Norax - Enabling Execute-Only Memory for COTS Binaries on AArch64
Explore execute-only memory implementation for AArch64 binaries, enhancing security against code reuse attacks without source code or debugging symbols. Learn about NORAX's design, components, and real-world performance.
SoK - Science, Security, and the Elusive Goal of Security as a Scientific Pursuit
Explore the challenges of applying scientific principles to computer security research, examining methodological issues and the need for consensus in the field.
Complex Paths and Derelict Sentinels - Software Engineering Underpinnings of NTP Vulnerabilities
Explore software engineering choices behind recent NTP vulnerabilities, focusing on packet consistency checks, ephemeral associations, and spoofing in this IEEE conference talk.
The Cracked Cookie Jar - HTTP Cookie Hijacking and the Exposure of Private Information
Explores HTTP cookie hijacking vulnerabilities in major websites, revealing how partial HTTPS deployment can expose sensitive user information and functionality to attackers.
Return to the Zombie Gadgets - Undermining Destructive Code Reads via Code-Inference Attacks
Explores techniques to bypass destructive code reads, a defensive strategy against code reuse attacks, through constructive reloads and code association via implicit reads, demonstrating vulnerabilities in this security approach.
Analog Malicious Hardware
Explore stealthy hardware attacks using analog circuits to bypass security measures. Learn techniques for creating small, undetectable malicious modifications during chip fabrication.
Activation Analysis of a Byte-Based Deep Neural Network for Malware Classification
Explores deep learning models for malware classification, analyzing learned features from byte-level to end-to-end, connecting activations to binary semantics, and examining impacts of training data and regularization.
Resident Evil - Understanding Residential IP Proxy as a Dark Service
Explore residential IP proxies as a dark service, uncovering their operations, security risks, and involvement in cybercrimes through infiltration and analysis of millions of proxy IPs across 230+ countries.
Touching the Untouchables - Dynamic Security Analysis of the LTE Control Plane
Dynamic security analysis of LTE control plane procedures, uncovering 36 vulnerabilities in operational networks. Demonstrates attacks affecting service availability, SMS spoofing, and data manipulation.
Should I Worry? A Cross Cultural Examination of Account Security Incident Response
Exploring users' real-time responses to suspicious login incidents across cultures, revealing common patterns and unique challenges in digital security incident handling.
Self-Encrypting Deception: Weaknesses in the Encryption of Solid State Drives
Uncovers critical vulnerabilities in solid state drive hardware encryption, revealing potential data recovery risks and the need for additional security measures.
Hard Drive of Hearing - Disks that Eavesdrop with a Synthesized Microphone
Discover how hard drives can be exploited as microphones, potentially compromising privacy. Learn about this unique security threat and explore defense mechanisms against acoustic eavesdropping.
Port Contention for Fun and Profit
Explore SMT execution engine sharing as a side-channel leakage source, targeting ports to create a high-resolution timing side-channel for attacks on various architectures and applications.
Differentially Private Model Publishing for Deep Learning
Explore techniques for publishing deep learning models with differential privacy, optimizing privacy loss and model accuracy through concentrated differential privacy and dynamic budget allocation.
Redactable Blockchain in the Permissionless Setting
Explore innovative blockchain redaction techniques for permissionless systems, addressing data privacy concerns while maintaining security and public verifiability without additional trust assumptions.
Routing Around Congestion - Defeating DDoS Attacks and Adverse Network Conditions via Reactive BGP Routing
Explore reactive BGP routing as a novel approach to mitigate DDoS attacks and network congestion, focusing on traffic isolation and path control without requiring Internet redesign or external cooperation.
Enabling Autonomous IoT Device Pairing Using Different Sensor Types
Explore autonomous IoT device pairing using different sensor types, focusing on event timing for cross-modal context-based pairing in smart homes. Learn about Perceptio's protocol and its effectiveness.
On the Economics of Offline Password Cracking
Explores the economics of offline password cracking, analyzing major breaches and demonstrating inadequacies in current key-stretching methods. Advocates for memory-hard functions to enhance password security.
Sonar- Detecting SS7 Redirection Attacks With Audio-Based Distance Bounding
Detect SS7 redirection attacks in phone networks using audio-based distance bounding. Learn about Sonar, a system that measures call audio round-trip times to identify and prevent illicit call interceptions.
Protecting the Stack with Metadata Policies and Tagged Hardware
Explore innovative metadata-tag based stack-protection security policies for tagged architectures, focusing on efficient cacheability and performance in unsafe languages like C.
On Enforcing the Digital Immunity of a Large Humanitarian Organization
Explore digital immunity challenges faced by humanitarian organizations, focusing on ICRC's unique operational, technical, legal, and managerial aspects in data handling and security.