Search results
-
One Car, Two Frames: Attacks on Hitag-2 Remote Keyless Entry Systems Revisited
Network and Information Security Agency- ANSSI Since 2006, many papers were devoted to the analysis of the ...admin - December 7, 2021 - 8:26 am
-
POTUS: Probing Off-The-Shelf USB Drivers with Symbolic Fault Injection
Awarded Best Paper! USB client device drivers are a haven for software bugs, due to the sheer variety of ...admin - December 7, 2021 - 8:26 am
-
Breaking and Fixing Gridcoin
Martin Grothe, Tobias Niemann, Juraj Somorovsky, and Jörg Schwenk, Ruhr-University Bochum Bitcoin has been hailed as a new payment mechanism, and is currently accepted by millions of users. One of the major drawbacks of Bitcoin is the resource intensive P ...admin - December 7, 2021 - 8:26 am
-
Shattered Trust: When Replacement Smartphone Components Attack
processor. In this paper, we call this trust into question, considering the fact that touchscreens are often ...admin - December 7, 2021 - 8:26 am
-
White-Stingray: Evaluating IMSI Catchers Detection Applications
warn users when they are connected to the fake cellular base station. In this paper, we evaluate these ...admin - December 7, 2021 - 8:26 am
-
Software Grand Exposure: SGX Cache Attacks Are Practical
Ferdinand Brasser, Technische Universität Darmstadt; Urs Müller, Alexandra Dmitrienko, Kari Kostiainen, and Srdjan Capkun, ETH Zurich; Ahmad-Reza Sadeghi, Technische Universität Darmstadt Intel SGX isolates the memory of security-critical applications fro ...admin - December 7, 2021 - 8:26 am
-
Stalling Live Migrations on the Cloud
has been considered as a countermeasure against cloud-based side-channel attacks. In this paper, we ...admin - December 7, 2021 - 8:26 am
-
SPEAKE(a)R: Turn Speakers to Microphones for Fun and Profit
a computer, silently turning them into a pair of eavesdropping microphones. This paper focuses on the cyber ...admin - December 7, 2021 - 8:26 am
-
From random block corruption to privilege escalation: A filesystem attack vector for rowhammer-like attacks
devastating. In a recent paper, Cai et al. [2] propose that similar attacks can be performed on MLC NAND flash. ... In this paper, we discuss the requirements for a successful, full-system, local privilege escalation ...admin - December 7, 2021 - 8:26 am
-
One Side-Channel to Bring Them All and in the Darkness Bind Them: Associating Isolated Browsing Sessions
importance that the complete threat surface is known such that all risks can be considered. In this paper we ...admin - December 7, 2021 - 8:26 am
-
Adversarial Example Defense: Ensembles of Weak Defenses are not Strong
Warren He, James Wei, Xinyun Chen, Nicholas Carlini, and Dawn Song, UC Berkeley Ongoing research has proposed several methods to defend neural networks against adversarial examples, many of which researchers have shown to be ineffective. We ask whether a ...admin - December 7, 2021 - 8:57 am
-
BADFET: Defeating Modern Secure Boot Using Second-Order Pulsed Electromagnetic Fault Injection
infeasible against modern computers and embedded devices. This paper makes two contributions. First, we ...admin - December 7, 2021 - 8:57 am
-
Understanding Malware’s Network Behaviors using Fantasm
Xiyue Deng, Hao Shi, and Jelena Mirkovic, USC/Information Sciences Institute Background: There is very little data about how often contemporary malware communicates with the Internet and how essential this communication is for malware’s functionality. Aim ...michele - December 6, 2021 - 1:30 pm
-
Open-source Measurement of Fast-flux Networks While Considering Domain-name Parking
Fast-flux is a technique malicious actors use for resilient malware communications. In this paper, domain ... to keep it ready for “live” use. Many papers use “parking” to mean typosquatting for ad revenue. ...michele - December 6, 2021 - 2:30 pm
-
Lessons Learned from Evaluating Eight Password Nudges in the Wild
Karen Renaud, Abertay University; Verena Zimmerman, Technische Universitåt Darmstadt; Joseph Maguire and Steve Draper, University of Glasgow Background. The tension between security and convenience, when creating passwords, is well established. It is a te ...michele - December 6, 2021 - 2:30 pm
-
An Empirical Investigation of Security Fatigue: The Case of Password Choice after Solving a CAPTCHA
Kovila P.L. Coopamootoo and Thomas Groß, Newcastle University; M. Faizal R. Pratama, University of Derby Background. User fatigue or overwhelm in current security tasks has been called security fatigue by the research community. However, security fatigue ...michele - December 6, 2021 - 2:30 pm
-
Dead on Arrival: Recovering from Fatal Flaws in Email Encryption Tools
Juan Ramón Ponce Mauriés, University College London; Kat Krol, University of Cambridge; Simon Parkin, Ruba Abu-Salma, and M. Angela Sasse, University College London Background. Since Whitten and Tygar’s seminal study of PGP 5.0 in 1999, there have been co ...michele - December 6, 2021 - 2:30 pm
-
The Impacts of Representational Fluency on Cognitive Processing of Cryptography Concepts
Joseph Beckman, Sumra Bari, Yingjie Chen, Melissa Dark, and Baijian Yang, Purdue University fMRI presents a new measurement tool for the measurement of cognitive processing. fMRI analysis has been used in neuroscience to determine where cognitive processi ...michele - December 6, 2021 - 2:30 pm
-
Self-Protective Behaviors Over Public WiFi Networks
adopt a range of self-protective behaviors to prevent their potential online victimization. This paper ...michele - December 6, 2021 - 2:30 pm
-
Measuring the Success of Context-Aware Security Behaviour Surveys
Ingolf Becker, Simon Parkin, and M. Angela Sasse, University College London Background. We reflect on a methodology for developing scenario-based security behaviour surveys that evolved through deployment in two large partner organisations (A & B). In ...michele - December 6, 2021 - 2:30 pm
-
Protocol-Aware Recovery for Consensus-Based Storage
Wisconsin—Madison Awarded Best Paper! We introduce protocol-aware recovery (PAR), a new approach that exploits ...admin - December 6, 2021 - 12:30 am
-
Improving Docker Registry Design Based on Production Workload Analysis
paper, we perform a comprehensive characterization of a large-scale registry workload based on traces ...admin - December 6, 2021 - 1:30 am
-
ALACC: Accelerating Restore Performance of Data Deduplication Systems Using Adaptive Look-Ahead Window Assisted Chunk Caching
use these schemes to get the best restore performance is still unclear. In this paper, we first study ...admin - December 6, 2021 - 1:30 am
-
Towards Robust File System Checkers
Om Rameshwar Gatla, Muhammad Hameed, and Mai Zheng, New Mexico State University; Viacheslav Dubeyko, Adam Manzanares, Filip Blagojevic, Cyril Guyot, and Robert Mateescu, Western Digital Research File systems may become corrupted for many reasons despite v ...admin - December 6, 2021 - 1:30 am
-
Logical Synchronous Replication in the Tintri VMstore File System
Gideon Glass, Arjun Gopalan, Dattatraya Koujalagi, Abhinand Palicherla, and Sumedh Sakdeo, Tintri, Inc A standard feature of enterprise data storage systems is synchronous replication: updates received from clients by one storage system are replicated to ...admin - December 6, 2021 - 1:30 am