Graham Steel

Research Fellow, INRIA

Publications

From the LSV server or from DBLP.

Slides

Research

My research concerns formal analysis of information security problems. In particular, I'm interested in security APIs, security protocols, and security of embedded systems. Some highlights:

Tookan - a tool for analysing PKCS#11 security devices
Design of a new Key Management API for cryptographic devices, intended to address some of the shortcomings of legacy designs, with security proofs.
Cash machine PIN verification security, work which featured in an article on the Wired Magazine Threat Level blog.
Verification experiments on the API of the Trusted Platform Module (TPM): first on the authentication mechanisms, presented at FAST 2010, then on the use of Program Control registers (PCRs), presented at CSF 2011.

Events

Analysis of Security APIs workshop series - co-organiser with Mike Bond.
Dagstuhl Seminar on security APIs, Novermber 2012, co-organiser with Mike Bond, Riccardo Focardi and Sibylle Fröschle.
ACM SAC Security Track 2012, Programme Committee member.
Alan Turing Year workshop Is Cryptographic Theory Practically Relevant?, Cambridge, 31 January - 2 February 2012, Invited speaker.
FMATS, workshop on Formal Methods and tools for Security, Cambridge, December 7-8 2011, Invited Speaker
Santa's Crypto in Prague on December 1st 2011, Invited speaker
Course at Tsinghua University, Beijing, in August 2011, Invited lecturer
SSTIC 2011 in Rennes June 9th 2011, Invited speaker.
CryptoForma 2011, Programme Committee member.
TOSCA 2011, Programme Committee member.
CSF 2010 at FLoC, General Chair.

Book

Mathematical and Algorithmic Foundations of the Internet, by Fabrizio Luccio, Linda Pagli, and me. CRC Press, July 2011.