Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation
.
2024. Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation. 33rd USENIX Security Symposium (USENIX Security 24). :1189--1206.
{InSpectre} Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2
.
2024. {InSpectre} Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2. 33rd USENIX Security Symposium (USENIX Security 24). :577--594.
{SCAVY}: Automated Discovery of Memory Corruption Targets in Linux Kernel for Privilege Escalation
.
2024. {SCAVY}: Automated Discovery of Memory Corruption Targets in Linux Kernel for Privilege Escalation. 33rd USENIX Security Symposium (USENIX Security 24). :7141--7158.
Prefetch for Fun and Profit: A Revisit of Prefetch Attacks on Apple M1
.
2024. Prefetch for Fun and Profit: A Revisit of Prefetch Attacks on Apple M1. 33rd USENIX Security Symposium (USENIX Security 24).
{CO3}: Concolic Co-execution for Firmware
.
2024. {CO3}: Concolic Co-execution for Firmware. 33rd USENIX Security Symposium (USENIX Security 24). :5591--5608.
Toward Unbiased {Multiple-Target} Fuzzing with Path Diversity
.
2024. Toward Unbiased {Multiple-Target} Fuzzing with Path Diversity. 33rd USENIX Security Symposium (USENIX Security 24). :2475--2492.
{LLM-Fuzzer}: Scaling Assessment of Large Language Model Jailbreaks
.
2024. {LLM-Fuzzer}: Scaling Assessment of Large Language Model Jailbreaks. 33rd USENIX Security Symposium (USENIX Security 24). :4657--4674.
Into the Dark: Unveiling Internal Site Search Abused for Black Hat {SEO}
.
2024. Into the Dark: Unveiling Internal Site Search Abused for Black Hat {SEO}. 33rd USENIX Security Symposium (USENIX Security 24). :1561--1578.
Shesha: Multi-head Microarchitectural Leakage Discovery in new-generation Intel Processors
.
2024. Shesha: Multi-head Microarchitectural Leakage Discovery in new-generation Intel Processors. 33rd USENIX Security Symposium (USENIX Security 24). :595--612.
Do You See How I Pose? Using Poses as an Implicit Authentication Factor for {QR} Code Payment
.
2024. Do You See How I Pose? Using Poses as an Implicit Authentication Factor for {QR} Code Payment 33rd USENIX Security Symposium (USENIX Security 24). :4571--4588.