Author

Rob Johnson

135 papers · 1995–2026

1995peak 15 in 20212026

Frequent co-authors

Papers

showing 1–25 of 135 RSS

Touching from a distance

Xiang Cai, Xin Cheng Zhang, Brijesh Joshi +1 more

Artificial Intelligence · 15 Oct 2012 · cited 391× · DOI ↗ · more like this ·

We present a novel web page fingerprinting attack that is able to defeat several recently proposed defenses against traffic analysis attacks, including the application-level defenses HTTPOS and randomized pipelining over Tor. Regardless of the defense scheme, our attack was able to guess which of 100 web pages a victim was visiting at least 50% of the time and, with some defenses, over 90% of the time. Our attack is based on a simple model of network behavior and out-performs previously proposed ad hoc attacks. We then build a web site fingerprinting attack that is able to identify whether a victim is visiting a particular web site with over 90% accuracy in our experiments.

A Systematic Approach to Developing and Evaluating Website Fingerprinting Defenses

Xiang Cai, Rishab Nithyanand, Tao Wang +2 more

Artificial Intelligence · Rare & Special e-Zone (The Hong Kong University of Science and Technology) · 3 Nov 2014 · cited 278× · DOI ↗ · more like this ·

Fingerprinting attacks have emerged as a serious threat against privacy mechanisms, such as SSL, Tor, and encrypting tunnels. Researchers have proposed numerous attacks and defenses, and the Tor project now includes both network- and browser-level defenses against these attacks, but published defenses have high overhead, poor security, or both.

Effective attacks and provable defenses for website fingerprinting

Tao Wang, Xiang Cai, Rishab Nithyanand +2 more

Artificial Intelligence · USENIX Security Symposium · 20 Aug 2014 · cited 273× · OpenAlex ↗ · more like this ·

Website fingerprinting attacks allow a local, passive eavesdropper to identify a user’s web activity by lever-aging packet sequence information. These attacks break the privacy expected by users of privacy technologies, including low-latency anonymity networks such as Tor. In this paper, we show a new attack that achieves sig-nificantly higher accuracy than previous attacks in the same field, further highlighting website fingerprinting as a genuine threat to web privacy. We test our attack under a large open-world experimental setting, where the client can visit pages that the attacker is not aware of. We found that our new attack is much more accurate than previous attempts, especially for an attacker monitoring a set of sites with low base incidence rate. We can correctly de-termine which of 100 monitored web pages a client is visiting (out of a significantly larger universe) at an…

Don't Thrash: How to Cache Your Hash on Flash

Michael A. Bender, Martin Farach-Colton, Rob Johnson +7 more

cs.DB · August 2012 · cited 242× · arXiv ↗ · more like this ·

This paper presents new alternatives to the well-known Bloom filter data structure. The Bloom filter, a compact data structure supporting set insertion and membership queries, has found wide application in databases, storage systems, and networks. Because the Bloom filter performs frequent random reads and writes, it is used almost exclusively in RAM, limiting the size of the sets it can represent. This paper first describes the quotient filter, which supports the basic operations of the Bloom filter, achieving roughly comparable performance in terms of space and time, but with better data locality. Operations on the quotient filter require only a small number of contiguous accesses. The quotient filter has other advantages over the Bloom filter: it supports deletions, it can be dynamically resized, and two quotient filters can be efficiently merged. The paper then gives two data…

Don't thrash

Michael A. Bender, Martı́n Farach-Colton, Rob Johnson +7 more

Computer Networks and Communications · Proceedings of the VLDB Endowment · July 2012 · cited 198× · DOI ↗ · more like this ·

CS-BuFLO

Xiang Cai, Rishab Nithyanand, Rob Johnson

Artificial Intelligence · 3 Nov 2014 · cited 164× · DOI ↗ · more like this ·

Website fingerprinting attacks enable an adversary to infer which website a victim is visiting, even if the victim uses an encrypting proxy, such as Tor. Previous work has shown that all proposed defenses against website fingerprinting attacks are ineffective. This paper advances the study of website fingerprinting defenses by first laying out the complete specifications of the CS-BuFlo scheme outlined by Cai, et al. CS-BuFlo, which is based on the BuFlo defense proposed by Dyer, et al., was not fully-specified by Cai, et al, but has nonetheless attracted the attention of the Tor developers. Next, a full working implementation of CS-BuFlo is provided. Finally, a thorough evaluation of CS-BuFlo is performed using empirical data (rather than data from simulations). Our experiments find that CS-BuFlo has high overhead (around 2.3-2.8x) but can get 6times closer to the bandwidth/security…

A General-Purpose Counting Filter

Prashant Pandey, Michael A. Bender, Rob Johnson +1 more

Computer Networks and Communications · 9 May 2017 · cited 149× · DOI ↗ · more like this ·

Approximate Membership Query (AMQ) data structures, such as the Bloom filter, quotient filter, and cuckoo filter, have found numerous applications in databases, storage systems, networks, computational biology, and other domains. However, many applications must work around limitations in the capabilities or performance of current AMQs, making these applications more complex and less performant. For example, many current AMQs cannot delete or count the number of occurrences of each input item, take up large amounts of space, are slow, cannot be resized or merged, or have poor locality of reference and hence perform poorly when stored on SSD or disk. This paper proposes a new general-purpose AMQ, the counting quotient filter (CQF). The CQF supports approximate membership testing and counting the occurrences of items in a data set. This general-purpose AMQ is small and fast, has good…

Finding user/kernel pointer bugs with type inference

Rob Johnson, David Wagner

Artificial Intelligence · UC Berkeley · 13 Aug 2004 · cited 123× · OpenAlex ↗ · more like this ·

Abstract Today&apos;s operating systems struggle with vulnerabil-ities from careless handling of user space pointers. User/kernel pointer bugs have serious consequences forsecurity: a malicious user could exploit a user/kernel pointer bug to gain elevated privileges, read sensitivedata, or crash the system. We show how to detect user/kernel pointer bugs using type-qualifier inference,and we apply this method to the Linux kernel using CQUAL, a type-qualifier inference tool. We extend thebasic type-inference capabilities of CQ UAL to supportcontext-sensitivity and greater precision when analyzing structures so that CQUAL requires fewer annota-tions and generates fewer false positives. With these enhancements, we were able to use CQUAL to find 17exploitable user/kernel pointer bugs in the Linux kernel. Several of the bugs we found were missed by carefulhand audits, other program…

Glove

Rishab Nithyanand, Xiang Cai, Rob Johnson

Artificial Intelligence · 3 Nov 2014 · cited 91× · DOI ↗ · more like this ·

Website fingerprinting attacks have recently emerged as a serious threat against web browsing privacy mechanisms, such as SSL, Tor, and encrypting tunnels. Researchers have proposed numerous attacks and defenses, and the Tor project currently includes both network- and browser-level defenses against these attacks, but published defenses have high overhead, poor security, or both.

A practical mimicry attack against powerful system-call monitors

Chetan Parampalli, R. Sekar, Rob Johnson

Computer Networks and Communications · 18 Mar 2008 · cited 81× · DOI ↗ · more like this ·

System-call monitoring has become the basis for many hostbased intrusion detection as well as policy enforcement techniques. Mimicry attacks attempt to evade system-call monitoring IDS by executing innocuous-looking sequences of system calls that accomplish the attacker’s goals. Mimicry attacks may execute a sequence of dozens of system calls in order to evade detection. Finding such a sequence is difficult, so researchers have focused on tools for automating mimicry attacks and extending them to gray-box IDS 1. In this paper, we describe an alternative approach for building mimicry attacks using only skills and technologies that hackers possess today, making this attack a more immediate and realistic threat. These attacks, which we call persistent interposition attacks, are not as powerful as traditional mimicry attacks — an adversary cannot obtain a root shell using a persistent…

Exploiting Unix File-System Races via Algorithmic Complexity Attacks

Xiang Cai, Yuwei Gui, Rob Johnson

Artificial Intelligence · May 2009 · cited 55× · DOI ↗ · more like this ·

We defeat two proposed Unix file-system race condition defense mechanisms. First, we attack the probabilistic defense mechanism of Tsafrir, et al., published at USENIX FAST 2008. We then show that the same attack breaks the kernel-based dynamic race detector of Tsyrklevich and Yee, published at USENIX Security 2003. We then argue that all kernel-based dynamic race detectors must have a model of the programs they protect or provide imperfect protection. The techniques we develop for performing these attacks work on multiple Unix operating systems, on uni- and multi-processors, and are useful for exploiting most Unix file-system races. We conclude that programmers should use provably-secure methods for avoiding race conditions when accessing the file-system.

Games Without Frontiers: Investigating Video Games as a Covert Channel

Bridger Hahn, Rishab Nithyanand, Phillipa Gill +1 more

cs.CR · March 2015 · cited 52× · arXiv ↗ · more like this ·

The Internet has become a critical communication infrastructure for citizens to organize protests and express dissatisfaction with their governments. This fact has not gone unnoticed, with governments clamping down on this medium via censorship, and circumvention researchers working to stay one step ahead. In this paper, we explore a promising new avenue for covert channels: real-time strategy-video games. Video games have two key features that make them attractive cover protocols for censorship circumvention. First, due to the popularity of gaming platforms such as Steam, there are a lot of different video games, each with their own protocols and server infrastructure. Users of video-game-based censorship-circumvention tools can therefore diversify across many games, making it difficult for the censor to respond by simply blocking a single cover protocol. Second, games in the same…

Engineering a high-performance GPU B-Tree

Muhammad A. Awad, Saman Ashkiani, Rob Johnson +2 more

Computer Networks and Communications · eScholarship (California Digital Library) · 5 Feb 2019 · cited 47× · DOI ↗ · more like this ·

We engineer a GPU implementation of a B-Tree that supports concurrent queries (point, range, and successor) and updates (insertions and deletions). Our B-tree outperforms the state of the art, a GPU log-structured merge tree (LSM) and a GPU sorted array. In particular, point and range queries are significantly faster than in a GPU LSM (the GPU LSM does not implement successor queries). Furthermore, B-Tree insertions are also faster than LSM and sorted array insertions unless insertions come in batches of more than roughly 100k. Because we cache the upper levels of the tree, we achieve lookup throughput that exceeds the DRAM bandwidth of the GPU. We demonstrate that the key limiter of performance on a GPU is contention and describe the design choices that allow us to achieve this high performance.

Vector Quotient Filters

Prashant Pandey, Alex Conway, Joe Durie +3 more

Computer Networks and Communications · 9 Jun 2021 · cited 39× · DOI ↗ · more like this ·

Today's filters, such as quotient, cuckoo, and Morton, have a trade-off between space and speed; even when moderately full (e.g., 50%-75% full), their performance degrades nontrivially. The result is that today's systems designers are forced to choose between speed and space usage. In this paper, we present the vector quotient filter (VQF). Locally, the VQF is based on Robin Hood hashing, like the quotient filter, but uses power-of-two-choices hashing to reduce the variance of runs, and thus offers consistent, high throughput across load factors. Power-of-two-choices hashing also makes it more amenable to concurrent updates, compared to the cuckoo filter and variants. Finally, the vector quotient filter is designed to exploit SIMD instructions so that all operations have O (1) cost, independent of the size of the filter or its load factor. We show that the vector quotient filter is 2×…

Fixing races for fun and profit: how to abuse atime

Nikita Borisov, Rob Johnson, Naveen Sastry +1 more

Artificial Intelligence · USENIX Security Symposium · 31 Jul 2005 · cited 38× · OpenAlex ↗ · more like this ·

Dean and Hu proposed a probabilistic countermeasure to the classic access(2)/open(2) TOCTTOU race condition in privileged Unix programs [4]. In this paper, we describe an attack that succeeds with very high probability against their countermeasure. We then consider a stronger randomized variant of their defense and show that it, too, is broken. We conclude that access(2) must never be used in privileged Unix programs. The tools we develop can be used to attack other filesystem races, underscoring the importance of avoiding such races in secure software. 1

Health impacts of changes in travel patterns in Greater Accra Metropolitan Area, Ghana

Leandro García, Rob Johnson, Alex Johnson +8 more

Transportation · Environment International · 17 Jun 2021 · cited 36× · DOI ↗ · more like this ·

BACKGROUND: Health impact assessments of alternative travel patterns are urgently needed to inform transport and urban planning in African cities, but none exists so far. OBJECTIVE: To quantify the health impacts of changes in travel patterns in the Greater Accra Metropolitan Area, Ghana. METHODS: We estimated changes to population exposures to physical activity, air pollution, and road traffic fatality risk and consequent health burden (deaths and years of life lost prematurely - YLL) in response to changes in transportation patterns. Five scenarios were defined in collaboration with international and local partners and stakeholders to reflect potential local policy actions. RESULTS: Swapping bus and walking trips for car trips can lead to more than 400 extra deaths and 20,500 YLL per year than travel patterns observed in 2009. If part of the rise in motorisation is from motorcycles…

Real-time CORBA

Bhavani Thuraisingham, Peter Kortmann, Rob Johnson +3 more

Hardware and Architecture · IEEE Transactions on Parallel and Distributed Systems · 2000 · cited 35× · DOI ↗ · more like this ·

This paper presents a survey of results in developing Real-Time CORBA, a standard for real-time management of distributed objects. This paper includes background on two areas that have been combined to realize Real-Time CORBA: the CORBA standards that have been produced by the international Object Management Group; and techniques for distributed real-time computing that have been produced in the research community. The survey describes major RT CORBA research efforts, commercial development efforts, and standardization efforts by the Object Management Group.

Cache-adaptive algorithms

Michael A. Bender, Roozbeh Ebrahimi, Jeremy T. Fineman +3 more

Computer Networks and Communications · Symposium on Discrete Algorithms · 5 Jan 2014 · cited 33× · DOI ↗ · more like this ·

We introduce the cache-adaptive model, which generalizes the external-memory model to apply to environments in which the amount of memory available to an algorithm can fluctuate. The cache-adaptive model applies to operating systems, databases, and other systems where the allocation of memory to processes changes over time. We prove that if an optimal cache-oblivious algorithm has a particular recursive structure, then it is also an opti-mal cache-adaptive algorithm. Cache-oblivious algorithms having this form include Floyd-Warshall all pairs shortest paths, naı̈ve recursive matrix multiplication, matrix trans-pose, and Gaussian elimination. While the cache-oblivious sorting algorithm Lazy Funnel Sort does not have this re-cursive structure, we prove that it is nonetheless optimally cache-adaptive. We also establish that if a cache-oblivious algorithm is optimal on “square ”…

File systems fated for senescence? nonsense, says science!

Alex Conway, Ainesh Bakshi, Yizheng Jiao +8 more

Computer Networks and Communications · File and Storage Technologies · 27 Feb 2017 · cited 32× · OpenAlex ↗ · more like this ·

File systems must allocate space for files without knowing what will be added or removed in the future. Over the life of a file system, this may cause suboptimal file placement decisions which eventually lead to slower performance, or aging. Traditional file systems employ heuristics, such as collocating related files and data blocks, to avoid aging, and many file system implementors treat aging as a solved problem. However, this paper describes realistic as well as synthetic workloads that can cause these heuristics to fail, inducing large performance declines due to aging. For example, on ext4 and ZFS, a few hundred git pull operations can reduce read performance by a factor of 2; performing a thousand pulls can reduce performance by up to a factor of 30. We further present microbenchmarks demonstrating that common placement strategies are extremely sensitive to file-creation…

Language of Vandalism: Improving Wikipedia Vandalism Detection via Stylometric Analysis

Manoj Harpalani, Michael Hart, SUSHMITA SINGH +2 more

Communication · Meeting of the Association for Computational Linguistics · 19 Jun 2011 · cited 32× · OpenAlex ↗ · more like this ·

Community-based knowledge forums, such as Wikipedia, are susceptible to vandalism, i.e., ill-intentioned contributions that are detrimental to the quality of collective intelligence. Most previous work to date relies on shallow lexico-syntactic patterns and metadata to automatically detect vandalism in Wikipedia. In this paper, we explore more linguistically motivated approaches to vandalism detection. In particular, we hypothesize that textual vandalism constitutes a unique genre where a group of people share a similar linguistic behavior. Experimental results suggest that (1) statistical models give evidence to unique language styles in vandalism, and that (2) deep syntactic patterns based on probabilistic context free grammars (PCFG) discriminate vandalism more effectively than shallow lexicosyntactic patterns based on n-grams. 1

Write-Optimized Skip Lists

Michael A. Bender, Martı́n Farach-Colton, Rob Johnson +4 more

Artificial Intelligence · OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information) · 9 May 2017 · cited 19× · DOI ↗ · more like this ·

The skip list is an elegant dictionary data structure that is commonly deployed in RAM. A skip list with N elements supports searches, inserts, and deletes in O(log N) operations with high probability (w.h.p.) and range queries returning K elements in O(log N + K) operations w.h.p.

SplinterDB and Maplets: Improving the Tradeoffs in Key-Value Store Compaction Policy

Alex Conway, Martı́n Farach-Colton, Rob Johnson

Computer Networks and Communications · Proceedings of the ACM on Management of Data · 26 May 2023 · cited 18× · DOI ↗ · more like this ·

A critical aspect of modern key-value stores is the interaction between compaction policy and filters. Aggressive compaction reduces the on-disk footprint of a key-value store and can improve query performance, but can reduce insertion throughput because it is I/O and CPU expensive. Filters can mitigate the query costs of lazy compaction, but only if they fit in RAM, limiting the scalability of queries with lazy compaction. And, with fast storage devices, the CPU costs of querying filters in a lazy compacting system can be significant. In this work, we present Mapped SplinterDB, a key-value store that achieves excellent insertion performance, query performance, space efficiency, and scalability by replacing filters with maplets, space-efficient data structures that act as lossy maps with false positives. Critically, we use quotient maplets, which can be merged and resized without access…

Usable Privacy Controls for Blogs

Michael Hart, Claude Castille, Rob Johnson +1 more

Sociology and Political Science · 2009 · cited 18× · DOI ↗ · more like this ·

Web 2.0 applications such as blogs, wikis and social networking sites have challenging privacy issues. Many users are unaware that search engines index personal information from these sites and offer public access to collected data. As a consequence, privacy invasions are rampant. In this paper, we demonstrate that tag-based privacy policies are a usable and flexible privacy control method for Web 2.0 applications. Content owners express their privacy policy in terms of tags on content objects; the system then applies the policy to objects based on the tags assigned to them. We implemented tag-based privacy controls as a plugin to the WordPress blogging system, and conducted a user study to measure whether users could efficiently address real-world privacy concerns using tag-based policies. Despite limited time and training, a third of the participants chose the tag-based policy tools.…

The Changing Character of War

Rob Johnson

Political Science and International Relations · The RUSI Journal · 2 Jan 2017 · cited 16× · DOI ↗ · more like this ·

Several fashionable fallacies affect current assessments of the character of conflict. It is always difficult to discern what changes will affect the strategic level, especially when attention is focused on particular wars and technological novelties. In this article, Rob Johnson argues that an honest appraisal of what is unchanging offers one route to that evaluation. Strategically, revisionist geopolitics, an electronic arms race between encryption and access, and a greater focus on protecting populations and national wealth are anticipated. After a period when the West could intervene across the globe at will, it appears that escalatory, existential threats are back, demanding a strategic solution.

Anti-Persistence on Persistent Storage

M. A. Bender, Jonathan W. Berry, Rob Johnson +6 more

Computer Networks and Communications · HAL (Le Centre pour la Communication Scientifique Directe) · 15 Jun 2016 · cited 16× · DOI ↗ · more like this ·

We present history-independent alternatives to a B-tree, the primary indexing data structure used in databases. A data structure is history independent (HI) if it is impossible to deduce any information by examining the bit representation of the data structure that is not already available through the API. We show how to build a history-independent cache-oblivious B-tree and a history-independent external-memory skip list. One of the main contributions is a data structure we build on the way---a history-independent packed-memory array (PMA). The PMA supports efficient range queries, one of the most important operations for answering database queries.