Critical Infrastructure - The Cloud Loves Me, The Cloud Loves Me Not
Explore the complex relationship between public cloud services and critical infrastructure, examining case studies and security implications for interdependent systems.
Blink - The Network Perimeter is Gone
Explores the expanding threat landscape of wireless and mobile devices, highlighting vulnerabilities in IoT and BYOD policies. Demonstrates new attack vectors and proposes updated defense strategies.
When Doing the Right Thing Goes Wrong - Impact of Certificates on Service Based Infrastructure
Explores the challenges of securing inter-service communication in micro-service architectures, highlighting potential vulnerabilities and system failures due to poor certificate implementation practices.
Medical Device Security - From Detection to Compromise
Explore vulnerabilities in medical devices and healthcare systems, revealing potential risks to patient safety through a three-year research project on direct attack vectors.
Downfall - Exploiting Speculative Data Gathering
Unveiling Downfall attacks: new transient execution vulnerabilities exploiting gather instructions on x86 CPUs, compromising security across various computing environments and defeating existing defenses.
RIDAS - Real-Time Identification of Attack Sources on Controller Area Networks
Real-time method for identifying attack sources on vehicle networks, enhancing cybersecurity through error handling and sequential ECU inspection. Robust against environmental changes and attacker evasion.
Attacks are Forwarded - Breaking the Isolation of MicroVM-based Containers Through Operation Forwarding
Explores vulnerabilities in microVM-based containers, demonstrating operation forwarding attacks that can break isolation, exploit host kernel vulnerabilities, and exhaust resources on public cloud platforms.
TAP - Transparent and Privacy-Preserving Data Services
Explore a novel system for transparent, privacy-preserving data services. Learn about TAP's tree structure, zero-knowledge proofs, and verifiable operations, addressing limitations in existing approaches.
Reversing, Breaking, and Fixing the French Legislative Election E-Voting Protocol
Análisis de seguridad del protocolo de voto electrónico utilizado en las elecciones legislativas francesas de 2022, revelando vulnerabilidades, proponiendo soluciones y extrayendo lecciones para futuras implementaciones.
Understanding Security Implications of Exposed Cloud Services through Automated Capability Inference
Explores security risks of over-privileged cloud credentials in mobile apps, revealing potential data attacks and new threat vectors through analysis of 1.3 million apps across major cloud platforms.
Neuropots - Realtime Proactive Defense against Bit-Flip Attacks in Neural Networks
Innovative defense strategy against bit-flip attacks in neural networks using "honey neurons" to lure attackers, enabling efficient detection and model recovery in safety-critical AI applications.
Long Live The Honey Badger - Robust Asynchronous DPSS and its Applications
Explore robust asynchronous Dynamic-committee Proactive Secret Sharing (DPSS) protocols that handle network churn and faults efficiently, with insights on high-threshold DPSS and batch-amortized schemes.
Squirrel - A Scalable Secure Two-Party Computation Framework for Training Gradient Boosting Decision Tree
Scalable framework for secure two-party GBDT training on vertically split datasets, featuring novel cryptographic techniques for privacy-preserving machine learning in distributed environments.
Checking Passwords on Leaky Computers - A Side Channel Analysis of Chrome's Password Leak Detect Protocol
Explore side-channel vulnerabilities in Chrome's password leak detection, revealing potential risks to user privacy and security through microarchitectural attacks on cryptographic implementations.
VulChecker - Graph-based Vulnerability Localization in Source Code
Explore VulChecker, a tool for precise vulnerability detection in source code using graph-based neural networks. Learn about its innovative approach to locating and classifying security flaws.
DScope - A Cloud-Native Internet Telescope
Explore DScope, a scalable cloud-based Internet telescope for monitoring malicious behavior. Learn about its design, implementation, and advantages over traditional methods in capturing cloud-targeting traffic.
CSHER - A System for Compact Storage with HE-Retrieval
Innovative system for compact storage using homomorphic encryption, addressing high storage overhead while maintaining data confidentiality. Demonstrates practical performance in multi-cloud environments.
A Research Framework and Initial Study of Browser Security for the Visually Impaired
Exploring methodological challenges and best practices for conducting security research with visually impaired users, focusing on browser warning experiences and potential improvements.
Inducing Authentication Failures to Bypass Credit Card PINs
Explores vulnerability in EMV credit card transactions, demonstrating how offline authentication failures can be exploited to bypass PIN verification for high-value Mastercard payments using an Android app.
Detecting and Handling IoT Interaction Threats in Multi-Platform Multi-Control-Channel Smart Homes
Explore IoTMediator: a system for detecting and handling interaction threats in complex smart home environments with multiple platforms and control channels.
Snapping Snap Sync - Practical Attacks on Go Ethereum Synchronising Nodes
Practical attacks on Go Ethereum synchronization revealed, allowing adversaries to manipulate blockchain consensus and potentially profit through off-chain trading and code execution on Ethereum forks.