USENIX Security '22 | Trust Dies in Darkness: Shedding Light on Samsung's TrustZone Keymaster Design | Alon Shakevsky, Eyal Ronen, Avishai Wool |
USENIX Security '22 | Counting in Regexes Considered Harmful: Exposing ReDoS Vulnerability of Nonbacktracking Matchers | Lenka Turoňová, Lukáš Holík, Ivan Homoliak, Ondřej Lengál, Margus Veanes, Tomáš Vojnar |
USENIX Security '22 | SCRAPS: Scalable Collective Remote Attestation for Pub-Sub IoT Networks with Untrusted Proxy Verifier | Lukas Petzi, Ala Eddine Ben Yahya, Alexandra Dmitrienko, Gene Tsudik, Thomas Prantl, Samuel Kounev |
USENIX Security '22 | Poisoning Attacks to Local Differential Privacy Protocols for Key-Value Data | Yongji Wu, Xiaoyu Cao, Jinyuan Jia, Neil Zhenqiang Gong |
USENIX Security '22 | Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs | Jayakrishna Vadayath, Moritz Eckert, Kyle Zeng, Nicolaas Weideman, Gokulkrishna Praveen Menon, Yanick Fratantonio, Davide Balzarotti, Adam Doupé, Tiffany Bao, Ruoyu Wang, Christophe Hauser, Yan Shoshitaishvili |
USENIX Security '22 | Breaking Bridgefy, again: Adopting libsignal is not enough | Martin R. Albrecht, Raphael Eikenberg, Kenneth G. Paterson |
USENIX Security '22 | "The Same PIN, Just Longer": On the (In)Security of Upgrading PINs from 4 to 6 Digits | Collins W. Munyendo, Philipp Markert, Alexandra Nisenoff, Miles Grant, Elena Korkes, Blase Ur, Adam J. Aviv |
USENIX Security '22 | Networks of Care: Tech Abuse Advocates' Digital Security Practices | Julia Slupska, Angelika Strohmayer |
USENIX Security '22 | Khaleesi: Breaker of Advertising and Tracking Request Chains | Umar Iqbal, Charlie Wolfe, Charles Nguyen, Steven Englehardt, Zubair Shafiq |
USENIX Security '22 | DeepPhish: Understanding User Trust Towards Artificially Generated Profiles in Online Social Networks | Jaron Mink, Licheng Luo, Natã M. Barbosa, Olivia Figueira, Yang Wang, Gang Wang |
USENIX Security '22 | TLB;DR: Enhancing TLB-based Attacks with TLB Desynchronized Reverse Engineering | Andrei Tatar, Daniël Trujillo, Cristiano Giuffrida, Herbert Bos |
USENIX Security '22 | Playing Without Paying: Detecting Vulnerable Payment Verification in Native Binaries of Unity Mobile Games | Chaoshun Zuo, Zhiqiang Lin |
USENIX Security '22 | Building an Open, Robust, and Stable Voting-Based Domain Top List | Qinge Xie, Shujun Tang, Xiaofeng Zheng, Qingran Lin, Baojun Liu, Haixin Duan, Frank Li |
USENIX Security '22 | Many Roads Lead To Rome: How Packet Headers Influence DNS Censorship Measurement | Abhishek Bhaskar, Paul Pearce |
USENIX Security '22 | Minefield: A Software-only Protection for SGX Enclaves against DVFS Attacks | Andreas Kogler, Daniel Gruss, Michael Schwarz |
USENIX Security '22 | Attacks on Deidentification's Defenses | Aloni Cohen |
USENIX Security '22 | In-Kernel Control-Flow Integrity on Commodity OSes using ARM Pointer Authentication | Sungbae Yoo, Jinbum Park, Seolheui Kim, Yeji Kim, Taesoo Kim |
USENIX Security '22 | Unleash the Simulacrum: Shifting Browser Realities for Robust Extension-Fingerprinting Prevention | Soroush Karami, Faezeh Kalantari, Mehrnoosh Zaeifi, Xavier J. Maso, Erik Trickel, Panagiotis Ilia, Yan Shoshitaishvili, Adam Doupé, Jason Polakis |
USENIX Security '22 | Anycast Agility: Network Playbooks to Fight DDoS | A S M Rizvi, Leandro Bertholdo, João Ceron, John Heidemann |
USENIX Security '22 | PolyCruise: A Cross-Language Dynamic Information Flow Analysis | Wen Li, Jiang Ming, Xiapu Luo, Haipeng Cai |
USENIX Security '22 | Communication-Efficient Triangle Counting under Local Differential Privacy | Jacob Imola, Takao Murakami, Kamalika Chaudhuri |
USENIX Security '22 | Seeing the Forest for the Trees: Understanding Security Hazards in the 3GPP Ecosystem through Intelligent Analysis on Change Requests | Yi Chen, Di Tang, Yepeng Yao, Mingming Zha, XiaoFeng Wang, Xiaozhong Liu, Haixu Tang, Dongfang Zhao |
USENIX Security '22 | Hyperproofs: Aggregating and Maintaining Proofs in Vector Commitments | Shravan Srinivasan, Alexander Chepurnoy, Charalampos Papamanthou, Alin Tomescu, Yupeng Zhang |
USENIX Security '22 | Leaky Forms: A Study of Email and Password Exfiltration Before Form Submission | Asuman Senol, Gunes Acar, Mathias Humbert, Frederik Zuiderveen Borgesius |
USENIX Security '22 | Using Trātṛ to tame Adversarial Synchronization | Yuvraj Patel, Chenhao Ye, Akshat Sinha, Abigail Matthews, Andrea C. Arpaci-Dusseau, Remzi H. Arpaci-Dusseau, Michael M. Swift |