secure Public Instant Messaging. - Mohammad Mannan; Paul C. van Oorschot (Financial Cryptography, 2006)

Analysis of BGP prefix origins during Google's May 2005 outage. - Tao Wan 004; Paul C. van Oorschot (IPDPS, 2006)

A Usability Study and Critique of Two Password Managers. - Sonia Chiasson; Paul C. van Oorschot; Robert Biddle (USENIX Security Symposium, 2006)

Exposure Maps: Removing Reliance on Attribution During Scan Detection. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (HotSec, 2006)

A monitoring system for detecting repeated packets with applications to computer worms. - Paul C. van Oorschot; Jean-Marc Robert 001; Miguel Vargas Martin (Int. J. Inf. Sec., 2006)

On countering online dictionary attacks with login histories and humans-in-the-loop. - Paul C. van Oorschot; Stuart G. Stubblebine (ACM Trans. Inf. Syst. Secur., 2006)

Tracking Darkports for Network Defense. - David Whyte; Paul C. van Oorschot; Evangelos Kranakis (ACSAC, 2007)

Graphical Password Authentication Using Cued Click Points. - Sonia Chiasson; Paul C. van Oorschot; Robert Biddle (ESORICS, 2007)

Using a Personal Device to Strengthen Password Authentication from an Untrusted Computer. - Mohammad Mannan; Paul C. van Oorschot (Financial Cryptography, 2007)

Security and usability: the gap in real-world online banking. - Mohammad Mannan; Paul C. van Oorschot (NSPW, 2007)

VideoTicket: detecting identity fraud attempts via audiovisual certificates and signatures. - Deholo Nali; Paul C. van Oorschot; Andy Adler (NSPW, 2007)

A second look at the usability of click-based graphical passwords. - Sonia Chiasson; Robert Biddle; Paul C. van Oorschot (SOUPS, 2007)

Usability of anonymous web browsing: an examination of Tor interfaces and deployability. - Jeremy Clark; Paul C. van Oorschot; Carlisle Adams (SOUPS, 2007)

Human-Seeded Attacks and Exploiting Hot-Spots in Graphical Passwords. - Julie Thorpe; Paul C. van Oorschot (USENIX Security Symposium, 2007)

Self-Signed Executables: Restricting Replacement of Program Binaries by Malware. - Glenn Wurster; Paul C. van Oorschot (HotSec, 2007)

On interdomain routing security and pretty secure BGP (psBGP). - Paul C. van Oorschot; Tao Wan 004; Evangelos Kranakis (ACM Trans. Inf. Syst. Secur., 2007)

Improving Security Visualization with Exposure Map Filtering. - Mansour Alsaleh; David Barrera 003; Paul C. van Oorschot (ACSAC, 2008)

On Purely Automated Attacks and Click-Based Graphical Passwords. - Amirali Salehi-Abari; Julie Thorpe; Paul C. van Oorschot (ACSAC, 2008)

Influencing users towards better passwords: persuasive cued click-points. - Sonia Chiasson; Alain Forget; Robert Biddle; Paul C. van Oorschot (BCS HCI (1), 2008)

SOMA: mutual approval for included content in web pages. - Terri Oda; Glenn Wurster; Paul C. van Oorschot; Anil Somayaji (CCS, 2008)

CROO: A Universal Infrastructure and Protocol to Detect Identity Fraud. - Deholo Nali; Paul C. van Oorschot (ESORICS, 2008)

Exploring User Reactions to New Browser Cues for Extended Validation Certificates. - Jennifer Sobey; Robert Biddle; Paul C. van Oorschot; Andrew S. Patrick (ESORICS, 2008)

Weighing Down "The Unbearable Lightness of PIN Cracking". - Mohammad Mannan; Paul C. van Oorschot (Financial Cryptography, 2008)

Discovering Packet Structure through Lightweight Hierarchical Clustering. - Abdulrahman Hijazi; Hajime Inoue; Ashraf Matrawy; Paul C. van Oorschot; Anil Somayaji (ICC, 2008)

Centered Discretization with Application to Graphical Passwords. - Sonia Chiasson; Jayakumar Srinivasan; Robert Biddle; Paul C. van Oorschot (UPSEC, 2008)

Localization of credential information to address increasingly inevitable data breaches. - Mohammad Mannan; Paul C. van Oorschot (NSPW, 2008)

The developer is the enemy. - Glenn Wurster; Paul C. van Oorschot (NSPW, 2008)

Persuasion for Stronger Passwords: Motivation and Pilot Study. - Alain Forget; Sonia Chiasson; Paul C. van Oorschot; Robert Biddle (PERSUASIVE, 2008)

Improving text passwords through persuasion. - Alain Forget; Sonia Chiasson; Paul C. van Oorschot; Robert Biddle (SOUPS, 2008)

Digital Objects as Passwords. - Mohammad Mannan; Paul C. van Oorschot (HotSec, 2008)

Privacy-enhanced sharing of personal content on the web. - Mohammad Mannan; Paul C. van Oorschot (WWW, 2008)

On predictive models and user-drawn graphical passwords. - Paul C. van Oorschot; Julie Thorpe (ACM Trans. Inf. Syst. Secur., 2008)

Browser interfaces and extended validation SSL certificates: an empirical study. - Robert Biddle; Paul C. van Oorschot; Andrew S. Patrick; Jennifer Sobey; Tara Whalen (CCSW, 2009)

Multiple password interference in text passwords and click-based graphical passwords. - Sonia Chiasson; Alain Forget; Elizabeth Stobert; Paul C. van Oorschot; Robert Biddle (CCS, 2009)

Passwords: If We're So Smart, Why Are We Still Using Them? - Cormac Herley; Paul C. van Oorschot; Andrew S. Patrick (Financial Cryptography, 2009)

TwoStep: An Authentication Method Combining Text and Graphical Passwords. - Paul C. van Oorschot; Tao Wan 004 (MCETECH, 2009)

Security visualization tools and IPv6 addresses. - David Barrera 003; Paul C. van Oorschot (VizSEC, 2009)

Reducing threats from flawed security APIs: The banking PIN case. - Mohammad Mannan; Paul C. van Oorschot (Comput. Secur., 2009)

Internet geolocation: Evasion and counterevasion. - James A. Muir; Paul C. van Oorschot (ACM Comput. Surv., 2009)

User interface design affects security: patterns in click-based graphical passwords. - Sonia Chiasson; Alain Forget; Robert Biddle; Paul C. van Oorschot (Int. J. Inf. Sec., 2009)

Exploring usability effects of increasing security in click-based graphical passwords. - Elizabeth Stobert; Alain Forget; Sonia Chiasson; Paul C. van Oorschot; Robert Biddle (ACSAC, 2010)

A methodology for empirical analysis of permission-based security models and its application to android. - David Barrera 003; Hilmi Günes Kayacik; Paul C. van Oorschot; Anil Somayaji (CCS, 2010)

System security, platform security and usability. - Paul C. van Oorschot (STC@CCS, 2010)

A control point for reducing root abuse of file-system privileges. - Glenn Wurster; Paul C. van Oorschot (CCS, 2010)

Purely automated attacks on passpoints-style graphical passwords. - Paul C. van Oorschot; Amirali Salehi-Abari; Julie Thorpe (IEEE Trans. Inf. Forensics Secur., 2010)

Network scan detection with LQS: a lightweight, quick and stateful algorithm. - Mansour Alsaleh; Paul C. van Oorschot (AsiaCCS, 2011)

Exploration and Field Study of a Password Manager Using Icon-Based Passwords. - Kemal Bicakci; Nart Bedin Atalay; Mustafa Yuceel; Paul C. van Oorschot (Financial Cryptography Workshops, 2011)

Mercury: Recovering Forgotten Passwords Using Personal Devices. - Mohammad Mannan; David Barrera 003; Carson D. Brown; David Lie; Paul C. van Oorschot (Financial Cryptography, 2011)

A multi-word password proposal (gridWord) and exploring questions about science in security research and usable security evaluation. - Kemal Bicakci; Paul C. van Oorschot (NSPW, 2011)

Countering unauthorized code execution on commodity kernels: A survey of common interfaces allowing kernel code modification. - Trent Jaeger; Paul C. van Oorschot; Glenn Wurster (Comput. Secur., 2011)

Secure Software Installation on Smartphones. - David Barrera 003; Paul C. van Oorschot (IEEE Secur. Priv., 2011)

Accommodating IPv6 Addresses in Security Visualization Tools. - David Barrera 003; Paul C. van Oorschot (Inf. Vis., 2011)

Leveraging personal devices for stronger password authentication from untrusted computers. - Mohammad Mannan; Paul C. van Oorschot (J. Comput. Secur., 2011)

Exploiting predictability in click-based graphical passwords. - Paul C. van Oorschot; Julie Thorpe (J. Comput. Secur., 2011)

User Study, Analysis, and Usable Security of Passwords Based on Digital Objects. - Robert Biddle; Mohammad Mannan; Paul C. van Oorschot; Tara Whalen (IEEE Trans. Inf. Forensics Secur., 2011)

Back to the Future: Revisiting IPv6 Privacy Extensions. - David Barrera 003; Glenn Wurster; Paul C. van Oorschot (login Usenix Mag., 2011)

Tapas: design, implementation, and usability evaluation of a password manager. - Daniel McCarney; David Barrera 003; Jeremy Clark; Sonia Chiasson; Paul C. van Oorschot (ACSAC, 2012)

Understanding and improving app installation security mechanisms through empirical analysis of android. - David Barrera 003; Jeremy Clark; Daniel McCarney; Paul C. van Oorschot (SPSM@CCS, 2012)

Measuring SSL Indicators on Mobile Browsers: Extended Life, or End of the Road? - Chaitrali Amrutkar; Patrick Traynor; Paul C. van Oorschot (ISC, 2012)

The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes. - Joseph Bonneau; Cormac Herley; Paul C. van Oorschot; Frank Stajano (IEEE Symposium on Security and Privacy, 2012)

Security and Usability Challenges of Moving-Object CAPTCHAs: Decoding Codewords in Motion. - Yi Xu 006; Gerardo Reynaga; Sonia Chiasson; Jan-Michael Frahm; Fabian Monrose; Paul C. van Oorschot (USENIX Security Symposium, 2012)

Graphical passwords: Learning from the first twelve years. - Robert Biddle; Sonia Chiasson; Paul C. van Oorschot (ACM Comput. Surv., 2012)

The Future of Authentication. - Dirk Balfanz; Richard Chow; Ori Eisen; Markus Jakobsson; Steve Kirsch; Scott Matsumoto; Jesus Molina; Paul C. van Oorschot (IEEE Secur. Priv., 2012)

A Research Agenda Acknowledging the Persistence of Passwords. - Cormac Herley; Paul C. van Oorschot (IEEE Secur. Priv., 2012)

Revisiting network scanning detection using sequential hypothesis testing. - Mansour Alsaleh; Paul C. van Oorschot (Secur. Commun. Networks, 2012)

Revisiting Defenses against Large-Scale Online Password Guessing Attacks. - Mansour Alsaleh; Mohammad Mannan; Paul C. van Oorschot (IEEE Trans. Dependable Secur. Comput., 2012)

Persuasive Cued Click-Points: Design, Implementation, and Evaluation of a Knowledge-Based Authentication Mechanism. - Sonia Chiasson; Elizabeth Stobert; Alain Forget; Robert Biddle; Paul C. van Oorschot (IEEE Trans. Dependable Secur. Comput., 2012)

Reducing Unauthorized Modification of Digital Objects. - Paul C. van Oorschot; Glenn Wurster (IEEE Trans. Software Eng., 2012)

Passwords for Both Mobile and Desktop Computers: ObPwd for Firefox and Android. - Mohammad Mannan; Paul C. van Oorschot (login Usenix Mag., 2012)

Passwords for Both Mobile and Desktop Computers Appendix. - Mohammad Mannan; Paul C. van Oorschot (login Usenix Mag., 2012)

Deadbolt: locking down android disk encryption. - Adam Skillen; David Barrera 003; Paul C. van Oorschot (SPSM@CCS, 2013)

Markets for zero-day exploits: ethics and implications. - Serge Egelman; Cormac Herley; Paul C. van Oorschot (NSPW, 2013)

SoK: SSL and HTTPS: Revisiting Past Challenges and Evaluating Certificate Trust Model Enhancements. - Jeremy Clark; Paul C. van Oorschot (IEEE Symposium on Security and Privacy, 2013)

Three-Way Dissection of a Game-CAPTCHA: Automated Attacks, Relay Attacks, and Usability. - Manar Mohamed; Niharika Sachdeva; Michael Georgescu; Song Gao 010; Nitesh Saxena; Chengcui Zhang; Ponnurangam Kumaraguru; Paul C. van Oorschot; Wei-bang Chen (CoRR, 2013)

Evaluation in the absence of absolute ground truth: toward reliable evaluation methodology for scan detectors. - Mansour Alsaleh; Paul C. van Oorschot (Int. J. Inf. Sec., 2013)

A three-way investigation of a game-CAPTCHA: automated attacks, relay attacks and usability. - Manar Mohamed; Niharika Sachdeva; Michael Georgescu; Song Gao 010; Nitesh Saxena; Chengcui Zhang; Ponnurangam Kumaraguru; Paul C. van Oorschot; Wei-bang Chen (AsiaCCS, 2014)

Location verification on the Internet: Towards enforcing location-aware access policies over Internet clients. - AbdelRahman Abdou; Ashraf Matrawy; Paul C. van Oorschot (CNS, 2014)

An Administrator's Guide to Internet Password Research. - Dinei Florêncio; Cormac Herley; Paul C. van Oorschot (LISA, 2014)

Password Portfolios and the Finite-Effort User: Sustainably Managing Large Numbers of Accounts. - Dinei Florêncio; Cormac Herley; Paul C. van Oorschot (USENIX Security Symposium, 2014)

Baton: certificate agility for android's decentralized signing infrastructure. - David Barrera 003; Daniel McCarney; Jeremy Clark; Paul C. van Oorschot (WISEC, 2014)

Security Analysis and Related Usability of Motion-Based CAPTCHAs: Decoding Codewords in Motion. - Yi Xu 006; Gerardo Reynaga; Sonia Chiasson; Jan-Michael Frahm; Fabian Monrose; Paul C. van Oorschot (IEEE Trans. Dependable Secur. Comput., 2014)

Heuristics for the evaluation of captchas on smartphones. - Gerardo Reynaga; Sonia Chiasson; Paul C. van Oorschot (BCS HCI, 2015)

What Lies Beneath? Analyzing Automated SSH Bruteforce Attacks. - AbdelRahman Abdou; David Barrera 003; Paul C. van Oorschot (PASSWORDS, 2015)

Passwords and the evolution of imperfect authentication. - Joseph Bonneau; Cormac Herley; Paul C. van Oorschot; Frank Stajano (Commun. ACM, 2015)

Quantifying the security advantage of password expiration policies. - Sonia Chiasson; Paul C. van Oorschot (Des. Codes Cryptogr., 2015)

Taxing the Queue: Hindering Middleboxes From Unauthorized Large-Scale Traffic Relaying. - AbdelRahman Abdou; Ashraf Matrawy; Paul C. van Oorschot (IEEE Commun. Lett., 2015)

Accurate One-Way Delay Estimation With Reduced Client Trustworthiness. - AbdelRahman Abdou; Ashraf Matrawy; Paul C. van Oorschot (IEEE Commun. Lett., 2015)

An Empirical Evaluation of Security Indicators in Mobile Web Browsers. - Chaitrali Amrutkar; Patrick Traynor; Paul C. van Oorschot (IEEE Trans. Mob. Comput., 2015)

Device fingerprinting for augmenting web authentication: classification and analysis of methods. - Furkan Alaca; Paul C. van Oorschot (ACSAC, 2016)

Revisiting password rules: facilitating human management of passwords. - Leah Zhang-Kennedy; Sonia Chiasson; Paul C. van Oorschot (eCrime, 2016)

Pushing on string: the 'don't care' region of password strength. - Dinei Florêncio; Cormac Herley; Paul C. van Oorschot (Commun. ACM, 2016)

Server Location Verification and Server Location Pinning: Augmenting TLS Authentication. - AbdelRahman Abdou; Paul C. van Oorschot (CoRR, 2016)

Accurate Manipulation of Delay-based Internet Geolocation. - AbdelRahman Abdou; Ashraf Matrawy; Paul C. van Oorschot (AsiaCCS, 2017)

Science, Security and Academic Literature: Can We Learn from History? - Paul C. van Oorschot (MTD@CCS, 2017)

SoK: Science, Security and the Elusive Goal of Security as a Scientific Pursuit. - Cormac Herley; Paul C. van Oorschot (IEEE Symposium on Security and Privacy, 2017)

A Framework and Comparative Analysis of Control Plane Security of SDN and Conventional Networks. - Tao Wan 004; AbdelRahman Abdou; Paul C. van Oorschot (CoRR, 2017)

On the security and usability of dynamic cognitive game CAPTCHAs. - Manar Mohamed; Song Gao 010; Niharika Sachdeva; Nitesh Saxena; Chengcui Zhang; Ponnurangam Kumaraguru; Paul C. van Oorschot (J. Comput. Secur., 2017)

CPV: Delay-Based Location Verification for the Internet. - AbdelRahman Abdou; Ashraf Matrawy; Paul C. van Oorschot (IEEE Trans. Dependable Secur. Comput., 2017)

Location Verification of Wireless Internet Clients: Evaluation and Improvements. - AbdelRahman Abdou; Ashraf Matrawy; Paul C. van Oorschot (IEEE Trans. Emerg. Top. Comput., 2017)

A Discussion on Security Education in Academia. - Kevin R. B. Butler; Robert K. Cunningham; Paul C. van Oorschot; Reihaneh Safavi-Naini; Ashraf Matrawy; Jeremy Clark (CCS, 2018)

BP: Formal Proofs, the Fine Print and Side Effects. - Toby C. Murray; Paul C. van Oorschot (SecDev, 2018)

Comparative Analysis of Control Plane Security of SDN and Conventional Networks. - AbdelRahman Abdou; Paul C. van Oorschot; Tao Wan 004 (IEEE Commun. Surv. Tutorials, 2018)

Securing Email. - Jeremy Clark; Paul C. van Oorschot; Scott Ruoti; Kent E. Seamons; Daniel Zappala (CoRR, 2018)

Baseline functionality for security and control of commodity IoT devices and domain-controlled device lifecycle management. - Markus Miettinen; Paul C. van Oorschot; Ahmad-Reza Sadeghi (CoRR, 2018)

Science of Security: Combining Theory and Measurement to Reflect the Observable. - Cormac Herley; Paul C. van Oorschot (IEEE Secur. Priv., 2018)

Letter to the Editor. - John D. McLean; Cormac Herley; Paul C. van Oorschot (IEEE Secur. Priv., 2018)

Server Location Verification (SLV) and Server Location Pinning: Augmenting TLS Authentication. - AbdelRahman Abdou; Paul C. van Oorschot (ACM Trans. Priv. Secur., 2018)

Secure Client and Server Geolocation over the Internet. - AbdelRahman Abdou; Paul C. van Oorschot (login Usenix Mag., 2018)

Analysis, Implications, and Challenges of an Evolving Consumer IoT Security Landscape. - Christopher Bellman; Paul C. van Oorschot (PST, 2019)

Onboarding and Software Update Architecture for IoT Devices. - Hemant Gupta; Paul C. van Oorschot (PST, 2019)

Software Security and Systematizing Knowledge. - Paul C. van Oorschot (IEEE Secur. Priv., 2019)

The Internet of Things: Security Challenges. - Paul C. van Oorschot; Sean W. Smith (IEEE Secur. Priv., 2019)

CAPS: Smoothly Transitioning to a More Resilient Web PKI. - Stephanos Matsumoto; Jay Bosamiya; Yucheng Dai; Paul C. van Oorschot; Bryan Parno (ACSAC, 2020)

Best Practices for IoT Security: What Does That Even Mean? - Christopher Bellman; Paul C. van Oorschot (CoRR, 2020)

A survey and analysis of TLS interception mechanisms and motivations. - Xavier de Carné de Carnavalet; Paul C. van Oorschot (CoRR, 2020)

Untangling Security and Privacy. - Paul C. van Oorschot (IEEE Secur. Priv., 2020)

Blockchains and Stealth Tactics for Teaching Security. - Paul C. van Oorschot (IEEE Secur. Priv., 2020)

Computer Security and the Internet - Tools and Jewels - Paul C. van Oorschot (Springer, 2020)

SoK: Securing Email - A Stakeholder-Based Analysis. - Jeremy Clark; Paul C. van Oorschot; Scott Ruoti; Kent E. Seamons; Daniel Zappala (Financial Cryptography (1), 2021)

Empirical Analysis and Privacy Implications in OAuth-based Single Sign-On Systems. - Srivathsan G. Morkonda; Sonia Chiasson; Paul C. van Oorschot (WPES@CCS, 2021)

Exploring Privacy Implications in OAuth Deployments. - Srivathsan G. Morkonda; Paul C. van Oorschot; Sonia Chiasson (CoRR, 2021)

Comparative Analysis and Framework Evaluating Web Single Sign-on Systems. - Furkan Alaca; Paul C. van Oorschot (ACM Comput. Surv., 2021)

SoK: Password-Authenticated Key Exchange - Theory, Practice, Standardization and Real-World Lessons. - Feng Hao 001; Paul C. van Oorschot (IACR Cryptol. ePrint Arch., 2021)

Toward Unseating the Unsafe C Programming Language. - Paul C. van Oorschot (IEEE Secur. Priv., 2021)

Coevolution of Security's Body of Knowledge and Curricula. - Paul C. van Oorschot (IEEE Secur. Priv., 2021)

Comparative Analysis and Framework Evaluating Mimicry-Resistant and Invisible Web Authentication Schemes. - Furkan Alaca; AbdelRahman Abdou; Paul C. van Oorschot (IEEE Trans. Dependable Secur. Comput., 2021)

Computer Security and the Internet - Tools and Jewels from Malware to Bitcoin, Second Edition - Paul C. van Oorschot (Springer, 2021)

Public Key Cryptography's Impact on Society: How Diffie and Hellman Changed the World. - Paul C. van Oorschot (Democratizing Cryptography, 2022)

Systematic Analysis and Comparison of Security Advice Datasets. - Christopher Bellman; Paul C. van Oorschot (CoRR, 2022)

SSOPrivateEye: Timely Disclosure of Single Sign-On Privacy Design Differences. - Srivathsan G. Morkonda; Sonia Chiasson; Paul C. van Oorschot (CoRR, 2022)

Security as an Artificial Science, System Administration, and Tools. - Paul C. van Oorschot (IEEE Secur. Priv., 2022)

A View of Security as 20 Subject Areas in Four Themes. - Paul C. van Oorschot (IEEE Secur. Priv., 2022)

Systematic analysis and comparison of security advice as datasets. - Christopher Bellman; Paul C. van Oorschot (Comput. Secur., 2023)

A Survey and Analysis of TLS Interception Mechanisms and Motivations: Exploring how end-to-end TLS is made "end-to-me" for web traffic. - Xavier de Carné de Carnavalet; Paul C. van Oorschot (ACM Comput. Surv., 2023)

Owl: An Augmented Password-Authenticated Key Exchange Scheme. - Feng Hao 001; Samiran Bag; Liqun Chen 002; Paul C. van Oorschot (IACR Cryptol. ePrint Arch., 2023)

Memory Errors and Memory Safety: C as a Case Study. - Paul C. van Oorschot (IEEE Secur. Priv., 2023)

Memory Errors and Memory Safety: A Look at Java and Rust. - Paul C. van Oorschot (IEEE Secur. Priv., 2023)

A close look at a systematic method for analyzing sets of security advice. - David Barrera 003; Christopher Bellman; Paul C. van Oorschot (J. Cybersecur., 2023)

Security Best Practices: A Critical Analysis Using IoT as a Case Study. - David Barrera 003; Christopher Bellman; Paul C. van Oorschot (ACM Trans. Priv. Secur., 2023)

Influences of displaying permission-related information on web single sign-on login decisions. - Srivathsan G. Morkonda; Sonia Chiasson; Paul C. van Oorschot (Comput. Secur., 2024)

DNSSEC+: An Enhanced DNS Scheme Motivated by Benefits and Pitfalls of DNSSEC. - Ali Sadeghi Jahromi; AbdelRahman Abdou; Paul C. van Oorschot (CoRR, 2024)

Side-Channel Attacks: A Short Tour. - Frank Piessens; Paul C. van Oorschot (IEEE Secur. Priv., 2024)

"Sign in with ... Privacy": Timely Disclosure of Privacy Differences among Web SSO Login Options. - Srivathsan G. Morkonda; Sonia Chiasson; Paul C. van Oorschot (ACM Trans. Priv. Secur., 2025)