SpotProxy: Rediscovering the Cloud for Censorship Circumvention
Discover how SpotProxy leverages cloud Spot VMs to create cost-effective, dynamic censorship circumvention proxies that automatically refresh IP addresses while maintaining seamless connectivity.
VulSim: Leveraging Similarity of Multi-Dimensional Neighbor Embeddings for Vulnerability Detection
Explore advanced vulnerability detection techniques using multi-dimensional neighbor embeddings and deep learning models to enhance software security through improved pattern recognition and data analysis.
Attacks on Shared State in Multi-User Augmented Reality Applications
Explore security vulnerabilities in multi-user AR applications, focusing on shared state attacks, their implications, and potential defense strategies for protecting augmented reality frameworks.
WEBRR: A Forensic System for Replaying and Investigating Web-Based Attacks in The Modern Web
Explore a novel forensic system that enables deterministic replay and investigation of web-based attacks through JavaScript Execution Unit Partitioning, offering enhanced visibility into cyber threats.
FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection
Discover how FIRE combines multi-stage filtering and taint analysis to efficiently detect recurring vulnerabilities in open-source software, achieving 90% precision and superior performance over existing tools.
Large Language Models for Code Analysis - Evaluating LLM Performance and Limitations
Explore the capabilities and limitations of Large Language Models in code analysis, focusing on their effectiveness with obfuscated code and real-world applications through systematic evaluation.
Content Moderation in the InterPlanetary File System - A Study of Problematic Content Detection and Filtering
Explore content moderation challenges in IPFS, examining problematic content detection, hosting patterns, and improved filtering methods for decentralized web infrastructure.
Web Platform Threats: Automated Detection of Web Security Issues with WPT
Discover how automated detection frameworks identify security flaws in web browser mechanisms, exploring practical approaches to validate web invariants and detect vulnerabilities across major browsers.
Towards an Effective Method of ReDoS Detection for Non-backtracking Engines
Explore advanced techniques for detecting ReDoS vulnerabilities in non-backtracking regex engines, featuring EvilStrGen tool and novel attack string generation methods for enhanced security testing.
A Binary-level Thread Sanitizer - Why Sanitizing on the Binary Level is Hard
Explore the challenges and solutions of binary-level thread sanitization through BINTSAN, a novel approach for detecting data races in Linux x86-64 targets without source code access.
Yes, One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection
Explore FrameFlip, a groundbreaking attack method that depletes DNN model inference through single-bit fault injections, demonstrating universal effectiveness across major machine learning frameworks.
A Taxonomy of C Decompiler Fidelity Issues
Explore a comprehensive analysis of C decompiler output fidelity issues, examining defects beyond missing names and types to improve reverse engineering effectiveness in security analysis.
HYPERPILL: Fuzzing for Hypervisor Bugs by Leveraging the Hardware Virtualization Interface
Discover a groundbreaking approach to hypervisor security testing through HYPERPILL - a universal fuzzing framework that identifies vulnerabilities across major hypervisors using hardware virtualization interfaces.
What IF Is Not Enough? Fixing Null Pointer Dereference with Contextual Check
Discover how CONCH improves null pointer dereference fixes by incorporating contextual checks, achieving 85%+ patch accuracy through innovative intraprocedural and interprocedural analysis techniques.
Exploiting Online Games - Security Issues in MMORPGs and Virtual Economies
Delve into online gaming security vulnerabilities, cheating mechanisms, and protective measures with insights from gaming security expert Gary McGraw, exploring privacy concerns and bot creation in MMORPGs.
Data Center Growing Pains - Environmental Challenges and Solutions
Discover strategies for managing data center growth challenges, power consumption, and environmental compliance through Sun Microsystems' innovative approaches and real-world experiences.
Experiences with Scalable Network Operations at Akamai
Discover how Akamai manages its global content delivery network through automation, scaling strategies, and distributed systems management across 20,000+ servers in 72 countries.
BGP Prefix Hijacking and the Spam Wars - Network Layer Security Implications
Delve into BGP prefix hijacking's role in spam warfare, exploring how spammers exploit network routing to defeat blacklists and the concerning implications for IPv4 address manipulation.
Computing Challenges for CERN's Large Hadron Collider - Data Storage and Grid Computing
Explore CERN's Large Hadron Collider computing infrastructure, focusing on cluster management, data storage, and grid computing solutions for handling massive particle physics data generation.
Python Physics: Symbolic Lagrangian Solutions Using SymPy
Master symbolic computation in physics by solving pendulum equations using Python's Sympy library, combining classical mechanics with modern computational methods.
Lagrangian Mechanics - Bead on a Rotating Hoop
Explore the dynamics of a bead on a rotating hoop through Lagrangian mechanics, featuring practical Python implementations and detailed mathematical analysis.