Adam Barth

Publications

Journal

Securing Frame Communication in Browsers
Adam Barth, Collin Jackson, and John C. Mitchell
In Communications of the ACM (CACM 2009)
Protecting Browsers from DNS Rebinding Attacks
Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, and Dan Boneh
In ACM Transactions on the Web (TWEB 2009)

Conference

Towards a Formal Foundation of Web Security
Devdatta Akhawe, Adam Barth, Peifung E. Lam, John C. Mitchell, and Dawn Song
In Proc. of the 23th IEEE Computer Security Foundations Symposium (CSF 2010)
Regular Expressions Considered Harmful in Client-Side XSS Filters
Daniel Bates, Adam Barth, and Collin Jackson
In Proc. of the 19th International World Wide Web Conference (WWW 2010)
Protecting Browsers from Extension Vulnerabilities
Adam Barth, Adrienne Porter Felt, Prateek Saxena, and Aaron Boodman
In Proc. of the 17th Network and Distributed System Security Symposium (NDSS 2010)
Preventing Capability Leaks in Secure JavaScript Subsets
Matthew Finifter, Joel Weinberger, and Adam Barth
In Proc. of the 17th Network and Distributed System Security Symposium (NDSS 2010)
A Learning-Based Approach to Reactive Security
Adam Barth, Benjamin I. P. Rubinstein, Mukund Sundararajan, John C. Mitchell, Dawn Song, and Peter L. Bartlett
In Proc. of the 14th International Conference on Financial Cryptography and Data Security (FC 2010)
Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense
Adam Barth, Joel Weinberger, and Dawn Song
In Proc. of the 18th USENIX Security Symposium (USENIX Security 2009)
Secure Content Sniffing for Web Browsers, or How to Stop Papers from Reviewing Themselves
Adam Barth, Juan Caballero, and Dawn Song
In Proc. of the 30th IEEE Symposium on Security and Privacy (Oakland 2009)
Robust Defenses for Cross-Site Request Forgery
Adam Barth, Collin Jackson, and John C. Mitchell
In Proc. of the 15th ACM Conf. on Computer and Communications Security (CCS 2008)
Securing Frame Communication in Browsers
Adam Barth, Collin Jackson, and John C. Mitchell
In Proc. of the 17th USENIX Security Symposium (USENIX Security 2008)
ForceHTTPS: Protecting High-Security Web Sites from Network Attacks
Collin Jackson and Adam Barth
In Proc. of the 17th International World Wide Web Conference (WWW 2008)
Protecting Browsers from DNS Rebinding Attacks
Collin Jackson, Adam Barth, Andrew Bortz, Weidong Shao, and Dan Boneh
In Proc. of the 14th ACM Conf. on Computer and Communications Security (CCS 2007)
Privacy and Utility in Business Processes
Adam Barth, Anupam Datta, John C. Mitchell, and Sharada Sundaram
In Proc. of the 20th IEEE Computer Security Foundations Symposium (CSF 2007)
Privacy and Contextual Integrity: Framework and Applications
Adam Barth, Anupam Datta, John C. Mitchell, and Helen Nissenbaum
In Proc. of the 27th IEEE Symposium on Security and Privacy (Oakland 2006)
Managing Digital Rights using Linear Logic
Adam Barth and John C. Mitchell
In Proc. of the 21st Annual IEEE Symposium on Logic in Computer Science (LICS 2006)
Private Encrypted Content Distribution Using Private Broadcast Encryption
Adam Barth, Dan Boneh, and Brent Waters
In Proc. of the 10th Financial Cryptography and Data Security Conference (FC 2006)
High Performance Imaging Using Large Camera Arrays
Bennett Wilburn, Neel Joshi, Vaibhav Vaish, Eino-Ville Talvala, Emilio Antunez, Adam Barth, Andrew Adams, Mark Horowitz, and Marc Levoy
In ACM Transactions on Graphics (SIGGRAPH 2005)

Workshop

Towards Client-side HTML Security Policies
Joel Weinberger, Adam Barth, and Dawn Song
In Proc. of the Workshop on Hot Topics in Security 2011 (HotSec 2011)
Talking to Yourself for Fun and Profit
Lin-Shung Huang, Eric Y. Chen, Adam Barth, Eric Rescorla, and Collin Jackson
In Proc. of Web 2.0 Security and Privacy 2011 (W2SP 2011)
Origin Cookies: Session Integrity for Web Applications
Andrew Bortz, Adam Barth, and Alexei Czeskis
In Proc. of Web 2.0 Security and Privacy 2011 (W2SP 2011)
Rootkits for JavaScript Environments
Ben Adida, Adam Barth, and Collin Jackson
In Proc. of 3rd USENIX Workshop on Offensive Technologies (WOOT 2009)
Attacks on JavaScript Mashup Communication
Adam Barth, Collin Jackson, and William Li
In Proc. of Web 2.0 Security and Privacy 2009 (W2SP 2009)
Beware of Finer-Grained Origins
Collin Jackson and Adam Barth
In Proc. of Web 2.0 Security and Privacy 2008 (W2SP 2008)
An Evaluation of Extended Validation and Picture-in-Picture Phishing Attacks
Collin Jackson, Dan Simon, Desney Tan, and Adam Barth
In Proc. of the 2007 Workshop on Usable Security (USEC 2007)
Enterprise Privacy Promises and Enforcement
Adam Barth and John C. Mitchell
In Proc. of the 2005 ACM Workshop on Issues in the Theory of Security (WITS 2005)
Conflict and Combination in Privacy Policy Languages
Adam Barth, John C. Mitchell, and Justin Rosenstein
In Proc. of the 2004 ACM Workshop on Privacy in the Electronic Society (WPES 2004)

Non-Peer Reviewed

Browser Security: Lessons from Google Chrome
Charlie Reis, Adam Barth, Carlos Pizano
In ACM Queue, June 2009
Extracting Models of Security-Sensitive Operations using String-Enhanced White-Box Exploration on Binaries
Juan Caballero, Stephen McCamant, Adam Barth, and Dawn Song
Technical Report UCB/EECS-2009-36
The Security Architecture of the Chromium Browser
Adam Barth, Collin Jackson, Charles Reis, and The Google Chrome Team
Technical Report 2008

Dissertation

Design and Analysis of Privacy Policies
Adam Barth
Ph.D. Dissertation, Stanford University, 2008