RustSan - Retrofitting AddressSanitizer for Efficient Sanitization of Rust
Discover how RustSan enhances memory error detection in Rust programs through efficient sanitization techniques, improving performance while maintaining robust security guarantees for unsafe code blocks.
6Sense: Internet-Wide IPv6 Scanning and Security Applications
Discover groundbreaking IPv6 scanning technology that uses reinforcement learning to efficiently discover and analyze millions of IPv6 hosts, enabling comprehensive Internet security research and vulnerability detection.
Invalidate+Compare: A Timer-Free GPU Cache Attack Primitive
Explore groundbreaking research on GPU cache side-channel vulnerabilities, focusing on NVIDIA's latest generations and a novel timer-free attack primitive for monitoring cache activities and data extraction.
Can I Hear Your Face? Pervasive Attack on Voice Authentication Systems with a Single Face Image
Explore how Foice deepfake technology generates synthetic voices from single facial images to breach voice authentication systems, demonstrating vulnerabilities in major security platforms.
Automated Large-Scale Analysis of Cookie Notice Compliance
Discover how automated analysis reveals widespread non-compliance in cookie consent notices across EU websites, examining data collection practices and GDPR violations through advanced Natural Language Processing.
Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Applications
Discover how Inspectron framework automates security vulnerability detection in Electron apps, exploring common risks and developer practices for cross-platform application security.
MetaSafe: Compiling for Protecting Smart Pointer Metadata to Ensure Safe Rust Integrity
Discover how MetaSafe protects Rust's smart pointer metadata through compiler extensions, ensuring memory safety in safe Rust while maintaining low performance overhead.
The Impact of Exposed Passwords on Honeyword Efficacy
Explore the effectiveness of honeyword systems in credential databases, examining their vulnerability when attackers have access to users' passwords from other sites and analyzing generation algorithms.
GFWeb - Measuring the Great Firewall's Web Censorship at Scale
Discover groundbreaking research on China's Great Firewall censorship system through GFWeb's extensive study, revealing unprecedented insights into HTTP/HTTPS blocking mechanisms and evolving censorship patterns.
ACAI: Protecting Accelerator Execution with Arm Confidential Computing Architecture
Explore how ACAI extends Arm Confidential Computing Architecture to enable secure accelerator usage in trusted execution environments, focusing on GPU and FPGA implementations.
SymFit: Making the Common Concrete Case Fast for Binary-Code Concolic Execution
Explore optimizations in binary concolic execution, focusing on concrete instruction performance and symbolic tracing for enhanced crash deduplication efficiency in software testing.
Racing for TLS Certificate Validation: A Hijacker's Guide to the Android TLS Galaxy
Explore critical TLS certificate validation vulnerabilities in Android apps, focusing on validation hijacking issues, their impact on security, and the role of third-party libraries in creating these risks.
Infinite Traffic Loops at the Application Layer - A Study of DoS Attack Primitives
Explore application-layer traffic loops in network security, examining how infinite loops between servers can be triggered by single IP-spoofed packets to create cost-free DoS attacks.
CacheWarp: Software-based Fault Injection Using Selective State Reset
Discover how CacheWarp exploits AMD SEV vulnerabilities through software-based fault injection, enabling attacks on cryptographic systems and privilege escalation in virtual machines.
Don't Waste My Efforts: Pruning Redundant Sanitizer Checks by Developer-Implemented Type Checks
Discover how T-PRUNIFY optimizes type confusion detection in C++ programs by identifying and leveraging developer-implemented type checks, significantly reducing runtime overhead while maintaining security.
Rethinking the Security Threats of Stale DNS Glue Records
Explore the security vulnerabilities of DNS glue records, examining how outdated records and resolver behaviors create risks for domain hijacking and denial-of-service attacks across millions of domains.
Exploring Digital Security and Privacy in Relative Poverty in Germany - A Qualitative Interview Study
Explore how income status affects digital security practices in Germany through research findings on low-income users' privacy concerns, behaviors, and technological challenges.
SeaK - Rethinking the Design of a Secure Allocator for OS Kernel
Explore a novel approach to kernel heap security through SeaK, featuring atomic alleviation strategy that enhances protection while maintaining performance and efficiency in Linux systems.
Practical Data-Only Attack Generation Using Einstein - A Dynamic Taint Analysis Approach
Discover how Einstein pipeline uses dynamic taint analysis to generate data-only attacks, scan vulnerable system calls, and create exploits that bypass modern security mitigations in server applications.
Towards Generic Database Management System Fuzzing
Discover how BUZZBEE framework revolutionizes database security testing by effectively fuzzing both SQL and NoSQL systems, revealing vulnerabilities and achieving superior code coverage compared to existing solutions.
LanDscAPe - Exploring LDAP Weaknesses and Data Leaks at Internet Scale
Explore a comprehensive analysis of LDAP server vulnerabilities, revealing critical security misconfigurations, data leaks, and TLS setup issues across thousands of Internet-connected servers.