Patrick Drew McDaniel
Associate Professor
Office : 360A IST Building Computer Science and Engineering Department
Pennsylvania State University University Park, PA 16802 (814) 863-3599
email: mcdaniel@cse.psu.edu
Homepage: http://www.patrickmcdaniel.org/
Academic Appointments
Professor, Pennsylvania State University
University Park, Pennsylvania May 2011-Present
Associate Professor,
Pennsylvania State University
University Park, Pennsylvania July 2007-May 2011
Hartz Family Career Development Assistant Professor,
Pennsylvania State University
University Park, Pennsylvania August 2004-June 2007
Adjunct Professor, Stern School of Business, New York
University
New York, NY, January 2003-Present
Research Assistant, University of Michigan
Ann Arbor, Michigan, September 2000-August 2001
Research Assistant, NASA Kennedy Space Center
Fellowship
Ann Arbor, Michigan, 1997-2000
Research Assistant, University of Michigan, Ann Arbor, MI,
1996-1997
Student on the NSA funded "Design and Implementation of Secure
Mobile Agent Services" research project.
Education
University of Michigan, Ann Arbor
Ph.D., Computer Science and Engineering, October 2001
Dissertation: Policy Management in Secure Group Communication
Advisor: Dr. Atul Prakash
Ball State University
M.S., Computer Science, June 1991
Ohio University
B.S., Computer Science, August 1989
Industrial Appointments
Senior Research Staff Member, AT&T Labs - Research,
Florham Park, NJ, September 2001-August 2004
Research staff member working in security management, network
security, multiparty communication, networking, web technologies,
and distributed systems.
Research Intern, AT&T Labs - Research, Florham Park,
NJ, Summer 1999
Working with Aviel Rubin, investigated the design space and
practical applications of certificate revocation
technologies.
Selected Publications
Patrick Traynor, Patrick McDaniel, and Thomas La Porta, Security for Telecommunications Networks.
Springer, Series: Advances in Information Security, July, 2008. ISBN: 978-0-387-72441-6.
Kevin Butler, Toni Farley, Patrick McDaniel, and J. Rexford, A Survey of BGP Security Issues and Solutions.
Proceedings of the IEEE, 2010(1):100-122, January, 2010.
Kevin Butler, Sunam Ryu, Patrick Traynor, and Patrick McDaniel, Leveraging Identity-based Cryptography for Node ID Assignment in Structured P2P Systems.
IEEE Transactions on Parallel and Distributed Systems (TPDS), 20(12):1803-1815, December, 2009.
Patrick Traynor, William Enck, Patrick McDaniel, and Thomas La Porta, Mitigating Attacks on Open Functionality in SMS-Capable Cellular Networks.
IEEE/ACM Transactions on Networking (TON), 17(1):40-53, 2009.
Patrick Traynor, William Enck, Patrick McDaniel, and Thomas La Porta, Exploiting Open Functionality in SMS-Capable Cellular Networks.
Journal of Computer Security, 16(6):713-742, Febraury, 2009.
Patrick Traynor, Michael Chien, Scott Weaver, Boniface Hicks, and Patrick McDaniel, Non-Invasive Methods for Host Certification.
ACM Transactions on Information and System Security (TISSEC), 11(3), 2008.
William Enck, Machigar Ongtang, and Patrick McDaniel. On Lightweight Mobile Phone App Certification.
Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS), pages 235-245, November 2009.
Patrick Traynor, Michael Lin, Machigar Ongtang, Vikhyath Rao, Trent Jaeger, Thomas La Porta, and Patrick McDaniel. On Cellular Botnets: Measuring the Impact of Malicious Devices on a Cellular Network Core.
Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS), pages 223-234, November 2009.
Student Advising
Past PhD Students
Thomas Moyer, Pennsylvania State University,
Summer 2011, now Technical Staff, Massachusetts Institute of Technology-Lincoln LabsWilliam Enck, Pennsylvania State University,
Spring 2011, now Assistant Professor, North Carolina State UniversityKevin Butler, Pennsylvania State University,
Summer 2010, now Assistant Professor, University of OregonMachigar Ongtang, Pennsylvania State University,
Summer 2010, now Assistant Professor, Dhurakij Pundit UniversityPatrick Traynor, co-advisor, Pennsylvania State University,
Spring 2008, now Assistant Professor, Georgia Institute of TechnologyFr. Boniface Hicks, Pennsylvania State University,
Fall 2007, now Assistant Professor, St. Vincent College
Current PhD Students
Steve McLaughlin, Pennsylvania State University,
Spring 2013Devin Pohly, Pennsylvania State University,
Spring 2014Damien Octeau, Pennsylvania State University,
Spring 2014
Past Masters Students
Steve McLaughlin, M.S. Pennsylvania State University,
Spring 2011Sergei Miadzvezhanka, M.S. Pennsylvania State University,
Spring 2011Adam Delozier, M.S. Pennsylvania State University,
Spring 2011Juliet Uhlott, M.Eng. Pennsylvania State University,
Fall 2010Damien Octeau, M.S. Pennsylvania State University,
Spring 2010Thomas Moyer, M.S. Pennsylvania State University,
Spring 2009Luke St. Clair, M.S. Pennsylvania State University,
Summer 2008Lisa Johansen, M.S. Pennsylvania State University,
Spring 2008Sunam Ryu, M.S. Pennsylvania State University,
Spring 2007Dhananjay Bapat, M.S. Pennsylvania State University (Electrical Engineering),
Fall 2006Jennifer Plasterr, M.Eng. Pennsylvania State University,
Summer 2006Adam Kerr, M.Eng. Pennsylvania State University,
Fall 2006William Enck, M.S. Pennsylvania State University,
Spring 2006Wesam Lootah, M.S. Pennsylvania State University,
Spring 2006Jon Hansford, M.Eng. Pennsylvania State University,
Fall 2005John van Bremer, M.Eng. Pennsylvania State University,
Spring 2005
Past Undergraduate Honors Students
Tim Misiak, Schreyer Honors College, Pennsylvania State University,
Spring 2007Kiyan Ahmadizadeh, Schreyer Honors College, Pennsylvania State University,
Spring 2006
Collaborators (last 48 months, alphabetical)
Last 48 months, alphabetical by last name
-
William Aiello,
Chaitrali Amrutkar,
Farooq Anjum,
Adam Aviv,
David Balzarotti,
Greg Banks,
Dhananjay Bapat,
Matt Blaze,
Kevin Borders,
Kevin Butler,
Pavol Cerny,
Swarat Chaudhuri,
Michael Chien,
Heesook Choi,
Byung-gon Chun,
Sandy Clark,
Marco Cova,
Eric Cronin,
Adam Delozier,
Toby Ehrenkranz,
William Enck,
Toni Farley,
Viktoria Felmetsger,
Abhrajit Ghosh,
Peter Gilbert,
Albert Greenberg,
Boniface Hicks,
Harri Hursti,
Trent Jaeger,
Guruprasad Jakka,
Lisa Johansen,
Jaeyeon Jung,
Shyam K. Gupta,
Richard Kemmerer,
David King,
Thomas La Porta,
Jun Li,
Michael Lin,
Wesam Lootah,
Joseph Lorenzo Hall,
Stephen McLaughlin,
Sergei Miadzvezhanka,
Tim Misiak,
Fabian Monrose,
Thomas Moyer,
Anmol N. Sheth,
Bashar Nuseibeh,
Damien Octeau,
Machigar Ongtang,
Landon P. Cox,
Birgit Pfitzmann,
Matthew Pirretti,
Jennifer Plasterr,
Dmitry Podkuiko,
Sophie Qiu,
Laura Quilter,
Padma Raghavan,
Vikhyath Rao,
Sanjay Rao,
Karl Rauscher,
J. Rexford,
Thomas Richardson,
William Robertson,
Hosam Rowaihy,
Michael Rowell,
Avi Rubin,
Sandra Rueda,
Sunam Ryu,
Joshua Schiffman,
Panagiotis Sebos,
Shubho Sen,
Gaurav Shah,
Christopher Shal,
Micah Sherr,
Jaesheung Shin,
Jun Shu,
Radu Sion,
Adam Smith,
Sylke Spoerel,
Yogesh Sreenivasan,
Anusha Sriraman,
Luke St. Clair,
Yu-Wei Sung,
Patrick Traynor,
Fredrik Valeur,
Giovanni Vigna,
Hayawardh Vijayakumar,
Hayawardh Vijayakumar Trent Jaeger,
Brent Waters,
Scott Weaver,
Marianne Winslett,
Erez Zadok
Research Support
co-PI, TC: Medium: Collaborative Research: Building Trustworthy Applications for Mobile Devices, NSF (CNS), $350,000, (8/1/2011-7/31/2014).
co-PI, Closing the Loop on Security Testing and Security Requirements, Institute for CyberScience and The Penn State Institutes of Energy and the Environment, $31,000, (8/1/2011-7/31/2012).
co-PI, Managing Security and Vulnerability Risks in the Smart Grid, Institute for CyberScience and The Penn State Institutes of Energy and the Environment, $31,000, (08/1/09-12/16/09).
PI, Smart Grid Cyber Security Research, Lockheed Martin, $250,000, (1/1/10-12/16/10).
PI, NSF HECURA: Collaborative Research: Secure Provenance in High-End Computing Systems, NSF (CCF), $307,073, (08/1/09-8/31/13).
PI, TC: Medium: Collaborative Research: Security Services in Open Telecommunications Networks, NSF (CNS), $594,941, (08/01/09-08/01/12).
PI, Characterizing and Mitigating Wireless Systems Vulnerabilities, Defense University Research Instrumentation Program (DURIP), Army Research Office (ARO), $150,000, (05/22/09-02/28/11).
PI, Integrity Management for ICT Development, Bell Labs Network Reliability and Security Office, Alcatel-Lucent , $100,000, (11/30/08-11/30/09).
PI, Utility Grid Automation and Risk Management, Lockheed Martin, $400,000, (11/30/08-12/16/09).
PI, EVEREST: Evaluation and Validation of Election-Related Equipment, Standards, and Testing, The State of Ohio, $332,066, (10/01/07-01/07/08).
Co-PI, Protecting Services for Emerging Wireless Telecommunications Infrastructure, NSF (CNS), $658,032, (09/01/07-08/31/11).
Co-PI, Security for Internet/IMS Convergence, Cisco, $100,000, (9/1/07-8/31/08).
Co-PI, System-Wide Information Flow Enforcement, BAA 06-11-IFKA, "National Intelligence Community Enterprise Cyber Assurance Program", $496,000, (2/1/07-8/1/08).
PI, CAREER: Realizing Practical High Assurance through Security-Typed Information Flow Systems, NSF (CNS), $400,000, (1/2/07-1/1/12).
Co-PI, CT-IS: Shamon: Systems Approaches for Constructing Distributed Trust, NSF (CNS), $400,000, (9/1/06-8/31/10).
Co-PI, Center of Excellence, Ben Franklin Technology Partners, $75,000, (01/01/07-07/01/07).
Co-PI, Exploiting Asymmetry in Performance and Security Requirements for I/O in High-end Computing, NSF (CFF), $699,690, (9/1/06-8/31/10).
PI, Automated Configuration with the PRESTO Network Management Platform, AT\&T, $50,000, (6/1/06-5/31/07).
PI, Testbed for Network-Scale Countermeasure Evaluation, Cisco, $45,938, (9/1/05-8/31/06).
PI, Collaborative Research: CT-T: Flexible, Decentralized
Information-flow Control for Dynamic Environments, NSF (CFF), $234,585, (8/1/05-7/31/08).
PI, Extending Developer Tools for Security-typed Languages, Software Engineering Research Center, Sponsor: Motorola, $23,200, (7/1/05-6/30/06).
PI, Student Travel Support for ACM SIGCOMM 2005 Conference, NSF, $19,620, (4/1/05-3/31/06).
Co-PI, NSF CyberTrust: Collaborative Research: Testing and
Benchmarking Methodologies for Future Network Security Mechanisms
(EMIST), NSF/DHS, $363,000, (8/1/04-8/31/06).
Honors
Best Paper, 25th Annual Computer Security Applications Conferencewith advisees Machigar Ongtang, Stephen McLaughlin, and William Enck, December 2009
Faculty Marshal, College of Engineeringselected by student marshals for contributions to undergraduate education, leads procession into graduation ceremony
PSES Outstanding Research Awardhighly selective award by the Penn State Engineering Society given to faculty in the College of Engineering who have made significant contributions to knowledge in their field
Google Security and Product Safety Acknowledgementin recognition of efforts in improving the security of Google Android cellular phone operating system.
Commendation for Exceptional Leadership and Achievement in recognition of efforts as PI of the EVEREST study, from Ohio Secretary of State Jennifer Brunner, August 2008
IEEE Technical Committee on Security and Privacy Outstanding Community Service Awardin recognition for technical program management of the IEEE Security and Privacy symposia, August 2008
National Science Foundation CAREER AwardFaculty early career development grant, August 2007
Penn State Computer Science and Engineering Outstanding Teaching AwardGiven to best teacher in the department as selected by students, March 2007
ACM Certificate of Meritorious ServiceCertificate acknowledging exemplary service as associate editor of ACM Transactions on Internet Technologies, April 2007
Best Student Paper, 22nd Annual Computer Security Applications Conferenceas advisor, with Boniface Hicks and Kiyan Ahmadizadeh, December 2006
Conference Keynote AddressesSecond International Conference on Information Systems Security (ICISS 2006), Kolkata, India, December 2006
Eighth International Conference on Information and Communications Security (ICICS '06), Raleigh, North Carolina, December 2006
Best Paper, Innovations and Commercial Applications of Distributed Sensor Networks SymposiaAwarded for best paper in conference, October 2005.
Hartz Family Career Development ProfessorEndowed Professorship, Pennsylvania State University, Fall 2004-2007
Bang for the Buck Award, DARPA Dynamic Coalitions ProgramAward for most feature-rich/useful software system, April 2002
National Aeronautics and Space Administration, Kennedy Space Center FellowshipResearch Fellowship, September 1997 - August 2000
Electrical Engineering and Computer Science Summer Fellowship AwardUniversity of Michigan, June 1997
Dean's Citation for Perfect Academic RecordBall State University, June 1991
Professional Service
Editorial Positions, Panels, and Boards
ACM Transactions on Internet Technology (TOIT)Editor in Chief--September 2007-presentAssociate Editor--April 2004-August 2007
IEEE Security and Privacy MagazineArea Editor, Secure Systems--January 2009-present
IEEE Transactions on Computers (TC)Associate Editor--August 2008-present
ACM Transactions on Information and System Security (TISSEC)Associate Editor--May 2007-present
IEEE Transactions on Software Engineering (TSE)Associate Editor--January 2007-presentGuest Editor, Special Issue on Topics in Security--Fall 2006-present
Elsevier Journal of Computer NetworksGuest Editor, Special Issue on Web Security--Fall 2003-Spring 2005
Encyclopedia of Cryptography and SecurityEditorial Board Member--Fall 2002-Spring 2005
Conference and Workshop Participation
IEEE Symposium on Security and PrivacyTechnical Program Co-Chair--2007, 2008Program Committee--2011, 2012
USENIX Security SymposiumProgram Chair--2005Invited Talks Chair--2006, 2009Program Committee--2001, 2003, 2004, 2007
ACM Conference on Computer and Communications Security (CCS)Program Committee--2006, 2008, 2009, 2010Industry and Government Track Chair--2004, 2007Program Committee-Industry and Government Track--2003, 2005, 2006
Computer Security Foundations Symposium (CSF)Network and Distributed System Security Symposium (NDSS)Program Committee--2009, 2012
European Symposium on Research in Computer Security
(ESORICS)Program Committee--2004, 2005
Annual Computer Security Applications Conference (ACSAC)Program Committee--2004, 2005, 2006, 2007, 2010, 2011
International Conference On Distributed Computing Systems (ICDCS)IEEE GLOBECOMACM Annual International Conference on Mobile Computing and Networking (MobiCom)Program Committee--2010, 2011
ACM Annual International Conference on Mobile Systems, Applications, and Services (MobiSys)USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET)ACM Workshop TPC on Security and Privacy in Smartphones and Mobile DevicesUSENIX Workshop on Hot Topics in Security (HotSec)Program Chair--2011Program Committee--2007, 2008, 2009, 2010
ACM Symposium on Access Control Models and Technologies
(SACMAT)Program Committee--2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2011
ACM Conference on ASIA Computer and Communications Security (ASIA CCS)ACM Conference on Electronic Commerce (ACM EC)International Conference on Applied Cryptography and
Network Security (ACNS)ACM Symposium on Applied Computing (SAC)Program Committee, Information Security Research
and Applications --2010
USENIX Annual Technical ConferenceProgram Committee--2002, 2003
World Wide Web Conference (WWW)Security and Privacy Track Vice-Chair--2005Security and Privacy Track Deputy Vice-Chair--2004Program Committee--2003, 2007, 2010, 2011
IEEE INFOCOMACM Annual Digital Forensics ConferenceFinancial CryptographyGeneral Chair--2006Program Committee--2007, 2008, 2012
International Conference on Information Systems
Security (ICISS)Steering Committee--2007Program Co-Chair--2007Program Committee--2005, 2006, 2009, 2011
International Conference on Parallel ProcessingProgram Committee-Network Security--2003
ACM SIGCOMM Workshop on Networking, Systems, Applications on Mobile Handhelds (MobiHand)ACM Workshop on Cloud Computing SecurityInternational Workshop on Security in Software EngineeringFounding General Co-Chair--2007
USENIX Workshop On Offensive Technology (WOOT)ACM Storage Security and Survivability WorkshopACM SIGCOMM Workshop on Internet Network ManagementProgram Committee--2006, 2007
Annual IFIP WG 11.3 Working Conference on Data and
Applications Security (DBSec)Program Committee--2006, 2007, 2008
International Conference on Emerging Trends in Information
and Communication Security (ETRICS)Workshop on Workshop on Telecommunications Infrastructure Protection and Security
(TIPS)International Workshop on Security (IWSEC)International Workshop on Systems and Network Security
(SNS)Program Committee--2005, 2006
IEEE ICNP Workshop on Secure Network Protocols
(NPSec)Program Committee--2005, 2006
The Five Nines Workshop on Designing and Managing High Availability Internet Services (INM 2007)
Other Professional Activities
IEEE Computer Society's Technical Committee on Security and PrivacyMember, Technical Guideline Development Committee, U.S. Election Assistance CommissionNatural Sciences and Engineering Research Council of Canada, Internetworked Systems Security NetworkScientific Advisory Board--2008-present
Technology for Cyber Physical System Security Forum, Cyber Security Research and Development, (Senators Joseph I. Lieberman and Susan Collins, Chairs)Speaker and Participant--September 2008
ACM Student Organization AdvisorPenn State Computer Science and Engineering Department--2006-present
The Technology CollaborativePenn State Representative (Pennsylvania economic development consortium)--2007-2008
President's National Security Telecommunications Advisory PanelMember, Next Generation Networks Task Force--2005-present
Abusable Technologies Awareness Center (ATAC)Panelist--October 2003-present
ATT IP Services Security CouncilMember--June 2003-August 2004
ATT Internet Intellectual Property Review TeamMember--September 2001-May 2002
ACM SIGCOMM Student Travel Grant CommitteeNational Science Foundation, Grant Review PanelMember--2003, 2004, 2006, 2007, 2009
Department of Energy SciDAC Review Panel
Industrial Experience
Software Developer, Applied Innovation, Inc., Columbus, OH,
1994-1995
Served as lead developer of the AppliedView network
management system, a hardware configuration and monitoring
platform.
Project Manager, Primary Access Corporation, San Diego, CA,
1993-1994
Technical lead for server-based network management platform for
rack-mounted network-mediation devices.
Software Developer, Primary Access Corporation, San
Diego, CA, 1991-1993
Developed UNIX-based server application that coordinates the
operation of remote network management terminals.
Software Developer, Integrated Technologies, Inc., Muncie,
IN, 1989
Worked as a C programmer responsible for development and
maintenance of installation code for statistical process control
system.
Affiliations
- Association for Computing Machinery (ACM)
- The Institute of Electrical and Electronics Engineers (IEEE), Senior Member
- USENIX Advanced Computing Systems Association