Moti_Yung
Moti Yung
Israeli computer scientist
Mordechai M. "Moti" Yung is a cryptographer and computer scientist known for his work on cryptovirology and kleptography.
Moti Yung | |
---|---|
Alma mater | Columbia University |
Awards | |
Scientific career | |
Fields | |
Institutions | |
Thesis | Minimum-Knowledge Transfer Protocol (1988) |
Doctoral advisor | Zvi Galil |
Doctoral students | |
Yung earned his PhD from Columbia University in 1988 under the supervision of Zvi Galil.[1] In the past, he worked at the IBM Thomas J. Watson Research Center,[2] CertCo, RSA Laboratories, and Google.[3] In 2016, Yung moved from Google to Snap Inc.[4] Yung is currently a research scientist at Google.[5]
Yung is an adjunct senior research faculty member at Columbia University,[5] and has co-advised PhD students including Gödel Prize winner Matthew K. Franklin, Jonathan Katz, and Aggelos Kiayias.[1]
Yung research covers primarily the area of cryptography and its applications to information security and data privacy. He has worked on defining and implementing malicious (offensive) cryptography: cryptovirology[6] and kleptography,[7] and on various other foundational and applied fields of cryptographic research, including: user and entity electronic authentication,[8][9] information-theoretic security,[10][11] secure multi-party computation,[12][13][14][15] threshold cryptosystems,[16][17] and zero-knowledge proofs,[18][19][20]
Cryptovirology
In 1996, Adam L. Young and Yung coined the term cryptovirology to denote the use of cryptography as an attack weapon via computer viruses and other malware in contrast to its traditional protective role.[6] In particular, they described the first instances of ransomware using public-key cryptography.[21][22]
Kleptography
In 1996, Adam L. Young and Yung introduced the notion of kleptography[7] to show how cryptography could be used to attack host cryptosystems where the malicious resulting system with the embedded cryptologic tool in it resists reverse-engineering and cannot be detected by interacting with the host cryptosystem,[23][24][25][26][27] as an argument against cryptographic systems and devices given by an external body as "black boxes" as was the Clipper chip and the Capstone program.[28]
After the 2013 Snowden affair, the NIST was believed to have mounted the first kleptographic attack against the American Federal Information Processing Standard detailing the Dual EC DRBG,[29] essentially exploiting the repeated discrete logarithm based "kleptogram" introduced by Young and Yung.[30]
- In 2010 he was the annual Distinguished Lecturer of the International Association for Cryptologic Research at Eurocrypt.[31]
- In 2013 he became a fellow of the Association for Computing Machinery.[32]
- In 2014 he received the ESORICS (European Symposium on Research in Computer Security) Outstanding Research Award.[33]
- In 2014 he became a fellow of the International Association for Cryptologic Research.[34]
- In 2014 he received the ACM's SIGSAC Outstanding Innovation Award.[35]
- In 2015 he became an IEEE fellow.[36]
- In 2017 Yung became a fellow of the European Association for Theoretical Computer Science.[37]
- In 2018 Yung received the W. Wallace McDowell Award by the IEEE Computer Society.[38]
- In 2020 Yung received the Public Key Cryptography Conference's Test of Time Award for his 1998 paper[39] See.[40]
- In 2020 Yung received the IEEE Symposium on Security and Privacy's Test of Time Award for his 1996 paper[6] on Cryptovirology.[41]
- In 2021 Yung received the Women of the ENIAC Computer Pioneer Award[42]
- In 2023 Yung was elected to the American Academy of Arts and Sciences[43]
- In 2024 Yung received the IACR Test of Time Award for his 2009 paper[44] See[45]
- 1989: Universal one-way hash functions and their cryptographic applications (with M. Naor; ACM’s STOC).
- 1990: Public-key cryptosystems provably secure against chosen ciphertext attacks (with M. Naor; ACM’s STOC).
- 1991: How to withstand mobile virus attack (with Ostrovsky; ACM’s PODC).
- 1992: Multi-Receiver/Multi-Sender Network Security: Efficient Authenticated Multicast/Feedback (with Desmedt and Frankel; IEEE's INFOCOM 1992)
- 1999: Non-Interactive CryptoComputing For NC1 (with Sander and Young; IEEE's FOCS 1999).
- 2000: Unforgeable Encryption and Chosen Ciphertext Secure Modes of Operation (with Katz; Fast Software Encryption (FSE)).
- 2004: Malicious Cryptography: Exposing Cryptovirology (with A. Young; Wiley 2004: A book).
- 2009: Efficient and secure authenticated key exchange using weak passwords (with Katz and Ostrovsky; JACM 57(1)).
- 2009: A unified framework for the analysis of side-channel key recovery attacks (with Standaert and Malkin; Eurocrypt).
- 2017: Generic Semantic Security against a Kleptographic Adversary (with A. Russell, Q. Tang, and H-S Zhou; ACM's CCS)
- "IBM T.J. Watson: Cryptography Research". IBM Research. Retrieved October 29, 2020.
- "Moti Yung". IEEE Computer Society. 8 September 2018. Retrieved 28 December 2019.
- Young, A.; M. Yung (1996). "Cryptovirology: extortion-based security threats and countermeasures". Proceedings 1996 IEEE Symposium on Security and Privacy. IEEE Symposium on Security and Privacy. pp. 129–140. doi:10.1109/SECPRI.1996.502676. ISBN 0-8186-7417-2.
- Infosecurity Magazine: The Dark Side of Cryptography: Kleptography in Black-Box Implementations https://www.infosecurity-magazine.com/magazine-features/the-dark-side-of-cryptography-kleptography-in/
- R. Cramer, Introduction to Secure Computation http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.130.9163&rep=rep1&type=pdf
- Skeptical Experts and Smart Attackers. Feb. 2 2013 http://privacy-pc.com/articles/moti-yung-and-adam-young-on-kleptography-and-cryptovirology-5-skeptical-experts-and-smart-attackers.doc
- Ransomware: The future of extortion By Jibu Elias September 04, 2017 https://www.techradar.com/news/ransomware-the-future-of-extortion
- Young, Adam; Yung, Moti (1996), "The Dark Side of "Black-Box" Cryptography or: Should We Trust Capstone?", Adam L. Young, Moti Yung: The Dark Side of "Black-Box" Cryptography, or: Should We Trust Capstone? CRYPTO 1996: 89-103, Lecture Notes in Computer Science, vol. 1109, p. 89, doi:10.1007/3-540-68697-5_8, ISBN 978-3-540-61512-5
- Young, Adam; Yung, Moti (1997), "Kleptography: Using Cryptography Against Cryptography", Adam L. Young, Moti Yung: Kleptography: Using Cryptography Against Cryptography. EUROCRYPT 1997: 62-74, Lecture Notes in Computer Science, vol. 1233, p. 62, doi:10.1007/3-540-69053-0_6, ISBN 978-3-540-62975-7
- Young, Adam; Yung, Moti (1997), "The prevalence of kleptographic attacks on discrete-log based cryptosystems", Adam L. Young, Moti Yung: The Prevalence of Kleptographic Attacks on Discrete-Log Based Cryptosystems. CRYPTO 1997: 264-276, Lecture Notes in Computer Science, vol. 1294, p. 264, doi:10.1007/BFb0052241, ISBN 978-3-540-63384-6
- Young, Adam; Yung, Moti (1998), "Monkey: Black-Box Symmetric Ciphers Designed for MONopolizing KEYs", Adam L. Young, Moti Yung: Monkey: Black-Box Symmetric Ciphers Designed for MONopolizing KEYs. FSE 1998: 122-133, Lecture Notes in Computer Science, vol. 1372, p. 122, doi:10.1007/3-540-69710-1_9, ISBN 978-3-540-64265-7
- Young, Adam; Yung, Moti (2001), "Bandwidth-Optimal Kleptographic Attacks", Adam L. Young, Moti Yung: Bandwidth-Optimal Kleptographic Attacks. CHES 2001: 235-250, Lecture Notes in Computer Science, vol. 2162, p. 235, doi:10.1007/3-540-44709-1_20, ISBN 978-3-540-42521-2
- Larry Greenemeier (18 September 2013). "NSA Efforts to Evade Encryption Technology Damaged U.S. Cryptography Standard". Scientific American.
- Green, Matt, presentation: From Heartbleed to Juniper and Beyond (PDF)
- IACR Distinguished Lectures, retrieved 2012-03-11
- ACM Names Fellows for Computing Advances that Are Transforming Science and Society Archived 2014-07-22 at the Wayback Machine, Association for Computing Machinery, accessed 2013-12-10
- http://homepages.laas.fr/esorics/ Esorics Awards
- http://www.sigsac.org/award/sigsac-awards.doc SIGSAC Awards
- https://www.iacr.org/meetings/pkc/test_of_time_award/ PKC Test-of-Time Award
- "New members". American Academy of Arts and Sciences. 2023. Retrieved 2023-04-21.
- François-Xavier Standaert, Tal Malkin, Moti Yung: A Unified Framework for the Analysis of Side-Channel Key Recovery Attacks. EUROCRYPT 2009: 443-461
- https://iacr.org/testoftime/ IACR Test of Time Awards