A Lustrum of Malware Network Communication: Evolution and Insights
Explore the evolution of malware network communication over five years, examining trends, insights, and implications for cybersecurity through analysis of 26.8 million samples.
To Catch a Ratter - Monitoring the Behavior of Amateur DarkComet RAT Operators in the Wild
Exploring amateur DarkComet RAT operators' behavior through honeypot experiments, revealing common attack patterns and potential defense strategies against Remote Access Trojans.
CRLite - A Scalable System for Pushing All TLS Revocations to All Browsers
Explore a scalable system for efficient TLS certificate revocation checking in browsers, reducing latency and enhancing privacy while maintaining low bandwidth costs.
Protecting Bare-metal Embedded Systems with Privilege Overlays
Innovative technique for securing bare-metal embedded systems using privilege overlaying, code integrity, and randomization to prevent attacks while minimizing performance impact.
An Experimental Security Analysis of an Industrial Robot Controller
Experimental security analysis of industrial robot controllers, revealing vulnerabilities and potential attacks that can compromise precision, control logic, and safety in automated manufacturing environments.
IoT Goes Nuclear - Creating a Zigbee Chain Reaction
Explore the potential for IoT devices to spread malware rapidly in urban environments, using smart lamps as an example. Learn about vulnerabilities in ZigBee protocol and firmware security.
Exploiting Network Printers
Comprehensive analysis of network printer vulnerabilities, exploring attack vectors and introducing PRET toolkit for security evaluation. Reveals novel insights on Internet-based attacks and cross-site printing techniques.
Cloak of Visibility - Detecting When Machines Browse a Different Web
Explores sophisticated web cloaking techniques used by malicious actors to evade security crawlers, and presents an anti-cloaking system for detecting split-view content with high accuracy.
High-Speed Inter-domain Fault Localization
Secure data-plane fault localization protocol for inter-domain settings, enabling precise localization of malicious network links with high performance and low overhead.
Sending Out an SMS - Characterizing the Security of the SMS Ecosystem with Public Gateways
Explore SMS ecosystem security, analyzing public gateways' vulnerabilities, sensitive data transmission, and misuse for account fraud evasion. Gain insights on improving SMS-based authentication and combating abuse.
I Think They're Trying to Tell Me Something - Advice Sources and Selection for Digital Security
Explores how users select digital security advice, revealing the impact of source trustworthiness, relatable narratives, and reasons for rejecting advice. Offers insights for developing more effective security interventions.
LAVA - Large-Scale Automated Vulnerability Addition
Explore LAVA, an automated technique for injecting realistic vulnerabilities into source code, enabling rigorous evaluation of vulnerability discovery tools and providing high-quality targets for tool developers.
Protecting Private Keys Against Memory Disclosure Attacks Using Hardware Transactional Memory
Explore hardware transactional memory for protecting cryptographic keys against memory disclosure attacks, enhancing security in both software and physical threat scenarios.
Privacy and Access Control for Outsourced Personal Records
Cryptographic system GORAM protects outsourced data secrecy, integrity, and access control while ensuring anonymity and unlinkability, addressing cloud storage security concerns for sensitive applications.
How Secure and Quick is QUIC? Provable Security and Performance Analyses
Analyzes QUIC protocol's security and performance, revealing strengths and vulnerabilities. Explores trade-offs between latency reduction and robust security in this innovative transport protocol.
Cracking-Resistant Password Vaults Using Natural Language Encoders
Innovative password vault security using natural language encoders to generate plausible decoys, resisting offline cracking and forcing online attacks. Implements NoCrack system for enhanced protection.
A Shared Cache Attack That Works Across Cores and Defies VM Sandboxing and Its Application to AES
Explore a novel cross-core cache attack that bypasses VM sandboxing, exploiting shared L3 cache vulnerabilities to compromise AES encryption in cloud computing environments.
Readactor: Practical Code Randomization Resilient to Memory Disclosure
Explore practical code randomization techniques resilient to memory disclosure attacks, enhancing software security against return-oriented programming and other code-reuse threats.
Leave Me Alone - App-Level Protection against Runtime Information Gathering on Android
Explores app-level protection against runtime information gathering on Android, proposing App Guardian to pause suspicious background processes and thwart malicious monitoring attempts without system modifications.
Transys - Leveraging Common Security Properties Across Hardware Designs
Explore hardware security validation techniques and learn how to leverage common security properties across different designs using Transys, improving efficiency in vulnerability detection.
OAT - Attesting Operation Integrity of Embedded Devices
Innovative framework for attesting operation integrity of embedded devices, addressing control-flow hijacks and data-only attacks in IoT systems through lightweight measurement and verification techniques.