Optimizing Seed Selection for Fuzzing
.
2014. Optimizing Seed Selection for Fuzzing. 23rd USENIX Security Symposium (USENIX Security 14). :861--875.
Size Does Matter: Why Using {Gadget-Chain} Length to Prevent {Code-Reuse} Attacks is Hard
.
2014. Size Does Matter: Why Using {Gadget-Chain} Length to Prevent {Code-Reuse} Attacks is Hard. 23rd USENIX Security Symposium (USENIX Security 14). :417--432.
{X-Force}: {Force-Executing} Binary Programs for Security Applications
.
2014. {X-Force}: {Force-Executing} Binary Programs for Security Applications. 23rd USENIX Security Symposium (USENIX Security 14). :829--844.
Blanket Execution: Dynamic Similarity Testing for Program Binaries and Components
.
2014. Blanket Execution: Dynamic Similarity Testing for Program Binaries and Components. 23rd USENIX Security Symposium (USENIX Security 14). :303-317.
{TapDance}: {End-to-Middle} Anticensorship without Flow Blocking
.
2014. {TapDance}: {End-to-Middle} Anticensorship without Flow Blocking. 23rd USENIX Security Symposium (USENIX Security 14). :159--174.
{ROP} is Still Dangerous: Breaking Modern Defenses
.
2014. {ROP} is Still Dangerous: Breaking Modern Defenses. 23rd USENIX Security Symposium (USENIX Security 14). :385--399.
{JIGSAW}: Protecting Resource Access by Inferring Programmer Expectations
.
2014. {JIGSAW}: Protecting Resource Access by Inferring Programmer Expectations. 23rd USENIX Security Symposium (USENIX Security 14). :973--988.
Burst {ORAM}: Minimizing {ORAM} Response Times for Bursty Access Patterns
.
2014. Burst {ORAM}: Minimizing {ORAM} Response Times for Bursty Access Patterns. 23rd USENIX Security Symposium (USENIX Security 14). :749--764.
The Long {“Taile”} of Typosquatting Domain Names
.
2014. The Long {“Taile”} of Typosquatting Domain Names. 23rd USENIX Security Symposium (USENIX Security 14). :191--206.
{TRUESET}: Faster {Verifiable} Set Computations
.
2014. {TRUESET}: Faster {Verifiable} Set Computations. 23rd USENIX Security Symposium (USENIX Security 14). :765--780.