research
∙
07/26/2023
Security Weaknesses in IoT Management Platforms
A diverse set of Internet of Things (IoT) devices are becoming an integr...
share
research
∙
07/18/2023
Measuring the Leakage and Exploitability of Authentication Secrets in Super-apps: The WeChat Case
We conduct a large-scale measurement of developers' insecure practices l...
research
∙
09/29/2022
Hidden in Plain Sight: Exploring Encrypted Channels in Android apps
As privacy features in Android operating system improve, privacy-invasiv...
research
∙
09/23/2022
"My Privacy for their Security": Employees' Privacy Perspectives and Expectations when using Enterprise Security Software
Employees are often required to use Enterprise Security Software ("ESS")...
research
∙
07/19/2022
Blindfold: Keeping Private Keys in PKIs and CDNs out of Sight
Public key infrastructure (PKI) is a certificate-based technology that h...
research
∙
06/01/2022
Not so immutable: Upgradeability of Smart Contracts on Ethereum
A smart contract that is deployed to a blockchain system like Ethereum i...
research
∙
04/04/2022
SAUSAGE: Security Analysis of Unix domain Socket Usage in Android
The Android operating system is currently the most popular mobile operat...
research
∙
04/01/2021
On Securing Cloud-hosted Cyber-physical Systems Using Trusted Execution Environments
Recently, cloud control systems have gained increasing attention from th...
research
∙
07/03/2019
On Privacy Risks of Public WiFi Captive Portals
Open access WiFi hotspots are widely deployed in many public places, inc...
research
∙
07/01/2019
One-Time Programs made Practical
A one-time program (OTP) works as follows: Alice provides Bob with the i...
research
∙
05/26/2019
TEE-aided Write Protection Against Privileged Data Tampering
Unauthorized data alteration has been a longstanding threat since the em...
research
∙
05/13/2019
Privacy and Security Risks of "Not-a-Virus" Bundled Adware: The Wajam Case
Comprehensive case studies on malicious code mostly focus on botnets and...
research
∙
05/13/2019
Analyzing "Not-a-Virus" Bundled Adware: The Wajam Case
Case studies on malicious code mostly focus on botnets and worms (recent...
research
∙
09/24/2018
The Sorry State of TLS Security in Enterprise Interception Appliances
Network traffic inspection, including TLS traffic, in enterprise environ...
research
∙
09/14/2018
Playing With Danger: A Taxonomy and Evaluation of Threats to Smart Toys
Smart toys have captured an increasing share of the toy market, and are ...
research
∙
09/14/2018
Smart But Unsafe: Experimental Evaluation of Security and Privacy Practices in Smart Toys
Smart toys have captured an increasing share of the toy market, and are ...
research
∙
04/23/2018