2021\u5e74\u7f51\u7edc\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u7684\u8bba\u6587\u5f55\u7528\u5747\u5df2\u63ed\u6653\uff0cInForSec\u7279\u6574\u7406\u76f8\u5173\u4fe1\u606f\u5206\u4eab\u7ed9\u7f51\u7edc\u5b89\u5168\u5b66\u672f\u793e\u533a\u3002<\/p>\n\n\n\n
NDSS \u4f1a\u8bae\uff08\u5168\u79f0The Network and Distributed System Security Symposium\uff09\u662f\u548cCCS\uff0cUSENIX SECURITY\u53caIEEE S&P\u5e76\u79f0\u7684\u8ba1\u7b97\u673a\u7cfb\u7edf\u5b89\u5168\u9886\u57df\u7684\u56db\u5927\u9876\u7ea7\u4f1a\u8bae\u4e4b\u4e00\u3002<\/p>\n\n\n\n
\u76ee\u524d\u4e3aCCF B \u7c7b\u4f1a\u8bae\uff0c2021\u5e74\u5171\u6709\u4e24\u8f6e(\u590f\u5b63\u3001\u79cb\u5b63)\u8bba\u6587\u5f81\u7a3f\uff0cNDSS 2021\u4f1a\u8bae\u5171\u53d1\u886887\u7bc7\u8bba\u6587\uff08\u5f55\u53d6\u6bd4\u4f8b\u4e3a15.2%\uff0c2020\u5e74\u5f55\u53d6\u7387\u4e3a17.3%\uff0c2019\u5e74\u5f55\u53d6\u7387\u4e3a17%\uff0c2018\u5f55\u53d6\u7387\u4e3a21.4%,\uff09\uff0c\u5176\u4e2d\u5171\u67097\u7bc7\u662f\u6765\u81ea\u4e2d\u56fd\u7684\u5b66\u4eba\u7814\u7a76\u6210\u679c\u3002\uff08\u6ce8\uff1a\u6570\u636e\u4e3a\u4eba\u5de5\u7edf\u8ba1\uff0c\u5982\u6709\u758f\u6f0f\uff0c\u8fd8\u8bf7\u6307\u6b63\u3002\uff09 <\/p>\n\n\n\n
NDSS 2021 \u521b\u65b0\u6210\u679c\u6d89\u53ca\u4e92\u8054\u7f51\u5b89\u5168\u3001\u79fb\u52a8\u65e0\u7ebf\u7f51\u7edc\u5b89\u5168\u3001\u6570\u636e\u5b89\u5168\u3001\u5bc6\u7801\u3001\u4eba\u5de5\u667a\u80fd\u5b89\u5168\u3001\u786c\u4ef6\u5b89\u5168\u3001\u8f6f\u4ef6\u5b89\u5168\u3001\u533a\u5757\u94fe\u5b89\u5168\u3001\u5b89\u5168\u5206\u6790\u3001\u7269\u8054\u7f51\u5b89\u5168\u4ee5\u53ca\u65e0\u4eba\u7cfb\u7edf\u5b89\u5168\u7b49\u4f17\u591a\u9886\u57df\u3002<\/p>\n\n\n\n
\u4ee5\u4e0b\u4e3aNDSS 2021\u5e74\u5f55\u53d6\u8bba\u6587\u5217\u8868\uff1a <\/p>\n\n\n\n
| \u8bba\u6587\u6807\u9898<\/td> | \u4f5c\u8005\u4fe1\u606f<\/td> | \u7b2c\u4e00\u4f5c\u8005\u5355\u4f4d<\/td> | \u4e00\u4f5c\u5355\u4f4d\u6240\u5728\u56fd\u5bb6<\/td><\/tr> |
| All the\n Numbers are US: Large-scale Abuse of Contact Discovery in Mobile Messengers<\/td> | Christoph Hagen (University of\n W\u00fcrzburg); Christian Weinert (TU Darmstadt); Christoph Sendner and Alexandra\n Dmitrienko (University of W\u00fcrzburg); Thomas Schneider (TU Darmstadt)<\/td> | University of W\u00fcrzburg<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| As\n Strong As Its Weakest Link: How to Break Blockchain DApps at RPC Service<\/td> | Kai Li, Jiaqi Chen, Xianghong\n Liu, and Yuzhe Tang (Syracuse University); XiaoFeng Wang (Indiana University\n Bloomington); Xiapu Luo (The Hong Kong Polytechnic University)<\/td> | Syracuse University\uff08\u96ea\u57ce\u5927\u5b66\uff09<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Awakening\n the Web\u2019s Sleeper Agents: Misusing Service Workers for Privacy Leakage<\/td> | Soroush Karami, Panagiotis Ilia,\n and Jason Polakis (University of Illinois at Chicago)<\/td> | University of Illinois at Chicago<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Bringing\n Balance to the Force: Dynamic Analysis of the Android Application Framework<\/td> | Abdallah Dawoud and Sven Bugiel\n (CISPA Helmholtz Center for Information Security)<\/td> | CISPA Helmholtz Center for\n Information Security<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| C$^2$SR:\n Cybercrime Scene Reconstruction for Post-mortem Forensic Analysis<\/td> | Yonghwi Kwon (University of\n Virginia); Weihang Wang (University at Buffalo, SUNY); Jinho Jung (Georgia\n Institute of Technology); Kyu Hyung Lee (University of Georgia); Roberto\n Perdisci (University of Georgia and Georgia Tech)<\/td> | University of Virginia<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Deceptive\n Deletions for Protecting Withdrawn Posts on Social Media Platforms<\/td> | Mohsen Minaei (Visa Research); S\n Chandra Mouli (Purdue University); Mainack Mondal (IIT Kharagpur); Bruno\n Ribeiro and Aniket Kate (Purdue University)<\/td> | Visa Research<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| DOVE: A\n Data-Oblivious Virtual Environment<\/td> | Hyun Bin Lee (University of\n Illinois at Urbana-Champaign); Tushar Jois (Johns Hopkins University);\n Christopher Fletcher and Carl A. Gunter (University of Illinois at\n Urbana-Champaign)<\/td> | University of Illinois at\n Urbana-Champaign\u4f0a\u5229\u8bfa\u4f0a\u5927\u5b66\u9999\u69df\u5206\u6821 <\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Evading\n Voltage-Based Intrusion Detection on Automotive CAN<\/td> | Rohit Bhatia (Purdue\n University); Vireshwar Kumar (Indian Institute of Technology Delhi); Khaled\n Serag and Z. Berkay Celik (Purdue University); Mathias Payer (EPFL); Dongyan\n Xu (Purdue University)<\/td> | Purdue University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Forward\n and Backward Private Conjunctive Searchable Symmetric Encryption<\/td> | Sikhar Patranabis (ETH Zurich);\n Debdeep Mukhopadhyay (IIT Kharagpur)<\/td> | ETH Zurich\u82cf\u9ece\u4e16\u8054\u90a6\u7406\u5de5\u5b66\u9662<\/td> | \u745e\u58eb<\/td><\/tr> |
| From\n WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration\n Privacy under the GDPR<\/td> | Chaoyi Lu (Tsinghua University;\n Beijing National Research Center for Information Science and Technology);\n Baojun Liu (Tsinghua University; Beijing National Research Center for\n Information Science and Technology; Qi An Xin Group); Yiming Zhang (Tsinghua\n University; Beijing National Research Center for Information Science and\n Technology); Zhou Li (University of California, Irvine); Fenglu Zhang\n (Tsinghua University); Haixin Duan (Tsinghua University; Qi An Xin Group);\n Ying Liu (Tsinghua University); Joann Qiongna Chen (University of California,\n Irvine); Jinjin Liang and Zaifeng Zhang (360 Netlab); Shuang Hao (University\n of Texas at Dallas); Min Yang (Fudan University)<\/td> | Tsinghua University; Beijing\n National Research Center for Information Science and Technology<\/td> | \u4e2d\u56fd<\/td><\/tr> |
| Hey\n Alexa, is this Skill Safe?: Taking a Closer Look at the Alexa Skill Ecosystem<\/td> | Christopher Lentzsch\n (Ruhr-Universit\u00e4t Bochum); Sheel Jayesh Shah (North Carolina State\n University); Benjamin Andow (Google); Martin Degeling (Ruhr-Universit\u00e4t\n Bochum); Anupam Das and William Enck (North Carolina State University)<\/td> | Ruhr-Universit\u00e4t Bochum\u6ce2\u9e3f\u9c81\u5c14\u5927\u5b66<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| Let\u2019s\n Stride Blindfolded in a Forest: Sublinear Multi-Client Decision Trees\n Evaluation<\/td> | Jack P. K. Ma and Raymond K. H.\n Tai (The Chinese University of Hong Kong); Yongjun Zhao (Nanyang\n Technological University); Sherman S.M. Chow (The Chinese University of Hong\n Kong)<\/td> | The Chinese University of Hong Kong<\/td> | \u4e2d\u56fd\u9999\u6e2f<\/td><\/tr> |
| More\n than a Fair Share: Network Data Remanence Attacks against Secret\n Sharing-based Schemes<\/td> | Leila Rashidi (University of\n Calgary); Daniel Kostecki (Northeastern University); Alexander James\n (University of Calgary); Anthony Peterson (Northeastern University); Majid\n Ghaderi (University of Calgary); Samuel Jero (MIT Lincoln Laboratory);\n Cristina Nita-Rotaru (Northeastern University); Hamed Okhravi (MIT Lincoln\n Laboratory); Reihaneh Safavi-Naini (University of Calgary)<\/td> | University of Calgary\u5361\u5c14\u52a0\u91cc\u5927\u5b66<\/td> | \u52a0\u62ff\u5927<\/td><\/tr> |
| Obfuscated\n Access and Search Patterns in Searchable Encryption<\/td> | Zhiwei Shang and Simon Oya\n (University of Waterloo); Andreas Peter (University of Twente); Florian\n Kerschbaum (University of Waterloo)<\/td> | University of Waterloo\u6ed1\u94c1\u5362\u5927\u5b66<\/td> | \u52a0\u62ff\u5927<\/td><\/tr> |
| Peerlock:\n Flexsealing BGP<\/td> | Tyler McDaniel, Jared M. Smith,\n and Max Schuchard (University of Tennessee, Knoxville)<\/td> | University of Tennessee, Knoxville\u7530\u7eb3\u897f\u5927\u5b66-\u8bfa\u514b\u65af\u7ef4\u5c14<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| POP and\n PUSH: Demystifying and Defending against (Mach) Port-oriented Programming<\/td> | Min Zheng and Xiaolong Bai\n (Orion Security Lab, Alibaba Group); Yajin Zhou (Zhejiang University); Chao\n Zhang (Institute for Network Science and Cyberspace of Tsinghua University);\n Fuping Qu (Orion Security Lab, Alibaba Group)<\/td> | Orion Security Lab, Alibaba Group\u963f\u91cc\u5b89\u5168\u730e\u6237\u5ea7\u5b9e\u9a8c\u5ba4<\/td> | \u4e2d\u56fd<\/td><\/tr> |
| Processing\n Dangerous Paths \u2013 On Security and Privacy of the Portable Document Format<\/td> | Jens M\u00fcller, Dominik Noss,\n Christian Mainka, Vladislav Mladenov, and J\u00f6rg Schwenk (Ruhr University\n Bochum)<\/td> | Ruhr University Bochum\u6ce2\u9e3f\u9c81\u5c14\u5927\u5b66<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| Reining\n in the Web\u2019s Inconsistencies with Site Policy<\/td> | Stefano Calzavara (Universit\u00e0\n Ca\u2019 Foscari Venezia); Tobias Urban (Institute for Internet Security,\n Westphalian University of Applied Sciences and Ruhr University Bochum);\n Dennis Tatang (Ruhr University Bochum); Marius Steffens and Ben Stock (CISPA\n Helmholtz Center for Information Security)<\/td> | Universit\u00e0 Ca\u2019 Foscari Venezia\u610f\u5927\u5229\u5a01\u5c3c\u65af\u5927\u5b66<\/td> | \u610f\u5927\u5229<\/td><\/tr> |
| Rosita:\n Towards Automatic Elimination of Power-Analysis Leakage in Ciphers<\/td> | Madura A. Shelton (University of\n Adelaide); Niels Samwel and Lejla Batina (Radboud University); Francesco\n Regazzoni (University of Amsterdam and ALaRI \u2013 USI); Markus Wagner\n (University of Adelaide); Yuval Yarom (University of Adelaide and Data61)<\/td> | University of Adelaide\u963f\u5fb7\u83b1\u5fb7\u5927\u5b66<\/td> | \u6fb3\u5927\u5229\u4e9a<\/td><\/tr> |
| Screen\n Gleaning: A Screen Reading TEMPEST Attack on Mobile Devices Exploiting an\n Electromagnetic Side Channel<\/td> | Zhuoran Liu (Radboud\n university); Niels Samwel, L\u00e9o Weissbart, Zhengyu Zhao, Dirk Lauret, Lejla\n Batina, and Martha Larson (Radboud University)<\/td> | Radboud university\u62c9\u5fb7\u5821\u5fb7\u5927\u5b66<\/td> | \u8377\u5170<\/td><\/tr> |
| The\n Abuser Inside Apps: Finding the Culprit Committing Mobile Ad Fraud<\/td> | Joongyum Kim, Jung-hwan Park,\n and Sooel Son (KAIST)<\/td> | KAIST<\/td> | \u97e9\u56fd<\/td><\/tr> |
| Towards\n Measuring Supply Chain Attacks on Package Managers for Interpreted Languages<\/td> | Ruian Duan, Omar Alrawi, Ranjita\n Pai Kasturi, Ryan Elder, Brendan Saltaformaggio, and Wenke Lee (Georgia\n Institute of Technology)<\/td> | Georgia Institute of Technology<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| XDA:\n Accurate, Robust Disassembly with Transfer Learning<\/td> | Kexin Pei (Columbia University);\n Jonas Guan (University of Toronto); David Williams-King, Junfeng Yang, and\n Suman Jana (Columbia University)<\/td> | Columbia University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Zoom on\n the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks<\/td> | Mohd Sabra (University of Texas\n at San Antonio); Anindya Maiti (University of Oklahoma); Murtuza Jadliwala\n (University of Texas at San Antonio)<\/td> | University of Texas at San\n Antonio<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| A Devil\n of a Time: How Vulnerable is NTP to Malicious Timeservers?<\/td> | Yarin Perry, Neta Rozen-Schiff,\n and Michael Schapira (Hebrew University of Jerusalem)<\/td> | Hebrew University of Jerusalem<\/td> | \u4ee5\u8272\u5217<\/td><\/tr> |
| A\n Formal Analysis of the FIDO UAF Protocol<\/td> | Haonan Feng, Hui Li, and Xuesong\n Pan (Beijing University of Posts and Telecommunications, Beijing, China);\n Ziming Zhao (University at Buffalo)<\/td> | Beijing University of Posts and\n Telecommunications, Beijing, China<\/td> | \u4e2d\u56fd<\/td><\/tr> |
| ALchemist:\n Fusing Application and Audit Logs for Precise Attack Provenance without\n Instrumentation<\/td> | Le Yu (Purdue University);\n Shiqing Ma (Rutgers University); Zhuo Zhang, Guanhong Tao, Xiangyu Zhang, and\n Dongyan Xu (Purdue University); Vincent E. Urias and Han Wei Lin (Sandia\n National Laboratories); Gabriela Ciocarlie (SRI); Vinod Yegneswaran (SRI International);\n Ashish Gehani (SRI)<\/td> | Purdue University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| BaseSpec:\n Comparative Analysis of Baseband Software and Cellular Specifications for L3\n Protocols<\/td> | Eunsoo Kim, Dongkwan Kim,\n CheolJun Park, Insu Yun, and Yongdae Kim (KAIST)<\/td> | KAIST<\/td> | \u97e9\u56fd<\/td><\/tr> |
| Bitcontracts:\n Supporting Smart Contracts in Legacy Blockchains<\/td> | Karl W\u00fcst, Loris Diana, and Kari\n Kostiainen (ETH Zurich); Ghassan Karame (NEC Laboratories Europe GmbH);\n Sinisa Matetic and Srdjan Capkun (ETH Zurich)<\/td> | ETH Zurich<\/td> | \u745e\u58eb<\/td><\/tr> |
| CHANCEL:\n Efficient Multi-client Isolation Under Adversarial Programs<\/td> | Adil Ahmad (Purdue University);\n Juhee Kim (Seoul National University); Jaebaek Seo (Google); Insik Shin\n (KAIST); Pedro Fonseca (Purdue University); Byoungyoung Lee (Seoul National\n University)<\/td> | Purdue University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| CV-Inspector:\n Towards Automating Detection of Adblock Circumvention<\/td> | Hieu Le (University of\n California, Irvine); Athina Markopoulou (University of California, Irvine);\n Zubair Shafiq (University of California, Davis)<\/td> | University of California, Irvine<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Data\n Poisoning Attacks to Deep Learning Based Recommender Systems<\/td> | Hai Huang and Jiaming Mu\n (Tsinghua University); Neil Zhenqiang Gong (Duke University); Qi Li (Tsinghua\n University); Bin Liu (IBM); Mingwei Xu (Tsinghua University)<\/td> | Tsinghua University<\/td> | \u4e2d\u56fd<\/td><\/tr> |
| Detecting\n Kernel Memory Leaks in Specialized Modules with Ownership Reasoning<\/td> | Navid Emamdoost, Qiushi Wu,\n Kangjie Lu, and Stephen McCamant (University of Minnesota)<\/td> | University of Minnesota<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Differential\n Training: A Generic Framework to Reduce Label Noises for Android Malware\n Detection<\/td> | Jiayun Xu (School of Information\n Systems, Singapore Management University, Singapore); Yingjiu Li (University\n of Oregon); Robert H. Deng (School of Information Systems, Singapore\n Management University, Singapore)<\/td> | School of Information Systems,\n Singapore Management University, Singapore<\/td> | \u65b0\u52a0\u5761<\/td><\/tr> |
| Does\n Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes<\/td> | Alexander K\u00fcchler (Fraunhofer\n AISEC); Alessandro Mantovani (EURECOM); Yufei Han and Leyla Bilge\n (NortonLifeLock Research Group); Davide Balzarotti (EURECOM)<\/td> | Fraunhofer AISEC<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| EarArray:\n Defending against DolphinAttack via Acoustic Attenuation<\/td> | Guoming Zhang, Xiaoyu Ji, and\n Xinfeng Li (Zhejiang University); Gang Qu (University of Maryland); Wenyuan\n Xu (Zhejing University)<\/td> | Zhejiang University<\/td> | \u4e2d\u56fd<\/td><\/tr> |
| Emilia:\n Catching Iago in Legacy Code<\/td> | Rongzhen Cui (University of\n Toronto); Lianying Zhao (Carleton University); David Lie (University of\n Toronto)<\/td> | University of Toronto<\/td> | \u52a0\u62ff\u5927<\/td><\/tr> |
| FARE:\n Enabling Fine-grained Attack Categorization under Low-quality Labeled Data<\/td> | Junjie Liang and Wenbo Guo (The\n Pennsylvania State University); Tongbo Luo (JD.com); Vasant Honavar\n (Pennsylvania State University); Gang Wang (University of Illinois at\n Urbana-Champaign); Xinyu Xing (Pennsylvania State University)<\/td> | The Pennsylvania State University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Favocado:\n Fuzzing Binding Code of JavaScript Engines Using Semantically Correct Test\n Cases<\/td> | Sung Ta Dinh and Haehyun Cho\n (Arizona State University); Kyle Martin (North Carolina State University);\n Adam Oest (PayPal, Inc.); Yihui Zeng (Arizona State University); Alexandros\n Kapravelos (North Carolina State University); Tiffany Bao, Ruoyu \u201cFish\u201d Wang,\n Yan Shoshitaishvili, and Adam Doupe (Arizona State University); Gail-Joon Ahn\n (Arizona State University and Samsung Research)<\/td> | Arizona State University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| FlowLens:\n Enabling Efficient Flow Classification for ML-based Network Security\n Applications<\/td> | Diogo Barradas, Nuno Santos, and\n Luis Rodrigues (INESC-ID, Instituto Superior T\u00e9cnico, Universidade de\n Lisboa); Salvatore Signorello (Faculdade de Ci\u00eancias, Universidade de\n Lisboa); Fernando Ramos and Andr\u00e9 Madeira (INESC-ID, Instituto Superior\n T\u00e9cnico, Universidade de Lisboa)<\/td> | INESC-ID, Instituto Superior\n T\u00e9cnico, Universidade de Lisboa<\/td> | \u8461\u8404\u7259<\/td><\/tr> |
| FLTrust:\n Byzantine-robust Federated Learning via Trust Bootstrapping<\/td> | Xiaoyu Cao (Duke University);\n Minghong Fang and Jia Liu (The Ohio State University); Neil Zhenqiang Gong\n (Duke University)<\/td> | Duke University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| From\n Library Portability to Para-rehosting: Natively Executing Open-source\n Microcontroller OSs on Commodity Hardware<\/td> | Wenqiang Li (Institute of\n Information Engineering, Chinese Academy of Sciences and University of\n Kansas); Le Guan (University of Georgia); Jingqiang Lin (University of\n Science and Technology of China); Jiameng Shi (University of Georgia);\n Fengjun Li (University of Kansas)<\/td> | Institute of Information\n Engineering, Chinese Academy of Sciences and University of Kansas<\/td> | \u4e2d\u56fd<\/td><\/tr> |
| GALA:\n Greedy ComputAtion for Linear Algebra in Privacy-Preserved Neural Networks<\/td> | Qiao Zhang (Old Dominion\n University); Chunsheng Xin and Hongyi Wu (Old Dominion University, Norfolk,\n VA 23529, USA)<\/td> | Old Dominion University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| HERA:\n Hotpatching of Embedded Real-time Applications<\/td> | Christian Niesler, Sebastian\n Surminski, and Lucas Davi (University of Duisburg-Essen)<\/td> | University of Duisburg-Essen<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| Hunting\n the Haunter \u2014 Efficient Relational Symbolic Execution for Spectre with\n HauntedRelSE<\/td> | Lesly-Ann Daniel and S\u00e9bastien\n Bardin (CEA, List, France); Tamara Rezk (Inria, France)<\/td> | CEA, List, France<\/td> | \u6cd5\u56fd<\/td><\/tr> |
| Improving\n Signal\u2019s Sealed Sender<\/td> | Ian Martiny (University of\n Colorado); Gabriel Kaptchuk (Boston University); Adam Aviv (The George\n Washington University); Dan Roche (U.S. Naval Avademy); Eric Wustrow\n (University of Colorado Boulder)<\/td> | University of Colorado<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| IoTSafe:\n Enforcing Safety and Security Policy with Real IoT Physical Interaction\n Discovery<\/td> | Wenbo Ding (Clemson University);\n Hongxin Hu (University at Buffalo); Long Cheng (Clemson University)<\/td> | Clemson University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| KUBO:\n Precise and Scalable Detection of User-triggerable Undefined Behavior Bugs in\n OS Kernel<\/td> | Changming Liu (Northeastern\n University); Yaohui Chen (Facebook, Inc.); Long Lu (Northeastern University)<\/td> | Northeastern University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Manipulating\n the Byzantine: Optimizing Model Poisoning Attacks and Defenses for Federated\n Learning<\/td> | Virat Shejwalkar and Amir\n Houmansadr (UMass Amherst)<\/td> | UMass Amherst<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| MINOS: A\n Lightweight Real-Time Cryptojacking Detection System<\/td> | Faraz Naseem, Ahmet Aris,\n Leonardo Babun, Selcuk Uluagac, and Ege Tekiner (Florida International\n University)<\/td> | Florida International University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Mondrian:\n Comprehensive Inter-domain Network Zoning Architecture<\/td> | Jonghoon Kwon and H\u00e4hni Claude\n (ETH Z\u00fcrich); Patrick Bamert (Z\u00fcrcher Kantonalbank); Adrian Perrig (ETH\n Z\u00fcrich)<\/td> | ETH Z\u00fcrich<\/td> | \u745e\u58eb<\/td><\/tr> |
| NetPlier:\n Probabilistic Network Protocol Reverse Engineering from Message Traces<\/td> | Yapeng Ye, Zhuo Zhang, Fei Wang,\n Xiangyu Zhang, and Dongyan Xu (Purdue University)<\/td> | Purdue University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| OblivSketch:\n Oblivious Network Measurement as a Cloud Service<\/td> | Shangqi Lai, Xingliang YUAN, and\n Joseph Liu (Monash University); Xun Yi (RMIT University); Qi Li (Tsinghua\n University); Dongxi Liu (Data61, CSIRO); Nepal Surya (Data61 CSIRO Australia)<\/td> | Monash University<\/td> | \u6fb3\u5927\u5229\u4e9a<\/td><\/tr> |
| On the\n Insecurity of SMS One-Time Password Messages against Local Attackers in\n Modern Mobile Devices<\/td> | Zeyu Lei and Yuhong Nan (Purdue\n University); Yanick Fratantonio (EURECOM); Antonio Bianchi (Purdue\n University)<\/td> | Purdue University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| PFirewall:\n Semantics-Aware Customizable Data Flow Control for Home Automation Systems<\/td> | Haotian Chi (Temple University);\n Qiang Zeng (University of South Carolina); Xiaojiang Du (Temple University);\n Lannan Luo (University of South Carolina)<\/td> | Temple University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| PGFUZZ:\n Policy-Guided Fuzzing for Robotic Vehicles<\/td> | Hyungsub Kim, Muslum Ozgur\n Ozmen, Antonio Bianchi, Z. Berkay Celik, and Dongyan Xu (Purdue University)<\/td> | Purdue University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| PHOENIX:\n Device-Centric Cellular Network Protocol Monitoring using Runtime\n Verification<\/td> | Mitziu Echeverria, Zeeshan\n Ahmed, Bincheng Wang, and M. Fareed Arif (The University of Iowa); Syed\n Rafiul Hussain (Pennsylvania State University); Omar Chowdhury (The\n University of Iowa)<\/td> | The University of Iowa<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| POSEIDON:\n Privacy-Preserving Federated Neural Network Learning<\/td> | Sinem Sav, Apostolos Pyrgelis,\n Juan Ram\u00f3n Troncoso-Pastoriza, David Froelicher, Jean-Philippe Bossuat, Joao\n Andr\u00e9 Gomes de S\u00e1 E Sousa, and Jean-Pierre Hubaux (EPFL)<\/td> | EPFL<\/td> | \u745e\u58eb<\/td><\/tr> |
| Practical\n Blind Membership Inference Attack via Differential Comparisons<\/td> | Bo Hui, Yuchen Yang, and Haolin\n Yuan (Johns Hopkins University); Philippe Burlina (The Johns Hopkins\n University Applied Physics Laboratory); Neil Zhenqiang Gong (Duke\n University); Yinzhi Cao (Johns Hopkins University)<\/td> | Johns Hopkins University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Practical\n Non-Interactive Searchable Encryption with Forward and Backward Privacy<\/td> | Shi-Feng Sun, Ron Steinfeld, and\n Shangqi Lai (Monash University, Australia); Xingliang YUAN (Monash\n University); Amin Sakzad and Joseph Liu (Monash University, Australia);\n \u202aSurya Nepal\u202c (Data61 CSIRO, Australia); Dawu Gu (Shanghai Jiao Tong\n University, China)<\/td> | Monash University, Australia<\/td> | \u6fb3\u5927\u5229\u4e9a<\/td><\/tr> |
| Preventing\n and Detecting State Inference Attacks on Android<\/td> | Andrea Possemato (EURECOM \/\n IDEMIA); Dario Nisi and Yanick Fratantonio (EURECOM)<\/td> | EURECOM \/ IDEMIA<\/td> | \u6cd5\u56fd<\/td><\/tr> |
| PrivacyFlash\n Pro: Automating Privacy Policy Generation for Mobile Apps<\/td> | Sebastian Zimmeck, Rafael\n Goldstein, and David Baraka (Wesleyan University)<\/td> | Wesleyan University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| ProPoS:\n A Probabilistic Proof-of-Stake Protocol<\/td> | Daniel Reijsbergen, Pawel\n Szalachowski, Junming Ke, Zengpeng Li, and Jianying Zhou (Singapore\n University of Technology and Design)<\/td> | Singapore University of\n Technology and Design<\/td> | \u65b0\u52a0\u5761<\/td><\/tr> |
| QPEP: An\n Actionable Approach to Secure and Performant Broadband From Geostationary\n Orbit<\/td> | James Pavur (Oxford University);\n Martin Strohmeier and Vincent Lenders (armasuisse); Ivan Martinovic (Oxford\n University)<\/td> | Oxford University<\/td> | \u82f1\u56fd<\/td><\/tr> |
| RandRunner:\n Distributed Randomness from Trapdoor VDFs with Strong Uniqueness<\/td> | Philipp Schindler, Aljosha\n Judmayer, and Markus Hittmeir (SBA Research); Nicholas Stifter (SBA Research,\n TU Wien); Edgar Weippl (Universit\u00e4t Wien)<\/td> | SBA Research<\/td> | \u5965\u5730\u5229<\/td><\/tr> |
| Refining\n Indirect Call Targets at the Binary Level<\/td> | Sun Hyoung Kim (Penn State);\n Cong Sun (Xidian University); Dongrui Zeng and Gang Tan (Penn State)<\/td> | Penn State<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Reinforcement\n Learning-based Hierarchical Seed Scheduling for Greybox Fuzzing<\/td> | Jinghan Wang, Chengyu Song, and\n Heng Yin (University of California, Riverside)<\/td> | University of California,\n Riverside<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| ROV++:\n Improved Deployable Defense against BGP Hijacking<\/td> | Reynaldo Morillo, Justin\n Furuness, Cameron Morris, James Breslin, Amir Herzberg, and Bing Wang\n (University of Connecticut)<\/td> | University of Connecticut<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| SerialDetector:\n Principled and Practical Exploration of Object Injection Vulnerabilities for\n the Web<\/td> | Mikhail Shcherbakov and Musard\n Balliu (KTH Royal Institute of Technology)<\/td> | KTH Royal Institute of Technology<\/td> | \u745e\u5178<\/td><\/tr> |
| Shadow\n Attacks: Hiding and Replacing Content in Signed PDFs<\/td> | Christian Mainka, Vladislav\n Mladenov, and Simon Rohlmann<\/td> | Ruhr-Universit\u00e4t Bochum<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| SpecTaint:\n Speculative Taint Analysis for Discovering Spectre Gadgets<\/td> | Zhenxiao Qi (UC Riverside); Qian\n Feng (Baidu USA); Yueqiang Cheng (Baidu Security); Mengjia Yan (UIUC); Peng\n Li (Baidu X-Lab); Heng Yin (UC Riverside); Tao Wei (Baidu X-Lab)<\/td> | UC Riverside<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| SquirRL:\n Automating Attack Analysis on Blockchain Incentive Mechanisms with Deep\n Reinforcement Learning<\/td> | Charlie Hou (CMU, IC3); Mingxun\n Zhou (Peking University); Yan Ji and Phil Daian (Cornell Tech, IC3); Florian\n Tram\u00e8r (Stanford University); Giulia Fanti (CMU, IC3); Ari Juels (Cornell\n Tech, IC3)<\/td> | CMU, IC3<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| SymQEMU:\n Compilation-based symbolic execution for binaries<\/td> | Sebastian Poeplau (EURECOM and\n Code Intelligence); Aur\u00e9lien Francillon (EURECOM)<\/td> | EURECOM and Code Intelligence<\/td> | \u6cd5\u56fd<\/td><\/tr> |
| Tales of\n Favicons and Caches: Persistent Tracking in Modern Browsers<\/td> | Konstantinos Solomos, John\n Kristoff, Chris Kanich, and Jason Polakis (University of Illinois at Chicago)<\/td> | University of Illinois at Chicago<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| TASE:\n Reducing Latency of Symbolic Execution with Transactional Memory<\/td> | Adam Humphries (University of\n North Carolina); Kartik Cating-Subramanian (University of Colorado); Michael\n K. Reiter (Duke University)<\/td> | University of North Carolina<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| The\n Bluetooth CYBORG: Analysis of the Full Human-Machine Passkey Entry AKE\n Protocol<\/td> | Michael Troncoso and Britta Hale\n (Naval Postgraduate School)<\/td> | Naval Postgraduate School<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| To\n Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media<\/td> | Beliz Kaleli (Boston\n University); Brian Kondracki (Stony Brook University); Manuel Egele (Boston\n University); Nick Nikiforakis (Stony Brook University); Gianluca Stringhini\n (Boston University)<\/td> | Boston University<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Towards\n Understanding and Detecting Cyberbullying in Real-world Images<\/td> | Nishant Vishwamitra and Hongxin\n Hu (University at Buffalo); Feng Luo and Long Cheng (Clemson University)<\/td> | University at Buffalo<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Trust\n the Crowd: Wireless Witnessing to Detect Attacks on ADS-B-Based Air-Traffic\n Surveillance<\/td> | Kai Jansen (Ruhr University\n Bochum); Liang Niu and Nian Xue (New York University Abu Dhabi); Ivan\n Martinovic (University of Oxford); Christina P\u00f6pper (New York University Abu\n Dhabi)<\/td> | Ruhr University Bochum<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| Understanding\n and Detecting International Revenue Share Fraud<\/td> | Merve Sahin (SAP Security\n Research); Aur\u00e9lien Francillon (EURECOM)<\/td> | SAP Security Research<\/td> | \u6cd5\u56fd<\/td><\/tr> |
| Understanding\n the Growth and Security Considerations of ECS<\/td> | Athanasios Kountouras,\n Panagiotis Kintis, Athanasios Avgetidis, Thomas Papastergiou, and Charles\n Lever (Georgia Institute of Technology); Michalis Polychronakis (Stony Brook\n University); Manos Antonakakis (Georgia Institute of Technology)<\/td> | Georgia Institute of Technology<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Understanding\n Worldwide Private Information Collection on Android<\/td> | Yun Shen and Pierre-Antoine\n Vervier (NortonLifeLock Research Group); Gianluca Stringhini (Boston\n University)<\/td> | NortonLifeLock Research Group<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| WATSON:\n Abstracting Behaviors from Audit Logs via Aggregation of Contextual Semantics<\/td> | Jun Zeng (National University of\n Singapore); Zheng Leong Chua (Independent Researcher); Kaihang Ji and Zhenkai\n Liang (National University of Singapore); Jian Mao (Beihang University)<\/td> | National University of Singapore<\/td> | \u65b0\u52a0\u5761<\/td><\/tr> |
| Who\u2019s\n Hosting the Block Party? Studying Third-Party Blockage of CSP and SRI<\/td> | Marius Steffens (CISPA Helmholtz\n Center for Information Security); Marius Musch and Martin Johns (TU\n Braunschweig); Ben Stock (CISPA Helmholtz Center for Information Security)<\/td> | CISPA Helmholtz Center for\n Information Security<\/td> | \u5fb7\u56fd<\/td><\/tr> |
| WINNIE :\n Fuzzing Windows Applications with Harness Synthesis and Fast Cloning<\/td> | Jinho Jung and Stephen Tong\n (Georgia Institute of Technology); Hong Hu (Pennsylvania State University);\n Jungwon Lim, Yonghwi Jin, and Taesoo Kim (Georgia Institute of Technology)<\/td> | Georgia Institute of Technology<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| Your\n Phone is My Proxy: Detecting and Understanding Mobile Proxy Networks<\/td> | Xianghang Mi (University at\n Buffalo); Siyuan Tang, Zhengyi Li, and Xiaojing Liao (Indiana University\n Bloomington); Feng Qian (University of Minnesota \u2013 Twin Cities); XiaoFeng\n Wang (Indiana University Bloomington)<\/td> | University at Buffalo<\/td> | \u7f8e\u56fd<\/td><\/tr> |
| \u0414\u043e\u0432\u0435\u0440\u044f\u0301\u0439,\n \u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0301\u0439: SFI\n safety for native-compiled Wasm<\/td> | Evan Johnson, David Thien, and\n Yousef Alhessi (University of California San Diego); Shravan Narayan\n (University Of California San Diego); Fraser Brown (Stanford University);\n Sorin Lerner (University of California San Diego); Tyler McMullen (Fastly\n Labs); Stefan Savage and Deian Stefan (University of California San Diego)<\/td> | University of California San\n Diego<\/td> | \u7f8e\u56fd<\/td><\/tr><\/tbody><\/table>\n","protected":false},"excerpt":{"rendered":" 2021\u5e74\u7f51\u7edc\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u7684\u8bba\u6587\u5f55\u7528\u5747\u5df2\u63ed\u6653\uff0cInForSec\u7279\u6574\u7406\u76f8\u5173\u4fe1\u606f\u5206\u4eab\u7ed9\u7f51\u7edc\u5b89\u5168\u5b66\u672f\u793e… Continue reading |