The Code That Never Ran - Modeling Attacks on Speculative Evaluation
Modeling speculative evaluation attacks like Spectre using pomsets. Proposes abstract model to express known attacks, verify countermeasures, and predict new compiler optimization-based vulnerabilities.
On the Feasibility of Rerouting-Based DDoS Defenses
Analyzes the feasibility of rerouting-based DDoS defenses, highlighting fundamental trade-offs and limitations in current inter-domain infrastructure. Emphasizes the need for rigorous security analysis and real-world testing of new defense proposals.
Threshold ECDSA from ECDSA Assumptions - The Multiparty Case
Explores extending threshold ECDSA protocols to arbitrary thresholds, proposing a new scheme with improved efficiency and security under weaker assumptions for cryptocurrency applications.
Data Recovery on Encrypted Databases with k-Nearest Neighbor Query Leakage
Explores data recovery attacks on encrypted databases supporting k-nearest neighbor queries, analyzing feasibility of exact reconstruction and proposing practical approximate reconstruction methods for spatial data.
Understanding the Security of ARM Debugging Features
Comprehensive analysis of ARM debugging features' security implications across various platforms, exposing vulnerabilities and demonstrating the Nailgun attack to highlight potential risks.
Attack Directories, Not Caches - Side Channel Attacks in a Non Inclusive World
Explores novel side-channel attacks on non-inclusive cache hierarchies, demonstrating vulnerabilities in modern systems through directory structure exploitation and cross-core Prime+Probe techniques.
ProFuzzer - On-the-fly Input Type Probing for Better Zero-day Vulnerability Discovery
Innovative fuzzing technique that automatically probes input fields, adapts mutation strategies, and enhances zero-day vulnerability discovery without prior input specifications.
Fuzzing File Systems via Two-Dimensional Input Space Exploration
Explores innovative fuzzing technique for file systems, addressing challenges in input space exploration, operation generation, and bug reproduction. Introduces JANUS, a feedback-driven fuzzer with improved efficiency and reproducibility.
Comprehensive Privacy Analysis of Deep Learning
Análisis exhaustivo de la privacidad en el aprendizaje profundo, destacando ataques de inferencia de caja blanca y vulnerabilidades en modelos centralizados y federados.
True2F - Backdoor Resistant Authentication Tokens
Innovative system for second-factor authentication offering enhanced security against phishing, software compromise, token faults, and backdoors. Introduces new protocols and privacy defenses while maintaining compatibility with U2F-enabled services.
Designing Marvel Snap
Dive into 15 years of collectible card game design wisdom as Ben Brode shares insights from Hearthstone and MARVEL SNAP, offering valuable knowledge for game developers and enthusiasts.
Informed Altruism - Service Shouldn’t Feel Easy
Explore the concept of informed altruism and learn why effective service requires understanding, listening, and addressing root causes rather than imposing solutions without proper knowledge.
Weaving Fairytales with Data
Discover the art of data storytelling with three key takeaways: first principles thinking, talking headers, and fairytale magic. Learn to craft memorable narratives that bring data to life.
It's Ok to Not Have Dreams
Discover how perseverance and patience can lead to success, even without grand dreams. Learn about sustainable innovations and the power of ordinary people to create extraordinary change.
Like a Flowing River
Embracing slowness for clarity, self-improvement, and joy. Discover how intentional living in a village setting can lead to personal growth, better relationships, and a deeper connection with nature and oneself.
Embrace Differences, Achieve Greatness - Success through Identity
Explore how embracing cultural identity and continuous learning fosters personal growth, respect, and success in a diverse society, drawing from a Filipino-American's perspective.
What We’re Getting Wrong About the Poultry Industry
Veterinary expert debunks misconceptions about the poultry industry, addressing concerns about health, affordability, and global protein consumption to provide accurate information for consumers.
The AI Education Revolution is Coming – Or Is It?
Explore AI's potential to revolutionize education, tailoring learning experiences and freeing teachers for impactful roles. Dr. Hardman questions if we'll embrace this transformative technology in education.
Your Brain. Digitised.
Explore the potential of digital technology to revolutionize neurological disease treatment, improve patient care, and advance neuroscience research with Dr. Michal Wlodarski's insights.
The 6 Reasons to Pursue Your Passion in Retirement
Discover why retirement is the perfect time to pursue your dreams and passions. Learn how entrepreneurship can lead to an active, fulfilling second act in life, regardless of age.
Is It Time to Quit?
Discover when it's time to quit and make unpopular decisions for personal rejuvenation. Learn to trust your inner voice over external pressures for a more vibrant and fulfilling life.