{AURC}: Detecting Errors in Program Code and Documentation
.
2023. {AURC}: Detecting Errors in Program Code and Documentation. 32nd USENIX Security Symposium (USENIX Security 23). :1415--1432.
Downgrading {DNSSEC}: How to Exploit Crypto Agility for Hijacking Signed Zones
.
2023. Downgrading {DNSSEC}: How to Exploit Crypto Agility for Hijacking Signed Zones. 32nd USENIX Security Symposium (USENIX Security 23). :7429--7444.
Rethinking {White-Box} Watermarks on Deep Learning Models under Neural Structural Obfuscation
.
2023. Rethinking {White-Box} Watermarks on Deep Learning Models under Neural Structural Obfuscation. 32nd USENIX Security Symposium (USENIX Security 23). :2347--2364.
Remote Code Execution from {SSTI} in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs
.
2023. Remote Code Execution from {SSTI} in the Sandbox: Automatically Detecting and Exploiting Template Escape Bugs. 32nd USENIX Security Symposium (USENIX Security 23). :3691--3708.
Prime Match: A {Privacy-Preserving} Inventory Matching System
.
2023. Prime Match: A {Privacy-Preserving} Inventory Matching System. 32nd USENIX Security Symposium (USENIX Security 23). :6417--6434.
Bleem: Packet Sequence Oriented Fuzzing for Protocol Implementations
.
2023. Bleem: Packet Sequence Oriented Fuzzing for Protocol Implementations. 32nd USENIX Security Symposium (USENIX Security 23). :4481--4498.
{Araña}: Discovering and Characterizing Password Guessing Attacks in Practice
.
2023. {Araña}: Discovering and Characterizing Password Guessing Attacks in Practice. 32nd USENIX Security Symposium (USENIX Security 23). :1019--1036.
{Eye-Shield}: {Real-Time} Protection of Mobile Device Screen Information from Shoulder Surfing
.
2023. {Eye-Shield}: {Real-Time} Protection of Mobile Device Screen Information from Shoulder Surfing. 32nd USENIX Security Symposium (USENIX Security 23). :5449--5466.
{AIRS}: Explanation for Deep Reinforcement Learning based Security Applications
.
2023. {AIRS}: Explanation for Deep Reinforcement Learning based Security Applications. 32nd USENIX Security Symposium (USENIX Security 23). :7375--7392.
Minimalist: Semi-automated Debloating of {PHP} Web Applications through Static Analysis
.
2023. Minimalist: Semi-automated Debloating of {PHP} Web Applications through Static Analysis. 32nd USENIX Security Symposium (USENIX Security 23). :5557--5573.