The following demos and posters will be presented at the WOOT '26 Demo/Poster Session and Happy Hour on Tuesday, August 11, from 4:30 pm–6:00 pm.
Accepted Demos
dAngr4Code: No More Blind Dates with Symbolic Execution
Christoph Sanders, Jef Jacobs, Jorn Lapon, and Vincent Naessens, DistriNet - KU Leuven
Identifying Shared MPK Domains via Timing Side Channels
Ruben Sturm, DistriNet - KU Leuven
OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
Andrew Chin, Georgia Institute of Technology; Dongkwan Kim, Microsoft; Yu-Fu Fu, Fabian Fleischer, and Youngjoon Kim, Georgia Institute of Technology; HyungSeok Han and Cen Zhang, Microsoft; Brian Junekyu Lee and Hanqing Zhao, Georgia Institute of Technology; Taesoo Kim, Georgia Institute of Technology and Microsoft
RustFlux: LLM-Driven Poly-Metamorphic Malware Generation for Rust with Antivirus Evasion
Sahilsinh Bharatsinh Chavda and Sajal Bhatia, Sacred Heart University
VYUHA: Explainable Cross-Layer Evaluation of Endpoint Detection Robustness
Jnyanadeep Bandaru, Bipin Raj C, Karthik Prakash, and Minal Moharir, R.V. College of Engineering
LIMA: Defining, Benchmarking and Detecting Cross-Layer Vulnerabilities in LLM Inference Frameworks
Sanjib Kumar Sen, Hannah Longoria, and Bozhen Liu, Texas A&M University - Corpus Christi
Accepted Posters
Breaking Infrared Recapture Detection: Optical-Synthesis Attacks and Depth-Aware In-Sensor Countermeasures
Tetsu Ishizue, The University of Electro-Communications; Sara Rampazzi, University of Florida; Takeshi Sugawara, University of Electro-Communications
CHERI under Fault Injection: An Emulation-Based Security Evaluation of Capability Hardware Enhanced RISC Instructions
Eva Schreyer, KTH Royal Institute of Technology and Ericsson; Merve Gülmez and Thomas Nyman, Ericsson
SoK: On the Fragility of Memory Error Exploit Mitigations
Adriaan Jacobs, DistriNet, KU Leuven; Mahmoud Ammar, Huawei Research, Germany; Stijn Volckaert, DistriNet, KU Leuven
Detecting Downstream Workaround Patches That Leave Upstream Defects Untracked
Jiwon Hwang, University of Maryland
SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode
Antonis Louka and Jo Van Bulck, DistriNet, KU Leuven
DICOM-based Living off the Land (LotL) Integrity Attacks
Padraig MacGabann, University of Southern California; Andy Lin, University of Maryland College Park
Swarm in EM Hay: Particle Swarm-guided Probe Placement for EM SCA
Dev Mehta, Seyedmohammad Nouraniboosjin, Maryam S. Safa, Shahin Tajik, and Fatemeh Ganji, Worcester Polytechnic Institute
Cross-Container Attacks through the Shared Page Cache
Xingyu Chen, Boston University
RustFlux: LLM-Driven Poly-Metamorphic Malware Generation for Rust with Antivirus Evasion
Sahilsinh Bharatsinh Chavda and Sajal Bhatia, Sacred Heart University
VYUHA: Explainable Cross-Layer Evaluation of Endpoint Detection Robustness
Jnyanadeep Bandaru, Bipin Raj C, Karthik Prakash, and Minal Moharir,R.V. College of Engineering
LIMA: Defining, Benchmarking and Detecting Cross-Layer Vulnerabilities in LLM Inference Frameworks
Sanjib Kumar Sen, Hannah Longoria, and Bozhen Liu, Texas A&M University - Corpus Christi