David Lie. Curriculum Vitae

Transcription

1 I. Personal Information David Lie Curriculum Vitae i) Name: David Lie ii) Address: David Lie Department of Electrical and Computer Engineering 10 King s College Circle Rd. Toronto, Ontario M5S 3G4 Canada iii) Phone: (416) iv) Fax: (416) v) lie@eecg.toronto.edu vi) Web: II. Academic History A. Education Doctor of Philosophy, Department of Electrical Engineering, Stanford University, 2004 o Supervisors: Mark Horowitz and Dan Boneh o Thesis: Architectural Support for Copy and Tamper-Resistant Software Master of Science, Department of Electrical Engineering, Stanford University, 2001 Bachelor of Applied Science, Department of Engineering Science, University of Toronto, 1998 o Supervisor: Michael Stumm o Thesis: Porting the Spash-2 Suite to Tornado B. Academic Appointments Assistant Professor, Department of Electrical and Computer Engineering, University of Toronto, January, 2004-Present Assistant Professor (Conditional), Department of Electrical and Computer Engineering, University of Toronto, August, January, 2004 Teaching Assistant, Department of Electrical Engineering, Stanford University, Research Assistant, Department of Electrical Engineering, Stanford University, C. Honors and Awards Best Paper Award, The 19th ACM Symposium on Operating Systems Principles (SOSP), Canada Scholarship ( ) Wallberg Undergraduate Scholarship (1994) D. Administrative Activities Graduate Student Committee (2004-Present) Committee on Curriculum Matters (2005-Present) Computer Group Space Manager (2006-Present) Page 1 of 6

2 III. Research A. Research Interests I am interested in the design and development of computing systems, especially from a security perspective. My particular interests include operating systems, computer architecture, compilers, verification and applications. B. Major Research Projects Execute Only Memory (XOM): This project explores techniques to protect intellectual property by creating hardware that supports copy and tamper-resistant software. This project proposed processor modifications, operating system support, and demonstrated a computer aided formal verification for the system. Secure Operating Systems through Virtual Machine Monitors: With drop in the cost of computing, Virtual Machine Monitors have become common place, allowing us to run multiple operating systems on a single machine. This project leverages this to explore new operating system structures to create more secure and reliable systems. Using Chip-Multiprocessors to Increase Security: In this project, we leverage the trend towards chip multiprocessors to employ redundancy and diversity to improve the security of systems. Formal Verification Techniques for Security: We investigate formal verification techniques with the specific goal of finding security vulnerabilities in source code. The techniques will balance the often conflicting goals of soundness and completeness, with an emphasis towards finding bugs in real security critical applications. In collaboration with Dr. Marsha Chechik. C. Doctoral Thesis Supervision Student Name Thesis Title Dates Lionel Litty TBA 01/05 Present Thomas Hart TBA 09/05 Present D. Masters Thesis Supervision Student Name Thesis Title Dates Lionel Litty A Hypervisor-Based Intrusion Detection 09/03-01/05 System Kurniadi Asrigo Virtual Machine Monitor Support for 09/03-09/05 (A) Kernel Monitoring Richard Ta-Min Making Trust Between Applications and OSs Flexible 09/04 09/06 (Expected) Ian Sin TBA 09/05 Present Jesse Pool TBA 09/05 Present Aly Merchant (Cosupervised with Dr. Voss) TBA 09/05 Present Page 2 of 6

3 IV. Teaching Experience A. Course Development ECE1776: Created a Graduate Course in Computer Security. Because graduate students arrive with differing levels of experience, this graduate course gave basics and background in computer security as well as introducing students to the most current research. The course contains lecture material, written assignments and programming assignments, oral presentations, and an independent project component. ECE468: Created a Senior Undergraduate Course in Computer Security. Course covers practical and theoretical aspects of computer security to help senior students prepare for security related employment and/or graduate studies. The course material contains written assignments, 4 major programming labs introducing students to software vulnerabilities and network security, and lecture notes. Materials developed in this course are being used in Introduction to Information Security (CS347) at the University of Toronto Mississauga Campus. B. Graduate Courses Year Course Code Course Title Enrollment 2004 ECE 1724 Computer Security, Cryptography and Privacy ECE 1776 Computer Security, Cryptography and Privacy ECE 1776 Computer Security, Cryptography and Privacy ECE 1776 Computer Security, Cryptography and Privacy 18 C. Undergraduate Courses Year Course Code Course Title Enrollment ECE 341 Computer Organization ECE 341 Computer Organization ECE 468 Computer Security ECE352 Computer Organization ECE468 Computer Security V. Publications A. Refereed Conference Publications Richard Ta-Min, Lionel Litty and David Lie. Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable. In the 7th ACM/ USENIX Symposium on Operating Systems Design and Implementation (OSDI 2006). Page November, (Acceptance: 27/150, 18%) Lionel Litty and David Lie. Manitou: A Layer-Below Approach to Fighting Malware. To appear in the Workshop on Architectural and System Support for Improving Software Dependability (ASID 2006). Page October Kurniadi Asrigo, Lionel Litty and David Lie. Using VMM-Based Sensors to Monitor Honeypots. In Proceedings of the 2nd ACM International Conference on Virtual Execution Environments (VEE 2006). Page June, David Lie, Chandramohan Thekkath and Mark Horowitz. Implementing an Untrusted Operating System on Trusted Hardware. In Proceedings of the 19th ACM Symposium on Page 3 of 6

4 Operating Systems Principles (SOSP ). Page October,. (Acceptance: 22/128, 17%; 50 citations * ) Best Paper Award. David Lie, John Mitchell, Chandramohan Thekkath and Mark Horowitz. Specifying and Verifying Hardware for Tamper-Resistant Software. In Proceedings of the IEEE Symposium on Security and Privacy. Page May,. (Acceptance: 19/131, 19%; 20 citations) David Lie, Andy Chou, Dawson Engler and David Dill. A Simple Method for Extracting Models from Protocol Code. In Proceedings of the 28th International Symposium on Computer Architecture (ISCA 2001). Page July, (Acceptance: 24/163, 15%; 23 citations) Deqing Chen, Alan Messer, Philippe Bernadat, Guangrui Fu, Zoran Dimitrijevic, David Lie, Durga Mannaru, Alma Riska, and Dejan Milojicic. JVM Susceptibility to Memory Errors. In Proceedings of the Java Machine Research and Technology Symposium (JVM 2001). Page April, (12 citations) David Lie, Chandramohan Thekkath, Mark Mitchell, Patrick Lincoln, Dan Boneh, John Mitchell, and Mark Horowitz. Architectural Support for Copy and Tamper Resistant Software. In Proceedings of the 9th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS-IX). Page November, (Acceptance: 24/114, 21%; 187 citations) B. Refereed Journal Publications Alan Messer, Phillippe Bernadat, Guangrui Fu, Deqing Chen, Zoran Dimitrijevic, David Lie, Durga Devi Mannaru, Alma Riska and Dejan Milojicic. Susceptibility of Commodity Systems and Software to Memory Soft Errors. In the IEEE Transactions on Computing. Page December, (6 citations) C. Books Invited Book Chapter for Hardware Based-Security. Editors Sean Smith and Ruby Lee. To be published by Morgan Kaufman (Currently under review by the publisher). D. Unrefereed Publications Dan Boneh, David Lie, Patrick Lincoln, John Mitchell, Mark Mitchell. Hardware Support for Tamper-Resistant and Copy-Resistant Software, Technical Report CS-TN-00-97, Stanford University Computer Science, (3 citations) David Lie. Architectural Support for Copy and Tamper-Resistant Software, Ph.D Thesis,. VI. Talks A. Conference Talks Title Conference Year Operating Systems Splitting Interfaces: Making Trust between Operating Development and 2006 Systems and Applications Configurable Implementation (OSDI) Using VMM-based Sensors to Monitor Honeypots Virtual Execution 2006 * Citations counts are from Page 4 of 6

5 Implementing an Untrusted Operating System on Trusted Hardware Specifying and Verifying Hardware for Tamper- Resistant Software A Simple Method for Extracting Models from Protocol Code Architectural Support for Copy and Tamper-Resistant Software Environments (VEE) Symposium on Operating Systems Principles (SOSP) IEEE Symposium on Security and Privacy (Oakland) International Symposium on Computer Architecture (ISCA) Architectural Support for Programming Languages and Operating Systems (ASPLOS) B. Invited Talks Title Location Year Microsoft Research SVC, CA 2006 Splitting Interfaces: Making Trust between Operating Systems and Applications Configurable VMware, CA 2006 Microsoft Research, WA 2006 Reducing the TCB MITACS Conference, AB 2005 Carleton University, ON 2005 IBM T.J. Watson Labs, NY 2004 A Hypervisor-Based Intrusion Detection System HP Labs, CA 2004 Microsoft Research SVC, CA 2004 Implementing an Untrusted Operating System on Stanford University, CA Trusted Hardware Microsoft Research SVC, CA Intel, OR University of Toronto, ON University of Illinois at Architectural Support for Copy and Tamper- Urbana-Champagne, IL Resistant Software University of British Columbia, BC Microsoft Research SVC, CA A Simple Method for Extracting Models from Compaq Systems Research Protocol Code Lab, CA 2001 Architectural Support for Copy and Tamper- Microsoft Research, WA 2000 Resistant Software University of Washington, WA 2000 VI. Professional Activities A. Professional Societies Member of the Institute of Electrical and Electronics Engineers (IEEE) Member of the Association for Computing Machinery (ACM) Member of USENIX Advanced Computing Systems Association B. Conference and Workshop Activities Major Committees Technical Program Committee for the Workshop on Architectural and System Support for Improving Software Dependability (ASID), in association with ASPLOS (2006) Technical Program Committee for the International Conference on Parallel and Distributed Systems (ICPADS) (2006) Page 5 of 6

6 Technical Program Committee member for the Queen s Biennial Symposium on Communications (QBSC) (2006) Technical Program Committee member for the Privacy, Security and Trust Conference (PST) (2006) CASCON Computer Security Workshop Organizer and Speaker (2005) Technical Program Committee for the Workshop on Architectural Support for Security and Anti-Virus (WASSA), in association with ASPLOS (2004) Other Activities Reviewer for the Symposium on Operating Systems Design and Implementation (OSDI) (2006, 2004) Reviewer for the International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) (2006, 2004, 2002) Reviewer for the USENIX Security Conference (2006) Reviewer for the International Symposium on Computer Architecture (ISCA) (2006,, 2002, 2001) Reviewer for the Annual USENIX Technical Conference (2006) Reviewer for International Symposium on High-Performance Computer Architecture (HPCA) (2007) Reviewer for IEEE/ACM International Symposium on Microarchitecture (MICRO) (2005, 2004) Reviewer for Transactions on Architecture and Code Optimization (TACO) (2006, 2005) Reviewer for the Design Automation Conference (DAC) (2006) Reviewer for International Conference on Very Large Data Bases (VLDB) (2006) Reviewer for ACM Transactions on Information and System Security (TISSEC) (2006) Reviewer for International Journal of Computers and Applications (2005) Reviewer for IEEE International Symposium on Performance Analysis of Systems and Software (ISPASS) (2005) Reviewer for the ACM/IFIP/USENIX International Middleware Conference (2004) Reviewer for the International Conference on Mobile Systems, Applications and Services (MobiSys) () Reviewer for European Network of Excellence on High-Performance Embedded Architecture and Compilation (HiPEAC) (2005) Reviewer for the USENIX Virtual Machine Research and Technology Symposium (VM) () C. Funding Reviews ISTS Dartmouth Program (2006) NSF CSR-PDOS (Parallel and Distributed Operating Systems) funding Panel (2006) CITO Panelist (2005) NSF Career Awards reviewer (2004) D. Industry Experience Dates Position Company 06/ /2000 Researcher HP Labs, CA 06/ /1999 Design Engineer, Alpha Group Compaq PADC, CA Page 6 of 6