Santiago Torres-Arias

According to our database, Santiago Torres-Arias authored at least 27 papers between 2014 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

Establishing Provenance Before Coding: Traditional and Next-Gen Signing.

Taylor R. Schorlemmer, Ethan H. Burmane, Kelechi G. Kalu, Santiago Torres-Arias, James C. Davis

CoRR, 2024

DiVerify: Diversifying Identity Verification in Next-Generation Software Signing.

Chinenye L. Okafor, James C. Davis, Santiago Torres-Arias

CoRR, 2024

An Industry Interview Study of Software Signing for Supply Chain Security.

Kelechi G. Kalu, Tanya Singla, Chinenye Okafor, Santiago Torres-Arias, James C. Davis

CoRR, 2024

SoK: A Defense-Oriented Evaluation of Software Supply Chain Security.

Eman Abu Ishgair, Marcela S. Melara, Santiago Torres-Arias

CoRR, 2024

Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors.

Taylor R. Schorlemmer, Kelechi G. Kalu, Luke Chigges, Kyung Myung Ko, Eman Abdul-Muhd Abu Isghair, Saurabh Baghi, Santiago Torres-Arias, James C. Davis

CoRR, 2024

Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors.

Taylor R. Schorlemmer, Kelechi G. Kalu, Luke Chigges, Kyung Myung Ko, Eman Abu Ishgair, Saurabh Bagchi, Santiago Torres-Arias, James C. Davis

Proceedings of the IEEE Symposium on Security and Privacy, 2024

Should Smart Homes Be Afraid of Evil Maids? : Identifying Vulnerabilities in IoT Device Firmware.

Austen Knapp, Emmanuel Wamuo, Minhajul Alam Rahat, Santiago Torres-Arias, Gedare Bloom, Yanyan Zhuang

Proceedings of the 14th IEEE Annual Computing and Communication Workshop and Conference, 2024

2023

Towards verifiable web-based code review systems.

Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos

J. Comput. Secur., 2023

A Viewpoint on Knowing Software: Bill of Materials Quality When You See It.

Santiago Torres-Arias, Daniel E. Geer, John Speed Meyers

IEEE Secur. Priv., 2023

A Viewpoint on Software Supply Chain Security: Are We Getting Lost in Translation?

Marcela S. Melara, Santiago Torres-Arias

IEEE Secur. Priv., 2023

Rust for Embedded Systems: Current State, Challenges and Open Problems.

Ayushi Sharma, Shashank Sharma, Santiago Torres-Arias, Aravind Machiry

CoRR, 2023

Preventing Supply Chain Vulnerabilities in Java with a Fine-Grained Permission Manager.

Paschal C. Amusuo, Kyle A. Robinson, Santiago Torres-Arias, Laurent Simon, James C. Davis

CoRR, 2023

Behind the Scenes: Uncovering TLS and Server Certificate Practice of IoT Device Vendors in the Wild.

Hongying Dong, Hao Shu, Vijay Prakash, Yizhe Zhang, Muhammad Talha Paracha, David R. Choffnes, Santiago Torres-Arias, Danny Yuxing Huang, Yixin Sun

Proceedings of the 2023 ACM on Internet Measurement Conference, 2023

Speranza: Usable, Privacy-friendly Software Signing.

Kelsey Merrill, Zachary Newman, Santiago Torres-Arias, Karen R. Sollins

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

SCORED '23: Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses.

Marcela S. Melara, Santiago Torres-Arias, Laurent Simon

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

2022

Bootstrapping Trust in Community Repository Projects.

Sangat Vaidya, Santiago Torres-Arias, Justin Cappos, Reza Curtmola

Proceedings of the Security and Privacy in Communication Networks, 2022

SoK: Analysis of Software Supply Chain Security by Establishing Secure Design Properties.

Chinenye Okafor, Taylor R. Schorlemmer, Santiago Torres-Arias, James C. Davis

Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, 2022

SCORED '22: ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses.

Santiago Torres-Arias, Marcela S. Melara, Laurent Simon

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

Sigstore: Software Signing for Everybody.

Zachary Newman, John Speed Meyers, Santiago Torres-Arias

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

2021

COLBAC: Shifting Cybersecurity from Hierarchical to Horizontal Designs.

Kevin Gallagher, Santiago Torres-Arias, Nasir D. Memon, Jessica Feldman

Proceedings of the NSPW '21: New Security Paradigms Workshop, Virtual Event, USA, October 25, 2021

2020

Towards adding verifiability to web-based Git repositories.

Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos

J. Comput. Secur., 2020

2019

in-toto: Providing farm-to-table guarantees for bits and bytes.

Santiago Torres-Arias, Hammad Afzali, Trishank Karthik Kuppusamy, Reza Curtmola, Justin Cappos

Proceedings of the 28th USENIX Security Symposium, 2019

Commit Signatures for Centralized Version Control Systems.

Sangat Vaidya, Santiago Torres-Arias, Reza Curtmola, Justin Cappos

Proceedings of the ICT Systems Security and Privacy Protection, 2019

2018

le-git-imate: Towards Verifiable Web-based Git Repositories.

Hammad Afzali, Santiago Torres-Arias, Reza Curtmola, Justin Cappos

Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018

2016

On Omitting Commits and Committing Omissions: Preventing Git Metadata Tampering That (Re)introduces Software Vulnerabilities.

Santiago Torres-Arias, Anil Kumar Ammula, Reza Curtmola, Justin Cappos

Proceedings of the 25th USENIX Security Symposium, 2016

Diplomat: Using Delegations to Protect Community Repositories.

Trishank Karthik Kuppusamy, Santiago Torres-Arias, Vladimir Diaz, Justin Cappos

Proceedings of the 13th USENIX Symposium on Networked Systems Design and Implementation, 2016

2014

PolyPasswordHasher: Improving Password Storage Security.

Santiago Torres-Arias, Justin Cappos

login Usenix Mag., 2014