research
∙
12/21/2022
Homo in Machina: Improving Fuzz Testing Coverage via Compartment Analysis
Fuzz testing is often automated, but also frequently augmented by expert...
share
research
∙
08/24/2022
Attacking Neural Binary Function Detection
Binary analyses based on deep neural networks (DNNs), or neural binary a...
research
∙
08/23/2022
Evaluating Synthetic Bugs
Fuzz testing has been used to find bugs in programs since the 1990s, but...
research
∙
01/20/2022
Polytope: Practical Memory Access Control for C++ Applications
Designing and implementing secure software is inarguably more important ...
research
∙
07/03/2020
DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis
Microcontroller-based embedded devices are at the core of Internet-of-Th...
research
∙
02/09/2020
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing
Contemporary fuzz testing techniques focus on identifying memory corrupt...
research
∙
12/21/2019
Cached and Confused: Web Cache Deception in the Wild
Web cache deception (WCD) is an attack proposed in 2017, where an attack...
research
∙
11/02/2018
Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions
Modern websites include various types of third-party content such as Jav...
research
∙
11/02/2018
Tracing Information Flows Between Ad Exchanges Using Retargeted Ads
Numerous surveys have shown that Web users are concerned about the loss ...
research
∙
11/02/2018
Identifying Extension-based Ad Injection via Fine-grained Web Content Provenance
Extensions provide useful additional functionality for web browsers, but...
research
∙
11/02/2018
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web
Web developers routinely rely on third-party Java-Script libraries such ...
research
∙
11/02/2018
Large-Scale Analysis of Style Injection by Relative Path Overwrite
Relative Path Overwrite (RPO) is a recent technique to inject style dire...
research
∙
10/24/2018