Search results
-
JEDI: Many-to-Many End-to-End Encryption and Key Delegation for IoT
This paper proposes JEDI (J oining E ncryption and D elegation for I oT), a many-to-many end-to-end ...admin - November 30, 2021 - 6:52 pm
-
All Things Considered: An Analysis of IoT Devices on Home Networks
Zakir Durumeric, Stanford University In this paper, we provide the first large-scale empirical analysis ...admin - November 30, 2021 - 6:52 pm
-
uXOM: Efficient eXecute-Only Memory on ARM Cortex-M
hardware support for XOM. In this paper, we propose a novel technique, named u XOM, that realizes XOM in ...admin - November 30, 2021 - 6:52 pm
-
Understanding iOS-based Crowdturfing Through Hidden UI Analysis
crowdturfing apps on a large scale, particularly on the Apple platform. In this paper, we report the first ...admin - November 30, 2021 - 6:52 pm
-
No Right to Remain Silent: Isolating Malicious Mixes
Hemi Leibowitz, Bar-Ilan University, IL; Ania M. Piotrowska and George Danezis, University College London, UK; Amir Herzberg, University of Connecticut, US Mix networks are a key technology to achieve network anonymity and private messaging, voting and da ...admin - November 30, 2021 - 7:53 pm
-
Protecting Cloud Virtual Machines from Hypervisor and Host Operating System Exploits
Shih-Wei Li, John S. Koh, and Jason Nieh, Columbia University Hypervisors are widely deployed by cloud computing providers to support virtual machines, but their growing complexity poses a security risk as large codebases contain many vulnerabilities. We ...admin - November 30, 2021 - 7:53 pm
-
Exploiting Unprotected I/O Operations in AMD’s Secure Encrypted Virtualization
were mostly unexplored in the literature. This paper studies the insecurity of SEV from the perspective ...admin - November 30, 2021 - 7:53 pm
-
Detecting Missing-Check Bugs via Semantic- and Context-Aware Criticalness and Constraints Inferences
understanding them is a hard problem. In this paper, we present CRIX, a system for detecting missing-check bugs ...admin - November 30, 2021 - 7:53 pm
-
MOPT: Optimized Mutation Scheduling for Fuzzers
operators, which is inefficient in finding vulnerabilities on general programs. Thus, in this paper, we ...admin - November 30, 2021 - 7:53 pm
-
CT-GAN: Malicious Tampering of 3D Medical Imagery using Deep Learning
paper, we show how an attacker can use deep-learning to add or remove evidence of medical conditions from ...admin - November 30, 2021 - 7:53 pm
-
What Are You Searching For? A Remote Keylogging Attack on Search Engine Autocomplete
John V. Monaco, Naval Postgraduate School Many search engines have an autocomplete feature that presents a list of suggested queries to the user as they type. Autocomplete induces network traffic from the client upon changes to the query in a web page. We ...admin - November 30, 2021 - 7:53 pm
-
Utility-Optimized Local Differential Privacy Mechanisms for Distribution Estimation
sensitive, which causes excessive obfuscation hence the loss of utility. In this paper, we introduce the ...admin - November 30, 2021 - 7:53 pm
-
Platforms in Everything: Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting
Science Institute; Damon McCoy, New York University; Michel van Eeten, TU Delft This paper presents the ...admin - November 30, 2021 - 7:53 pm
-
EnTrust: Regulating Sensor Access by Cooperating Programs via Delegation Graphs
to be too restrictive for many cases. In this paper, we propose EnTrust, an authorization system that ...admin - November 30, 2021 - 7:53 pm
-
HideMyApp: Hiding the Presence of Sensitive Apps on Android
Anh Pham, ABB Corporate Research; Italo Dacosta, EPFL; Eleonora Losiouk, University of Padova; John Stephan, EPFL; Kévin Huguenin, University of Lausanne; Jean-Pierre Hubaux, EPFL Millions of users rely on mobile health (mHealth) apps to manage their well ...admin - November 30, 2021 - 8:55 pm
-
RAZOR: A Framework for Post-deployment Software Debloating
program source code, limiting their deployability. In this paper, we propose a practical debloating ...admin - November 30, 2021 - 8:55 pm
-
Misleading Authorship Attribution of Source Code using Adversarial Learning
Erwin Quiring, Alwin Maier, and Konrad Rieck, TU Braunschweig In this paper, we present a novel ...admin - November 30, 2021 - 8:55 pm
-
50 Ways to Leak Your Data: An Exploration of Apps' Circumvention of the Android Permissions System
/ ICSI / AppCensus Inc. Distinguished Paper Award Winner Modern smartphone platforms implement ...admin - November 30, 2021 - 8:55 pm
-
Site Isolation: Process Separation for Web Sites within the Browser
different web sites in the same process. In this paper, we describe our successful deployment of the Site ...admin - November 30, 2021 - 8:55 pm
-
ALOHA: Auxiliary Loss Optimization for Hypothesis Augmentation
Ethan M. Rudd, Felipe N. Ducau, Cody Wild, Konstantin Berlin, and Richard Harang, Sophos Malware detection is a popular application of Machine Learning for Information Security (ML-Sec), in which an ML classifier is trained to predict whether a given file ...admin - November 30, 2021 - 8:55 pm
-
Secure Multi-User Content Sharing for Augmented Reality Applications
Kimberly Ruth, Tadayoshi Kohno, and Franziska Roesner, University of Washington Augmented reality (AR), which overlays virtual content on top of the user's perception of the real world, has now begun to enter the consumer market. Besides smartphone p ...admin - November 30, 2021 - 8:55 pm
-
Wireless Attacks on Aircraft Instrument Landing Systems
platforms. In this paper, we investigate the vulnerability of aircraft instrument landing systems (ILS) to ...admin - November 30, 2021 - 8:55 pm
-
ATTACK2VEC: Leveraging Temporal Word Embeddings to Understand the Evolution of Cyberattacks
in more complex cyberattacks. In this paper we present ATTACK2VEC, a system that uses word embeddings ...admin - November 30, 2021 - 8:55 pm
-
A Study of the Feasibility of Co-located App Attacks against BLE and a Large-Scale Analysis of the Current Application-Layer Security Landscape
protect sensitive data such that only authenticated devices can access it. In this paper we show how ...admin - November 30, 2021 - 8:55 pm
-
StrongChain: Transparent and Collaborative Proof-of-Work Consensus
Pawel Szalachowski, Daniël Reijsbergen, and Ivan Homoliak, Singapore University of Technology and Design (SUTD); Siwei Sun, Institute of Information Engineering and DCS Center, Chinese Academy of Sciences Bitcoin is the most successful cryptocurrency so f ...admin - November 30, 2021 - 9:57 pm