PGPATCH - Policy-Guided Logic Bug Patching for Robotic Vehicles
Explore an innovative approach to automatically detect and patch logic bugs in robotic vehicle software, enhancing safety and reliability in autonomous systems.
Wobfuscator - Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly
Explore innovative techniques for obfuscating JavaScript malware through WebAssembly translation, enhancing code protection and evading detection mechanisms.
How Does Usable Security Not End Up in Software Products - Results From a Qualitative Interview Study
Explore findings from qualitative interviews on the challenges of implementing usable security in software products, revealing insights for developers and security professionals.
BEACON - Directed Grey-Box Fuzzing with Provable Path Pruning
Explore advanced grey-box fuzzing techniques with provable path pruning, enhancing software testing efficiency and vulnerability detection in complex systems.
NEUZZ - Efficient Fuzzing with Neural Program Smoothing
Innovative fuzzing technique using neural networks to approximate program behavior, enabling more efficient bug discovery and higher code coverage in software testing.
If HTTPS Were Secure I Wouldn't Need 2FA - End User and Administrator Mental Models of HTTPS
Explores misconceptions about HTTPS security among end users and administrators, revealing gaps in understanding and providing recommendations for improved protocol design and user interfaces.
Towards Security and Privacy for Multi-User Augmented Reality - Foundations with End Users
Exploring security and privacy challenges in multi-user augmented reality through a qualitative study with HoloLens, revealing unique concerns and design implications for immersive AR technologies.
Learning from Mutants - Using Code Mutation to Learn and Monitor Invariants of a Cyber-Physical System
Innovative approach to automatically construct CPS models using supervised machine learning on data from systematically seeded software faults, demonstrating efficacy in detecting various attacks on a water purification plant simulator.
Jigsaw - Efficient and Scalable Path Constraints Fuzzing
Explore efficient and scalable path constraints fuzzing techniques with Jigsaw, enhancing software testing and vulnerability detection for improved system security and reliability.
The Remote on the Local - Exacerbating Web Attacks Via Service Workers Caches
Explore how service worker caches can amplify web attacks, examining vulnerabilities and potential security risks in modern web applications.
One Engine to Fuzz 'em All - Generic Language Processor Testing with Semantic Validation
Explore innovative techniques for generic language processor testing, focusing on semantic validation to enhance fuzzing efficiency and effectiveness across diverse systems.
CRYLOGGER - Detecting Crypto Misuses Dynamically
Explore dynamic detection of cryptographic misuses with CRYLOGGER, a tool for identifying vulnerabilities in real-time to enhance software security.
Trust, But Verify - A Longitudinal Analysis Of Android OEM Compliance and Customization
Longitudinal analysis exploring Android OEM compliance and customization practices, examining the balance between manufacturer modifications and adherence to platform standards.
DynPTA: Combining Static and Dynamic Analysis for Practical Selective Data Protection
Explore innovative techniques combining static and dynamic analysis for enhanced data protection, offering practical insights into selective security measures.
Runtime Recovery of Web Applications under Zero-Day ReDoS Attacks
Explore techniques for protecting web applications against zero-day ReDoS attacks, focusing on runtime recovery strategies to maintain system functionality and security.
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
Explore timing-based privacy vulnerabilities in web browsers, focusing on site isolation and its impact on user security and data protection.
The Card10 Badge - Two Years of Evolution
Explore the evolution of the card10 badge, a wearable bio-sensor device, with new firmware features, improved Bluetooth connectivity, and expanded applications like indoor climate sensing and ECG monitoring.
Hacking Containers, Kubernetes and Clouds
Demonstrating how tokens left in containers can lead to full cluster and cloud resource control, highlighting critical security vulnerabilities in Kubernetes environments.
„Du kannst eine Vorlesung nicht in LaTeX mitschreiben“, sagten sie...
Effizientes Live-Mitschreiben von Mathe-Vorlesungen in LaTeX: Vorstellung eines praktischen Setups und Tipps für erfolgreiche Umsetzung.
Deine Software, die Sicherheitslücken und ich
Verantwortungsvoller Umgang mit Sicherheitslücken: Entdeckung, Meldung und rechtliche Aspekte. Einblicke in Responsible Disclosure und Best Practices für Unternehmen beim Umgang mit gemeldeten Schwachstellen.
Welcome to FPV
Explore the world of FPV drones: learn about components, building, open-source software, and control devices. Discover how to create your own high-speed flying robot using 3D printing and electronics.