research
∙
11/06/2022
Experience Report on the Challenges and Opportunities in Securing Smartphones Against Zero-Click Attacks
Zero-click attacks require no user interaction and typically exploit zer...
share
research
∙
01/13/2022
D-Box: DMA-enabled Compartmentalization for Embedded Applications
Embedded and Internet-of-Things (IoT) devices have seen an increase in a...
research
∙
03/05/2021
SoK: Cryptojacking Malware
Emerging blockchain and cryptocurrency-based technologies are redefining...
research
∙
07/03/2020
DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis
Microcontroller-based embedded devices are at the core of Internet-of-Th...
research
∙
03/11/2020
Bypassing memory safety mechanisms through speculative control flow hijacks
The prevalence of memory corruption bugs in the past decades resulted in...
research
∙
02/09/2020
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing
Contemporary fuzz testing techniques focus on identifying memory corrupt...
research
∙
12/21/2019
Cached and Confused: Web Cache Deception in the Wild
Web cache deception (WCD) is an attack proposed in 2017, where an attack...
research
∙
11/22/2019
Multi-User Multi-Device-Aware Access Control System for Smart Home
In a smart home system, multiple users have access to multiple devices, ...
research
∙
10/01/2019
An Analysis of Malware Trends in Enterprise Networks
We present an empirical and large-scale analysis of malware samples capt...
research
∙
11/02/2018
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web
Web developers routinely rely on third-party Java-Script libraries such ...
research
∙
11/02/2018
Large-Scale Analysis of Style Injection by Relative Path Overwrite
Relative Path Overwrite (RPO) is a recent technique to inject style dire...
research
∙
10/24/2018