Search results
-
Robust Website Fingerprinting Through the Cache Occupancy Channel
= {https://www.usenix.org/conference/usenixsecurity19/presentation/shusterman}, publisher = {USENIX Association}, month = aug} Download Shusterman Paper (Prepublication) PDF ...admin - November 30, 2021 - 2:45 pm
-
XONN: XNOR-based Oblivious Deep Neural Network Inference
paper introduces XONN (pronounced /ZAn/), a novel end-to-end framework based on Yao's Garbled ... Association}, month = aug} Download Riazi Paper (Prepublication) PDF Riazi PDF ...admin - November 30, 2021 - 2:45 pm
-
“Johnny, you are fired!” – Spoofing OpenPGP and S/MIME Signatures in Emails
= {https://www.usenix.org/conference/usenixsecurity19/presentation/muller}, publisher = {USENIX Association}, month = aug} Download Muller Paper (Prepublication) PDF Muller ...admin - November 30, 2021 - 2:45 pm
-
TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time
0.99 appear to leave very little room for improvement. In this paper, we argue that results are ... = {https://www.usenix.org/conference/usenixsecurity19/presentation/pendlebury}, publisher = {USENIX Association}, month = aug} Download Pendlebury Paper (Prepublication) PDF ...admin - November 30, 2021 - 2:45 pm
-
Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities
Robert Merget and Juraj Somorovsky, Ruhr University Bochum; Nimrod Aviram, Tel Aviv University; Craig Young, Tripwire VERT; Janis Fliegenschmidt and Jörg Schwenk, Ruhr University Bochum; Yuval Shavitt, Tel Aviv University The TLS protocol provides encrypt ...admin - November 30, 2021 - 2:45 pm
-
When the Signal is in the Noise: Exploiting Diffix's Sticky Noise
allowing for an unlimited number of queries. This paper presents a new class of noise-exploitation attacks, ... = {https://www.usenix.org/conference/usenixsecurity19/presentation/gadotti}, publisher = {USENIX Association}, month = aug} Download Gadotti Paper (Prepublication) PDF Gadotti ...admin - November 30, 2021 - 2:45 pm
-
AntiFuzz: Impeding Fuzzing Audits of Binary Executables
fuzzing. In this paper, we introduce several techniques to protect a binary executable against an analysis ... = {https://www.usenix.org/conference/usenixsecurity19/presentation/guler}, publisher = {USENIX Association}, month = aug} Download Guler Paper (Prepublication) PDF Guler PDF ...admin - November 30, 2021 - 2:45 pm
-
Provenance Meets Bidirectional Transformations
explanations, to help users understand complex system behavior. In this paper we explore whether and how these ...michele - December 2, 2021 - 5:30 am
-
Structural summaries for visual provenance analysis
Houssem Ben Lahmar and Melanie Herschel, IPVS–University of Stuttgart Many systems today exist to collect provenance that describes how some data was derived. Such provenance represents useful information in many use cases, e.g., reproducibility or deriva ...michele - December 2, 2021 - 5:30 am
-
Query-based Why-not Explanations for Nested Data
Ralf Diestelkämper, IPVS–University of Stuttgart; Boris Glavic, Illinois Institute of Technology; Melanie Herschel, IPVS–University of Stuttgart; Seokki Lee, Illinois Institute of Technology We present the first query-based approach for explaining missing ...michele - December 2, 2021 - 5:30 am
-
Aggregating unsupervised provenance anomaly detectors
Ghita Berrada, University of Edinburgh; James Cheney, University of Edinburgh and The Alan Turing Institute System-level provenance offers great promise for improving security by facilitating the detection of attacks. Unsupervised anomaly detection techni ...michele - December 2, 2021 - 5:30 am
-
GitHub2PROV: Provenance for Supporting Software Project Management
support decision-making. In this paper, we propose a PROV model GitHub2PROV, which extends Git2PROV with ...michele - December 2, 2021 - 5:30 am
-
Mining Data Provenance to Detect Advanced Persistent Threats
Mathieu Barre, INRIA; Ashish Gehani and Vinod Yegneswaran, SRI International An advanced persistent threat (APT) is a stealthy malware instance that gains unauthorized access to a system and remains undetected for an extended time period. The aim of this ...michele - December 2, 2021 - 6:30 am
-
Modeling Provenance and Understanding Reproducibility for OpenRefine Data Cleaning Workflows
Timothy McPhillips, Lan Li, Nikolaus Parulian, and Bertram Ludäscher, University of Illinois at Urbana-Champaign Preparation of data sets for analysis is a critical component of research in many disciplines. Recording the steps taken to clean data sets is ...michele - December 2, 2021 - 6:30 am
-
The Betrayal At Cloud City: An Empirical Analysis Of Cloud-Based Mobile Backends
where to report vulnerabilities. This paper presents SkyWalker, a pipeline to automatically vet the ...admin - November 30, 2021 - 3:47 pm
-
WAVE: A Decentralized Authorization Framework with Transitive Delegation
Michael P Andersen, Sam Kumar, Moustafa AbdelBaky, Gabe Fierro, John Kolb, Hyung-Sin Kim, David E. Culler, and Raluca Ada Popa, University of California, Berkeley Most deployed authorization systems rely on a central trusted service whose compromise can l ...admin - November 30, 2021 - 3:47 pm
-
PolicyLint: Investigating Internal Privacy Policy Contradictions on Google Play
oversight: they do not account for contradictions that may occur within an individual policy. In this paper ...admin - November 30, 2021 - 3:47 pm
-
Less is More: Quantifying the Security Benefits of Debloating Web Applications
yet been investigated. In this paper, we present the first analysis of the security benefits of ...admin - November 30, 2021 - 3:47 pm
-
Losing the Car Keys: Wireless PHY-Layer Insecurity in EV Charging
Richard Baker and Ivan Martinovic, University of Oxford Electric vehicles (EVs) are proliferating quickly, along with the charging infrastructure for them. A new generation of charger technologies is emerging, handling more sensitive data and undertaking ...admin - November 30, 2021 - 3:47 pm
-
CSI NN: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel
Lejla Batina, Radboud University, The Netherlands; Shivam Bhasin and Dirmanto Jap, Nanyang Technological University, Singapore; Stjepan Picek, Delft University of Technology, The Netherlands Machine learning has become mainstream across industries. Numero ...admin - November 30, 2021 - 3:47 pm
-
Please Pay Inside: Evaluating Bluetooth-based Detection of Gas Pump Skimmers
Nishant Bhaskar and Maxwell Bland, University of California San Diego; Kirill Levchenko, University of Illinois at Urbana-Champaign; Aaron Schulman, University of California San Diego Gas pump skimming is one of the most pervasive forms of payment card at ...admin - November 30, 2021 - 3:47 pm
-
Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of Cryptojacking Campaigns at Internet Scale
owners, as well as criminals seeking new ways to earn a profit. In this paper, we perform two large ...admin - November 30, 2021 - 3:47 pm
-
GRIMOIRE: Synthesizing Structure while Fuzzing
during normal fuzzing. In this paper, we present the design and implementation of GRIMOIRE, a fully ...admin - November 30, 2021 - 3:47 pm
-
On (The Lack Of) Location Privacy in Crowdsourcing Applications
Spyros Boukoros, TU-Darmstadt; Mathias Humbert, Swiss Data Science Center (ETH Zurich, EPFL); Stefan Katzenbeisser, TU-Darmstadt, University of Passau; Carmela Troncoso, EPFL Crowdsourcing enables application developers to benefit from large and diverse d ...admin - November 30, 2021 - 3:47 pm
-
A Systematic Evaluation of Transient Execution Attacks and Defenses
attack surface and the completeness of the proposed defenses. In this paper, we present a systematization ...admin - November 30, 2021 - 4:48 pm