Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Applications
Discover how Inspectron framework automates security vulnerability detection in Electron apps, exploring common risks and developer practices for cross-platform application security.
SymFit: Making the Common Concrete Case Fast for Binary-Code Concolic Execution
Explore optimizations in binary concolic execution, focusing on concrete instruction performance and symbolic tracing for enhanced crash deduplication efficiency in software testing.
Don't Waste My Efforts: Pruning Redundant Sanitizer Checks by Developer-Implemented Type Checks
Discover how T-PRUNIFY optimizes type confusion detection in C++ programs by identifying and leveraging developer-implemented type checks, significantly reducing runtime overhead while maintaining security.
Fuzzing BusyBox - Leveraging LLM and Crash Reuse for Embedded Bug Unearthing
Discover innovative techniques for enhancing embedded system security through LLM-powered fuzzing and crash reuse, focusing on BusyBox vulnerability detection and software testing optimization.
Vulnerability-oriented Testing for RESTful APIs
Discover a novel framework for detecting security vulnerabilities in RESTful APIs through functionality-based testing, featuring practical demonstrations and real-world applications in API security testing.
VulSim: Leveraging Similarity of Multi-Dimensional Neighbor Embeddings for Vulnerability Detection
Explore advanced vulnerability detection techniques using multi-dimensional neighbor embeddings and deep learning models to enhance software security through improved pattern recognition and data analysis.
FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection
Discover how FIRE combines multi-stage filtering and taint analysis to efficiently detect recurring vulnerabilities in open-source software, achieving 90% precision and superior performance over existing tools.
Large Language Models for Code Analysis - Evaluating LLM Performance and Limitations
Explore the capabilities and limitations of Large Language Models in code analysis, focusing on their effectiveness with obfuscated code and real-world applications through systematic evaluation.
A Binary-level Thread Sanitizer - Why Sanitizing on the Binary Level is Hard
Explore the challenges and solutions of binary-level thread sanitization through BINTSAN, a novel approach for detecting data races in Linux x86-64 targets without source code access.
HYPERPILL: Fuzzing for Hypervisor Bugs by Leveraging the Hardware Virtualization Interface
Discover a groundbreaking approach to hypervisor security testing through HYPERPILL - a universal fuzzing framework that identifies vulnerabilities across major hypervisors using hardware virtualization interfaces.
What IF Is Not Enough? Fixing Null Pointer Dereference with Contextual Check
Discover how CONCH improves null pointer dereference fixes by incorporating contextual checks, achieving 85%+ patch accuracy through innovative intraprocedural and interprocedural analysis techniques.
Exploiting Online Games - Security Issues in MMORPGs and Virtual Economies
Delve into online gaming security vulnerabilities, cheating mechanisms, and protective measures with insights from gaming security expert Gary McGraw, exploring privacy concerns and bot creation in MMORPGs.
A World Where We Trust Hard-Won Lessons in Security Research, Technology, and People
Discover key principles for transforming security research into real-world impact, bridging academic innovation with practical implementation through hard-won lessons and case studies in software safety.
Comparing Malware Evasion Theory with Practice - Results from Expert Analyst Interviews
Explore the gaps between academic research and real-world practices in malware analysis through expert interviews, revealing key challenges and opportunities for improving evasion countermeasures.
Introduction to Procedural Debugging through Binary Libification
Discover techniques for transforming ELF binaries into shared libraries and analyze memory corruption vulnerabilities through procedural debugging methods and direct function calls.
On the Effectiveness of Control-Flow Integrity in Practice - A Systematic Overview
Explore the real-world effectiveness of Control-Flow Integrity protection across Android and Windows systems, revealing critical gaps between research advances and actual deployment in practice.
Not Quite Write: On the Effectiveness of Store-Only Bounds Checking
Explore the security limitations of store-only bounds checking in C/C++ code, examining bypass vulnerabilities and potential defenses for compiler-based memory safety enforcement.
A Comprehensive Study on the Security of Arm Cortex-M Systems
Delve into a systematic analysis of Arm Cortex-M systems' security features, examining hardware limitations, software vulnerabilities, and protection mechanisms across 1,797 real-world firmware implementations.
Teaching Cybersecurity Risk Analysis and SBOM Evaluation to Aspiring Security Experts
Discover key insights and challenges in teaching IoT cybersecurity to aspiring security experts, focusing on risk analysis, SBOM evaluation, and practical learning approaches.
Developers Meet Security: Lessons Learned - Effective Communication and Training Strategies
Discover effective strategies for bridging the gap between developers and security teams, addressing communication challenges, and implementing practical security training approaches in development workflows.
Linux Distributor's Role for Supply Chain Security
Explore how Linux distributions can enhance software supply chain security through centralized access, trusted SBOM delivery, and improved vulnerability management mechanisms.