Joshua Serratelli Schiffman

Home | Publications | Vita | Contact

Welcome

I am a PhD Candidate advised by Dr. Trent Jaeger in the Department of Computer Science and Engineering at Penn State University. I am the lead graduate student of the Systems and Internet Infrastructure Security (SIIS) Laboratory, where my duties are to coordinate the activities of the lab, run weekly meetings for members, and meet with students individually for mentoring and development of leadership and research skills.

My research interests include Operating System and virtualization security, trustworthy computing, and building verifiably secure cloud computing infrastructures. My current research focuses on distributed system security including application integrity and information flow security. In particular, I have been examining how to ensure application running on highly scalable virtualized infrastructures (i.e. cloud computing) can be proven secure with respect to specific security and integrity criteria. In the past I have researched trusted computing topics including ways of using the Trusted Platform Module (TPM) to report information flow policies and establish trust between machines on an Internet scale. During my undergraduate program, I explored various research topics such as Artificial Intelligence and Spatial Databases.

News
August 12th, 2010 - I presented my poster Verifying Cloud Integrity: Making the cloud do the dirty work at the 19th USENIX Security Symposium in Washington, DC. [ PDF]

August 6th, 2010 - My paper, Seeding Clouds with Trust Anchors, has been accepted at the 2nd ACM Cloud Computing Security Workshop in Chicago, IL.

July 25nd, 2010 - I have been awarded a Student Travel Grant to the 19th USENIX Security Symposium in Washington, DC.

July 22nd, 2010 - I presented my paper, DAuth: Fine- grained Authorization Delegation for Distributed Web Application Consumers at in GMU in Washington, DC.

July 7, 2010 - I have been awarded a Student Travel Grant to the 19th USENIX Security Symposium in Washington, DC.

June 28th, 2010 - Our paper, Constructing Secure Localization Systems with Adjustable Granularity has been accepted at IEEE Global Communications Conference.

June 10th, 2010 - I was invited to speak at Trusted Infrastructure Workshop 2010 at Carnegie Mellon University in Pittsburgh, PA. [Slides]

April 23, 2010 - My paper DAuth: Fine-grained Authorization Delegation for Distributed Web Application Consumers has been accept to POLICY 2010 at GMU in Washington, DC.

March 2, 2010 - Our paper An architecture for enforcing end-to-end access control over web applications was accepted to the 15th ACM Symposium on Access Control Models and Technologies.

December 7, 2009 - I presented my paper Justifying Integrity Using a Virtual Machine Verifier at ACSAC in Honolulu, HI. [Slides]

October 15, 2009 - I have been awarded the 2009 ACM CCS Student Travel Grant.

October 12, 2009 - I have been awarded the 2009 ACM CCS Workshop Student Travel Grant.

August 26, 2009 - My papers Justifying Integrity Using a Virtual Machine Verifier and Scaleable Web Content Attestations have been accepted to ACSAC '09!

July 15, 2009 - I have been awarded a Student Travel Grant to the 18th USENIX Security Symposium in Montreal, QC Canada.

April, 17 2009 - I have awarded a Student Travel Grant to the 30th IEEE Symposium on Security and Privacy.

Older news...

 

Any sufficiently advanced technology is indistinguishable from magic.
--Clarke's Third Law of Prediction