Maliheh Shirvanian

Research Scientist, System Security

Focus areas: Authentication, System Security, User-Centered Security

Malileh Shirvanian, System Security.

Biography

Maliheh is a research scientist in the System Security team at Visa Research. Her main research interests are authentication, system security, and user-centered security. She has several publications in top venue security conferences such as CCS and NDSS.

She received her Ph.D. in 2018 from the University of Alabama at Birmingham where she was affiliated with the Security and Privacy In Emerging computing and networking Systems (SPIES) research group. She was the recipient of UAB College of Arts and Sciences 2018 Dean's Award and UAB Departmental Outstanding Student Award. She received her Master of Science in Computer Architecture in 2006 from Shahid Beheshti University and her Bachelor of Science degree in Computer Hardware in 2003 from University of Tehran. Prior to persuing a career in science and research, she was an engineer with over 10 years of hands-on experience managing and engineering networking and security projects.

Currently, she is working on improving the security of usable authentication schemes.

Publications

Referenced Publications

1. M. Shirvanian, N. Saxena, and D. Mukhopadhyay, "Short Voice Imitation Man-in-the-Middle Attacks on Crypto Phones: Defeating Humans and Machines", Journal of Computer Security, 2018.

2. S. Jarecki, H. Krawczyk, M. Shirvanian, N. Saxena,"Two-Factor Authentication with End-to-End Password Security", International Conference on Practice and Theory of Public Key Cryptography (PKC), to appear in 2018.

3. M. Shirvanian, N. Saxena, and J. J. George, "On the Pitfalls of End-to-End Encrypted Communications: A Study of Remote Key-Fingerprint Verification", Annual Computer Security Applications Conference (ACSAC) - AR 21.4%, 2017.

4. M. Shirvanian and N. Saxena, "CCCP: Closed Caption Crypto Phones to Resist MITM Attacks, Human Errors and Click-Through", ACM Conference on Computer and Communications Security (CCS) - AR 18%, 2017.

5. M. Shirvanian, S. Jarecki, H. Krawczyk and N. Saxena, "SPHINX: A Password Store that Perfectly Hides Passwords from Itself", IEEE International Conference on Distributed Computing Systems (ICDCS), AR 16%, 2017.

6. B. Shrestha, M. Shirvanian, P. Shrestha, N. Saxena, "The Sounds of the Phones: Dangers of Zero-Effort Second Factor Login based on Ambient Audio", ACM Conference on Computer and Communications Security (CCS) - AR 16%, 2016.

7. S. Jarecki, H. Krawczyk, M. Shirvanian, N. Saxena, "Device-Enhanced Password Protocols with Optimal OnlineOffline Protection", ACM Asia Conference on. Computer and Communications Security (ASIACCS) - AR 20.9%, 2016.

8. M. Shirvanian and N. Saxena, "On the Security and Usability of Crypto Phones", Annual Computer Security Applications Conference (ACSAC) - AR 24.4%, 2015.

9. D. Mukhopadhyay, M. Shirvanian, N. Saxena, "All Your Voices Are Belong to Us: Stealing Voices to Fool Humans and Machines", The European Symposium on Research in Computer Security (ESORICS) - AR 21%, 2015.

10. M. Shirvanian, N. Saxena, "Wiretapping via Mimicry: Short Voice Imitation Man-in-the-Middle Attacks on Crypto Phones", ACM Conference on Computer and Communications Security (CCS) - AR 19.5%, 2014.

11. M. Shirvanian, S. Jarecki, N. Saxena, and N. Nathan, "Two-Factor Authentication Resilient to Server Compromise Using Mix-Bandwidth Devices.", Network and Distributed System Security Symposium (NDSS) - AR 18.6%, 2014

Patents

  1. Access control for named domain networking. A Mohaisen, M Shirvanian, GC Murray - US Patent App. 14/868,594, 2015.
  2. Device-Enhanced Password Protocols with Optimal Offline-Online Protection and Application. Nitesh Saxena, Hugo Krawczyk, Stanislaw Jarecki and Maliheh Shirvanian. U.S. Provisional Application No. 62421660, filed November, 2016.


Back to Visa Research page