Small World with High Risks: A Study of Security Threats in the npm Ecosystem
.
2019. Small World with High Risks: A Study of Security Threats in the npm Ecosystem. 28th USENIX Security Symposium (USENIX Security 19). :995--1010.
The Betrayal At Cloud City: An Empirical Analysis Of {Cloud-Based} Mobile Backends
.
2019. The Betrayal At Cloud City: An Empirical Analysis Of {Cloud-Based} Mobile Backends. 28th USENIX Security Symposium (USENIX Security 19). :551--566.
{WAVE}: A Decentralized Authorization Framework with Transitive Delegation
.
2019. {WAVE}: A Decentralized Authorization Framework with Transitive Delegation. 28th USENIX Security Symposium (USENIX Security 19). :1375--1392.
{PolicyLint}: Investigating Internal Privacy Policy Contradictions on Google Play
.
2019. {PolicyLint}: Investigating Internal Privacy Policy Contradictions on Google Play. 28th USENIX Security Symposium (USENIX Security 19). :585--602.
Less is More: Quantifying the Security Benefits of Debloating Web Applications
.
2019. Less is More: Quantifying the Security Benefits of Debloating Web Applications. 28th USENIX Security Symposium (USENIX Security 19). :1697--1714.
Losing the Car Keys: Wireless {PHY-Layer} Insecurity in {EV} Charging
.
2019. Losing the Car Keys: Wireless {PHY-Layer} Insecurity in {EV} Charging. 28th USENIX Security Symposium (USENIX Security 19). :407--424.
{CSI} {NN}: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel
.
2019. {CSI} {NN}: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel. 28th USENIX Security Symposium (USENIX Security 19). :515--532.
Please Pay Inside: Evaluating Bluetooth-based Detection of Gas Pump Skimmers
.
2019. Please Pay Inside: Evaluating Bluetooth-based Detection of Gas Pump Skimmers. 28th USENIX Security Symposium (USENIX Security 19). :373--388.
Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of Cryptojacking Campaigns at Internet Scale
.
2019. Inadvertently Making Cyber Criminals Rich: A Comprehensive Study of Cryptojacking Campaigns at Internet Scale. 28th USENIX Security Symposium (USENIX Security 19). :1627--1644.
{GRIMOIRE}: Synthesizing Structure while Fuzzing
.
2019. {GRIMOIRE}: Synthesizing Structure while Fuzzing. 28th USENIX Security Symposium (USENIX Security 19). :1985--2002.