research
∙
04/13/2023
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation
Smart contracts are increasingly being used to manage large numbers of h...
share
research
∙
03/25/2023
No more Reviewer #2: Subverting Automatic Paper-Reviewer Assignment using Adversarial Learning
The number of papers submitted to academic conferences is steadily risin...
research
∙
02/23/2023
More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models
We are currently witnessing dramatic advances in the capabilities of Lar...
research
∙
02/08/2023
Systematically Finding Security Vulnerabilities in Black-Box Code Generation Models
Recently, large language models for code generation have achieved breakt...
research
∙
12/06/2022
How to Compare Fuzzers
Fuzzing is a key method to discover vulnerabilities in programs. Despite...
research
∙
10/26/2022
Towards the Detection of Diffusion Model Deepfakes
Diffusion models (DMs) have recently emerged as a promising method in im...
research
∙
03/21/2022
Privacy Rarely Considered: Exploring Considerations in the Adoption of Third-Party Services by Websites
Modern websites frequently use and embed third-party services to facilit...
research
∙
03/08/2022
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64
Memory safety in complex applications implemented in unsafe programming ...
research
∙
11/04/2021
Nyx-Net: Network Fuzzing with Incremental Snapshots
Coverage-guided fuzz testing ("fuzzing") has become mainstream and we ha...
research
∙
06/16/2021
Loki: Hardening Code Obfuscation Against Automated Attacks
Software obfuscation is a crucial technology to protect intellectual pro...
research
∙
04/07/2021
[RE] CNN-generated images are surprisingly easy to spot...for now
This work evaluates the reproducibility of the paper "CNN-generated imag...
research
∙
02/10/2021
Dompteur: Taming Audio Adversarial Examples
Adversarial examples seem to be inevitable. These specifically crafted i...
research
∙
10/21/2020
VENOMAVE: Clean-Label Poisoning Against Speech Recognition
In the past few years, we observed a wide adoption of practical systems ...
research
∙
08/02/2020
Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers
Voice assistants like Amazon's Alexa, Google's Assistant, or Apple's Sir...
research
∙
07/07/2020
VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching
Polymorphism and inheritance make C++ suitable for writing complex softw...
research
∙
07/06/2020
Automated Multi-Architectural Discovery of CFI-Resistant Code Gadgets
Memory corruption vulnerabilities are still a severe threat for software...
research
∙
07/06/2020
Detile: Fine-Grained Information Leak Detection in Script Engines
Memory disclosure attacks play an important role in the exploitation of ...
research
∙
07/06/2020
An Exploratory Analysis of Microcode as a Building Block for System Defenses
Microcode is an abstraction layer used by modern x86 processors that int...
research
∙
07/05/2020
Breaking and Fixing Destructive Code Read Defenses
Just-in-time return-oriented programming (JIT-ROP) is a powerful memory ...
research
∙
07/05/2020
EvilCoder: Automated Bug Insertion
The art of finding software vulnerabilities has been covered extensively...
research
∙
07/05/2020
Static Detection of Uninitialized Stack Variables in Binary Code
More than two decades after the first stack smashing attacks, memory cor...
research
∙
07/05/2020
Steroids for DOPed Applications: A Compiler for Automated Data-Oriented Programming
The wide-spread adoption of system defenses such as the randomization of...
research
∙
07/05/2020
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems
Memory corruption vulnerabilities have been around for decades and rank ...
research
∙
04/02/2020
CORSICA: Cross-Origin Web Service Identification
Vulnerabilities in private networks are difficult to detect for attacker...
research
∙
03/19/2020
Leveraging Frequency Analysis for Deep Fake Image Recognition
Deep neural networks can generate images that are astonishingly realisti...
research
∙
01/28/2020
Beyond the Front Page: Measuring Third Party Dynamics in the Field
In the modern Web, service providers often rely heavily on third parties...
research
∙
10/01/2019
Reverse Engineering x86 Processor Microcode
Microcode is an abstraction layer on top of the physical components of a...
research
∙
09/05/2019
(Un)informed Consent: Studying GDPR Consent Notices in the Field
Since the adoption of the General Data Protection Regulation (GDPR) in M...
research
∙
08/05/2019
Imperio: Robust Over-the-Air Adversarial Examples for Automatic Speech Recognition Systems
Automatic speech recognition (ASR) systems are possible to fool via targ...
research
∙
08/05/2019
Robust Over-the-Air Adversarial Examples Against Automatic Speech Recognition Systems
Automatic speech recognition (ASR) systems are possible to fool via targ...
research
∙
07/03/2019
Towards Automated Application-Specific Software Stacks
Software complexity has increased over the years. One common way to tack...
research
∙
02/22/2019
A Study of Newly Observed Hostnames and DNS Tunneling in the Wild
The domain name system (DNS) is a crucial backbone of the Internet and m...
research
∙
11/21/2018
The Unwanted Sharing Economy: An Analysis of Cookie Syncing and User Transparency under GDPR
The European General Data Protection Regulation (GDPR), which went into ...
research
∙
08/16/2018
Adversarial Attacks Against Automatic Speech Recognition Systems via Psychoacoustic Hiding
Voice interfaces are becoming accepted widely as input methods for a div...
research
∙
08/15/2018
We Value Your Privacy ... Now Take Some Cookies: Measuring the GDPR's Impact on Web Privacy
The European Union's General Data Protection Regulation (GDPR) went into...
research
∙
03/05/2018
RAPTOR: Ransomware Attack PredicTOR
Ransomware, a type of malicious software that encrypts a victim's files ...
research
∙
12/08/2017