default search action
19th AsiaCCS 2024: Singapore
- Jianying Zhou, Tony Q. S. Quek, Debin Gao, Alvaro A. Cárdenas:
Proceedings of the 19th ACM Asia Conference on Computer and Communications Security, ASIA CCS 2024, Singapore, July 1-5, 2024. ACM 2024
Keynote 1
- Robert H. Deng
:
Toward Practical Client-Side Encryption in Cloud Computing.
Network Security
- Arthur Drichel
Towards Robust Domain Generation Algorithm Classification. - Lars Prehn
Kirin: Hitting the Internet with Distributed BGP Announcements. - Florent Moriconi
X-Ray-TLS: Transparent Decryption of TLS Sessions by Extracting Session Keys from Memory. - Udesh Kumarasinghe
Semantic Ranking for Automated Adversarial Technique Annotation in Security Text. - Junjian Ye
Exposed by Default: A Security Analysis of Home Router Default Settings. - Sebastian Zillien
Look What's There! Utilizing the Internet's Existing Data for Censorship Circumvention with OPPRESSION. - Xiangmin Shen
Decoding the MITRE Engenuity ATT&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments. - Ali Davanian
C2Miner: Tricking IoT Malware into Revealing Live Command & Control Servers.
Side Channels
- Lukas Giner
Generic and Automated Drive-by GPU Cache Attacks from the Browser. - Torsten Krauß
Cloud-Based Machine Learning Models as Covert Communication Channels. - Ethan Ferguson
WebGPU-SPY: Finding Fingerprints in the Sandbox through GPU Cache Attacks. - William Kosasih
SoK: Can We Really Detect Cache Side-Channel Attacks by Monitoring Performance Counters? - Kartik Ramkrishnan
Non-Fusion Based Coherent Cache Randomization Using Cross-Domain Accesses. - Tiziano Marinaro
Beyond Over-Protection: A Targeted Approach to Spectre Mitigation and Performance Optimization. - Lorenz Hetterich
Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8. - Omid Bazangani
ABBY: Automating leakage modelling for side-channel analysis.
Privacy-Preserving Protocols
- Xiaowei Ge
Privacy-Preserving Popularity-Based Deduplication against Malicious Behaviors of the Cloud. - Nan Cheng
Nomadic: Normalising Maliciously-Secure Distance with Cosine Similarity for Two-Party Biometric Authentication. - Yufan Jiang
SiGBDT: Large-Scale Gradient Boosting Decision Tree Training via Function Secret Sharing. - Mingshu Cong
zkMatrix: Batched Short Proof for Committed Matrix Multiplication. - Malte Breuer
Efficient Privacy-Preserving Approximation of the Kidney Exchange Problem. - Minghua Zhao
Honest Majority Multiparty Computation over Rings with Constant Online Communication. - Yunqi Li
Ratel: MPC-extensions for Smart Contracts.
Wireless and Mobile Security
- Senlin Liu
Physical-Layer Public Key Encryption Through Massive MIMO. - Anne Josiane Kouam
Battle of Wits: To What Extent Can Fraudsters Disguise Their Tracks in International bypass Fraud? - Antonio Ruggia
Unmasking the Veiled: A Comprehensive Analysis of Android Evasive Malware. - Shanghao Shi
TriSAS: Toward Dependable Inter-SAS Coordination with Auditability. - Wei Wang
Key Establishment for Secure Asymmetric Cross-Technology Communication.
Hardware Security
- Florian Frank
Secure Data-Binding in FPGA-based Hardware Architectures utilizing PUFs. - Zhi Zhang
SoK: Rowhammer on Commodity Operating Systems. - Jubayer Mahmod
SRAM Imprinting for System Protection and Differentiation. - Andrew J. Adiletta
Mayhem: Targeted Corruption of Register and Stack Variables. - Moritz Peters
On The Effect of Replacement Policies on The Security of Randomized Cache Architectures. - Md Hafizul Islam Chowdhuryy
PowSpectre: Powering Up Speculation Attacks with TSX-based Replay.
Post Quantum
- Bo Yu
HQsFL: A Novel Training Strategy for Constructing High-performance and Quantum-safe Federated Learning. - Poulami Das
Efficient Post-Quantum Secure Deterministic Threshold Wallets from Isogenies. - Samuel Pagliarini
REPQC: Reverse Engineering and Backdooring Hardware Accelerators for Post-quantum Cryptography. - Mingyao Shao
Pairwise and Parallel: Enhancing the Key Mismatch Attacks on Kyber and Beyond. - Andre Esser
SoK: CryptographicEstimators - a Software Library for Cryptographic Hardness Estimation. - Lena Heimberger
OPRFs from Isogenies: Designs and Analysis.
Measurements
- Nethanel Gelernter
External Attack-Surface of Modern Organizations. - Jenny Blessing
Cryptography in the Wild: An Empirical Analysis of Vulnerabilities in Cryptographic Libraries. - Anastasios Lepipas
Username Squatting on Online Social Networks: A Study on X. - Rana Pourmohamad
Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry.
IoT and Voice Assistants
- Wenbo Ding
Command Hijacking on Voice-Controlled IoT in Amazon Alexa Platform. - Hyojin Kim
WhisperVoiceTrace: A Comprehensive Analysis of Voice Command Fingerprinting. - Mehreen Jabbeen
SpotOn: Adversarially Robust Keyword Spotting on Resource-Constrained IoT Platforms. - Romain Cayre
OASIS: An Intrusion Detection System Embedded in Bluetooth Low Energy Controllers.
Formal Methods
- Binghan Wang
A Formal Analysis of Data Distribution Service Security. - Sevdenur Baloglu
Formal Verification and Solutions for Estonian E-Voting. - Luke Harrison
Camel: E2E Verifiable Instant Runoff Voting without Tallying Authorities. - Zilin Shen
Segment-Based Formal Verification of WiFi Fragmentation and Power Save Mode.
Web Security
- Eric Olsson
FakeX: A Framework for Detecting Fake Reviews of Browser Extensions. - Sheryl Hsu
What is in the Chrome Web Store? - Xuhang Gu
Sync-Millibottleneck Attack on Microservices Cloud Architecture. - Merve Sahin
Towards Understanding and Improving Security-Relevant Web Application Logging. - Chao Wang
RootFree Attacks: Exploiting Mobile Platform's Super Apps From Desktop. - Jannis Rautenstrauch
Who's Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact. - Woonghee Lee
Beneath the Phishing Scripts: A Script-Level Analysis of Phishing Kits and Their Impact on Real-World Phishing Websites.
Cyber-Physical Systems
- Piet De Vaere
The SA4P Framework: Sensing and Actuation as a Privilege. - Muneeba Asif
ConFIDe: A PWM-Driven Control-Fused Intrusion Detection System for Hardware Security in Unmanned Aerial Vehicles. - Maryna Veksler
Catch me if you can: Covert Information Leakage from Drones using MAVLink Protocol. - Pritam Dash
Diagnosis-guided Attack Recovery for Securing Robotic Vehicles from Sensor Deception Attacks. - Yiting Qu
FAKEPCD: Fake Point Cloud Detection via Source Attribution. - Zhiang Li
On Practicality of Using ARM TrustZone Trusted Execution Environment for Securing Programmable Logic Controllers. - Eric Wagner
Madtls: Fine-grained Middlebox-aware End-to-end Security for Industrial Communication. - Khaled Sarieddine
Uncovering Covert Attacks on EV Charging Infrastructure: How OCPP Backend Vulnerabilities Could Compromise Your System.
Crypto and Privacy
- Amir Sabbagh Molahosseini
Exploiting Data Redundancy in CKKS Encoding for High-Speed Homomorphic Encryption. - Xinpeng Yang
Efficient Unbalanced Quorum PSI from Homomorphic Encryption. - Afonso Arriaga
SweetPAKE: Key exchange with decoy passwords. - Yifei Cai
MOSAIC: A Prune-and-Assemble Approach for Efficient Model Pruning in Privacy-Preserving Deep Learning. - Han Xia
LightPIR: Single-Server PIR via FHE without Gaussian Noise. - Kwan Yin Chan
Reconstructing Chameleon Hash: Full Security and the Multi-Party Setting. - Amit Singh Bhati
Skye: An Expanding PRF based Fast KDF and its Applications. - Chaojie Lv
Publishing Common Neighbors Histograms of Social Networks under Edge Differential Privacy.
Keynote 2
- Alexandra Dmitrienko
Federated Learning Security: From Dusk to Dawn.
Keynote 3
- XiaoFeng Wang
Security Of AI, By AI and For AI: Charting New Territories in AI-Centered Cybersecurity Research.
Software Security
- Jonas Möller
Cross-Language Differential Testing of JSON Parsers. - Trevor Dunlap
VFCFinder: Pairing Security Advisories and Patches. - Alwin Maier
On the Role of Pre-trained Embeddings in Binary Code Analysis. - Marius Momeu
ISLAB: Immutable Memory Management Metadata for Commodity Operating System Kernels. - Andreas Hager-Clukas
DMTI: Accelerating Memory Error Detection in Precompiled C/C++ Binaries with ARM Memory Tagging Extension. - Xu He
BinGo: Identifying Security Patches in Binary Code with Graph Representation Learning. - Nozima Murodova
BinAdapter: Leveraging Continual Learning for Inferring Function Symbol Names in a Binary. - Lukas Maar
Beyond the Edges of Kernel Control-Flow Hijacking Protection with HEK-CFI.
Machine Learning
- Jiacheng Liang
Model Extraction Attacks Revisited. - Abhinav Kumar
A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference. - Thirasara Ariyarathna
VLIA: Navigating Shadows with Proximity for Highly Accurate Visited Location Inference Attack against Federated Recommendation Models. - Oshan Jayawardena
Self-Supervised Fine-Tuning of Automatic Speech Recognition Systems against Signal Processing Attacks. - Kane Walter
Mitigating Distributed Backdoor Attack in Federated Learning Through Mode Connectivity. - Zahra Mousavi
An Investigation into Misuse of Java Security APIs by Large Language Models. - Bocheng Chen
Multi-Turn Hidden Backdoor in Large Language Model-powered Chatbot Models. - Linkang Du
PARL: Poisoning Attacks Against Reinforcement Learning-based Recommender Systems.
Distributed and Decentralized Systems
- Giacomo Giuliari
An Empirical Study of Consensus Protocols' DoS Resilience. - Jamal Mosakheil
SilentProof: Anonymous Authentication with Blockchain-Backed Offloading. - Kanchan Bisht
Revocable TACO: Revocable Threshold based Anonymous Credentials over Blockchains. - Sanidhay Arora
SecPLF: Secure Protocols for Loanable Funds against Oracle Manipulation Attacks. - Jongho Kim
zkLogis: Scalable, Privacy-Enhanced, and Traceable Logistics on Public Blockchain. - Xiang Zhou
CapsuleFormer: A Capsule and Transformer combined model for Decentralized Application encrypted traffic classification. - Chenke Wang
BlindShuffler: Universal and Trustless Mixing for Confidential Transactions. - Emrah Sariboz
PEPPER: Privacy-prEserving, auditable, and fair Payment based resource discovery at the PERvasive edge.
Fuzzing
- Simon Luo
Make out like a (Multi-Armed) Bandit: Improving the Odds of Fuzzer Seed Scheduling with T-Scheduler. - Gwangmu Lee
SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer. - Shashank Sharma
Fuzzing API Error Handling Behaviors using Coverage Guided Fault Injection. - Taewook Kim
AIMFuzz: Automated Function-Level In-Memory Fuzzing on Binaries. - Sebastian Neef
What All the PHUZZ Is About: A Coverage-guided Fuzzer for Finding Vulnerabilities in PHP Web Applications. - Felix Weissberg
SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing.
Trusted Execution Environments and Enclaves
- Zhanbo Wang
ESem: To Harden Process Synchronization for Servers. - Jonas Röckl
TeeFilter: High-Assurance Network Filtering Engine for High-End IoT and Edge Devices based on TEEs. - Md. Armanuzzaman
Building Your Own Trusted Execution Environments Using FPGA. - Mengyuan Li
SoK: Understanding Design Choices and Pitfalls of Trusted Execution Environments. - Simon Ott
MultiTEE: Distributing Trusted Execution Environments. - Yurak Choe
(In)visible Privacy Indicator: Security Analysis of Privacy Indicator on Android Devices.
ORAM and Searchable Encryption
- William L. Holland
Single Round-trip Hierarchical ORAM via Succinct Indices. - Fuyi Wang
CryptGraph: An Efficient Privacy-Enhancing Solution for Accurate Shortest Path Retrieval in Cloud Environments. - Leonie Reichert
Menhir: An Oblivious Database with Protection against Access and Volume Pattern Leakage. - Arnab Bag
Tokenised Multi-client Provisioning for Dynamic Searchable Encryption with Forward and Backward Privacy. - Samuel Jaques
ALLOSAUR: Accumulator with Low-Latency Oblivious Sublinear Anonymous credential Updates with Revocations. - Xiangfu Song
DISCO: Dynamic Searchable Encryption with Constant State.
Usability
- Ryo Iijima
The Catcher in the Eye: Recognizing Users by their Blinks. - Ritik Roongta
From User Insights to Actionable Metrics: A User-Focused Evaluation of Privacy-Preserving Browser Extensions. - Berend Kloeg
Charting the Path to SBOM Adoption: A Business Stakeholder-Centric Approach. - Mohammad Majid Akhtar
SoK: False Information, Bots and Malicious Campaigns: Demystifying Elements of Social Media Manipulations.
Authentication and Signatures
- Wei-Zhu Yeoh
Delegating FIDO Credentials Using Single-use ECDSA Signatures. - Douglas Stebila
Quantum-Safe Account Recovery for WebAuthn. - Quentin Kniep
Byzantine Fault-Tolerant Aggregate Signatures. - Guy Zyskind
Unstoppable Wallets: Chain-assisted Threshold ECDSA and its Applications.
Payment Channel Networks and Ticket Payments
- Mohammed Ababneh
Auroch: Auction-Based Multipath Routing for Payment Channel Networks. - Gaurav Panwar
SPRITE: Secure and Private Routing in Payment Channel Networks. - Kartick Kolachala
RACED: Routing in Payment Channel Networks Using Distributed Hash Tables. - Pascal Lafourcade
Transferable, Auditable and Anonymous Ticketing Protocol.
POSTER SESSION: Posters
- Somin Song
POSTER: Seccomp profiling with Dynamic Analysis via ChatGPT-assisted Test Code Generation. - Jongkil Jay Jeong
POSTER: Addressing the Privacy by Use Challenges in Verifiable Credential based Digital Wallets. - Zhangchen Xu
Poster: Brave: Byzantine-Resilient and Privacy-Preserving Peer-to-Peer Federated Learning. - Arezoo Rajabi
POSTER: Double-Dip: Thwarting Label-Only Membership Inference Attacks with Transfer Learning and Randomization. - Dinuka Sahabandu
POSTER: Game of Trojans: Adaptive Adversaries Against Output-based Trojaned-Model Detectors. - Sushree Padhan
POSTER: Defense against False Data Injection Attack in a Cyber-Physical System. - Siyi Wang
POSTER: MalaQ - A Malware Against Quantum Computer. - Fengqing Jiang
POSTER: Identifying and Mitigating Vulnerabilities in LLM-Integrated Applications. - Woomin Lee
POSTER: On the Feasibility of Inferring SGX Execution through PMU. - Van Tong
POSTER: Multi-Block Fusion Mechanism for Multi-label Vulnerability Detection in Smart Contracts. - Anand Agrawal
POSTER: iTieProbe: Is IoT Device Provisioning secure against MAC Layer authentication-token based replay attacks?
manage site settings
To protect your privacy, all features that rely on external API calls from your browser are turned off by default. You need to opt-in for them to become active. All settings here will be stored as cookies with your web browser. For more information see our F.A.Q.
last updated on 2024-12-18 18:15 CET by the dblp team
all metadata released as open data under CC0 1.0 license
see also: Terms of Use | Privacy Policy | Imprint
dblp was originally created in 1993 at:
since 2018, dblp has been operated and maintained by:
the dblp computer science bibliography is funded and supported by: