Source: http://theory.stanford.edu/people/jcm/publications.htm
Timestamp: 2019-04-20 20:12:01+00:00

Document:
Many papers listed by year at DBLP Bibliography Server, with coauthor index.
D. Akhawe, A. Barth, P. Lam, J.C. Mitchell and D. Song, Towards a formal foundation of Web security, Proc. IEEE Symposium on Computer Security Foundations, July 2010.
J. Bau, E. Bursztein, D. Gupta, J.C. Mitchell State of the Art: Automated Black-Box Web Application Vulnerability Testing, Proc. IEEE Symposium on Security and Privacy, May 2010.
E. Bursztein, S. Bethard, J.C. Mitchell, D. Jurafsky, C. Fabry How Good are Humans at Solving CAPTCHAs? A Large Scale Evaluation Proc. IEEE Symposium on Security and Privacy, May 2010.
J. Bau and J.C. Mitchell, A Security Evaluation of DNSSEC with NSEC3, Network and Distributed Systems Security (NDSS), 2010.
A.Barth, B. Rubinstein, M. Sundararajan, J.C. Mitchell, D. Song, and P.L. Bartlett, A Learning-Based Approach to Reactive Security, Proc. of the 14th International Conference on Financial Cryptography and Data Security (FC 2010), 2010.
E. Bursztein, J.C. Mitchell, Using Strategy Objectives for Network Security Analysis, Inscrypt'09, December 2009.
E. Bursztein, P.E. Lam, J.C. Mitchell, TrackBack Spam: Abuse and Prevention, Proc. ACM Cloud Computing Security Workshop, Chicago, November, 2009.
P.F. Lam, J.C. Mitchell, and S. Sundaram, A Formalization of HIPAA for a Medical Messaging System, 6th International Conference on Trust, Privacy \& Security in Digital Business (TrustBus'09), 2009.
T. Hinrichs, N. Gude. M. Casado, J.C. Mitchell, S. Shenker, Practical Declarative Network Management, ACM SIGCOMM Workshop: Research on Enterprise Networking (WREN 2009), 2009.
A. Barth, C. Jackson, and J.C. Mitchell, Robust Defenses for Cross-Site Request Forgery, Proc. 15th ACM Conference on Computer and Communications Security (CCS 2008), 2008.
E. Stinson, J.C. Mitchell, Towards Systematic Evaluation of the Evadability of Bot/Botnet Detection Methods, 2nd USENIX Workshop on Offensive Technologies (WOOT '08), 2008.
L. Martignoni, E. Stinson, M Fredrikson, S. Jha, J.C. Mitchell, A Layered Architecture for Detecting Malicious Behaviors, 11th Int'l Symp. Recent Advances In Intrusion Detection (RAID), 2008.
J.C. Mitchell, A. Roy, P. Rowe, A. Scedrov, Analysis of EAP-GPSK Authentication Protocol, Applied Cryptography and Network Security, 2008.
A. Miura-Ko, B. Yolken, J.C. Mitchell and N. Bambos, Security decision-making among interdependent organizations, IEEE Computer Security Foundations (CSF), 2008.
A. Barth, A. Datta, J.C. Mitchell, and S. Sundaram, Privacy and Utility in Business Processes, 20th IEEE Computer Security Foundations Symposium (CSF 20), Venice, July, 2007.
A. Barth, A. Datta, J. C. Mitchell, and H. Nissenbaum, Privacy and Contextual Integrity: Framework and Applications, Proceedings of 27th IEEE Symposium on Security and Privacy, May 2006.
A. Barth and J.C. Mitchell, Enterprise privacy promises and enforcement, Workshop on Issues in the Theory of Security (WITS'05), San Diego, January, 2005.
A. Barth and J.C. Mitchell, Managing Digital Rights using Linear Logic, Proc 21st Annual IEEE Symposium on Logic in Computer Science. 2006.
N. Li and J.C. Mitchell, Understanding SPKI/SDSI using first-order logic. Int. J. Inf. Sec. 5(1): 48-64 (2006).
N. Li, J.C. Mitchell, and W.H. Winsborough, Beyond Proof-of-compliance: Security Analysis in Trust Management, J. ACM, Vol. 52, pp 474-514, 2005.
A. Chander, D. Dean, and J.C. Mitchell, Reconstructing Trust Management, Journal of Computer Security, vol 12, number 1, 2004, pages 131-164.
N. Li and J.C. Mitchell, Understanding SPKI/SDSI Using First-Order Logic, IEEE Computer Security Foundations Workshop, Pacific Grove, California, June 2003, pages 89-103.
N. Li, J.C. Mitchell, and W.H. Winsborough, Beyond Proof-of-compliance: Safety and Availability Analysis in Trust Management, IEEE Symp. on Security and Privacy, Oakland, May 2003.
N. Li and J.C. Mitchell, RT: A Role-based Trust-management Framework, DARPA Information Survivability Conference and Exposition (DISCEX III), April, 2003.
N. Li, W. Winsborough, J.C. Mitchell, Distributed Credential Chain Discovery in Trust Management, J. Computer Security, vol 11, no 1, 2003, pages 35-86.
N. Li and J.C. Mitchell, Datalog with Constraints: A Foundation for Trust-management Languages, Proc. Fifth International Symposium on Practical Aspects of Declarative Languages (PADL 2003), New Orleans, Louisiana, Springer LNCS Vol. 2562, January 2003, pp. 58-73.
N. Li, J.C. Mitchell, W.H. Winsborough, Design of a Role-based Trust-management Framework, IEEE Symp. on Security and Privacy, Oakland, May 2002.
N. Li, W.H. Winsborough, and J.C. Mitchell, Distributed Credential Chain Discovery in Trust Management (Extended Abstract), Proc. 8th ACM Conference on Computer and Communications Security, pages 156-165. ACM Press, November 2001.
A. Chander, D. Dean, and J.C. Mitchell, A state-transition model of trust management and access control, 14th IEEE Computer Security Foundations Workshop, Cape Breton, Nova Scotia, June 11-13, 2001.
C. Jackson, D. Boneh, and J.C. Mitchell, Protecting Browser State from Web Privacy Attacks, 15th International World Wide Web Conference (WWW 2006), Edinburgh, May, 2006.
B. Ross, C. Jackson, N. Miyake, D. Boneh, and J.C, Mitchell, Stronger Password Authentication Using Browser Extensions, Usenix Security Symposium, Baltimore, August, 2005.
N. Chou, R. Ledesma, Y. Teraguchi, D.Boneh, and J.C. Mitchell, Client-Side Defense Against Web-Based Identity Theft, 11th Annual Network and Distributed System Security Symposium (NDSS '04), San Diego, February, 2004.
J.C. Mitchell and V. Teague, Autonomous Nodes and Distributed Mechanisms, in M. Okada, B. Pierce, A. Scedrov, H. Tokuda, and A. Yonezawa (eds.), Software Security - Theories and Systems. Mext-NSF-JSPS International Symposium, ISSS 2002, Tokyo, Japan, November 8-10, 2002, Springer LNCS Volume 2609, Springer-Verlag, 2003, pp. 58-83.
C. He and J.C. Mitchell, Security Analysis and Improvements for IEEE 802.11i, Network and Distributed System Security Symposium (NDSS '05), San Diego, February, 2005.
C. He and J.C. Mitchell, Analysis of the 802.11i 4-Way Handshake, ACM Workshop on Wireless Security (WiSe 2004), Philadelphia, October, 2004.
V. Shmatikov and J.C. Mitchell, Finite-State Analysis of Two Contract Signing Protocols, Theoretical Computer Science, 283, June 2002, pages 419-450.
V. Shmatikov and J.C. Mitchell, Analysis of Abuse-Free Contract Signing, Financial Cryptography �00, Anguilla, 2000.
V. Shmatikov and J.C. Mitchell, Analysis of a Fair Exchange Protocol, Seventh Annual Symposium on Network and Distributed System Security (NDSS 2000), San Diego, 2000, pages 119-128.
J.C. Mitchell, V.Shmatikov, and U. Stern, Finite-State Analysis of SSL 3.0, Seventh USENIX Security Symposium, San Antonio, 1998, pages 201-216. Preliminary version presented at DIMACS Workshop on Design and Formal Verification of Security Protocols, September 1997, and distributed on workshop CD.
J.C. Mitchell, M. Mitchell, and U.Stern, Automated Analysis of Cryptographic Protocols Using Murphi, IEEE Symp. Security and Privacy, Oakland, 1997, pages 141-153.
A. Roy, A. Datta, and J.C. Mitchell, Formal Proofs of Cryptographic Security of Diffie-Hellman based Protocols, Proc. Symposium On Trustworthy Global Computing, Springer LNCS, November 2007.
A. Roy, A. Datta, A. Derek, and J.C. Mitchell, Inductive Proofs of Computational Secrecy, Proc. 12th European Symposium On Research In Computer Security, September, 2007.
A. Roy, A. Datta, A. Derek, J.C. Mitchell, and J-P Seifert, Secrecy Analysis in Protocol Composition Logic. In Formal Logical Methods for System Security and Correctness, IOS Press, 2008. Volume based on presentations at Summer School 2007, Formal Logical Methods for System Security and Correctness, Marktoberdorf, Germany.
A. Roy, A. Datta, A. Derek and J.C. Mitchell. Inductive Trace Properties Imply Computational Security, 7th International Workshop on Issues in the Theory of Security (WITS'07), Braga, Portugal, March, 2007.
A. Datta, A. Derrick, J.C. Mitchell and A. Roy, Protocol composition logic (PCL). In Computation, Meaning and Logic: Articles dedicated to Gordon Plotkin, ed. L. Cardelli, M. Fiore and G. Winskel, Electronic Notes in Theoretical Computer Science, 2007.
C. He, M. Sundararajan, A. Datta, A. Derek, and J. C. Mitchell, A Modular Correctness Proof of TLS and IEEE 802.11i, ACM Transactions on Information and System Security,accepted for publication.
A. Roy, A. Datta, A. Derek, J.C.~Mitchell, and J.-P. Seifert, Secrecy Analysis in Protocol Composition Logic, 11th Annual Asian Computing Science Conference (ASIAN'06), Tokyo, December, 2006.
A. Datta, A. Derek, J.C. Mitchell, and B. Warinschi, Key Exchange Protocols: Security Definition, Proof Method, and Applications, 19th IEEE Computer Security Foundations Workshop (CSFW 19), Venice, July, 2006.
C. He, M. Sundararajan, A. Datta, A. Derek, and J. C. Mitchell, A Modular Correctness Proof of TLS and IEEE 802.11i, ACM Conference on Computer and Communications Security (CCS '05), November, 2005.
A. Datta, A. Derek, J.C. Mitchell, V. Shmatikov, and M. Turuani, Probabilistic polynomial-time semantics for a protocol security logic, 32nd International Colloquium on Automata, Languages and Programming (ICALP '05), Lisbon, July, 2005.
M. Backes, A. Datta, A. Derek, J.C. Mitchell, and M. Turuani, Compositional Analysis of Contract Signing Protocols, 18th IEEE Computer Security Foundations Workshop (CSFW '05), June, 2005.
A. Datta, A. Derek, J. C. Mitchell, and D. Pavlovic, A Derivation System and Compositional Logic for Security Protocols, Journal of Computer Security (Special Issue of Selected Papers from CSFW-16), Vol 13, 2005, pages 423–482.
A. Datta and A. Derek and J. C. Mitchell and D. Pavlovic, Abstraction and Refinement in Protocol Derivation, IEEE Computer Security Foundations Workshop, Pacific Grove, California, June 2004.
A. Datta and A. Derek and J. C. Mitchell and D. Pavlovic, Secure protocol composition, Proc. of Mathematical Foundations of Programming Semantics, Electronic Notes in Theoretical Computer Science, vol 83, 2003.
A. Datta, A. Derek, J. C. Mitchell, and D. Pavlovic, Secure protocol composition (Extended abstract), Proc. ACM Workshop on Formal Methods in Security Engineering, 2003, pages 11-23.
A. Datta, A. Derek, J.C. Mitchell, and D. Pavlovic, A Derivation System for Security Protocols and its Logical Formalization, IEEE Computer Security Foundations Workshop, Pacific Grove, California, June 2003, pages 109-125.
N.A. Durgin, J.C. Mitchell, and D. Pavlovic, A compositional logic for proving security properties of protocols, Journal of Computer Security, vol 11, number 4, 2003, pages 677-721.
N.A. Durgin, J.C. Mitchell, and D. Pavlovic, A Compositional Logic for Protocol Correctness, 14th IEEE Computer Security Foundations Workshop, Cape Breton, Nova Scotia, June 11-13, 2001.
R. Kuesters, A. Datta, J.C. Mitchell, and A. Ramanathan, On the Relationships Between Notions of Simulation-Based Security, J. Cryptology, accepted for publication.
J.C. Mitchell, A. Ramanathan, A Scedrov, and V. Teague, A probabilistic polynomial-time process calculus for the analysis of cryptographic protocols, Theoretical Computer Science 353 (2006) 118--164.
A. Datta, A. Derek, J.C. Mitchell, A. Ramanathan, and A. Scedrov, Games and the Impossibility of Realizable Ideal Functionality, Theory of Cryptography Conference (TCC), 2006.
A. Datta, R. Kuesters, J. C. Mitchell, A. Ramanathan, On the Relationships between Notions of Simulation-based Security, in Proceedings of Theory of Cryptography Conference, Lecture Notes in Computer Science, Vol. 3378, pp. 476-494, February 2005.
A. Datta, R. Kuesters, J.C. Mitchell, A. Ramanathan, V. Shmatikov, Unifying Equivalence-Based Definitions of Protocol Security, Workshop on Issues in the Theory of Security (WITS'04), Barcelona, April, 2004.
A. Ramanathan, J.C. Mitchell, A. Scedrov, and V. Teague, Probabilistic bisimulation and equivalence for security analysis of network protocols, Foundations of Software Science and Computation Structures (FOSSACS 2004), Barcelona, March, 2004.
P. Mateus, J.C. Mitchell, and A. Scedrov, Composition of Cryptographic Protocols in a Probabilistic Polynomial-Time Calculus, CONCUR 2003, Marseille, France, Springer LNCS Volume 2761, Springer-Verlag, 2003, pp. 327-349.
J. Mitchell, A. Ramanathan, A. Scedrov, and V. Teague, A probabilistic polynomial-time calculus for analysis of cryptographic protocols (Preliminary report), 17-th Annual Conference on the Mathematical Foundations of Programming Semantics, Arhus, Denmark, May, 2001, Electronic Notes in Theoretical Computer Science, Volume 45 (2001).
Lincoln,P.D., Mitchell, J.C., Mitchell, M., and Scedrov, A., Probabilistic polynomial-time equivalence and security protocols, FM'99 World Congress On Formal Methods in the Development of Computing Systems, Toulouse, France, September, 1999.
Lincoln, P.D., Mitchell, J.C., Mitchell, M. and Scedrov, A., A Probabilistic Poly-time Framework for Protocol Analysis, ACM Computer and Communication Security (CCS-5), 1998, pages 112-121.
J.C. Mitchell, M. Mitchell, and A. Scedrov, A linguistic characterization of bounded oracle computation and probabilistic polynomial time, IEEE Foundations of Computer Science, 1998, pages 725-733.
I. Cervesato, N.D. Durgin, P.D. Lincoln, J.C. Mitchell, and A. Scedrov, Journal of Computer Security, volume 13, issue 2, 2005, pages 265-316.
R. Chadha, J.C. Mitchell, A. Scedrov, and V. Shmatikov, Contract signing, optimism, and advantage, CONCUR 2003, Marseille, France, Springer LNCS Volume 2761, Springer-Verlag, 2003, pp. 366-382.
Durgin, N.A., Lincoln, P.D., Mitchell, J.C., and Scedrov, A., Multiset rewriting and the complexity of bounded security protocols, Journal of Computer Security, vol 12, number 1, 2004, pages 677-722.
I. Cervesato, N.A. Durgin, J.C. Mitchell, P.D. Lincoln, and A. Scedrov, A Comparison between Strand Spaces and Multiset Rewriting for Security Protocol Analysis, International Symposium on Software Security, In M. Okada, B. Pierce, A. Scedrov, H. Tokuda, and A. Yonezawa, eds., Software Security - Theories and Systems. Mext-NSF-JSPS International Symposium, ISSS 2002, Tokyo, Japan, November 8-10, 2002. Springer LNCS Volume 2609, Springer-Verlag, 2003, pp. 356 - 383.
H. Comon, V. Cortier, and J.C. Mitchell, Tree Automata with one Memory, Set Constraints and Ping-Pong Protocols, ICALP 2001, Crete, Greece, July 8-12, 2001.
I. Cervesato, N.A. Durgin, J.C. Mitchell, P.D. Lincoln, and A. Scedrov, Relating strands and multiset rewriting for security protocol analysis, 13-th IEEE Computer Security Foundations Workshop, Cambridge, U.K., July 3-5, 2000, pages 35-51.
I. Cervesato, N.A. Durgin, P.D. Lincoln, J.C. Mitchell, and A. Scedrov, A meta-notation for protocol analysis, 12-th IEEE Computer Security Foundations Workshop, Mordano, Italy, June 28-30, 1999.
N.A. Durgin, and J.C. Mitchell, Analysis of Security Protocols. In Calculational System Design, ed. M. Broy and R. Steinbruggen, IOS Press, 1999, pages 369-395.
E. Stinson and J.C. Mitchell, Characterizing Bots' Remote Control Behavior, 4th GI Int'l Conf. on Detection of Intrusions & Malware, and Vulnerability Assessment (DIMVA), Lucerne, Switzerland, July, 2007.
N. Li and J.C. Mitchell, Securing Java RMI-based Distributed Applications, 20th Annual Computer Security Applications Conference (ACSAC 2004), Tucson, December, 2004.
A. Chander, J.C. Mitchell, and I. Shin, Mobile code security by Java bytecode instrumentation, DARPA Information Survivability Conference & Exposition (DISCEX II), June, 2001.
I. Shin and J.C. Mitchell, Java Bytecode Modification and Applet Security. Stanford CS Tech Report.
S.N. Freund and J.C. Mitchell, A Type System for the Java Bytecode Language and Verifier, Journal of Automated Reasoning, volume 30 (3-4):271--321, 2003.
S.N. Freund and J.C. Mitchell, A Formal Framework for the Java Bytecode Language and Verifier, ACM Conference on Object-Oriented Programming: Systems, Languages and Applications, Denver, CO, November, 1999, pages 147-166.
S.N. Freund and J.C. Mitchell, A Type System for Object Initialization in the Java Bytecode Language, ACM Trans. Programming Languages and Systems, 21, 6 (Nov. 1999), pages 1196-1250.
S.N. Freund and J.C. Mitchell, A Type System for Object Initialization in the Java Bytecode Language, ACM Symp. Object-oriented Programming: Systems, Languages and Applications (OOPSLA), 1998, pages 310-328.
D. Boneh, D. Lie, P.D. Lincoln, J.C. Mitchell, M. Mitchell, Hardware Support for Tamper-Resistant and Copy-Resistant Software, Technical Report CS-TN-00-97, Stanford University Computer Science, 2000.
Bono, V., Patel, A., Shmatikov, V., and Mitchell, J.C., A core calculus of classes and mixins, European Conference on Object-Oriented Programming, 1999, pages 43-66.
Bono, V., Patel, A., Shmatikov, V., and Mitchell, J.C., A core language of classes and objects, 15th Conf. Mathematical Foundations of Programming Semantics, 1999.Proceedings appear as Volume 20, Electronic Notes in Theoretical Computer Science, 2000.
Agesen, O., Freund, S., and Mitchell, J.C., Adding Type Parameterization to the Java Language, ACM Symp. Object-Oriented Programming: Systems, Languages and Applications (OOPSLA), 1997, pages 49-65.
Fisher, K., and Mitchell, J.C., On the relationship between classes, objects and data abstraction, Theory and Practice of Object Systems 4,1 (1998) 3-32.
Available here until ENTCS link to paper is operational.
Available here until BSL link to paper is operational.
R. Harper and J.C. Mitchell, Parametricity and variants of Girard's J operator, Information Processing Letters 70, 1999, pages 1-5.
Mitchell, J.C. and E. Moggi, Kripke-style Models for Typed Lambda Calculus, Proc. IEEE Symp. Logic in Computer Science, 1987, pages 303--314.

References: V. 

V. 

V. 

V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V. 
 V.