Midas: Systematic Kernel {TOCTTOU} Protection
.
2022. Midas: Systematic Kernel {TOCTTOU} Protection. 31st USENIX Security Symposium (USENIX Security 22). :107--124.
Repurposing Segmentation as a Practical {LVI-NULL} Mitigation in {SGX}
.
2022. Repurposing Segmentation as a Practical {LVI-NULL} Mitigation in {SGX}. 31st USENIX Security Symposium (USENIX Security 22). :3111--3127.
Orca: Blocklisting in {Sender-Anonymous} Messaging
.
2022. Orca: Blocklisting in {Sender-Anonymous} Messaging. 31st USENIX Security Symposium (USENIX Security 22). :2299--2316.
Rendering Contention Channel Made Practical in Web Browsers
.
2022. Rendering Contention Channel Made Practical in Web Browsers. 31st USENIX Security Symposium (USENIX Security 22). :3183--3199.
{OpenSSLNTRU}: Faster post-quantum {TLS} key exchange
.
2022. {OpenSSLNTRU}: Faster post-quantum {TLS} key exchange. 31st USENIX Security Symposium (USENIX Security 22). :845--862.
"{{{{{OK}}}}}, Siri" or "Hey, Google": Evaluating Voiceprint Distinctiveness via Content-based {PROLE} Score
.
2022. "{{{{{OK}}}}}, Siri" or "Hey, Google": Evaluating Voiceprint Distinctiveness via Content-based {PROLE} Score. 31st USENIX Security Symposium (USENIX Security 22). :1131--1148.
{PISTIS}: Trusted Computing Architecture for Low-end Embedded Systems
.
2022. {PISTIS}: Trusted Computing Architecture for Low-end Embedded Systems. 31st USENIX Security Symposium (USENIX Security 22). :3843--3860.
Stick It to The Man: Correcting for {Non-Cooperative} Behavior of Subjects in Experiments on Social Networks
.
2022. Stick It to The Man: Correcting for {Non-Cooperative} Behavior of Subjects in Experiments on Social Networks. 31st USENIX Security Symposium (USENIX Security 22). :3771--3788.
Mining Node.js Vulnerabilities via Object Dependence Graph and Query
.
2022. Mining Node.js Vulnerabilities via Object Dependence Graph and Query. 31st USENIX Security Symposium (USENIX Security 22). :143--160.
Security and Privacy Perceptions of {Third-Party} Application Access for Google Accounts
.
2022. Security and Privacy Perceptions of {Third-Party} Application Access for Google Accounts. 31st USENIX Security Symposium (USENIX Security 22). :3397--3414.