CSI NN - Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel
Reverse engineering neural networks through electromagnetic side channels, revealing architecture details like activation functions, layers, neurons, and weights using non-invasive techniques on ARM Cortex-M3 microcontrollers.
Shining Light on Internet-based Crimes Against Children
Explores Internet-based child exploitation crimes, their long-term impact on victims, and forensic tools for proactive rescue. Discusses privacy technology's role in both protection and potential misuse.
Embracing the Hack - A Better Strategy for Team-Defense
Explore how embracing "hacky" solutions in cybersecurity can enhance enterprise defense. Learn innovative strategies and custom detection techniques to gain an advantage over attackers.
Evaluating the Contextual Integrity of Privacy Regulation - Parents' IoT Toy Privacy Norms Versus COPPA
Explores alignment between COPPA regulations and parents' privacy expectations for smart toys, using contextual integrity surveys to quantify regulatory effectiveness and identify nuanced privacy concerns.
Wireless Attacks on Aircraft Instrument Landing Systems
Investigates vulnerabilities in aircraft instrument landing systems to wireless attacks using software-defined radio, demonstrating potential for spoofing signals and causing off-runway landings in low-visibility conditions.
TESSERACT - Eliminating Experimental Bias in Malware Classification Across Space and Time
Unveils TESSERACT framework to eliminate spatial and temporal biases in Android malware classification, improving real-world robustness and revealing counterintuitive performance insights.
Computer Security and Privacy in the Interactions Between Victim Service Providers and Human Trafficking Survivors
Exploring technology's role in victim service provider-survivor interactions, balancing trust-building and risk mitigation for human trafficking survivors' recovery and empowerment.
BITE - Bitcoin Lightweight Client Privacy Using Trusted Execution
Innovative approach to enhance privacy for Bitcoin lightweight clients using SGX enclaves, combining trusted execution and private information retrieval techniques for improved security without compromising performance.
GRIMOIRE - Synthesizing Structure while Fuzzing
Innovative fuzzing technique for programs with structured inputs, synthesizing complex structures on-the-fly without pre-configuration, outperforming existing methods and uncovering 19 memory corruption bugs.
Users Really Do Answer Telephone Scams
Explores factors influencing susceptibility to telephone scams through ethical phishing experiments, revealing the significant impact of spoofed Caller ID on victims' willingness to disclose sensitive information.
Software Networking and Interfaces on Linux
Comprehensive overview of Linux network interfaces, from traditional to modern cloud-native types. Explores VMs, containers, and service meshes, aiding in debugging cloud platforms.
Kafka on Kubernetes - From Evaluation to Production at Intuit
Explore Intuit's journey of running Kafka on Kubernetes in AWS, covering evaluation, testing, configuration, and integration with monitoring tools. Learn about challenges faced and solutions implemented.
Bamboozling Certificate Authorities with BGP
Análisis de vulnerabilidades en la infraestructura de clave pública y demostración de ataques BGP para obtener certificados falsos, con propuestas de contramedidas para mejorar la seguridad.
Foreshadow - Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution
Unveiling Foreshadow: A microarchitectural attack exploiting speculative execution to extract secrets from Intel SGX enclaves, compromising trusted execution environments and remote attestation.
TeEther - Gnawing at Ethereum to Automatically Exploit Smart Contracts
Explore automatic vulnerability detection and exploit generation for Ethereum smart contracts using teEther, a tool that analyzes binary bytecode to identify and exploit security weaknesses.
BlackIoT - IoT Botnet of High Wattage Devices Can Disrupt the Power Grid
Explores potential attacks on power grids using IoT botnets of high-wattage devices, demonstrating vulnerabilities and impacts through simulations on real-world models. Highlights interdependency between IoT and power grid security.
Who Is Answering My Queries - Understanding and Characterizing Interception of the DNS Resolution Path
Explores DNS interception by on-path devices, revealing widespread occurrence and potential security risks. Presents novel detection methods and analyzes data from global IP addresses to uncover concerning practices.
Analogy Cyber Security - From 0101 to Mixed Signals
Explores threats to sensor integrity in smart devices and their impact on system security. Discusses EMI interference, vulnerabilities in voice-controlled systems, and potential defenses for improving sensor security.
Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks
Introduces defensive distillation to protect deep neural networks from adversarial attacks, reducing attack effectiveness from 95% to 0.5% and increasing robustness by 800% in tests.
Multiple Handshakes Security of TLS 1.3 Candidates
Explores security aspects of TLS 1.3 candidates, focusing on multiple handshake protocols. Introduces a multi-level security model and proves the soundness of TLS 1.3 security design.
Following Devil's Footprints - Cross-Platform Analysis of Potentially Harmful Libraries on Android and iOS
Cross-platform analysis of potentially harmful libraries in Android and iOS apps, revealing widespread infection and risky behaviors like unauthorized data access and audio/video recording.