The Sounds of the Phones - Dangers of Zero-Effort Second Factor Login Based on Ambient Audio
Explores security vulnerabilities in ambient audio-based two-factor authentication, demonstrating potential attacks and discussing mitigation strategies for improved cybersecurity.
Acing the IOC Game - Toward Automatic Discovery and Analysis of Open-Source Cyber Threat Intelligence
Explore automatic discovery and analysis of open-source cyber threat intelligence, focusing on IOC generation, correlation analysis, and impact on security.
Chainsaw - Chained Automated Workflow-based Exploit Generation
Explore automated workflow-based exploit generation for web applications using Chainsaw, a novel approach to identify and exploit vulnerabilities through informed traversal and workflow inference.
MERS - Statistical Test Generation for Side-Channel Analysis Based Trojan Detection
Learn statistical test generation techniques for detecting hardware Trojans through side-channel analysis, focusing on rare nodes and security metrics in combinational circuits.
On the Practical - In-Security of 64-bit Block Ciphers - Collision Attacks on HTTP over TLS and OpenVPN
Explore practical security vulnerabilities in 64-bit block ciphers, focusing on collision attacks in HTTP over TLS and OpenVPN. Learn about countermeasures and implications for network security.
Message-Recovery Attacks on Feistel-Based Format Preserving Encryption
Explore message-recovery attacks on Feistel-based format preserving encryption, examining technical challenges, known plaintext attacks, and theoretical implications for cryptographic security.
Heavy Hitter Estimation over Set-Valued Data with Local Differential Privacy
Explore local differential privacy for heavy hitter estimation on set-valued data. Learn about randomized response, RAPPOR, and the LDPMiner framework for privacy-preserving data analysis.
CREDAL - Towards Locating a Memory Corruption Vulnerability with Your Core Dump
Innovative approach to locating memory corruption vulnerabilities using core dumps, tracking crash points, identifying stack frames, and determining corruption sources for improved software security.
A Systematic Analysis of the Juniper Dual EC Incident
Systematic analysis of Juniper's Dual EC cryptographic incident, exploring vulnerabilities, attack methods, and implications for network security and encryption standards.
Advanced Probabilistic Couplings for Differential Privacy
Explore advanced probabilistic couplings for differential privacy, covering composition theorems, program logic, and accuracy-dependent privacy in this in-depth technical presentation.
MPC-Friendly Symmetric Key Primitives
Explore MPC-friendly symmetric key primitives for secure computation, focusing on PRFs, secure sharing, and efficient preprocessing techniques in cryptography.
Town Crier - An Authenticated Data Feed for Smart Contracts
Explore authenticated data feeds for smart contracts using Town Crier, leveraging Intel SGX for secure and confidential data delivery in decentralized environments.
On the Instability of Bitcoin Without the Block Reward
Explore Bitcoin's stability without block rewards, examining key results, mining strategies, and potential future challenges in cryptocurrency economics.
A Secure Sharding Protocol for Open Blockchains
Secure sharding protocol for open blockchains addressing scalability issues. Introduces Elastico, a novel solution using directory committees and epoch randomness for improved performance and security.
The Honey Badger of BFT Protocols
Explore asynchronous Byzantine fault tolerance protocols, focusing on Honey Badger's resilience, optimal performance, and practical applications in wide area networks.
ProvUSB - Block-level Provenance-Based Data Protection for USB Storage Devices
Block-level provenance-based data protection for USB storage devices, enhancing security in sensitive organizations through remote TPM, integrity models, and access control.
Safe Serializable Secure Scheduling - Transactions and the Trade-Off Between Security and Consistency
Explore the trade-offs between security and consistency in transaction scheduling, with real-world examples and attack demonstrations in information flow control systems.
Enforcing Least Privilege Memory Views for Multithreaded Applications
Explore memory isolation techniques for multithreaded applications, focusing on enforcing least privilege memory views to enhance security and prevent unauthorized access.
Strong Non-Interference and Type-Directed Higher-Order Masking
Explore differential power analysis, masking techniques, and strong non-interference in cryptographic systems. Learn about probing security and noiseless leakage models.
High Fidelity Data Reduction for Big Data Security Dependency Analyses
Explores data reduction techniques for big data security dependency analyses, focusing on expendable dependencies, controlled loss, and domain knowledge to improve efficiency while maintaining accuracy.
Scalable Graph-based Bug Search for Firmware Images
Scalable graph-based approach for efficient bug detection in firmware images, improving vulnerability search speed and accuracy for IoT devices.