Nick Sullivan
Head of Research

Nick Sullivan is Head of Research at Cloudflare. Nick leads research efforts in the fields of security and privacy, cryptography, Internet measurement, and emerging networking paradigms. Prior to working at Cloudflare, he developed encryption technology for Apple’s Internet Services division, co-wrote Symantec’s Internet Security Threat Report, and completed degrees in both Computer Science and Pure Mathematics. He is passionate about improving the Internet through cutting-edge research and the development of open standards.

Research Areas

Cryptography, Internet Measurement, Privacy, Security

Projects

• Oblivious DNS over HTTPS
• Privacy Pass

Publications

• Fayed, Marwan, Lorenz Bauer, Vasileios Giotsas, Sami Kerola, Marek Ma- jkowski, Pavel Odinstov, Jakub Sitnicki, Taejoong Chung, Dave Levin, Alan Mislove, Christopher A. Wood, Nick Sullivan. "The Ties that un-Bind: Decoupling IP from web services and sockets for robust addressing agility at CDN-scale." In ACM SIGCOMM 2021 Conference (SIGCOMM ’21), August 23–28, 2021, Virtual Event, USA. ACM, New York, NY, USA, 14 pages. 2021. To appear.
• Celi, Sofía, Armando Faz-Hernández, Nick Sullivan, Goutam Tamvada, Luke Valenta, Thom Wiggers, Bas Westerbaan, Christopher Wood. "Implementing and measuring KEMTLS." Under submission and presented an Latincrypt 2021, 2021.
• Singanamalla, Sudheesh, Suphanat Chunhapanya, Jonathan Hoyland, Marek Vavruša, Tanya Verma, Peter Wu, Marwan Fayed, Kurtis Heimerl, Nick Sullivan, and Christopher Wood. "Oblivious DNS over HTTPS (ODoH): A Practical Privacy Enhancement to DNS." In Proceedings on Privacy Enhancing Technologies 2021, (4):pp. 575–592. 2021
• Tyagi, Nirvan, Sofía Celi, Thomas Ristenpart, Nick Sullivan, Stefano Tessaro, and Christopher A. Wood. "A Fast and Simple Partially Oblivious PRF, with Applications.", Under submission, 2021
• Li, Lucy, Bijeeta Pal, Junade Ali, Nick Sullivan, Rahul Chatterjee, and Thomas Ristenpart. "Protocols for checking compromised credentials." In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pp. 1387-1403. 2019.
• Chung, Taejoong, Emile Aben, Tim Bruijnzeels, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, Roland van Rijswijk-Deij, John Rula and Nick Sullivan. "RPKI is coming of age: A longitudinal study of RPKI deployment and invalid route origins." In Proceedings of the Internet Measurement Conference, pp. 406-419. 2019.
• Kwiatkowski, Krzysztof, Nick Sullivan, Adam Langley, Dave Levin, and Alan Mislove. "Measuring TLS key exchange with post-quantum KEM." In Workshop Record of the Second PQC Standardization Conference. 2019.
• Davidson, Alex, Ian Goldberg, Nick Sullivan, George Tankersley, and Filippo Valsorda. "Privacy Pass: Bypassing Internet Challenges Anonymously." Proc. Priv. Enhancing Technol. 2018, no. 3 (2018): 164-180. 2018.
• Valenta, Luke, Nick Sullivan, Antonio Sanso, and Nadia Heninger. "In search of CurveSwap: Measuring elliptic curve implementations in the wild." In 2018 IEEE European Symposium on Security and Privacy (EuroS&P), pp. 384-398. IEEE, 2018.
• McDonald, Allison, Matthew Bernhard, Luke Valenta, Benjamin VanderSloot, Will Scott, Nick Sullivan, J. Alex Halderman, and Roya Ensafi. "403 forbidden: A global view of cdn geoblocking." In Proceedings of the Internet Measurement Conference 2018, pp. 218-230. 2018.
• Hall-Andersen, Mathias, David Wong, Nick Sullivan, and Alishah Chator. "nQUIC: Noise-based QUIC packet protection." In Proceedings of the Workshop on the Evolution, Performance, and Interoperability of QUIC, pp. 22-28. 2018.
• Chung, Taejoong, Jay Lok, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, John Rula, Nick Sullivan, and Christo Wilson. "Is the web ready for OSCP must-staple?." In Proceedings of the Internet Measurement Conference 2018, pp. 105-118. 2018.
• Durumeric, Zakir, Zane Ma, Drew Springall, Richard Barnes, Nick Sullivan, Elie Bursztein, Michael Bailey, J. Alex Halderman, and Vern Paxson. "The Security Impact of HTTPS Interception." In NDSS. 2017.
• Antonakakis, Manos, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J. Alex Halderman, Luca Invernizzi, Michalis Kallitsis, Deepak Kumar, Chaz Lever, Zane Ma, Joshua Mason, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, Yi Zhou. "Understanding the mirai botnet." In 26th {USENIX} security symposium ({USENIX} Security 17), pp. 1093-1110. 2017.
• McMillion, Brendan, and Nick Sullivan. "Attacking White-Box AES Constructions." In Proceedings of the 2016 ACM Workshop on Software PROtection, pp. 85-90. 2016.
• Stebila, Douglas, and Nick Sullivan. "An analysis of TLS handshake proxying." In 2015 IEEE Trustcom/BigDataSE/ISPA, vol. 1, pp. 279-286. IEEE, 2015.