26th USENIX Security Symposium (USENIX Security '17)
2017-08-16..2017-08-18
Vancouver, Canada
| title | author | length |
|---|---|---|
| Opening Remarks and Awards | Engin Kirda, Thomas Ristenpart | 16m |
Conference records 572 submissions and 85 acceptances (16%), with 572 submissions, 85 accepted (16%) and reviewer effort totaling 1,600 reviews and 2,200… | ||
| When Your Threat Model Is "Everything": Defensive Security in Modern Newsrooms | Erinn Clark | 50m |
Modern newsroom security treats people as the primary asset and defends against phishing, malware, subpoena pressure and device exploits by enforcing mandatory… | ||
| How Double-Fetch Situations turn into Double-Fetch Vulnerabilities... | Pengfei Wang, Jens Krinke, Kai Lu, Gen Li, Steve Dodier-Lazaro | 31m |
A static, pattern-based analysis built on the Coccinelle matching engine scans Linux, Android and FreeBSD kernels for repeated user-to-kernel copies and… | ||
| Postmortem Program Analysis with Hardware-Enhanced Post-Crash Artifacts | Jun Xu, Dongliang Mu, Xinyu Xing, Peng Liu, Ping Chen, Bing Mao | 28m |
POMP reconstructs pre-crash dataflow by reverse-executing Intel PT traces merged into a core dump and then runs backward taint analysis to highlight the… | ||
| Ninja: Towards Transparent Tracing and Debugging on ARM | Zhenyu Ning, Fengwei Zhang | 26m |
NINJA claims a low‑artifact, OS‑agnostic malware analysis environment built inside ARM TrustZone that uses TrustZone to isolate the analyzer and leverages… | ||
| Prime+Abort: A Timer-Free High-Precision L3 Cache Attack using Intel TSX | Craig Disselkoen, David Kohlbrenner, Leo Porter, Dean Tullsen | 28m |
A cache attack leverages Intel TSX transactional aborts to detect L3 cache line evictions without any timers, replacing probe timing with a hardware callback… | ||
| On the effectiveness of mitigations against floating-point timing channels | David Kohlbrenner, Hovav Shacham | 28m |
Benchmarks show operand-dependent timings: divisions and square roots hit 150–175 cycle spikes for some value families while powers-of-two and zero run about… | ||
| Constant-Time Callees with Variable-Time Callers | Cesar Pereida García, Billy Bob Brumley | 26m |
Discloses a bug in OpenSSL 1.0.1u where the constant-time flag for modular inversion is unset so code falls back to a binary extended Euclidean inverse that… | ||
| Neural Nets Can Learn Function Type Signatures From Binaries | Zheng Leong Chua, Shiqi Shen, Prateek Saxena, Zhenkai Liang | 29m |
A system called EKLAVYA trains instruction embeddings plus a 3-layer GRU to infer function argument count and coarse types from disassembled binaries without… | ||
| CAn’t Touch This... | Ferdinand Brasser, Lucas Vincenzo Davi, David Gens, Christopher Liebchen, Ahmad-Reza Sadeghi | 29m |
Rowhammer mitigation called CATT implements a software-only defense by extending the OS physical page allocator and adding a dedicated kernel zone to… | ||
| Efficient Protection of Path-Sensitive Control Security | Ren Ding, Chenxiong Qian, Chengyu Song, Bill Harris, Taesoo Kim, Wenke Lee | 26m |
Path-sensitive CFI uses runtime, path-sensitive points-to analysis combined with hardware tracing to reduce target sets and stop realistic control-flow… | ||
| Digtool: A Virtualization-Based Framework for Detecting Kernel Vulnerabilities | Jianfeng Pan, Guanglu Yan, Xiaocao Fan | 28m |
Digtool is a binary-code-only framework that builds a custom hypervisor with shadow page table monitoring and a lightweight CPU emulator to capture kernel… | ||
| kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels | Sergej Schumilo, Cornelius Aschermann, Robert Gawlik, Sebastian Schinzel, Thorsten Holz | 28m |
Combines Intel Processor Trace with a KVM-aware hypervisor and on‑the‑fly PT decoding in QEMU to drive AFL-style coverage feedback for kernel targets on Linux… | ||
| Venerable Variadic Vulnerabilities Vanquished | Priyam Biswas, Alessandro Di Federico, Scott A. Carr, Prabhu Rajasekaran, Stijn Volckaert, Yeoul Na, Michael Franz, Mathias Payer | 23m |
A compiler-based sanitizer called HexVASAN records call-site metadata and verifies variadic argument types at runtime via an LLVM compiler pass plus a runtime… | ||
| Towards Practical Tools for Side Channel Aware Software Engineering... | David McCann, Elisabeth Oswald, Carolyn Whitnall | 29m |
Presents a grey-box linear regression method that fits instruction-level power models for ARM Cortex-M0 and M4 using 5,000 traces per instruction and 1,000… | ||
| Strong and Efficient Cache Side-Channel Protection... | Daniel Gruss, Julian Lettner, Felix Schuster, Olya Ohrimenko, Istvan Haller, Manuel Costa | 28m |
Cloak uses Intel TSX to pin sensitive code and data into L1/L3 by preloading and executing every cache line (compiler-inserted return opcodes) and a C++… | ||
| CacheD: Identifying Cache-Based Timing Channels in Production Software | Shuai Wang, Pei Wang, Xiao Liu, Danfeng Zhang, Dinghao Wu | 27m |
CacheD applies symbolic execution and constraint solving over a cache-line model to decide whether memory loads differ for distinct secrets, produces concrete… | ||
| An Ant in a World of Grasshoppers | Ellen Cram Kowalczyk | 31m |
Security failures persist not for lack of warnings but because of tradeoffs: consumer devices ship with exposed baby monitors and millions of web‑visible… | ||
| From Problems to Patterns to Practice... | Lea Kissner | 45m |
From Problems to Patterns to Practice: Privacy and User Respect in a Complex World
Lea Kissner, Product Privacy Lead and Principal Engineer, Google
Privacy… | ||
| BinSim: Trace-based Semantic Binary Diffing... | Jiang Ming, Dongpeng Xu, Yufei Jiang, Dinghao Wu | 27m |
BinSim prototype implements system call sliced segments equivalence checking by combining enhanced dynamic slicing with symbolic execution to compare only the… | ||
| PlatPal: Detecting Malicious Documents with Platform Diversity | Meng Xu, Taesoo Kim | 27m |
Prototype PLATPAL harvests OS differences to detect maldocs by tracing inside Adobe Reader and capturing host syscall effects in sandboxed VMs; PLATPAL hooks… | ||
| Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART | Lei Xue, Yajin (Andy) Zhou, Ting Chen, Xiapu Luo, Guofei Gu | 32m |
Malton implements on-device ART instrumentation to monitor Java, native, JNI and reflection crossings without repackaging target apps, and it records method… | ||
| Global Measurement of DNS Manipulation | Paul Pearce, Ben Jones, Frank Li, Roya Ensafi, Nick Feamster, Nick Weaver, Vern Paxson | 29m |
A deployed measurement system called Iris performs ethical, repeated DNS queries using scanned infrastructure resolvers found with ZMap and validated with… | ||
| Characterizing the Nature and Dynamics of Tor Exit Blocking | Rachee Singh, Rishab Nithyanand, Sadia Afroz, Paul Pearce, Michael Carl Tschantz, Phillipa Gill, Vern Paxson | 26m |
An empirical study uses an interactive Selenium crawler, k‑means plus regex classification, analysis of ~400 commercial blacklists and three million abuse… | ||
| DeTor: Provably Avoiding Geographic Regions in Tor | Zhihao Li, Stephen Herwig, Dave Levin | 31m |
DeTor builds client-side selection algorithms and a clock-measured speed-of-light alibi that prove a Tor circuit did not traverse user-specified countries… | ||
| SmartAuth: User-Centered Authorization for the Internet of Things | Yuan Tian, Nan Zhang, Yueh-Hsun Lin, XiaoFeng Wang, Blase Ur, Xianzheng Guo, Patrick Tague | 29m |
System automatically extracts device context and code behaviors with program analysis and app text with natural language processing, then matches them to flag… | ||
| AWare: Preventing Abuse of Privacy-Sensitive Sensors via Operation Bindings | Giuseppe Petracca, Ahmad-Atamli Reineh, Yuqiong Sun, Jens Grossklags, Trent Jaeger | 27m |
AWare implements operation bindings in Android middleware to tie camera, microphone and other sensor requests to the exact user input and window configuration… | ||
| 6thSense: A Context-aware Sensor-based Attack Detector for Smart Devices | Amit Kumar Sikder, Hidayet Aksu, A. Selcuk Uluagac | 29m |
Prototype 6thSense runs on an Android smartphone, collects raw sensor streams and encodes device states as which sensors are active, trains three ML detectors… | ||
| Identifier Binding Attacks and Defenses in Software-Defined Networks | Samuel Jero, William Koch, Richard Skowyra, Hamed Okhravi, Cristina Nita-Rotaru, David Bigelow | 29m |
Demonstrates Persona Hijacking, an SDN attack that persistently claims a victim’s MAC IP and hostname by spoofing DHCP and poisoning flows, and builds… | ||
| HELP: Helper-Enabled In-Band Device Pairing… | Nirnimesh Ghose, Loukas Lazos, Ming Li | 26m |
Proposes HELP primitive that lets a trusted helper inject random on‑slots so a hub detects signal cancellation and message injection, complements… | ||
| Attacking the Brain: Races in the SDN Control Plane | Lei Xu, Jeff Huang, Sungmin Hong, Jialong Zhang, Guofei Gu | 29m |
Introduces CONGUARD, a dynamic framework that instruments SDN controllers (bytecode rewriting) and logs critical operations, builds happens-before graphs, and… | ||
| Detecting Credential Spearphishing in Enterprise Settings | Grant Ho, Aashish Sharma, Mobin Javed, Vern Paxson, David Wagner | 32m |
A real-world deployment analyzes 372 million emails with five focused features: sender-login anomalies derived from LDAP (new IP geolocated city and prior city… | ||
| SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data | Md Nahid Hossain, Sadegh M. Milajerdi, Junao Wang, Birhanu Eshete, Rigel Gjomemo, R. Sekar, Scott Stoller, V.N. Venkatakrishnan | 28m |
SLEUTH builds a platform-neutral, main-memory dependency graph from Linux, Windows and FreeBSD COTS audit sources and applies tag-based detection (separate… | ||
| When the Weakest Link is Strong... | Susan E. McGregor, Elizabeth Anne Watkins, Mahdi Nasrullah Al-Ameen, Kelly Caine, Franziska Roesner | 28m |
Year‑long Panama Papers collaboration centralizes >2 TB for ~400 journalists across ~120 organizations and builds three tools: Backlight document search, a… | ||
| Hacking in Darkness: Return-oriented Programming against Secure Enclaves | Jaehyuk Lee, Jinsoo Jang, Yeongjin Jang, Nohyun Kwak, Yeseul Choi, Changho Choi, Taesoo Kim, Marcus Peinado, Brent Byunghoon Kang | 33m |
Demonstrates a concrete exploit, Dark-ROP, that uses OS control plus oracle timing from SGX synchronous exits to discover and chain thousands (~13k) pop… | ||
| vTZ: Virtualizing ARM TrustZone | Zhichao Hua, Jinyu Gu, Yubin Xia, Haibo Chen, Binyu Zang, Haibing Guan | 27m |
vTZ virtualizes ARM TrustZone by giving each VM its own guest TEE while using existing hardware: a tiny TrustZone monitor (SMM) enforces and interposes memory… | ||
| Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing | Sangho Lee, Ming-Wei Shih, Prasun Gera, Taesoo Kim, Hyesoon Kim, Marcus Peinado | 31m |
Shows a practical side‑channel that leaks branch‑level control flow from SGX by running colliding shadow branches outside the enclave and reading prediction… | ||
| AuthentiCall: Efficient Identity and Content Authentication for Phone Calls | Bradley Reaves, Logan Blue, Hadi Abdullah, Luis Vargas, Patrick Traynor, Thomas Shrimpton | 29m |
System uses an auxiliary data channel (phone’s Internet connection) plus a voice challenge over the PSTN to issue short-lived certificates and perform mutual… | ||
| Picking Up My Tab... | Xiaolong Bai, Zhe Zhou, XiaoFeng Wang, Zhou Li, Xianghang Mi, Nan Zhang, Tongxin Li, Shi-Min Hu, Kehuan Zhang | 24m |
Researchers demonstrate a practical attack called Synchronized Token Lifting and Spending (STLS) that sniffs an offline payment token on NFC/MST, audio or… | ||
| TrustBase: An Architecture to Repair and Strengthen... | Mark O'Neill, Scott Heidbrink, Scott Ruoti, Jordan Whitehead, Dan Bunker, Luke Dickinson, Travis Hendershot, Joshua Reynolds, Kent Seamons, Daniel Zappala | 28m |
Architecture that moves certificate validation into the OS and demonstrates a Linux prototype that uses a loadable kernel module to intercept socket traffic… | ||
| Transcend: Detecting Concept Drift in Malware Classification Models | Roberto Jordaney, Kumar Sharad, Santanu Kumar Dash, Zhi Wang, Davide Papini, Ilia Nouretdinov, Lorenzo Cavallaro | 27m |
Builds Transcend, a deployable conformal evaluator that computes nonconformity scores (distance-from-centroid or SVM margin) and per-class p-value thresholds… | ||
| Syntia: Synthesizing the Semantics of Obfuscated Code | Tim Blazytko, Moritz Contag, Cornelius Aschermann, Thorsten Holz | 29m |
Proposes Syntia, a program-synthesis deobfuscator that uses Monte Carlo Tree Search to learn semantics from short execution trace windows rather than relying… | ||
| Predicting the Resilience of Obfuscated Code... | Sebastian Banescu, Christian Collberg, Alexander Pretschner | 27m |
A machine-learned regressor estimates how long a symbolic-execution attack takes by training on a random C generator that produces 4,608 functions, obfuscating… | ||
| Differential Privacy: From Theory to Deployment | Abhradeep Guha Thakurta | 42m |
Differential privacy is deployed on iOS 10 at ~300 million devices to discover new keyboard words in over 10 languages while protecting users via local… | ||
| OSS-Fuzz - Google's continuous fuzzing service for open source software | Kostya Serebryany | 44m |
Service launched Dec 2016 and runs coverage‑guided fuzzers on Google VMs, using libFuzzer, AFL and sanitizers like address sanitizer to automatically fuzz… | ||
| Extension Breakdown... | Iskander Sanchez-Rola, Igor Santos, Davide Balzarotti | 25m |
Two new attacks bypass browser extension resource controls: a timing side‑channel against Chromium/Firefox access checks that a JavaScript PoC uses to… | ||
| CCSP: Controlled Relaxation of Content Security Policies... | Stefano Calzavara, Alvise Rabitti, Michele Bugliesi | 31m |
Proposes CCSP, a runtime policy composition that lets embedded scripts supply whitelists while the page keeps an upper bound via a CSP intersect header and an… | ||
| Same-Origin Policy: Evaluation in Modern Browsers | Jörg Schwenk, Marcus Niemietz, Christian Mainka | 29m |
Evaluates Same‑Origin Policy behavior across modern browsers by running 544 test cases against 10 major browsers with an online testbed that reports read… | ||
| Locally Differentially Private Protocols for Frequency Estimation | Tianhao Wang, Jeremiah Blocki, Ninghui Li, Somesh Jha | 24m |
Framework generalizes deployed LDP schemes (e.g. RAPPOR) and gives a fast aggregator with exact accuracy formulas, then derives two new mechanisms Optimized… | ||
| BLENDER: Enabling Local Search with a Hybrid Differential Privacy Model | Brendan Avent, Aleksandra Korolova, David Zeber, Torgeir Hovden, Benjamin Livshits | 32m |
Presents a concrete algorithm, Blender, that mixes a small opt-in trusted-curator cohort with local-privacy clients to produce head lists of popular queries… | ||
| Computer Security, Privacy, and DNA Sequencing... | Peter Ney, Karl Koscher, Lee Organick, Luis Ceze, Tadayoshi Kohno | 29m |
Demonstrates that synthesized DNA can encode arbitrary remote code execution by ordering strands from IDT, sequencing them on Illumina, and feeding the… | ||
| BootStomp: On the Security of Bootloaders in Mobile Devices | Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna | 25m |
Built a static-binary analyzer called BOOTSTOMP that combines multi-tag taint analysis with constrained dynamic symbolic execution to trace attacker-controlled… | ||
| Seeing Through The Same Lens... | Siqi Zhao, Xuhua Ding, Wen Xu, Dawu Gu | 32m |
Prototype called ImEE creates a tiny helper VM that clones CR3 and EPT so guest virtual addresses translate via hardware MMU at native-speed introspection… | ||
| Oscar: A Practical Page-Permissions-Based Scheme... | Thurston H.Y. Dang, Petros Maniatis, David Wagner | 24m |
Oscar implements a page-permissions, virtual-alias scheme that enforces heap temporal safety and runs with no source code required. The system uses per-object… | ||
| PDF Mirage: Content Masking Attack Against Information-Based Online Services | Ian Markwood, Dakun Shen, Yao Liu, Zhuo Lu | 25m |
Work demonstrates a PDF content-masking attack that alters underlying text via custom masking font mappings so humans see one document while automated systems… | ||
| Loophole: Timing Attacks on Shared Event Loops in Chrome | Pepe Vila, Boris Köpf | 26m |
Demonstrates that Chrome’s shared event loops leak timing: attacker JavaScript posts tasks and measures I/O thread host loop and renderer main-thread loop… | ||
| Game of Registrars... | Tobias Lauinger, Abdelberi Chaabane, Ahmet Salih Buyukkayhan, Kaan Onarlioglu, William Robertson | 35m |
The paper measures post-expiration reuse and finds that 10% of .com domains are re-registered on deletion day and that for some zones over 50% of… | ||
| Speeding up detection of SHA-1 collision attacks... | Marc Stevens, Daniel Shumow | 24m |
Describes a concrete algorithm that adds fast prechecks based on unavoidable bit conditions to avoid full SHA‑1 compression checks, shrinking the UBC set from… | ||
| Phoenix: Rebirth of a Cryptographic Password-Hardening Service | Russell W. F. Lai, Christoph Egger, Dominique Schröder, Sherman S. M. Chow | 29m |
The scheme of Schneider et al. is shown vulnerable to offline dictionary attacks after a single validation query and even to full password extraction after one… | ||
| Vale: Verifying High-Performance Cryptographic Assembly Code | Barry Bond, Chris Hawblitzel, Manos Kapritsos, K. Rustan M. Leino, Jacob R. Lorch, Bryan Parno, Ashay Rane, Srinath Setty, Laure Thompson | 29m |
Vale converts annotated, hand-tuned assembly into an abstract syntax tree and emits machine-checked proofs verified by an SMT-based verifier, letting the AST… | ||
| Exploring User Perceptions of Discrimination in Online Targeted Advertising | Angelisa C. Plane, Elissa M. Redmiles, Michelle L. Mazurek, Michael Carl Tschantz | 22m |
A scenario survey with a near–US‑census sample (n=2,086, final design with 24 conditions) tests reactions to discriminatory ad outcomes, fits logistic… | ||
| Measuring the Insecurity of Mobile Deep Links of Android | Fang Liu, Chun Wang, Andres Pico, Danfeng Yao, Gang Wang | 33m |
Analysis of 160,000+ Android apps (2014, 2016) and 1M web pages extracts deep links and shows concrete failures: only 194 apps (2.2% of 8,878 with App Links)… | ||
| How the Web Tangled Itself | Ben Stock, Martin Johns, Marius Steffens, Michael Backes | 35m |
Analysis of Internet Archive snapshots (1997–2016) inspects 659,710 documents, 1.4M frames, 5M scripts and 21M HTTP headers to track client-side security… | ||
| Towards Efficient Heap Overflow Discovery | Xiangkun Jia, Chao Zhang, Purui Su, Yi Yang, Huafeng Huang, Dengguo Feng | 26m |
Xiangkun Jia, TCA/SKLCS, Institute of Software, Chinese Academy of Sciences; Chao Zhang, Institute for Network Science and Cyberspace, Tsinghua University… | ||
| DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers | Aravind Machiry, Chad Spensky, Jake Corina, Nick Stephens, Christopher Kruegel, Giovanni Vigna | 31m |
DR. CHECKER is a modular, static bug-finder that implements soundy (mostly sound) analysis by combining pointer and taint engines; both are flow-sensitive… | ||
| Dead Store Elimination (Still) Considered Harmful | Zhaomo Yang, Brian Johannesmeyer, Anders Trier Olesen, Sorin Lerner, Kirill Levchenko | 27m |
Paper surveys memory scrubbing techniques, evaluates them on GCC Clang and MSVC, and instruments Clang to detect dead store elimination. Authors examine 11… | ||
| Telling Your Secrets without Page Faults... | Jo Van Bulck, Nico Weichbrodt, Rüdiger Kapitza, Frank Piessens, Raoul Strackx | 25m |
The paper analyzes Intel SGX-style enclaves and shows that a malicious OS can infer enclave memory accesses without causing page faults. It presents two new… | ||
| CLKSCREW: Exposing the Perils of Security-Oblivious Energy Management | Adrian Tang, Simha Sethumadhavan, Salvatore Stolfo | 27m |
Demonstrates that software-controlled DVFS on commodity ARM/Android phones (Nexus 6) has no enforced limits, allowing a kernel-level attacker to push… | ||
| AutoLock: Why Cache Attacks on ARM Are Harder Than You Think | Marc Green, Leandro Rodrigues-Lima, Andreas Zankl, Gorka Irazoqui, Johann Heyszl, Thomas Eisenbarth | 27m |
Claims an undocumented ARM cache feature called AutoLock exists in inclusive last-level caches, silently preventing cross-core evictions and breaking standard… | ||
| Understanding the Mirai Botnet | Manos Antonakakis, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J. Alex Halderman, Luca Invernizzi, Michalis Kallitsis, Deepak Kumar, Chaz Lever, Zane Ma, Joshua Mason, Damian Menscher, Chad Seaman, Nick Sullivan, Kurt Thomas, Yi Zhou | 29m |
Seven-month measurement combines a network telescope, active scans, telnet honeypots and VirusTotal binaries with passive DNS and C2 monitoring to show Mirai… | ||
| MPI: Multiple Perspective Attack Investigation... | Shiqing Ma, Juan Zhai, Fei Wang, Kyu Hyung Lee, Xiangyu Zhang, Dongyan Xu | 28m |
Prototype implements LLVM-based instrumentation plus an annotation miner that identifies top‑level task data structures and injects task IDs into provenance… | ||
| Detecting Android Root Exploits by Learning from Root Providers | Ioannis Gasparis, Zhiyun Qian, Chengyu Song, Srikanth V. Krishnamurthy | 27m |
RootExplorer learns environment checks from one‑click root apps and uses that to craft analysis targets: it extracts 167 exploit binaries (from 59 exploit… | ||
| USB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs | Yang Su, Daniel Genkin, Damith Ranasinghe, Yuval Yarom | 26m |
Tests cover over 50 computers and hubs and find 90% vulnerable to analog crosstalk that leaks USB traffic over adjacent ports and even the power line. The… | ||
| Reverse Engineering x86 Processor Microcode | Philipp Koppe, Benjamin Kollenda, Marc Fyrbiak, Christian Kison, Robert Gawlik, Christof Paar, Thorsten Holz | 26m |
The paper reverse-engineers microcode semantics and the update mechanism on AMD K8 and K10 x86 microarchitectures, analyzing how vendor-supplied microcode… | ||
| See No Evil, Hear No Evil, Feel No Evil | Christian Bayens, Tuan Le, Luis Garcia, Raheem Beyah, Mehdi Javanmard, Saman Zonouz | 28m |
Claims a firmware- and PC-independent verification scheme that combines Shazam-style peak constellations from microphone recordings, real-time spatial tracking… | ||
| The Loopix Anonymity System | Ania M. Piotrowska, Jamie Hayes, Tariq Elahi, Sebastian Meiser, George Danezis | 29m |
Loopix is a deployed mix network that uses Poisson mix delays and three cover types—drop messages, client loops and mix-generated loops—to mask who talks to… | ||
| MCMix: Anonymous Messaging via Secure Multiparty Computation | Nikolaos Alexopoulos, Aggelos Kiayias, Riivo Talviste, Thomas Zacharias | 25m |
MCMix implements anonymous messaging by splitting dialing and conversation into MPC routines, implemented on Sharemind and proven to provide simulation-based… | ||
| ORide: A Privacy-Preserving yet Accountable Ride-Hailing Service | Anh Pham, Italo Dacosta, Guillaume Endignoux, Juan Ramon Troncoso Pastoriza, Kévin Huguenin, Jean-Pierre Hubaux | 25m |
ORide implements somewhat-homomorphic encryption with ciphertext packing and number-theoretic transforms to let the service compute squared Euclidean distances… | ||
| Adaptive Android Kernel Live Patching | Yue Chen, Yulong Zhang, Zhi Wang, Liangzhao Xia, Chenfu Bao, Tao Wei | 27m |
Study of 1,139 Android kernels finds most vulnerable functions stable across devices and 76 recent critical CVEs amenable to input-filtering fixes. KARMA… | ||
| CHAINIAC: Proactive Software-Update Transparency... | Kirill Nikitin, Eleftherios Kokoris-Kogias, Philipp Jovanovic, Nicolas Gailly, Linus Gasser, Ismail Khoffi, Justin Cappos, Bryan Ford | 27m |
CHAINIAC builds a decentralized update pipeline where independent witness servers collectively verify source-to-binary correspondence and produce a single… | ||
| ROTE: Rollback Protection for Trusted Execution | Sinisa Matetic, Mansoor Ahmed, Kari Kostiainen, Aritra Dhar, David Sommer, Arthur Gervais, Ari Juels, Srdjan Capkun | 35m |
ROTE implements distributed rollback protection for Intel SGX enclaves by having a group of processors cross-store monotonic counters so the only way to break… | ||
| A Longitudinal, End-to-End View of the DNSSEC Ecosystem | Taejoong Chung, Roland van Rijswijk-Deij, Balakrishnan Chandrasekaran, David R. Choffnes, Dave Levin, Bruce M. Maggs, Alan Mislove, Christo Wilson | 27m |
Longitudinal measurement of .com .org and .net over 21 months finds pervasive DNSSEC mismanagement: researchers collect daily snapshots of 147 million domains… | ||
| Measuring HTTPS Adoption on the Web | Adrienne Porter Felt, Richard Barnes, April King, Chris Palmer, Chris Bentzel, Parisa Tabriz | 30m |
The study measures HTTPS adoption using Chrome and Firefox telemetry for client-side behavior, active scans via Mozilla Observatory and Alexa top 1M for server… | ||
| "I Have No Idea What I'm Doing" - On the Usability of Deploying HTTPS | Katharina Krombholz, Wilfried Mayer, Martin Schmiedecker, Edgar Weippl | 31m |
Lab usability study with 28 knowledgeable participants and follow-up interviews with 7 security auditors observes configuring HTTPS on Apache as surprisingly… | ||
| Walkie-Talkie... | Tao Wang, Ian Goldberg | 32m |
Modifies the browser and Tor guard to enforce half-duplex page loading, grouping packets into moldable bursts and merging two pages’ burst sequences so they… | ||
| A Privacy Analysis of Cross-device Tracking | Sebastian Zimmeck, Jie S. Li, Hyungtae Kim, Steven M. Bellovin, Tony Jebara | 30m |
Describes a measurement method that detects cross-device linking, a dataset from 126 users (107 with both mobile and desktop histories), and an algorithm using… | ||
| SmartPool: Practical Decentralized Pooled Mining | Loi Luu, Yaron Velner, Jason Teutsch, Prateek Saxena | 27m |
SMARTPOOL is a deployed decentralized mining-pool protocol running on Ethereum and Ethereum Classic that pays miners with a probabilistic sampling scheme and… | ||
| REM: Resource-Efficient Mining for Blockchains | Fan Zhang, Ittay Eyal, Robert Escriva, Ari Juels, Robbert van Renesse | 31m |
REM replaces wasted PoW hashing with Proof-of-Useful-Work inside Intel SGX enclaves, counting CPU instructions as metered work and using hierarchical… | ||
| Ensuring Authorized Updates in Multi-user Database-Backed Applications | Kevin Eykholt, Atul Prakash, Barzan Mozafari | 25m |
Presents a practical enforcement technique called phantom extraction and an implementation named SafeD that runs as a JDBC driver to enforce per-user… | ||
| Qapla: Policy compliance for database-backed systems | Aastha Mehta, Eslam Elnikety, Katura Harvey, Deepak Garg, Peter Druschel | 32m |
Qapla is a DB-adapter reference monitor that enforces fine-grained, row-and-column policies by query rewriting: it replaces each table with a subquery… | ||
| Data Hemorrhage, Inequality, and You... | Shankar Narayan | 01h 04m |
Claim: mass data aggregation and machine learning shift control from public oversight into private hands, making bias harder to spot and legal remedies weaker… | ||
| nothing matches | ||