Search results
-
Provenance Segmentation
or summarizing part or all of the graph in order to identify patterns or features. In this paper, we ...arnold - December 11, 2021 - 3:24 am
-
Towards Secure User-space Provenance Capture
Nikilesh Balakrishnan, Thomas Bytheway, Lucian Carata, Ripduman Sohan, and Andy Hopper, University of Cambridge System and library call interception performed entirely in user-space is a viable technique for provenance capture. The primary advantages of s ...arnold - December 11, 2021 - 3:24 am
-
Scaling SPADE to "Big Provenance"
Ashish Gehani, Hasanat Kazmi, and Hassaan Irshad, SRI International Provenance middleware (such as SPADE) lets individuals and applications use a common framework for reporting, storing, and querying records that characterize the history of computational ...arnold - December 11, 2021 - 3:24 am
-
Automatic Versus Manual Provenance Abstractions: Mind the Gap
workflow’s design, such as using subworkflows. This paper reports on the comparison of manual versus ...arnold - December 11, 2021 - 3:24 am
-
Composition and Substitution in Provenance and Workflows
another. In this paper we take an operational approach. For example, given two provenance graphs of ...arnold - December 11, 2021 - 3:24 am
-
From Scientific Workflow Patterns to 5-star Linked Open Data
for better interpretation and sharing of results. In this paper, we propose PoeM, a lightweight ...arnold - December 11, 2021 - 3:24 am
-
Provenance-aware Versioned Dataworkspaces
Xing Niu and Bahareh Sadat Arab, Illinois Institute of Technology; Dieter Gawlick, Zhen Hua Liu, and Vasudha Krishnaswamy, Oracle Corporation; Oliver Kennedy, University at Buffalo; Boris Glavic, Illinois Institute of Technology Data preparation, curation ...arnold - December 11, 2021 - 3:24 am
-
The Data, They Are A-Changin'
i.e. through complete or partial re-computation of some of the underlying processes. In this paper we ...arnold - December 11, 2021 - 3:24 am
-
Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability Notification
note in prior research. In this paper, we systematically examine the feasibility and efficacy of ...admin - December 9, 2021 - 3:09 pm
-
Identifying and Characterizing Sybils in the Tor Network
Philipp Winter, Princeton University and Karlstad University; Roya Ensafi, Princeton University; Karsten Loesing, The Tor Project; Nick Feamster, Princeton University Being a volunteer-run, distributed anonymity network, Tor is vulnerable to Sybil attacks ...admin - December 9, 2021 - 3:09 pm
-
You Are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors
Neil Zhenqiang Gong, Iowa State University; Bin Liu, Rutgers University We propose new privacy attacks to infer attributes (e.g., locations, occupations, and interests) of online social network users. Our attacks leverage seemingly innocent user informati ...admin - December 9, 2021 - 3:09 pm
-
What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP Defenses
Giorgi Maisuradze, Michael Backes, and Christian Rossow, Saarland University Despite numerous attempts to mitigate code-reuse attacks, Return-Oriented Programming (ROP) is still at the core of exploiting memory corruption vulnerabilities. Most notably, in ...admin - December 9, 2021 - 3:09 pm
-
PIkit: A New Kernel-Independent Processor-Interconnect Rootkit
Wonjun Song, Hyunwoo Choi, Junhong Kim, Eunsoo Kim, Yongdae Kim, and John Kim, Korea Advanced Institute of Science and Technology (KAIST) The goal of rootkit is often to hide malicious software running on a compromised machine. While there has been signif ...admin - December 9, 2021 - 4:09 pm
-
Stealing Machine Learning Models via Prediction APIs
Florian Tramèr, École Polytechnique Fédérale de Lausanne (EPFL); Fan Zhang, Cornell University; Ari Juels, Cornell Tech; Michael K. Reiter, The University of North Carolina at Chapel Hill; Thomas Ristenpart, Cornell Tech Machine learning (ML) models may b ...admin - December 9, 2021 - 4:09 pm
-
Protecting Privacy of BLE Device Users
solution that requires changes to the devices or the BLE protocol. In this paper, we propose a new ...admin - December 9, 2021 - 4:09 pm
-
Internet Jones and the Raiders of the Lost Trackers: An Archaeological Study of Web Tracking from 1996 to 2016
context. In this paper, we present longitudinal measurements of third-party web tracking behaviors from ...admin - September 27, 2022 - 4:37 pm
-
On Omitting Commits and Committing Omissions: Preventing Git Metadata Tampering That (Re)introduces Software Vulnerabilities
Santiago Torres-Arias, New York University; Anil Kumar Ammula and Reza Curtmola, New Jersey Institute of Technology; Justin Cappos, New York University Metadata manipulation attacks represent a new threat class directed against Version Control Systems, su ...admin - December 9, 2021 - 4:09 pm
-
FlowFence: Practical Data Protection for Emerging IoT Application Frameworks
Earlence Fernandes, Justin Paupore, and Amir Rahmati, University of Michigan; Daniel Simionato and Mauro Conti, University of Padova; Atul Prakash, University of Michigan Emerging IoT programming frameworks enable building apps that compute on sensitive d ...admin - December 9, 2021 - 4:09 pm
-
Towards Measuring and Mitigating Social Engineering Software Download Attacks
has been dedicated to studying social engineering attacks. In this paper, we present the first ...admin - December 9, 2021 - 4:09 pm
-
Egalitarian Computing
Alex Biryukov and Dmitry Khovratovich, University of Luxembourg In this paper we explore several ...admin - December 9, 2021 - 4:09 pm
-
Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks
(ASLR). In this paper we present Graffiti, an efficient hypervisorbased memory analysis framework for the ...admin - December 9, 2021 - 4:09 pm
-
Specification Mining for Intrusion Detection in Networked Control Systems
Science Institute and Lawrence Berkeley National Laboratory; Frank Kargl, Ulm University This paper ... continuously monitor network traffic. In this paper, we implement this approach for BACnet-based building ...admin - December 9, 2021 - 4:09 pm
-
An In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries
needed error handling for these primitives. We study 30 papers recently published in six major security ...admin - December 9, 2021 - 5:09 pm
-
APISan: Sanitizing API Usages through Semantic Cross-Checking
software comprising millions of lines of code. In this paper, we present APISAN, a tool that automatically ...admin - December 9, 2021 - 5:09 pm
-
Post-quantum Key Exchange—A New Hope
Erdem Alkim, Ege University; Léo Ducas, Centrum voor Wiskunde en Informatica; Thomas Pöppelmann, Infineon Technologies AG; Peter Schwabe, Radboud University Winner of the 2016 Internet Defense Prize At IEEE Security & Privacy 2015, Bos, Costello, Naeh ...admin - December 9, 2021 - 5:09 pm