Ultimate {SLH}: Taking Speculative Load Hardening to the Next Level
.
2023. Ultimate {SLH}: Taking Speculative Load Hardening to the Next Level. 32nd USENIX Security Symposium (USENIX Security 23). :7125--7142.
Intender: Fuzzing {Intent-Based} Networking with {Intent-State} Transition Guidance
.
2023. Intender: Fuzzing {Intent-Based} Networking with {Intent-State} Transition Guidance. 32nd USENIX Security Symposium (USENIX Security 23). :4463--4480.
Oops..! I Glitched It Again! How to {Multi-Glitch} the {Glitching-Protections} on {ARM} {TrustZone-M}
.
2023. Oops..! I Glitched It Again! How to {Multi-Glitch} the {Glitching-Protections} on {ARM} {TrustZone-M}. 32nd USENIX Security Symposium (USENIX Security 23). :6239--6256.
No Single Silver Bullet: Measuring the Accuracy of Password Strength Meters
.
2023. No Single Silver Bullet: Measuring the Accuracy of Password Strength Meters. 32nd USENIX Security Symposium (USENIX Security 23). :947--964.
Place Your Locks Well: Understanding and Detecting Lock Misuse Bugs
.
2023. Place Your Locks Well: Understanding and Detecting Lock Misuse Bugs. 32nd USENIX Security Symposium (USENIX Security 23). :3727--3744.
Three Lessons From Threema: Analysis of a Secure Messenger
.
2023. Three Lessons From Threema: Analysis of a Secure Messenger. 32nd USENIX Security Symposium (USENIX Security 23). :1289--1306.
One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters for Different Android User Profiles
.
2023. One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters for Different Android User Profiles. 32nd USENIX Security Symposium (USENIX Security 23). :5683--5700.
{“Security} is not my field, {I’m} a stats {guy”}: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry
.
2023. {“Security} is not my field, {I’m} a stats {guy”}: A Qualitative Root Cause Analysis of Barriers to Adversarial Machine Learning Defenses in Industry. 32nd USENIX Security Symposium (USENIX Security 23). :3763--3780.
Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain ({{{{{BNB}}}}})
.
2023. Token Spammers, Rug Pulls, and Sniper Bots: An Analysis of the Ecosystem of Tokens in Ethereum and in the Binance Smart Chain ({{{{{BNB}}}}}). 32nd USENIX Security Symposium (USENIX Security 23). :3349--3366.
{CarpetFuzz}: Automatic Program Option Constraint Extraction from Documentation for Fuzzing
.
2023. {CarpetFuzz}: Automatic Program Option Constraint Extraction from Documentation for Fuzzing. 32nd USENIX Security Symposium (USENIX Security 23). :1919--1936.