Cloudflare Research logo
Nick Sullivan Nick Sullivan
Head of Research

Nick Sullivan is Head of Research at Cloudflare. Nick leads research efforts in the fields of security and privacy, cryptography, Internet measurement, and emerging networking paradigms. Prior to working at Cloudflare, he developed encryption technology for Apple’s Internet Services division, co-wrote Symantec’s Internet Security Threat Report, and completed degrees in both Computer Science and Pure Mathematics. He is passionate about improving the Internet through cutting-edge research and the development of open standards.

Research Areas

Cryptography, Internet Measurement, Privacy, Security



pendingA Fast and Simple Partially Oblivious PRF, with Applications

Under submission, 2021
Nirvan Tyagi, Sofía Celi, Thomas Ristenpart, Nick Sullivan, Stefano Tessaro, Christopher A. Wood

2021Implementing and measuring KEMTLS

Latincrypt 2021 (to appear).
Sofía Celi, Armando Faz-Hernández, Nick Sullivan, Goutam Tamvada, Luke Valenta, Thom Wiggers, Bas Westerbaan, Christopher A. Wood

2021The Ties that un-Bind: Decoupling IP from web services and sockets for robust addressing agility at CDN-scale

Proceedings of the 2021 ACM SIGCOMM 2021 Conference, pp. 433–446. 2021.
Marwan Fayed, Lorenz Bauer, Vasileios Giotsas, Sami Kerola, Marek Majkowski, Pavel Odinstov, Jakub Sitnicki, Taejoong Chung, Dave Levin, Alan Mislove, Christopher A. Wood, Nick Sullivan

2021Oblivious DNS over HTTPS (ODoH): A Practical Privacy Enhancement to DNS

Proceedings on Privacy Enhancing Technologies 2021, Volume 4, pp. 575–592. 2021.
Sudheesh Singanamalla, Suphanat Chunhapanya, Jonathan Hoyland, Marek Vavruša, Tanya Verma, Peter Wu, Marwan Fayed, Kurtis Heimerl, Nick Sullivan, Christopher A. Wood

2020RFC 8937: Randomness Improvements for Security Protocols

Internet Research Task Force (IRTF). 2020.
Cas Cremers, Luke Garratt, Stanislav Smyshlyaev, Nick Sullivan, Christopher A. Wood

2019RPKI is coming of age: A longitudinal study of RPKI deployment and invalid route origins

Proceedings of the Internet Measurement Conference, pp. 406-419. 2019.
Taejoong Chung, Emile Aben, Tim Bruijnzeels, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, Roland van Rijswijk-Deij, John Rula, Nick Sullivan

2019Measuring TLS key exchange with post-quantum KEM

Workshop Record of the Second PQC Standardization Conference. 2019.
Krzysztof Kwiatkowski, Nick Sullivan, Adam Langley, Dave Levin, Alan Mislove

2019Protocols for checking compromised credentials

Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pp. 1387-1403. 2019.
Lucy Li, Bijeeta Pal, Junade Ali, Nick Sullivan, Rahul Chatterjee, Thomas Ristenpart

2019RFC 8586: Loop Detection in Content Delivery Networks (CDNs)

Internet Engineering Task Force (IETF). 2019.
Stephen Ludin, Mark Nottingham, Nick Sullivan

2018Is the web ready for OSCP must-staple?

Proceedings of the Internet Measurement Conference 2018, pp. 105-118. 2018.
Taejoong Chung, Jay Lok, Balakrishnan Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, John Rula, Nick Sullivan, Christo Wilson

2018Privacy Pass: Bypassing Internet Challenges Anonymously

Proceedings on Privacy Enhancing Technologies, no. 3 (2018), pp. 164-180. 2018.
Alex Davidson, Ian Goldberg, Nick Sullivan, George Tankersley, Filippo Valsorda

2018nQUIC: Noise-based QUIC packet protection

EPIQ'18: Proceedings of the Workshop on the Evolution, Performance, and Interoperability of QUIC, pp. 22-28. 2018.
Mathias Hall-Andersen, David Wong, Nick Sullivan, Alishah Chator

2018403 Forbidden: A Global View of CDN Geoblocking

Proceedings of the Internet Measurement Conference 2018, pp. 218-230. 2018.
Allison McDonald, Matthew Bernhard, Luke Valenta, Benjamin VanderSloot, Will Scott, Nick Sullivan, J. Alex Halderman, Roya Ensafi

2018In search of CurveSwap: Measuring elliptic curve implementations in the wild

2018 IEEE European Symposium on Security and Privacy (EuroS&P), pp. 384-398. IEEE, 2018.
Luke Valenta, Nick Sullivan, Antonio Sanso, Nadia Heninger

2017Understanding the mirai botnet

26th USENIX security symposium (USENIX Security 17), pp. 1093-1110. 2017.
Manos Antonakakis, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J. Alex Halderman, Luca Invernizzi, Michalis Kallitsis, Deepak Kumar, Chaz Lever, Zane Ma, Joshua Mason, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, Yi Zhou

2017The Security Impact of HTTPS Interception

Network and Distributed System Security Symposium (NDSS) 2017.
Zakir Durumeric, Zane Ma, Drew Springall, Richard Barnes, Nick Sullivan, Elie Bursztein, Michael Bailey, J. Alex Halderman, Vern Paxson

2016Attacking White-Box AES Constructions

Proceedings of the 2016 ACM Workshop on Software Protection, pp. 85-90. 2016.
Brendan McMillion, Nick Sullivan

2015An analysis of TLS handshake proxying

2015 IEEE Trustcom/BigDataSE/ISPA, volume 1, pp. 279-286. 2015.
Douglas Stebila, Nick Sullivan

Blog posts