research
∙
09/09/2023
The Effectiveness of Security Interventions on GitHub
In 2017, GitHub was the first online open source platform to show securi...
share
research
∙
02/15/2023
Data Forensics in Diffusion Models: A Systematic Analysis of Membership Privacy
In recent years, diffusion models have achieved tremendous success in th...
research
∙
01/28/2023
The Benefits of Vulnerability Discovery and Bug Bounty Programs: Case Studies of Chromium and Firefox
Recently, bug-bounty programs have gained popularity and become a signif...
research
∙
01/12/2023
Bug Hunters' Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem
Although researchers have characterized the bug-bounty ecosystem from th...
research
∙
02/22/2020
An Empirical Study of Android Security Bulletins in Different Vendors
Mobile devices encroach on almost every part of our lives, including wor...
research
∙
10/02/2019
Analyzing Control Flow Integrity with LLVM-CFI
Control-flow hijacking attacks are used to perform malicious com-putatio...
research
∙
05/22/2019
Hey Google, What Exactly Do Your Security Patches Tell Us? A Large-Scale Empirical Study on Android Patched Vulnerabilities
In this paper, we perform a comprehensive study of 2,470 patched Android...
research
∙
04/20/2019
Economic Analyses of Security Investments on Cryptocurrency Exchanges
Cryptocurrency exchanges are frequently targeted and compromised by cybe...
research
∙
01/04/2019
How Reliable is the Crowdsourced Knowledge of Security Implementation?
Stack Overflow (SO) is the most popular online Q&A site for developers t...
research
∙
08/02/2018
Regulating Access to System Sensors in Cooperating Programs
Modern operating systems such as Android, iOS, Windows Phone, and Chrome...
research
∙
07/12/2018
IntRepair: Informed Fixing of Integer Overflows
Integer overflows have threatened software applications for decades. Thu...
research
∙
12/21/2017
An Economic Study of the Effect of Android Platform Fragmentation on Security Updates
Vendors in the Android ecosystem typically customize their devices by mo...
research
∙
10/10/2017
Practical Integer Overflow Prevention
Integer overflows in commodity software are a main source for software b...
research
∙
09/12/2017
Enemy At the Gateways: A Game Theoretic Approach to Proxy Distribution
A core technique used by popular proxy-based circumvention systems like ...
research
∙
04/07/2016