Staying Secure and Unprepared - Understanding and Mitigating the Security Risks of Apple ZeroConf
Explore security risks in Apple's ZeroConf systems, uncovering vulnerabilities in popular apps and services. Learn about innovative protection techniques, including voice-based certificate verification.
Key Confirmation in Key Exchange - A Formal Treatment and Implications for TLS 1.3
Formal treatment of key confirmation in key exchange protocols, focusing on TLS 1.3. Explores security definitions, implications for protocol design, and practical applications in cryptographic systems.
Inferring User Routes and Locations Using Zero-Permission Mobile Sensors
Explore zero-permission mobile sensor vulnerabilities for inferring user routes and locations, highlighting privacy risks and proposing detection methods through maximum likelihood route identification.
TriggerScope - Towards Detecting Logic Bombs in Android Applications
Explore techniques for detecting logic bombs in Android apps using symbolic execution and path predicate analysis. Learn about TriggerScope, a tool for identifying time-, location-, and SMS-related triggers in mobile applications.
Temporal Lensing and Its Application in Pulsing Denial-of-Service Attacks
Explore temporal lensing, a technique concentrating low-bandwidth floods into high-bandwidth pulses, and its potential for amplifying denial-of-service attacks using DNS infrastructure.
Heap Models for Exploit Systems
Formal modeling of heap exploits as abstract machines, exploring physical and logical heap properties to express attacks as reachability problems in specific heap configurations.
Trustworthy Data Analytics in the Cloud Using SGX
Explore trustworthy cloud-based data analytics using SGX technology. Learn about VC3, a system enabling secure MapReduce computations while preserving confidentiality and integrity of code and data.
GenoGuard - Protecting Genomic Data Against Brute-Force Attacks
Innovative encryption tool for genomic data offering long-term protection against brute-force attacks. Utilizes honey encryption to generate plausible decoy genomes, ensuring information-theoretic security for sensitive genetic information.
A Messy State of the Union - Taming the Composite State Machines of TLS
Explore critical security vulnerabilities in TLS implementations, including the FREAK flaw, and learn about a verified composite state machine for OpenSSL that addresses these issues.
Unambiguous Encapsulation
Explore error-correcting codes for secure data encapsulation, offering resilience against errors and buffer overflows. Learn about code classes, implementation, and future applications in communication technologies.
Secure Track Verification
Innovative approach for secure verification of mobile node location claims, exploiting inherent mobility to detect spoofing attacks with minimal system requirements and high accuracy.
Counterfeit Object-Oriented Programming
Explores counterfeit object-oriented programming, a novel code reuse attack technique in C++ applications, demonstrating its effectiveness against existing defenses and discussing potential prevention strategies.
Missing the Point(er) - On the Effectiveness of Code Pointer Integrity
Explores effectiveness of Code Pointer Integrity (CPI) in preventing memory corruption attacks. Demonstrates vulnerabilities in CPI implementations relying on information hiding, highlighting importance of robust secret protection in security mechanisms.
Effective Real-Time Android Application Auditing
Innovative approach combining static and dynamic analysis for efficient, real-time Android app auditing to detect data leaks, offering improved speed and accuracy over existing methods.
The Attack of the Clones - A Study of the Impact of Shared Code on Vulnerability Patching
Explores impact of shared code on vulnerability patching, revealing delays between patch releases and novel exploitation techniques. Analyzes patch deployment data from millions of hosts to improve cybersecurity strategies.
A Generic Approach to Automatic Deobfuscation of Executable Code
Explore a generic approach to automatically deobfuscate executable code, applicable to various obfuscation techniques. Learn about semantics-preserving transformations and their effectiveness in extracting internal logic from obfuscated malware.
High System-Code Security with Low Overhead
Maximize system code security within specified overhead budgets. Automatically instrument programs to balance security and performance, focusing on critical, low-cost checks for effective protection.
Unleashing Mayhem on Binary Code
Explore automated exploit generation for binary programs using hybrid symbolic execution and index-based memory modeling. Learn techniques to find and demonstrate exploitable vulnerabilities efficiently.
Formal Model-Driven Discovery of Bluetooth Protocol Design Vulnerabilities
Explore formal modeling techniques to uncover design vulnerabilities in Bluetooth protocols, focusing on key sharing, modular design, and coexistence issues.
PICCOLO - Exposing Complex Backdoors in NLP Transformer Models
Uncover complex backdoors in NLP transformer models using PICCOLO, addressing challenges in trigger inversion and proposing innovative solutions for enhanced model security.
SoK- Social Cybersecurity
Explore social cybersecurity concepts, from shared resource access to social authentication, self-presentation management, and future directions in this comprehensive overview.