Accessorize to a Crime - Real and Stealthy Attacks on State-Of-The-Art Face Recognition
Explores stealthy attacks on face recognition systems using adversarial machine learning techniques, demonstrating vulnerabilities in state-of-the-art facial recognition technology through impersonation experiments.
CSP is Dead, Long Live CSP! - On the Insecurity of Whitelists and the Future of the Content Security Policy
Explore the evolution and challenges of Content Security Policy, analyzing its effectiveness, vulnerabilities, and future directions in web security.
On the Security of Cracking-Resistant Password Vaults
Explore security vulnerabilities in password vaults, analyzing cracking techniques, experimental results, and potential mitigations for improved password protection strategies.
Evaluating the Effectiveness of Content Security Policy in the Wild
Evaluación de la efectividad de la Política de Seguridad de Contenido en la práctica, analizando su adopción, configuración y debilidades frente a ataques XSS.
Targeted Online Password Guessing - An Underestimated Threat
Explore targeted online password guessing, its underestimated threat, and innovative approaches to enhance cybersecurity through advanced attack modeling and defense strategies.
An Empirical Study of Mnemonic Sentence-based Password Generation Strategies
Empirical analysis of mnemonic sentence-based password generation strategies, examining effectiveness, weaknesses, and user behavior in creating memorable yet secure passwords.
Breaking Web Applications Built On Top of Encrypted Data
Explores vulnerabilities in web applications using encrypted data, focusing on multi-key searchable encryption. Analyzes attacks against Mylar, discussing metadata risks and active threat models.
ECDSA Key Extraction from Mobile Devices via Nonintrusive Physical Side Channels
Explore physical side-channel attacks on ECDSA key extraction from mobile devices, covering analysis methods, results, equipment, and potential countermeasures.
The Shadow Nemesis - Inference Attacks on Efficiently Deployable, Efficiently Searchable Encryption
Explore inference attacks on searchable encryption, focusing on Bloom filters and graph matching techniques to compromise data confidentiality in encrypted databases.
A Comprehensive Formal Security Analysis of OAuth 2.0
Comprehensive formal security analysis of OAuth 2.0, examining authorization, authentication, and session integrity properties, and discussing potential attacks and mitigations.
Secure Stable Matching at Scale
Explore secure stable matching algorithms for large-scale applications, focusing on privacy preservation and efficient computation in scenarios like medical residency matching.
A Unilateral-to-Mutual Authentication Compiler for Key Exchange - with Applications to Client Authentication in TLS 1.3
Explore unilateral-to-mutual authentication in key exchange, focusing on client authentication in TLS 1.3. Learn about the SIGMAC compiler, security definitions, and post-handshake protocols.
Practical Non-Malleable Codes from I-More Extractable Hash Functions
Explore practical non-malleable codes using I-more extractable hash functions, covering security, error correction, and applications in cryptography and data integrity.
Order-Revealing Encryption - New Constructions, Applications, and Lower Bounds
Explore new constructions, applications, and lower bounds of Order-Revealing Encryption, focusing on encrypted data searching and range queries with enhanced security and performance.
POPE - Partial Order Preserving Encoding
Explore partial order preserving encoding for secure data management, covering introduction, space analysis, security considerations, and addressing audience questions.
FeatureSmith - Automatically Engineering Features for Malware Detection by Mining the Security Literature
Explore automated feature engineering for malware detection using security literature mining, enhancing detection accuracy and providing explainable results.
VoiceLive - A Phoneme Localization Based Liveness Detection for Voice Authentication on Smartphones
Innovative phoneme localization technique for voice authentication on smartphones, enhancing security against spoofing attacks through advanced speech analysis and microphone array technology.
CSPAutoGen - Black-box Enforcement of Content Security Policy upon Real-world Websites
Explore black-box enforcement of Content Security Policy on websites, covering deployment, training, rewriting, and evaluation of CSPAutoGen for enhanced web security.
Measurement and Analysis of Private Key Sharing in the HTTPS Ecosystem
Explore HTTPS ecosystem's private key sharing practices, risks, and implications for web security. Learn detection methods and analysis of key sharing among domains and hosting providers.
A Software Approach to Defeating Side Channels in Last-Level Caches
Explore techniques to mitigate side-channel attacks in last-level caches, focusing on Copy-On-Access and Cacheability Management methods for enhanced cloud security.
On Code Execution Tracking via Power Side-Channel
Explore power side-channel analysis for code execution tracking in embedded systems, covering key extraction attacks, control flow integrity, and Hidden Markov Models for security applications.