USENIX Security '16
2016-08-10..2016-08-12
Austin, United States
| title | author | length |
|---|---|---|
| Crashing Drones and Hijacked Cameras: CyberTrust Meets CyberPhysical | Jeannette M. Wing | 01h 19m |
Microsoft Research describes a drone verification stack that embeds a Bayesian classifier into probabilistic signal temporal logic, producing a probabilistic… | ||
| Flip Feng Shui: Hammering a Needle in the Software Stack | Kaveh Razavi, Ben Gras, Erik Bosman, Bart Preneel, Cristiano Giuffrida, Herbert Bos | 28m |
A new exploitation vector uses Rowhammer plus kernel same-page merging (KSM) to induce single-bit flips at arbitrary physical addresses by forcing the victim… | ||
| One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks... | Yuan Xiao, Xiaokuan Zhang, Yinqian Zhang, Lucian Radu Teodorescu | 25m |
Paper shows a practical cross-VM exploit that uses double-sided row hammer after reverse-engineering DRAM physical-address mapping via a timing channel and a… | ||
| PIkit: A New Kernel-Independent Processor-Interconnect Rootkit | Song Wonjun, Hyunwoo Choi, Junhong Kim, Eunsoo Kim, Yongdae Kim, John Kim | 25m |
A kernel-independent rootkit named PIkit modifies the DRAM address mapping table in multi-socket AMD and Intel servers to redirect physical memory requests so… | ||
| Verifying Constant-Time Implementations | José Bacelar Almeida, Manuel Barbosa, Gilles Barthe, François Dupressoir, Michael Emmi | 32m |
Claims an automated verifier, ct-verif, that proves constant-time for optimized LLVM code by reducing the two-execution security property to safety of a… | ||
| Secure, Precise, and Fast Floating-Point Operations on x86 Processors | Ashay Rane, Calvin Lin, Mohit Tiwari | 29m |
Claims a practical defense that closes floating point side channels on x86 while preserves precision of non‑secure executions by combining exploitation of… | ||
| überSpark: Enforcing Verifiable Object Abstractions for Automated... | Amit Vasudevan, Sagar Chaki, Petros Maniatis, Limin Jia, Anupam Datta | 29m |
Architecture that enforces verifiable object abstractions for compositional hypervisor verification, using Frama‑C, ComCert, SMT solvers and a hardware model… | ||
| 2016 Test of Time Award Panel | Matt Blaze, Peter Honeyman, Niels Provos | 57m |
2016 Test of Time Award Panel
Moderator: Matt Blaze, University of Pennsylvania
Panelists: Peter Honeyman, University of Michigan, and Niels Provos… | ||
| Undermining Information Hiding (and What to Do about It) | Enes Goktas, Robert Gawlik, Benjamin Kollenda, Elias Athanasopoulos, Georgios Portokalidis, Cristiano Giuffrida, Herbert Bos | 24m |
Demonstrates that thread spraying forces many per-thread safe regions and reduces SafeStack entropy so an attacker locates a SafeStack found in 3 seconds… | ||
| Poking Holes in Information Hiding | Angelos Oikonomopoulos, Elias Athanasopoulos, Herbert Bos, Cristiano Giuffrida | 32m |
Shows an allocation oracle attack that infers the sizes of unmapped address-space holes by repeatedly triggering large allocations and observing success or… | ||
| What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP... | Giorgi Maisuradze, Michael Backes, Christian Rossow | 27m |
Demonstrates that JIT-ROP does not need readable code: a JIT compiler is coerced to emit arbitrary three-byte gadgets by controlling displacement fields in… | ||
| zxcvbn: Low-Budget Password Strength Estimation | Daniel Lowe Wheeler | 32m |
A client-side estimator called zxcvbn uses leaked-password frequency lists plus simple pattern models to rank guesses and is designed to fit into four lines of… | ||
| Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks | William Melicher, Blase Ur, Sean M. Segreti, Saranga Komanduri, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor | 27m |
Neural networks generate password guesses that beat PCFGs and Markov models, often improving success by roughly 50% at high guess counts (e.g., 15%→22% at… | ||
| An Empirical Study of Textual Key-Fingerprint Representations | Sergej Dechand, Dominik Schürmann, Karoline Busse, Yasemin Acar, Sascha Fahl, Matthew Smith | 23m |
An online experiment with 1047 participants compares six textual fingerprint formats (hexadecimal baseline, base32, numeric, PGP word list, large wordlist, and… | ||
| Making HTTPS the Default in the World's Largest Bureaucracy | Eric Mill | 01h 26m |
USENIX Security '16 - Making HTTPS the Default in the World's Largest Bureaucracy
Eric Mill, 18F, U.S. General Services Administration
The US government is… | ||
| Off-Path TCP Exploits: Global Rate Limit Considered Dangerous | Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, Srikanth V. Krishnamurthy, Lisa M. Marvel | 30m |
Claims a practical off‑path side channel (CVE-2016-5696) in Linux kernels 3.6+ that leverages a global challenge-ACK rate limit to tell if two hosts share a… | ||
| Website-Targeted False Content Injection by Network Operators | Gabi Nakibly, Jaime Schcolnik, Yossi Rubin | 23m |
Study monitors web traffic from three networks serving >75,000 users and analyzes about 1.5 petabits to find races where two TCP packets share the same… | ||
| The Ever-Changing Labyrinth: A Large-Scale Analysis of Wildcard DNS Powered... | Kun Du, Hao Yang, Zhou Li, Haixin Duan, Kehuan Zhang | 29m |
Built an infiltration account and a scanner that probes DNS and page-change patterns, then queries crawler logs; the system examines 30 million domains across… | ||
| A Comprehensive Measurement Study of Domain Generating Malware | Daniel Plohmann, Khaled Yakdan, Michael Klatt, Johannes Bader, Elmar Gerhards-Padilla | 35m |
Reimplemented 43 DGAs and extracted 253 seeds to precompute about 160 million domains, then queried historical WHOIS/DomainTools records for up to 18 million… | ||
| Enhancing Bitcoin Security and Performance with Strong Consistency via... | Eleftherios Kokoris-Kogias, Philipp Jovanovic, Nicolas Gailly, Ismail Khoffi, Linus Gasser, Bryan Ford | 25m |
Enhancing Bitcoin Security and Performance with Strong Consistency via Collective Signing
Eleftherios Kokoris Kogias, Philipp Jovanovic, Nicolas Gailly… | ||
| Faster Malicious 2-Party Secure Computation with Online/Offline Dual Execution | Peter Rindal, Mike Rosulek | 25m |
Claim: a practical malicious 2PC protocol that shifts heavy work offline and runs extremely fast online by adapting Kolesnikov et al. to an online/offline… | ||
| Egalitarian Computing | Alex Biryukov, Dmitry Khovratovich | 25m |
Claim: making core operations brutally memory‑heavy removes ASIC energy and cost advantages so attackers lose the 30,000× Bitcoin-style edge. Implementation… | ||
| Post-quantum Key Exchange—A New Hope | Erdem Alkim, Léo Ducas, Thomas Pöppelmann, Peter Schwabe | 40m |
Post-quantum key-exchange called New Hope targets Ring-LWE at 1024-dimension and swaps BCNS’s discrete Gaussian for a portable binomial noise from Hamming… | ||
| When Governments Attack: Malware Targeting Activists, Lawyers, and Journalists | Eva Galperin | 02h 46m |
When Governments Attack: Malware Targeting Activists, Lawyers, and Journalists
Eva Galperin, Electronic Frontier Foundation
Targeted malware campaigns… | ||
| Automatically Detecting Error Handling Bugs Using Error Specifications | Suman Jana, Yuan Kang, Samuel Roth, Baishakhi Ray | 23m |
Automated tool EPEX uses under constrained symbolic execution plus explicit error specifications to explore only error paths and flag incorrect handling. It… | ||
| APISan: Sanitizing API Usages through Semantic Cross-Checking | Insu Yun, Changwoo Min, Xujie Si, Yeongjin Jang, Taesoo Kim, Mayur Naik | 30m |
APISan automatically infers correct API usage by mining semantic patterns from code, building relaxed symbolic execution abstractions (api calls, arguments… | ||
| Defending against Malicious Peripherals with Cinch | Sebastian Angel, Riad S. Wahby, Max Howald, Joshua B. Leners, Michael Spilo, Zhen Sun, Andrew J. Blumberg, Michael Walfish | 24m |
Cinch virtualizes the USB bus into a sacrificial VM and inserts a modular enforcer between that VM and the protected system, implemented as a Rust user process… | ||
| On Omitting Commits and Committing Omissions: Preventing Git Metadata... | Santiago Torres-Arias, Anil Kumar Ammula, Reza Curtmola, Justin Cappos | 28m |
Catalogs seven metadata-manipulation attacks and demonstrates how tampering with Git reference files enables subtle exploits like teleport attack and rollback… | ||
| Making USB Great Again with USBFILTER | Dave (Jing) Tian, Nolen Scaife, Adam Bates, Kevin R. B. Butler, Patrick Traynor | 33m |
Kernel-layer USB firewall that mediates every USB packet by sitting between drivers and the host controller, tracing packets back to PIDs and enforcing… | ||
| Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks | Stefano Cristalli, Mattia Pagnozzi, Mariano Graziano, Andrea Lanzi, Davide Balzarotti | 30m |
Graffiti framework implements a hypervisor-based memory tracer using Intel EPT and per-process micro-virtualization to sandbox paging structures; prototype… | ||
| The Moral Character of Cryptographic Work | Phillip Rogaway | 01h 48m |
The Moral Character of Cryptographic Work
Phillip Rogaway, University of California, Davis
Cryptography rearranges power: it configures who can do what, from… | ||
| Request and Conquer: Exposing Cross-Origin Resource Size | Tom Van Goethem, Mathy Vanhoef, Frank Piessens, Wouter Joosen | 27m |
Describes two concrete size‑leak techniques that recover exact cross‑origin resource lengths in seconds: a channel‑based evil twin man‑in‑the‑middle that… | ||
| Trusted Browsers for Uncertain Times | David Kohlbrenner, Hovav Shacham | 29m |
JavaScript can recover fine-grained time even when performance.now is rounded coarsely; the clock edge technique and other tactics boost effective resolution… | ||
| Tracing Information Flows Between Ad Exchanges Using Retargeted Ads | Muhammad Ahmad Bashir, Sajjad Arshad, William Robertson, Christo Wilson | 27m |
Methodology builds controlled personas with an instrumented Chromium to visit 100 product pages per persona, collects 35,448 ad impressions (5,100 unique… | ||
| Virtual U: Defeating Face Liveness Detection by Building Virtual Models... | Yi Xu, Jan-Michael Frahm, Fabian Monrose | 26m |
Create textured 3D reconstructions from 3–27 public photos and render them as an animated face on a phone in a VR rig to match depth and motion cues; a single… | ||
| Hidden Voice Commands | Nicholas Carlini, Pratyush Mishra, Tavish Vaidya, Yuankai Zhang, Micah Sherr, Clay Shields, David Wagner, Wenchao Zhou | 30m |
Researchers generate audio that humans hear as noise but voice systems transcribe as commands, producing both a white-box inversion that backsolves target text… | ||
| FlowFence: Practical Data Protection for Emerging IoT Application Frameworks | Earlence Fernandes, Justin Paupore, Amir Rahmati, Daniel Simionato, Mauro Conti, Atul Prakash | 27m |
FlowFence requires apps to split sensitive processing into Quarantined Modules that run in sandboxes and return opaque handles instead of raw data, with taint… | ||
| Privacy and Threat in Practice: Mobile Messaging by Low-Income New Yorkers | Ame Elliot | 01h 18m |
Privacy and Threat in Practice: Mobile Messaging by Low-Income New Yorkers
Ame Elliot, Simply Secure
Is a theoretically-secure system any good if it doesn’t… | ||
| ARMageddon: Cache Attacks on Mobile Devices | Moritz Lipp, Daniel Gruss, Raphael Spreitzer, Clémentine Maurice, Stefan Mangard | 29m |
Implements Prime+Probe and Flush+Reload (and Evict+Reload, Flush+Flush) on unrooted ARM phones, using a tuned eviction loop to replace missing flush… | ||
| DRAMA: Exploiting DRAM Addressing for Cross-CPU Attacks | Peter Pessl, Daniel Gruss, Clémentine Maurice, Michael Schwarz, Stefan Mangard | 25m |
Reverse engineers DRAM address maps with two methods: physical probing with an oscilloscope on chip‑select and bank pins and a fully automated timing-based… | ||
| An In-Depth Analysis of Disassembly on Full-Scale x86/x64 Binaries | Dennis Andriesse, Xi Chen, Victor van der Veen, Asia Slowinska, Herbert Bos | 23m |
Measurement of nine disassemblers on 981 binaries uses DWARF/PDB plus an LLVM pass to create ground truth and finds IDA recovers 96–99% of instructions, linear… | ||
| Stealing Machine Learning Models via Prediction APIs | Florian Tramèr, Fan Zhang, Ari Juels, Michael K. Reiter, Thomas Ristenpart | 28m |
Demonstrates concrete model extraction that recovers logistic regressions, neural nets and decision trees with near-perfect fidelity (often >=99.9% agreement)… | ||
| Oblivious Multi-Party Machine Learning on Trusted Processors | Olga Ohrimenko, Felix Schuster, Cédric Fournet, Aastha Mehta, Sebastian Nowozin, Kapil Vaswani, Manuel Costa | 28m |
Framework uses real Intel SGX (Skylake) enclaves and a library of data-oblivious primitives plus an oblivious batch shuffling sampler to prevent cache-line… | ||
| Thoth: Comprehensive Policy Compliance in Data Retrieval Systems | Eslam Elnikety, Aastha Mehta, ANJO VAHLDIEK-OBERWAGNER, Deepak Garg, Peter Druschel | 28m |
Thoth enforces data-use policies attached to files, sockets and key-value tuples using process-level information flow control and a declarative policy language… | ||
| The Unfalsifiability of Security Claims | Cormac Herley | 01h 28m |
Argues that claims of necessary conditions are unfalsifiable: you can observe insecurity but never prove a system will never fail, so design rules become… | ||
| Dancing on the Lip of the Volcano: Chosen Ciphertext Attacks on Apple iMessage | Christina Garman, Matthew Green, Gabriel Kaptchuk, Ian Miers, Michael Rushanan | 29m |
A new chosen ciphertext attack exploits Huffman-coded gzip inside iMessage by manipulating AES-CTR ciphertext, correcting CRC32, and using iCloud attachment… | ||
| Predicting, Decrypting, and Abusing WPA2/802.11 Group Keys | Mathy Vanhoef, Frank Piessens | 27m |
Shows that 802.11 group keys are predictable, recoverable and abusible: Mediatek routers use a weak jiffies-based RNG so predicting group keys is practical… | ||
| DROWN: Breaking TLS Using SSLv2 | Nimrod Aviram, Sebastian Schinzel, Juraj Somorovsky, Nadia Heninger, Maik Dankel, Jens Steube, Luke Valenta, David Adrian, J. Alex Halderman, Viktor Dukhovni, Emilia Käsper, Shaanan Cohney, Susanne Engels, Christof Paar, Yuval Shavitt | 25m |
Demonstrates DROWN, a cross‑protocol exploit that uses an SSLv2 server sharing an RSA key as an oracle to decrypt modern TLS sessions. Two variants: the… | ||
| All Your Queries Are Belong to Us: The Power of File-Injection Attacks... | Yupeng Zhang, Jonathan S. Katz, Charalampos Papamanthou | 26m |
Shows concrete file-injection attacks that recover encrypted search queries by sending crafted documents and observing which injected files appear in results… | ||
| Investigating Commercial Pay-Per-Install and the Distribution of Unwanted... | Kurt Thomas, Juan A. Elices Crespo, Ryan Rasti, Jean-Michel Picod, Cait Phillips, Marc-André Decoste, Chris Sharp, Fabio Tirelo, Ali Tofigh, Marc-Antoine Courteau, Lucas Ballard, Robert Shield, Nav Jagpal, Moheeb Abu Rajab, Panayiotis Mavrommatis, Niels Provos, Elie Bursztein, Damon McCoy | 28m |
Researchers build an analysis pipeline and sandboxed milkers that query PPI control servers, de-obfuscate response blobs, fetch and run offered binaries, and… | ||
| Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services | Platon Kotzias, Leyla Bilge, Juan Caballero | 26m |
Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services
Platon Kotzias, IMDEA Software Institute and Universidad Politécnica de Madrid… | ||
| UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware | Amin Kharaz, Sajjad Arshad, Collin Mulliner, William Robertson, Engin Kirda | 31m |
UNVEIL is a dynamic analysis system that auto-generates an artificial user environment and installs a kernel file‑system monitor to log IRPs, read/write… | ||
| Towards Measuring and Mitigating Social Engineering Software Download Attacks | Terry Nelms, Roberto Perdisci, Manos Antonakakis, Mustaque Ahamad | 28m |
Researchers deploy a DPI collector on a large academic network for two months, reconstruct 36,000 executable downloads and identify ~2,000 successful… | ||
| Teaching Computer Security: Thoughts from the Field | David Evans, Zachary Peterson, Colleen Lewis, Tadayoshi Kohno | 01h 36m |
Teaching Computer Security: Thoughts from the Field
David Evans, University of Virginia; Zachary Peterson, California Polytechnic State University; Colleen… | ||
| Specification Mining for Intrusion Detection in Networked Control Systems | Marco Caselli, Emmanuele Zambon, Johanna Amann, Robin Sommer, Frank Kargl | 27m |
Automatic extraction of BACnet-based specifications from device PICS and network traffic generates IDS rules and runs on a Bro/Zeek framework plus Python… | ||
| Optimized Invariant Representation of Network Traffic for Detecting Unseen... | Karel Bartos, Michal Sofka, Vojtech Franc | 26m |
System learns an invariant bag-level representation over proxy log records by computing per-feature histograms plus a self-similarity matrix of flow sequences… | ||
| Authenticated Network Time Synchronization | Benjamin Dowling, Douglas Stebila, Greg Zaverucha | 27m |
A practical authenticated NTP called ANTP replaces per-request public-key work with an infrequent KEM-based exchange and symmetric MACs, implemented in… | ||
| fTPM: A Software-Only Implementation of a TPM Chip | Himanshu Raj, Stefan Saroiu, Alec Wolman, Ronald Aigner, Jeremiah Cox, Paul England, Chris Fenner, Kinshuman Kinshumann, Jork Loeser, Dennis Mattoon, Magnus Nystrom, David Robinson, Rob Spiger, Stefan Thom, David Wooten | 33m |
A firmware TPM 2.0 runs inside ARM TrustZone and ships on millions of devices, replacing a discrete TPM by combining eMMC RPMB storage and secure fuses to… | ||
| Sanctum: Minimal Hardware Extensions for Strong Software Isolation | Victor Costan, Ilia Lebedev, Srinivas Devadas | 28m |
Claims provable enclave isolation that also blocks cache timing attacks by adding a tiny security monitor in software plus small hardware at block interfaces… | ||
| Ariadne: A Minimal Approach to State Continuity | Raoul Strackx, Frank Piessens | 24m |
Ariadne addresses state-continuity for protected-module architectures like Intel SGX by providing rollback protection, input-atomicity (either continue on an… | ||
| Finding and Fixing Security Bugs in Flash | Natalie Silvanovich | 01h 05m |
Work over a year reduces Flash bug density from roughly one bug per day down to 1 bug per week by code review, IDA reverse engineering and mutation fuzzing… | ||
| The Million-Key Question—Investigating the Origins of RSA Public Keys | Petr Švenda, Matúš Nemec, Peter Sekan, Rudolf Kvašňovský, David Formánek, David Komárek, Vashek Matyáš | 28m |
Analysis of 60 million keys from 22 libraries and 16 smartcards finds that specific prime-generation choices (manipulating prime MSBs, avoiding small factors… | ||
| Fingerprinting Electronic Control Units for Vehicle Intrusion Detection | Kyong-Tak Cho, Kang G. Shin | 30m |
Proposes Clock-based IDS (CIDS) that fingerprints ECUs by extracting clock skews from periodic CAN messages, fits per-ECU linear models with Recursive Least… | ||
| Lock It and Still Lose It —on the (In)Security of Automotive Remote Keyless | Flavio D. Garcia, David Oswald, Timo Kasper, Pierre Pavlidès | ? |
Finds global failures in remote keyless entry: VW schemes (VW1–VW4) use global master key or poor diversification discovered by extracting ECU firmware and… | ||
| OblivP2P: An Oblivious Peer-to-Peer Content Sharing System | Yaoqi Jia, Tarik Moataz, Shruti Tople, Prateek Saxena | 23m |
OBLIVP2P implements a distributed ORAM to hide P2P access patterns and achieve unlinkability, using a tree-based ORAM mapped onto peers, distributed private… | ||
| AuthLoop: End-to-End Cryptographic Authentication for Telephony... | Bradley Reaves, Logan Blue, Patrick Traynor | 27m |
End-to-end cryptographic authentication runs entirely over the voice channel using a custom in-band modem that encodes data as frequency shifts, yielding about… | ||
| You Are Who You Know and How You Behave: Attribute Inference Attacks... | Neil Zhenqiang Gong, Bin Liu | 24m |
You Are Who You Know and How You Behave: Attribute Inference Attacks via Users' Social Friends and Behaviors
Neil Zhenqiang Gong, Iowa State University; Bin… | ||
| Report from the Field: A CDN's Role in Repelling Attacks against Banking... | Bruce M. Maggs | 01h 01m |
Report from the Field: A CDN's Role in Repelling Attacks against Banking Industry Web Sites
Bruce Maggs, Duke University and Akamai Technologies
This talk… | ||
| Internet Jones and the Raiders of the Lost Trackers... | Ada Lerner, Anna Kornfeld Simpson, Tadayoshi Kohno, Franziska Roesner | 27m |
Presents a 20‑year longitudinal measurement showing third‑party tracking grows in prevalence and complexity from 1996–2016, using the Internet Archive’s… | ||
| Hey, You Have a Problem: On the Feasibility of Large-Scale Web Vulnerability | Ben Stock, Giancarlo Pellegrino, Christian Rossow, Martin Johns, Michael Backes | 31m |
Study scans the Alexa top million and finds 44,000 vulnerable domains (WordPress and site-specific DOM XSS), splits them into five groups, and sends targeted… | ||
| You've Got Vulnerability: Exploring Effective Vulnerability Notifications | Frank Li, Zakir Durumeric, Jakub Czyz, Mohammad Karami, Michael Bailey, Damon McCoy, Stefan Savage, Vern Paxson | 29m |
Researchers notify thousands of vulnerable hosts (scans find 45,000 publicly accessible ICS, 8,000 routers and 172,000 servers with inconsistent IPv6… | ||
| Mirror: Enabling Proofs of Data Replication and Retrievability in the Cloud | Frederik Armknecht, Ludovic Barman, Jens-Matthias Bohli, Ghassan O. Karame | 31m |
Mirror lets a cloud prove it actually creates and stores replicas while preserving retrievability, shifting replica construction to the provider and avoiding… | ||
| ZKBoo: Faster Zero-Knowledge for Boolean Circuits | Irene Giacomelli, Jesper Madsen, Claudio Orlandi | 23m |
Protocol claims a practical, non-interactive zero-knowledge for Boolean circuits using MPC-in-the-head and a new linear decomposition of the circuit; it's a… | ||
| The Cut-and-Choose Game and Its Application to Cryptographic Protocols | Ruiyu Zhu, Yan Huang, Jonathan S. Katz, Abhi Shelat | 22m |
Claims that cut-and-choose parameter selection is a constrained optimization problem and gives equilibrium analyses and practical solvers; models differing… | ||
| AMD x86 Memory Encryption Technologies | David Kaplan | 01h 11m |
AMD x86 Memory Encryption Technologies
David Kaplan, Advanced Micro Devices
This talk will introduce the audience to two new x86 ISA features developed by… | ||
| On Demystifying the Android Application Framework: Re-Visiting Android... | Michael Backes, Sven Bugiel, Erik Derr, Patrick McDaniel, Damien Octeau, Sebastian Weisgerber | 27m |
A static-analysis pipeline builds a runtime model of Android’s framework, enumerates binder entry points, and models handler/channel/state-machine concurrency… | ||
| Practical DIFC Enforcement on Android | Adwait Nadkarni, Benjamin Andow, William Enck, Somesh Jha | 32m |
Weir implements lazy polyinstantiation and domain declassification on Android 5.0.1 to give app-level secrecy without breaking unmodified apps. It creates… | ||
| Screen after Previous Screens: Spatial-Temporal Recreation of Android App... | Brendan Saltaformaggio, Rohit Bhatia, Xiangyu Zhang, Dongyan Xu, Golden G. Richard III | 27m |
RetroScope reconstructs temporally ordered previous Android app screens from a single memory image by merging that image into a host emulator and driving the… | ||
| Harvesting Inconsistent Security Configurations in Custom Android ROMs... | Yousra Aafer, Xiao Zhang, Wenliang Du | 25m |
Differential analysis over 591 images from 11 vendors using the tool droid diff finds widespread security configuration mismatches: hundreds of permissions… | ||
| Identifying and Characterizing Sybils in the Tor Network | Philipp Winter, Roya Ensafi, Karsten Loesing, Nick Feamster | 29m |
Analyzes nine years (~100 GB) of hourly Tor consensuses plus active scans to detect coordinated relays, using a tool called sybilhunter that produces CSVs and… | ||
| k-fingerprinting: A Robust Scalable Website Fingerprinting Technique | Jamie Hayes, George Danezis | 26m |
New classifier combines random decision forest + k-NN fingerprints over 150 handcrafted features (top leaks: packet counts and early-page bursts) and is tested… | ||
| Protecting Privacy of BLE Device Users | Kassem Fawaz, Kyu-Han Kim, Kang G. Shin | 24m |
System implements a device-agnostic guardian using an Ubertooth One radio to learn per-device advertisement intervals, selectively jam advertisements, then… | ||
| Privacy in Epigenetics: Temporal Linkability of MicroRNA Expression Profiles | Michael Backes, Pascal Berrang, Anna Hecksteden, Mathias Humbert, Andreas Keller, Tim Meyer | 29m |
Paper shows blood-based miRNA profiles are linkable over time: an identification attack reaches ~76% success on blood (≈30% plasma), while a global matching… | ||
| Security Competitions | William Robertson, Dave Levin, Sophia D'Antoine, Adam Doupé | 01h 57m |
Security Competitions
Moderator: Adam Doupé, Arizona State University
Panelists: William Robertson, Northeastern University; Dave Levin, University of… | ||
| nothing matches | ||