{"id":5064,"date":"2021-10-29T12:52:24","date_gmt":"2021-10-29T04:07:24","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=5064"},"modified":"2021-10-29T17:47:20","modified_gmt":"2021-10-29T09:02:20","slug":"%e4%bf%a1%e6%81%af%e5%ae%89%e5%85%a8%e9%a1%b6%e4%bc%9ausenix-security-2021%e5%b9%b4%e5%bd%95%e5%8f%96%e8%ae%ba%e6%96%87%e5%88%97%e8%a1%a8","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=5064","title":{"rendered":"\u7f51\u7edc\u7a7a\u95f4\u5b89\u5168\u9886\u57df\u9876\u7ea7\u4f1a\u8bae\u4e4bUsenix Security 2021\u5f55\u53d6\u76ee\u5f55\u4e00\u89c8"},"content":{"rendered":"\n

2021\u5e74\u7f51\u7edc\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u7684\u8bba\u6587\u5f55\u7528\u5747\u5df2\u63ed\u6653\uff0cInForSec\u7279\u6574\u7406\u76f8\u5173\u4fe1\u606f\u5206\u4eab\u7ed9\u7f51\u7edc\u5b89\u5168\u5b66\u672f\u793e\u533a\u3002 <\/p>\n\n\n\n

Usenix Security Symposium (USENIX Security)\uff0c \u662f\u4e16\u754c\u7f51\u7edc\u548c\u7cfb\u7edf\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u7ea7\u5b66\u672f\u4f1a\u8bae\u4e4b\u4e00\uff0c \u5f00\u59cb\u4e8e\u4e0a\u4e16\u7eaa90\u5e74\u4ee3\u521d\uff0c\u53d1\u8868\u8bba\u6587\u96be\u5ea6\u6781\u9ad8\uff0c \u8fc7\u53bb\u4e94\u5e74\u7684\u5e73\u5747\u5f55\u7528\u7387\u4e3a17%\u3002 <\/p>\n\n\n\n

USENIX Security\u4e3aCCF\u63a8\u8350A\u7c7b\u4f1a\u8bae\uff0cH-5\u6307\u657080\uff0c\u8fd1\u5e74\u6765\u5b83\u7684\u8bba\u6587\u5f55\u7528\u91cf\u4e5f\u5448\u73b0\u51fa\u660e\u663e\u7684\u589e\u957f\u8d8b\u52bf\uff0c2020\u5e74\u5171\u5f55\u53d6157\u7bc7\uff0c2021\u5e74\u5171\u5f55\u53d6\u4e86246\u7bc7\u3002<\/p>\n\n\n\n

\u5176\u4e2d\uff0c\u6765\u81ea\u4e2d\u56fd\u9ad8\u6821\u3001\u79d1\u7814\u9662\u6240\u548c\u4f01\u4e1a\u754c\u517128\u7bc7\uff0c\u6709\u534e\u4eba\u5b66\u8005\u53c2\u4e0e\u7684\u5171\u670978\u7bc7\u3002 \uff08\u6ce8\uff1a\u6570\u636e\u4e3a\u4eba\u5de5\u7edf\u8ba1\uff0c\u5982\u6709\u758f\u6f0f\uff0c\u8fd8\u8bf7\u6307\u6b63\u3002\uff09 <\/p>\n\n\n\n

\u4ee5\u4e0b\u4e3a USENIX Security 2021\u5e74\u5f55\u53d6\u8bba\u6587\u5217\u8868\uff1a<\/p>\n\n\n\n
\u8bba\u6587\u6807\u9898<\/td>\u4f5c\u8005\u4fe1\u606f<\/td>\u7b2c\u4e00\u4f5c\u8005\u5355\u4f4d<\/td>\u4e00\u4f5c\u5355\u4f4d\u6240\u5728\u56fd\u5bb6<\/td><\/tr>
Effect of Mood, Location, Trust, and Presence of Others on\n Video-Based Social Authentication<\/td>Cheng Guo and Brianne Campbell,\n Clemson University; Apu Kapadia, Indiana University; Michael K. Reiter, Duke\n University; Kelly Caine, Clemson University<\/td> Clemson University<\/td>\u7f8e\u56fd<\/td><\/tr>
\u2018Passwords Keep Me Safe\u2019 \u2013 Understanding What Children Think\n about Passwords<\/td>Mary Theofanos and Yee-Yin\n Choong, National Institute of Standards and Technology; Olivia Murphy,\n University of Maryland, College Park<\/td>National Institute of Standards\n and Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
On the Usability of Authenticity Checks for Hardware Security\n Tokens<\/td>Katharina Pfeffer and Alexandra\n Mai, SBA Research; Adrian Dabrowski, University of California, Irvine;\n Matthias
\n Gusenbauer, Tokyo Institute of Technology & SBA Research; Philipp\n Schindler, SBA Research; Edgar Weippl, University
\n of Vienna; Michael Franz, University of California, Irvine; Katharina\n Krombholz, CISPA Helmholtz Center for Information Security<\/td>		SBA Research<\/td>\u5965\u5730\u5229<\/td><\/tr>
Inexpensive Brainwave Authentication: New Techniques and\n Insights on User Acceptance<\/td>Patricia Arias-Cabarcos,\n KASTEL\/KIT; Thilo Habrich, Karen Becker, and Christian Becker, University of\n Mannheim;
\n Thorsten Strufe, KASTEL\/KIT<\/td>		KASTEL\/KIT<\/td>\u7f8e\u56fd<\/td><\/tr>
Why Older Adults (Don\u2019t) Use Password Managers<\/td>Hirak Ray, Flynn Wolf, and Ravi\n Kuber, University of Maryland, Baltimore County; Adam J. Aviv, The George\n Washington University<\/td>University of Maryland,\n Baltimore County<\/td>\u7f8e\u56fd<\/td><\/tr>
It\u2019s Stored, Hopefully, on an Encrypted Server\u201d: Mitigating\n Users\u2019 Misconceptions About FIDO2 Biometric WebAuthn<\/td>Leona Lassak, Ruhr University\n Bochum; Annika Hildebrandt, University of Chicago; Maximilian Golla, Max\n Planck Institute for Security and Privacy; Blase Ur, University of Chicago<\/td> Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
Driving 2FA Adoption at Scale: Optimizing Two-Factor\n Authentication Notification Design Patterns<\/td>Maximilian Golla, Max Planck\n Institute for Security and Privacy; Grant Ho, University of California San\n Diego;
\n Marika Lohmus, Cleo AI; Monica Pulluri, Facebook; Elissa M. Redmiles, Max\n Planck Institute for Software Systems<\/td>		Max Planck Institute for\n Security and Privacy<\/td>\u5fb7\u56fd<\/td><\/tr>
Hiding the Access Pattern is Not Enough: Exploiting Search\n Pattern Leakage in Searchable Encryption<\/td>Simon Oya and Florian\n Kerschbaum, University of Waterloo<\/td>University of Waterloo<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
A Highly Accurate Query-Recovery Attack against Searchable\n Encryption using Non-Indexed Documents<\/td>Marc Damie, University of\n Technology of Compi\u00e8gne, France; Florian Hahn and Andreas Peter, University\n of Twente,
\n The Netherlands<\/td>		University of Technology of\n Compi\u00e8gne, France<\/td>\u6cd5\u56fd<\/td><\/tr>
Fragment and Forge: Breaking Wi-Fi Through Frame Aggregation and\n Fragmentation<\/td>Mathy Vanhoef, New York\n University Abu Dhabi<\/td>New York University Abu Dhabi<\/td>\u963f\u8054\u914b<\/td><\/tr>
Card Brand Mixup Attack: Bypassing the PIN in non-Visa Cards by\n Using Them for Visa Transactions<\/td>David Basin, Ralf Sasse, and\n Jorge Toro-Pozo, Department of Computer Science, ETH Zurich<\/td>Department of Computer Science,\n ETH Zurich<\/td>\u745e\u58eb<\/td><\/tr>
Partitioning Oracle Attacks<\/td>Julia Len, Paul Grubbs, and\n Thomas Ristenpart, Cornell Tech<\/td>Cornell Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
Raccoon Attack: Finding and Exploiting\n Most-Significant-Bit-Oracles in TLS-DH(E)<\/td>Robert Merget and Marcus\n Brinkmann, Ruhr University Bochum; Nimrod Aviram, School of Computer\n Science,
\n Tel Aviv University; Juraj Somorovsky, Paderborn University; Johannes\n Mittmann, Bundesamt f\u00fcr Sicherheit in der
\n Informationstechnik (BSI), Germany; J\u00f6rg Schwenk, Ruhr University Bochum<\/td>		Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
A Side Journey To Titan<\/td>Thomas Roche and Victor Lomn\u00e9,\n NinjaLab, Montpellier, France; Camille Mutschler, NinjaLab, Montpellier,\n France and LIRMM, Univ. Montpellier, CNRS, Montpellier, France; Laurent\n Imbert, LIRMM, Univ. Montpellier, CNRS, Montpellier,France <\/td>NinjaLab, Montpellier, France<\/td>\u6cd5\u56fd<\/td><\/tr>
PASan: Detecting Peripheral Access Concurrency Bugs within\n Bare-Metal Embedded Applications<\/td>Taegyu Kim, Purdue University;\n Vireshwar Kumar, Indian Institute of Technology, Delhi; Junghwan Rhee,\n University
\n of Central Oklahoma; Jizhou Chen and Kyungtae Kim, Purdue University; Chung\n Hwan Kim, University of Texas at
\n Dallas; Dongyan Xu and Dave (Jing) Tian, Purdue University<\/td>		Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
On the Design and Misuse of Microcoded (Embedded) Processors \u2014 A\n Cautionary Note<\/td>Nils Albartus and Clemens\n Nasenberg, Ruhr University Bochum, Germany; Max Planck Institute for Security\n and Privacy,
\n Germany; Florian Stolz, Ruhr University Bochum, Germany; Marc Fyrbiak, Max\n Planck Institute for Security and Privacy,
\n Germany; Christof Paar, Ruhr University Bochum, Germany; Max Planck\n Institute for Security and Privacy, Germany;
\n Russell Tessier, University of Massachusetts, Amherst, USA<\/td>		Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
M2Mon: Building an MMIO-based Security Reference Monitor for\n Unmanned Vehicles<\/td>Arslan Khan and Hyungsub Kim,\n Purdue University; Byoungyoung Lee, Seoul National University (SNU); Dongyan\n Xu,
\n Antonio Bianchi, and Dave (Jing) Tian, Purdue University<\/td>		Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
Sharing More and Checking Less: Leveraging Common Input Keywords\n to Detect Bugs in Embedded Systems<\/td>Libo Chen, School of Electronic\n Information and Electrical Engineering, Shanghai Jiao Tong University;\n Yanhao
\n Wang, QI-ANXIN Technology Research Institute; Quanpu Cai and Yunfan Zhan,\n School of Electronic Information and
\n Electrical Engineering, Shanghai Jiao Tong University; Hong Hu,\n Pennsylvania State University; Jiaqi Linghu,
\n QI-ANXIN Technology Research Institute; Qinsheng Hou, QI-ANXIN Technology\n Research Institute; Shandong
\n University; Chao Zhang and Haixin Duan, BNRist & Institute for Network\n Science and Cyberspace, Tsinghua University;
\n Tsinghua University-QI-ANXIN Group JCNS; Zhi Xue, School of Electronic\n Information and Electrical Engineering,
\n Shanghai Jiao Tong University<\/td>		School of Electronic Information\n and Electrical Engineering, Shanghai Jiao Tong University<\/td>\u4e2d\u56fd<\/td><\/tr>
Jetset: Targeted Firmware Rehosting for Embedded Systems<\/td>Evan Johnson, University of\n California, San Diego; Maxwell Bland, YiFei Zhu, and Joshua Mason, University\n of Illinois
\n at Urbana\u2013Champaign; Stephen Checkoway, Oberlin College; Stefan Savage,\n University of California, San Diego; Kirill
\n Levchenko, University of Illinois at Urbana\u2013Champaign<\/td>		 University of California, San Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
LightBlue: Automatic Profile-Aware Debloating of Bluetooth\n Stacks<\/td>Jianliang Wu and Ruoyu Wu,\n Purdue University; Daniele Antonioli and Mathias Payer, EPFL; Nils Ole\n Tippenhauer,
\n CISPA Helmholtz Center for Information Security; Dongyan Xu, Dave (Jing)\n Tian, and Antonio Bianchi, Purdue University<\/td>		Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
PACStack: an Authenticated Call Stack<\/td>Hans Liljestrand, University of\n Waterloo; Thomas Nyman and Lachlan J. Gunn, Aalto University; Jan-Erik\n Ekberg,
\n Huawei Technologies and Aalto University; N. Asokan, University of Waterloo\n and Aalto University<\/td>		University of Waterloo<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
\u201cIt\u2019s stressful having all these phones\u201d: Investigating Sex\n Workers\u2019 Safety Goals, Risks, and Practices Online<\/td>Allison McDonald, University of\n Michigan; Catherine Barwulor, Clemson University; Michelle L. Mazurek,\n University of
\n Maryland; Florian Schaub, University of Michigan; Elissa M. Redmiles, Max\n Planck Institute for Software Systems<\/td>		University of Michigan<\/td>\u7f8e\u56fd<\/td><\/tr>
\u201cNow I\u2019m a bit angry:\u201d Individuals\u2019 Awareness, Perception, and\n Responses to Data Breaches that Affected Them<\/td>Peter Mayer, Karlsruhe Institute\n of Technology; Yixin Zou and Florian Schaub, University of Michigan; Adam J.\n Aviv,
\n The George Washington University<\/td>		Karlsruhe Institute of\n Technology<\/td>\u5fb7\u56fd<\/td><\/tr>
\u201cIt\u2019s the Company, the Government, You and I\u201d: User Perceptions\n of Responsibility for Smart Home Privacy
\n and Security <\/td>		Julie Haney, National Institute\n of Standards and Technology; Yasemin Acar, National Institute of Standards\n and
\n Technology and Leibniz University Hannover; Susanne Furman, National\n Institute of Standards and Technology<\/td>		National Institute of Standards\n and Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
The Role of Computer Security Customer Support in Helping\n Survivors of Intimate Partner Violence<\/td>Yixin Zou and Allison McDonald,\n University of Michigan; Julia Narakornpichit, Nicola Dell, and Thomas\n Ristenpart,
\n Cornell Tech; Kevin Roundy, Norton Research Group; Florian Schaub,\n University of Michigan; Acar Tamersoy, Norton
\n Research Group<\/td>		University of Michigan<\/td>\u7f8e\u56fd<\/td><\/tr>
Evaluating In-Workflow Messages for Improving Mental Models of\n End-to-End Encryption<\/td>Omer Akgul, Wei Bai, Shruti Das,\n and Michelle L. Mazurek, University of Maryland<\/td>University of Maryland<\/td>\u7f8e\u56fd<\/td><\/tr>
PriSEC: A Privacy Settings Enforcement Controller <\/td>Rishabh Khandelwal and Thomas\n Linden, University of Wisconsin\u2013Madison; Hamza Harkous, Google Inc.;\n Kassem
\n Fawaz, University of Wisconsin\u2013Madison<\/td>		University of Wisconsin\u2013Madison<\/td>\u7f8e\u56fd<\/td><\/tr>
Are Privacy Dashboards Good for End Users? Evaluating User\n Perceptions and Reactions to Google\u2019s My Activity<\/td>Florian M. Farke, Ruhr\n University Bochum; David G. Balash, The George Washington University;\n Maximilian Golla,
\n Max Planck Institute for Security and Privacy; Markus D\u00fcrmuth, Ruhr\n University Bochum; Adam J. Aviv, The George
\n Washington University<\/td>		Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
Mystique: Efficient Conversions for Zero-Knowledge Proofs with\n Applications to Machine Learning<\/td>Chenkai Weng, Northwestern\n University; Kang Yang, State Key Laboratory of Cryptology; Xiang Xie,\n Shanghai Key
\n Laboratory of Privacy-Preserving Computation and MatrixElements\n Technologies; Jonathan Katz, University of
\n Maryland; Xiao Wang, Northwestern University<\/td>		Northwestern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Poseidon: A New Hash Function for Zero-Knowledge Proof\n Systems <\/td>Lorenzo Grassi, Radboud\n University Nijmegen; Dmitry Khovratovich, Ethereum Foundation and Dusk\n Network;
\n Christian Rechberger, IAIK, Graz University of Technology; Arnab Roy,\n University of Klagenfurt; Markus Schofnegger,
\n IAIK, Graz University of Technology<\/td>		Radboud University Nijmegen<\/td>\u8377\u5170<\/td><\/tr>
Dynamic proofs of retrievability with low server storage<\/td>Gaspard Anthoine, Jean-Guillaume\n Dumas, M\u00e9lanie de Jonghe, Aude Maignan, and Cl\u00e9ment Pernet, Universit\u00e9\n Grenoble
\n Alpes; Michael Hanling and Daniel S. Roche, United States Naval Academy<\/td>		Universit\u00e9 Grenoble
\n Alpes<\/td>		\u6cd5\u56fd<\/td><\/tr>
Where\u2019s Crypto?: Automated Identification and Classification of\n Proprietary Cryptographic Primitives in Binary Code<\/td>Carlo Meijer, Radboud\n University; Veelasha Moonsamy, Ruhr University Bochum; Jos Wetzels, Midnight\n Blue Labs<\/td>Radboud University<\/td>\u8377\u5170<\/td><\/tr>
Towards Formal Verification of State Continuity for Enclave\n Programs<\/td>Mohit Kumar Jangid, The Ohio\n State University; Guoxing Chen, Shanghai Jiao Tong University; Yinqian\n Zhang,
\n Southern University of Science and Technology; Zhiqiang Lin, The Ohio State\n University<\/td>		The Ohio State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Protecting Cryptography Against Compelled Self-Incrimination<\/td>Sarah Scheffler and Mayank\n Varia, Boston University<\/td>Boston University<\/td>\u7f8e\u56fd<\/td><\/tr>
CSProp: Ciphertext and Signature Propagation Low-Overhead\n Public-Key Cryptosystem for IoT Environments<\/td>Fatemah Alharbi, Taibah\n University, Yanbu; Arwa Alrawais, Prince Sattam Bin Abdulaziz University;\n Abdulrahman
\n Bin Rabiah, University of California, Riverside, and King Saud University;\n Silas Richelson and Nael Abu-Ghazaleh,
\n University of California, Riverside<\/td>		Taibah University, Yanbu<\/td>\u6c99\u7279\u963f\u62c9\u4f2f<\/td><\/tr>
Automatic Extraction of Secrets from the Transistor Jungle using\n Laser-Assisted Side-Channel Attacks .<\/td>Thilo Krachenfels and Tuba\n Kiyan, Technische Universit\u00e4t Berlin; Shahin Tajik, Worcester Polytechnic\n Institute;
\n Jean-Pierre Seifert, Technische Universit\u00e4t Berlin; Fraunhofer SIT<\/td>		Technische Universit\u00e4t Berlin<\/td>\u5fb7\u56fd<\/td><\/tr>
Lord of the Ring(s): Side Channel Attacks on the CPU On-Chip\n Ring Interconnect Are Practical <\/td>Riccardo Paccagnella, Licheng\n Luo, and Christopher W. Fletcher, University of Illinois at Urbana-Champaign<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Frontal Attack: Leaking Control-Flow in SGX via the CPU Frontend<\/td>Ivan Puddu, Moritz Schneider,\n Miro Haller, and Srdjan \u010capkun, ETH Zurich<\/td>ETH Zurich<\/td>\u745e\u58eb<\/td><\/tr>
Charger-Surfing: Exploiting a Power Line Side-Channel for\n Smartphone Information Leakage .<\/td>Patrick Cronin, Xing Gao, and\n Chengmo Yang, University of Delaware; Haining Wang, Virginia Tech<\/td>University of Delaware<\/td>\u7f8e\u56fd<\/td><\/tr>
VoltPillager: Hardware-based fault injection attacks against\n Intel SGX Enclaves using the SVID voltage scaling
\n interface<\/td>		Zitai Chen, Georgios Vasilakis, Kit Murdock, Edward Dean, David Oswald,\n and Flavio D. Garcia, School of Computer
\n Science, University of Birmingham, UK<\/td>		School of Computer Science,\n University of Birmingham, UK<\/td>\u82f1\u56fd<\/td><\/tr>
CipherLeaks: Breaking Constant-time Cryptography on AMD SEV via\n the Ciphertext Side Channel <\/td>Mengyuan Li, The Ohio State\n University; Yinqian Zhang, Southern University of Science and Technology;\n Huibo Wang
\n and Kang Li, Baidu Security; Yueqiang Cheng, NIO Security Research<\/td>		The Ohio State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Cross-VM and Cross-Processor Covert Channels Exploiting\n Processor Idle Power Management<\/td>Paizhuo Chen, Lei Li, and Zhice\n Yang, ShanghaiTech University<\/td>ShanghaiTech University<\/td>\u4e2d\u56fd<\/td><\/tr>
Can Systems Explain Permissions Better? Understanding Users\u2019\n Misperceptions under Smartphone Runtime Permission Model<\/td>Bingyu Shen, University of California, San Diego; Lili Wei, The Hong Kong\n University of Science and Technology;
\n Chengcheng Xiang, Yudong Wu, Mingyao Shen, and Yuanyuan Zhou, University of\n California, San Diego; Xinxin Jin,
\n Whova, Inc.<\/td>		University of California, San\n Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
\u201cShhh. be quiet!\u201d Reducing the Unwanted Interruptions of\n Notification Permission Prompts on Chrome<\/td>Igor Bilogrevic, Balazs Engedy,\n Judson L. Porter III, Nina Taft, Kamila Hasanbega, Andrew Paseltiner, Hwi\n Kyoung Lee,
\n Edward Jung, Meggyn Watkins, PJ McLachlan, and Jason James, Google<\/td>		Google<\/td>\u7f8e\u56fd<\/td><\/tr>
Explanation Beats Context: The Effect of Timing & Rationales\n on Users\u2019 Runtime Permission Decisions<\/td>Yusra Elbitar, CISPA Helmholtz\n Center for Information Security, Saarland University; Michael Schilling,\n CISPA
\n Helmholtz Center for Information Security; Trung Tin Nguyen, CISPA\n Helmholtz Center for Information Security,
\n Saarland University; Michael Backes and Sven Bugiel, CISPA Helmholtz Center\n for Information Security<\/td>		CISPA Helmholtz Center for\n Information Security, Saarland University<\/td>\u5fb7\u56fd<\/td><\/tr>
A Large Scale Study of User Behavior, Expectations and\n Engagement with Android Permissions<\/td>Weicheng Cao and Chunqiu Xia, University of Toronto; Sai Teja Peddinti, Google; David Lie,\n University of Toronto;
\n Nina Taft, Google; Lisa M. Austin, University of Toronto<\/td>		University of Toronto<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
Reducing Bias in Modeling Real-world Password Strength via Deep\n Learning and Dynamic Dictionaries<\/td>Dario Pasquini, Sapienza\n University of Rome, Institute of Applied Computing CNR; Marco Cianfriglia,\n Institute of
\n Applied Computing CNR; Giuseppe Ateniese, Stevens Institute of Technology;\n Massimo Bernaschi, Institute of
\n Applied Computing CNR<\/td>		Sapienza University of Rome,\n Institute of Applied Computing CNR<\/td>\u610f\u5927\u5229<\/td><\/tr>
Using Amnesia to Detect Credential Database Breaches<\/td>Ke Coby Wang, University of North Carolina at Chapel Hill; Michael K.\n Reiter, Duke University<\/td>University of North Carolina at\n Chapel Hill<\/td>\u7f8e\u56fd<\/td><\/tr>
Incrementally Updateable Honey Password Vaults <\/td>Haibo Cheng, Wenting Li, and\n Ping Wang, Peking University; Chao-Hsien Chu, Pennsylvania State University;\n Kaitai
\n Liang, Delft University of Technology<\/td>		 Peking University<\/td>\u4e2d\u56fd<\/td><\/tr>
Private Blocklist Lookups with Checklist<\/td>Dmitry Kogan, Stanford\n University; Henry Corrigan-Gibbs, MIT CSAIL<\/td>Stanford University<\/td>\u7f8e\u56fd<\/td><\/tr>
Identifying Harmful Media in End-to-End Encrypted Communication:\n Efficient Private Membership
\n Computation<\/td>		Anunay Kulshrestha and Jonathan\n Mayer, Princeton University<\/td>Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
Fuzzy Labeled Private Set Intersection with Applications to\n Private Real-Time Biometric Search<\/td>Erkam Uzun, Simon P. Chung,\n Vladimir Kolesnikov, Alexandra Boldyreva, and Wenke Lee, Georgia Institute of\n Technology<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
PrivSyn: Differentially Private Data Synthesis<\/td>Zhikun Zhang, Zhejiang\n University and CISPA Helmholtz Center for Information Security; Tianhao Wang,\n Ninghui Li,
\n and Jean Honorio, Purdue University; Michael Backes, CISPA Helmholtz Center\n for Information Security; Shibo He and
\n Jiming Chen, Zhejiang University and Alibaba-Zhejiang University Joint\n Research Institute of Frontier Technologies;
\n Yang Zhang, CISPA Helmholtz Center for Information Security<\/td>		Zhejiang University and CISPA\n Helmholtz Center for Information Security<\/td>\u4e2d\u56fd<\/td><\/tr>
Data Poisoning Attacks to Local Differential Privacy Protocols<\/td>Xiaoyu Cao, Jinyuan Jia, and Neil Zhenqiang Gong, Duke University<\/td>Duke University<\/td>\u7f8e\u56fd<\/td><\/tr>
How to Make Private Distributed Cardinality Estimation\n Practical, and Get Differential Privacy for Free<\/td>Changhui Hu, Newcastle University; Jin Li, Guangzhou University; Zheli\n Liu, Xiaojie Guo, Yu Wei, and Xuan Guang,
\n Nankai University; Grigorios Loukides, King\u2019s College London; Changyu Dong,\n Newcastle University<\/td>		 Newcastle University<\/td>\u82f1\u56fd<\/td><\/tr>
Locally Differentially Private Analysis of Graph Statistics<\/td>Jacob Imola, UC San Diego; Takao\n Murakami, AIST; Kamalika Chaudhuri, UC San Diego<\/td> UC San Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
SMASH: Synchronized Many-sided Rowhammer Attacks from JavaScript<\/td>Finn de Ridder, ETH Zurich and\n VU Amsterdam; Pietro Frigo, Emanuele Vannacci, Herbert Bos, and Cristiano\n Giuffrida,
\n VU Amsterdam; Kaveh Razavi, ETH Zurich<\/td>		ETH Zurich and VU Amsterdam<\/td>\u745e\u58eb&\u8377\u5170<\/td><\/tr>
Database Reconstruction from Noisy Volumes: A Cache Side-Channel\n Attack on SQLite<\/td>Aria Shahverdi, University of\n Maryland; Mahammad Shirinov, Bilkent University; Dana Dachman-Soled,\n University of
\n Maryland<\/td>		University of Maryland<\/td>\u7f8e\u56fd<\/td><\/tr>
PTAuth: Temporal Memory Safety via Robust Points-to\n Authentication<\/td>Reza Mirzazade Farkhani, Mansour\n Ahmadi, and Long Lu, Northeastern University<\/td>Northeastern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Does logic locking work with EDA tools?<\/td>Zhaokun Han, Muhammad Yasin, and Jeyavijayan (JV) Rajendran, Texas A&M\n University<\/td>Texas A&M University<\/td>\u7f8e\u56fd<\/td><\/tr>
Cure: A Security Architecture with CUstomizable and Resilient\n Enclaves<\/td>Raad Bahmani, Ferdinand Brasser,\n Ghada Dessouky, Patrick Jauernig, Matthias Klimmek, Ahmad-Reza Sadeghi, and\n Emmanuel Stapf, Technische Universit\u00e4t Darmstadt<\/td>Technische Universit\u00e4t Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
DICE*: A Formally Verified Implementation of DICE Measured Boot<\/td>Zhe Tao, University of California, Davis; Aseem Rastogi, Naman Gupta,\n and Kapil Vaswani, Microsoft Research;
\n Aditya V. Thakur, University of California, Davis<\/td>		University of California, Davis<\/td>\u7f8e\u56fd<\/td><\/tr>
PEARL: Plausibly Deniable Flash Translation Layer using WOM\n coding<\/td>Chen Chen, Anrin Chakraborti, and Radu Sion, Stony Brook\n University
\n Usable Security and Privacy: Institutional Perspectives<\/td>		Stony Brook University
\n Usable Security and Privacy: Institutional Perspectives<\/td>		\u7f8e\u56fd<\/td><\/tr>
Examining the Efficacy of Decoy-based and Psychological Cyber\n Deception<\/td>Kimberly J. Ferguson-Walter,\n Laboratory for Advanced Cybersecurity Research; Maxine M. Major, Naval\n Information
\n Warfare Center, Pacific; Chelsea K. Johnson, Arizona State University;\n Daniel H. Muhleman, Naval Information Warfare
\n Center, Pacific<\/td>		 Laboratory for Advanced Cybersecurity\n Research<\/td>\u7f8e\u56fd<\/td><\/tr>
Helping Users Automatically Find and Manage Sensitive,\n Expendable Files in Cloud Storage<\/td>Mohammad Taha Khan, University\n of Illinois at Chicago \/ Washington & Lee University; Christopher Tran\n and Shubham
\n Singh, University of Illinois at Chicago; Dimitri Vasilkov, University of\n Chicago; Chris Kanich, University of Illinois at
\n Chicago; Blase Ur, University of Chicago; Elena Zheleva, University of\n Illinois at Chicago<\/td>		University of Illinois at\n Chicago \/ Washington & Lee University<\/td>\u7f8e\u56fd<\/td><\/tr>
Adapting Security Warnings to Counter Online Disinformation<\/td>Ben Kaiser, Jerry Wei, Eli\n Lucherini, and Kevin Lee, Princeton University; J. Nathan Matias, Cornell\n University;
\n Jonathan Mayer, Princeton University<\/td>		Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
\u201cWhy wouldn\u2019t someone think of democracy as a target?\u201d: Security\n practices & challenges of people involved with
\n U.S. political campaigns<\/td>		Sunny Consolvo, Patrick Gage\n Kelley, Tara Matthews, Kurt Thomas, Lee Dunn, and Elie Bursztein, Google<\/td>Google<\/td>\u7f8e\u56fd<\/td><\/tr>
Security Obstacles and Motivations for Small Businesses from a\n CISO\u2019s Perspective<\/td>Flynn Wolf, University of\n Maryland, Baltimore County; Adam J. Aviv, The George Washington University;\n Ravi Kuber,
\n University of Maryland, Baltimore County<\/td>		University of Maryland<\/td>\u7f8e\u56fd<\/td><\/tr>
Strategies and Perceived Risks of Sending Sensitive\n Documents <\/td>Noel Warford, University of\n Maryland; Collins W. Munyendo, The George Washington University; Ashna\n Mediratta,
\n University of Maryland; Adam J. Aviv, The George Washington University;\n Michelle L. Mazurek, University of Maryland<\/td>		University of Maryland<\/td>\u7f8e\u56fd<\/td><\/tr>
A Large-Scale Interview Study on Information Security in and\n Attacks against Small and Medium-sized
\n Enterprises<\/td>		Nicolas Huaman, Leibniz\n University Hannover; CISPA Helmholtz Center for Information Security; Bennet\n von
\n Skarczinski, PwC Germany; Christian Stransky and Dominik Wermke, Leibniz\n University Hannover; Yasemin Acar,
\n Leibniz University Hannover; Max Planck Institute for Security and Privacy;\n Arne Drei\u00dfigacker, Criminological Research
\n Institute of Lower Saxony; Sascha Fahl, Leibniz University Hannover; CISPA\n Helmholtz Center for Information Security<\/td>		Leibniz University Hannover<\/td>\u5fb7\u56fd<\/td><\/tr>
On the Routing-Aware Peering against Network-Eclipse Attacks in\n Bitcoin<\/td>Muoi Tran and Akshaye Shenoi,\n National University of Singapore; Min Suk Kang, KAIST<\/td>National University of Singapore<\/td>\u65b0\u52a0\u5761<\/td><\/tr>

\n EOSafe: Security Analysis of EOSIO Smart Contracts<\/td>		Ningyu He, Key Lab on HCST\n (MOE), Peking University; Ruiyi Zhang, PeckShield, Inc.; Haoyu Wang, Beijing\n University
\n of Posts and Telecommunications; Lei Wu, Zhejiang University; Xiapu Luo,\n The Hong Kong Polytechnic University;
\n Yao Guo, Key Lab on HCST (MOE), Peking University; Ting Yu, Qatar Computing\n Research Institute; Xuxian Jiang,
\n PeckShield, Inc.<\/td>		 Peking University<\/td>\u4e2d\u56fd<\/td><\/tr>
EVMPatch: Timely and Automated Patching of Ethereum Smart\n Contracts<\/td>Michael Rodler, University of\n Duisburg-Essen; Wenting Li and Ghassan O. Karame, NEC Laboratories\n Europe;
\n Lucas Davi, University of Duisburg-Essen<\/td>		University of Duisburg-Essen<\/td>\u5fb7\u56fd<\/td><\/tr>
Evil Under the Sun: Understanding and Discovering Attacks on\n Ethereum Decentralized Applications <\/td>Liya Su, Indiana University Bloomington; Institute of Information\n Engineering, Chinese Academy of Sciences; University
\n of Chinese Academy of Sciences; Xinyue Shen, Indiana University Bloomington\n and Alibaba Group; Xiangyu Du,
\n Indiana University Bloomington; Institute of Information Engineering,\n Chinese Academy of Sciences; University of
\n Chinese Academy of Sciences; Xiaojing Liao,\n XiaoFeng Wang, and Luyi Xing, Indiana University\n Bloomington; Baoxu
\n Liu, Institute of Information Engineering, Chinese Academy of Sciences;\n University of Chinese Academy of Sciences<\/td>		Indiana University Bloomington<\/td>\u5370\u5ea6<\/td><\/tr>
Smart Contract Vulnerabilities: Vulnerable Does Not Imply\n Exploited<\/td>Daniel Perez and Benjamin\n Livshits, Imperial College London<\/td>Imperial College London<\/td>\u82f1\u56fd<\/td><\/tr>
Frontrunner Jones and the Raiders of the Dark Forest: An\n Empirical Study of Frontrunning on the Ethereum
\n Blockchain<\/td>		Christof Ferreira Torres, SnT,\n University of Luxembourg; Ramiro Camino, Luxembourg Institute of Science\n and
\n Technology; Radu State, SnT, University of Luxembourg<\/td>		University of Luxembourg<\/td>\u5362\u68ee\u5821<\/td><\/tr>
SmarTest: Effectively Hunting Vulnerable Transaction Sequences\n in Smart Contracts through Language
\n Model-Guided Symbolic Execution<\/td>		Sunbeom So, Seongjoon Hong, and\n Hakjoo Oh, Korea University<\/td>Korea University<\/td>\u97e9\u56fd<\/td><\/tr>
MIRAGE: Mitigating Conflict-Based Cache Attacks with a Practical\n Fully-Associative Design<\/td>Gururaj Saileshwar and Moinuddin\n Qureshi, Georgia Institute of Technology<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Dolma: Securing Speculation with the Principle of Transient\n Non-Observability<\/td>Kevin Loughlin, Ian Neal,\n Jiacheng Ma, Elisa Tsai, Ofir Weisse, Satish Narayanasamy, and Baris Kasikci,\n University of
\n Michigan<\/td>		University of Michigan<\/td>\u7f8e\u56fd<\/td><\/tr>
Osiris: Automated Discovery of Microarchitectural Side Channels<\/td>Daniel Weber, Ahmad Ibrahim,\n Hamed Nemati, Michael Schwarz, and Christian Rossow, CISPA Helmholtz Center\n for Information Security<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Swivel: Hardening WebAssembly against Spectre <\/td>Shravan Narayan and Craig\n Disselkoen, UC San Diego; Daniel Moghimi, Worcester Polytechnic Institute and\n UC San
\n Diego; Sunjay Cauligi, Evan Johnson, and Zhao Gang, UC San Diego; Anjo\n Vahldiek-Oberwagner, Intel Labs; Ravi
\n Sahita, Intel; Hovav Shacham, UT Austin; Dean Tullsen and Deian Stefan, UC\n San Diego<\/td>		UC San Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
Rage Against the Machine Clear: A Systematic Analysis of Machine\n Clears and Their Implications for
\n Transient Execution Attacks<\/td>		Hany Ragab, Enrico Barberis,\n Herbert Bos, and Cristiano Giuffrida, Vrije Universiteit Amsterdam<\/td>Vrije Universiteit Amsterdam<\/td>\u8377\u5170<\/td><\/tr>
Coco: Co-Design and Co-Verification of Masked Software\n Implementations on CPUs<\/td>Barbara Gigerl, Vedad Hadzic,\n and Robert Primas, Graz University of Technology; Stefan Mangard, Graz\n University of
\n Technology, Lamarr Security Research; Roderick Bloem, Graz University of\n Technology<\/td>		Graz University of Technology<\/td>\u5965\u5730\u5229<\/td><\/tr>
Explanation-Guided Backdoor Poisoning Attacks Against Malware\n Classifiers<\/td>Giorgio Severi, Northeastern\n University; Jim Meyer, Xailient Inc.; Scott Coull, FireEye Inc.; Alina Oprea,\n Northeastern
\n University<\/td>		Northeastern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Blind Backdoors in Deep Learning Models<\/td>Eugene Bagdasaryan and Vitaly\n Shmatikov, Cornell Tech<\/td>Cornell Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
Graph Backdoor<\/td>Zhaohan Xi and Ren Pang,\n Pennsylvania State University; Shouling Ji, Zhejiang University; Ting Wang,\n Pennsylvania
\n State University<\/td>		Pennsylvania State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Demon in the Variant: Statistical Analysis of DNNs for Robust\n Backdoor Contamination Detection <\/td>Di Tang, Chinese University of\n Hong Kong; XiaoFeng Wang and Haixu Tang, Indiana University; Kehuan\n Zhang,
\n Chinese University of Hong Kong<\/td>		Chinese University of Hong Kong<\/td>\u4e2d\u56fd<\/td><\/tr>
You Autocomplete Me: Poisoning Vulnerabilities in Neural Code\n Completion<\/td>Roei Schuster, Tel-Aviv\n University, Cornell Tech; Congzheng Song, Cornell University; Eran Tromer,\n Tel Aviv University;
\n Vitaly Shmatikov, Cornell Tech<\/td>		Tel-Aviv University, Cornell\n Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
Poisoning the Unlabeled Dataset of Semi-Supervised Learning<\/td>Nicholas Carlini, Google<\/td>Google<\/td>\u7f8e\u56fd<\/td><\/tr>
Double-Cross Attacks: Subverting Active Learning Systems<\/td>Jose Rodrigo Sanchez Vicarte,\n Gang Wang, and Christopher W. Fletcher, University of Illinois at\n Urbana-Champaign<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Fine Grained Dataflow Tracking with Proximal Gradients<\/td>Gabriel Ryan, Abhishek Shah, and\n Dongdong She, Columbia University; Koustubha Bhat, Vrije Universiteit\n Amsterdam;
\n Suman Jana, Columbia University<\/td>		 Columbia University<\/td>\u7f8e\u56fd<\/td><\/tr>
Static Detection of Unsafe DMA Accesses in Device Drivers <\/td>Jia-Ju Bai and Tuo Li, Tsinghua\n University; Kangjie Lu, University of Minnesota; Shi-Min Hu, Tsinghua\n University<\/td>Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Maze: Towards Automated Heap Feng Shui<\/td>Yan Wang, {CAS-KLONAT,\n BKLONSPT}, Institute of Information Engineering, Chinese Academy of Sciences;\n WeiRan
\n Lab, Huawei Technologies; Chao Zhang, BNRist & Institute for Network\n Science and Cyberspace, Tsinghua University;
\n Tsinghua University-QI-ANXIN Group JCNS; Zixuan Zhao, Bolun Zhang, Xiaorui\n Gong, and Wei Zou, {CAS-KLONAT,
\n BKLONSPT,} Institute of Information Engineering, Chinese Academy of\n Sciences; School of Cyber Security, University of
\n Chinese Academy of Sciences<\/td>		Institute of Information\n Engineering, Chinese Academy of Sciences<\/td>\u4e2d\u56fd<\/td><\/tr>
SelectiveTaint: Efficient Data Flow Tracking With Static Binary\n Rewriting<\/td>Sanchuan\n Chen, Zhiqiang Lin, and Yinqian Zhang, The Ohio\n State University<\/td>The Ohio State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Breaking Through Binaries: Compiler-quality Instrumentation for\n Better Binary-only Fuzzing <\/td>Stefan Nagy, Virginia Tech; Anh\n Nguyen-Tuong, Jason D. Hiser, and Jack W. Davidson, University of\n Virginia;
\n Matthew Hicks, Virginia Tech<\/td>		Virginia Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
MBA-Blast: Unveiling and Simplifying Mixed Boolean-Arithmetic\n Obfuscation<\/td>Binbin Liu, University of\n Science and Technology of China & University of New Hampshire; Junfu\n Shen, University
\n of New Hampshire; Jiang Ming, University of Texas at Arlington; Qilong\n Zheng and Jing Li, University of Science and
\n Technology of China; Dongpeng Xu, University of New Hampshire<\/td>		University of Science and\n Technology of China & University of New Hampshire<\/td>\u4e2d\u56fd<\/td><\/tr>
VScape: Assessing and Escaping Virtual Call Protections<\/td>Kaixiang Chen, Institute for\n Network Science and Cyberspace, Tsinghua University; Chao Zhang, Institute\n for Network
\n Science and Cyberspace, Tsinghua University\/Beijing National Research\n Center for Information Science and Technology\/
\n Tsinghua University-QI-ANXIN Group JCNS; Tingting Yin and Xingman Chen,\n Institute for Network Science and
\n Cyberspace, Tsinghua University; Lei Zhao, School of Cyber Science and\n Engineering, Wuhan University<\/td>		Institute for Network Science\n and Cyberspace, Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Pretty Good Phone Privacy<\/td>Paul Schmitt, Princeton\n University; Barath Raghavan, University of Southern California<\/td>Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
KeyForge: Non-Attributable Email from Forward-Forgeable\n Signatures<\/td>Michael A. Specter, MIT; Sunoo\n Park, MIT & Harvard; Matthew Green, Johns Hopkins University<\/td>MIT<\/td>\u7f8e\u56fd<\/td><\/tr>
Express: Lowering the Cost of Metadata-hiding Communication with\n Cryptographic Privacy<\/td>Saba Eskandarian, Stanford\n University; Henry Corrigan-Gibbs, MIT CSAIL; Matei Zaharia and Dan\n Boneh,
\n Stanford University<\/td>		Stanford University<\/td>\u7f8e\u56fd<\/td><\/tr>
Kal\u03b5ido: Real-Time Privacy Control for Eye-Tracking Systems<\/td>Jingjie Li, Amrita Roy Chowdhury, Kassem Fawaz, and Younghyun Kim,\n University of Wisconsin\u2013Madison<\/td>University of Wisconsin\u2013Madison<\/td>\u7f8e\u56fd<\/td><\/tr>
Communication\u2013Computation Trade-offs in PIR<\/td>Asra Ali, Google; Tancr\u00e8de\n Lepoint; Sarvar Patel, Mariana Raykova, Phillipp Schoppmann, Karn Seth, and\n Kevin Yeo,Google<\/td>Google<\/td>\u7f8e\u56fd<\/td><\/tr>
I Always Feel Like Somebody\u2019s Sensing Me! A Framework to Detect,\n Identify, and Localize Clandestine Wireless Sensors <\/td>Akash Deep Singh, University of\n California, Los Angeles; Luis Garcia, University of California, Los Angeles,\n and
\n USC ISI; Joseph Noor and Mani Srivastava, University of California, Los\n Angeles<\/td>		University of California, Los\n Angeles<\/td>\u7f8e\u56fd<\/td><\/tr>
The Complexities of Healing in Secure Group Messaging: Why\n Cross-Group Effects Matter<\/td>Cas Cremers, CISPA Helmholtz\n Center for Information Security; Britta Hale, Naval Postgraduate School\n (NPS);
\n Konrad Kohbrok, Aalto University<\/td>		CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
SLAP: Improving Physical Adversarial Examples with Short-Lived\n Adversarial Perturbations <\/td>Giulio Lovisotto, Henry Turner,\n and Ivo Sluganovic, University of Oxford; Martin Strohmeier, armasuisse; Ivan\n Martinovic,
\n University of Oxford<\/td>		University of Oxford<\/td>\u82f1\u56fd<\/td><\/tr>
Adversarial Policy Training against Deep Reinforcement Learning<\/td>Xian Wu, Wenbo Guo, Hua Wei, and Xinyu Xing, The Pennsylvania State\n University<\/td>The Pennsylvania State\n University<\/td>\u7f8e\u56fd<\/td><\/tr>
DrMi: A Dataset Reduction Technology based on Mutual Information\n for Black-box Attacks<\/td>Yingzhe He, Guozhu Meng, Kai\n Chen, Xingbo Hu, and Jinwen He, SKLOIS, Institute of Information\n Engineering,
\n Chinese Academy of Sciences\/School of Cyber Security, University of Chinese\n Academy of Sciences<\/td>		Institute of Information\n Engineering,
\n Chinese Academy of Sciences\/School of Cyber Security, University of Chinese\n Academy of Sciences<\/td>		\u4e2d\u56fd<\/td><\/tr>
Deep-Dup: An Adversarial Weight Duplication Attack Framework to\n Crush Deep Neural Network in
\n Multi-Tenant FPGA<\/td>		Adnan Siraj Rakin, Arizona State\n University; Yukui Luo and Xiaolin Xu, Northeastern University; Deliang\n Fan,
\n Arizona State University<\/td>		Arizona State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Entangled Watermarks as a Defense against Model Extraction <\/td>Hengrui Jia and Christopher A. Choquette-Choo, University of Toronto and\n Vector Institute; Varun Chandrasekaran,
\n University of Wisconsin-Madison; Nicolas Papernot, University of Toronto\n and Vector Institute<\/td>		 University of Toronto and Vector Institute<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
Mind Your Weight(s): A Large-scale Study on Insufficient Machine\n Learning Model Protection in Mobile Apps<\/td>Zhichuang\n Sun, Ruimin Sun, Long Lu, and Alan Mislove,\n Northeastern University<\/td>Northeastern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Hermes Attack: Steal DNN Models with Lossless Inference\n Accuracy <\/td>Yuankun Zhu, The University of Texas at Dallas; Yueqiang Cheng, Baidu\n Security; Husheng Zhou, VMware; Yantao Lu,
\n Syracuse University<\/td>		The University of Texas at\n Dallas<\/td>\u7f8e\u56fd<\/td><\/tr>
ARCUS: Symbolic Root Cause Analysis of Exploits in Production\n Systems<\/td>Carter Yagemann, Georgia\n Institute of Technology; Matthew Pruett, Georgia Tech Research Institute;\n Simon P. Chung,
\n Georgia Institute of Technology; Kennon Bittick, Georgia Tech Research\n Institute; Brendan Saltaformaggio and Wenke
\n Lee, Georgia Institute of Technology<\/td>		Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Automatic Firmware Emulation through Invalidity-guided Knowledge\n Inference<\/td>Wei Zhou, National Computer\n Network Intrusion Protection Center, University of Chinese Academy of\n Sciences;
\n Le Guan, Department of Computer Science, University of Georgia; Peng Liu,\n College of Information Sciences and
\n Technology, The Pennsylvania State University; Yuqing Zhang, National\n Computer Network Intrusion Protection Center,
\n University of Chinese Academy of Sciences; School of Cyber Engineering,\n Xidian University; School of Computer Science
\n and Cyberspace Security, Hainan University<\/td>		National Computer Network\n Intrusion Protection Center, University of Chinese Academy of Sciences<\/td>\u4e2d\u56fd<\/td><\/tr>
Finding Bugs Using Your Own Code: Detecting Functionally-similar\n yet Inconsistent Code<\/td>Mansour Ahmadi, Reza Mirzazade\n Farkhani, Ryan Williams, and Long Lu, Northeastern University<\/td>Northeastern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Understanding and Detecting Disordered Error Handling with\n Precise Function Pairing<\/td>Qiushi Wu, Aditya Pakki, Navid Emamdoost, Stephen McCamant, and Kangjie\n Lu, University of Minnesota<\/td>University of Minnesota<\/td>\u7f8e\u56fd<\/td><\/tr>
Precise and Scalable Detection of\n Use-after-Compacting-Garbage-Collection Bugs<\/td>HyungSeok Han, Andrew Wesie, and\n Brian Pak, Theori Inc.<\/td>Theori Inc.<\/td>\u7f8e\u56fd<\/td><\/tr>
Reducing Test Cases with Attention Mechanism of Neural Networks<\/td>Xing Zhang, Jiongyi Chen, Chao\n Feng, Ruilin Li, Yunfei Su, Bin Zhang, Jing Lei, and Chaojing Tang, National\n University
\n of Defense Technology<\/td>		National University
\n of Defense Technology<\/td>		\u4e2d\u56fd<\/td><\/tr>
FlowDist: Multi-Staged Refinement-Based Dynamic Information Flow\n Analysis for Distributed Software
\n Systems<\/td>		Xiaoqin Fu\n and Haipeng Cai, Washington State University,\n Pullman, WA<\/td> Washington State University, Pullman,\n WA
\n Secure Multiparty Computation<\/td>		\u7f8e\u56fd<\/td><\/tr>
Privacy and Integrity Preserving Computations with CRISP <\/td>Sylvain Chatel, Apostolos\n Pyrgelis, Juan Ram\u00f3n Troncoso-Pastoriza, and Jean-Pierre Hubaux, EPFL<\/td>EPFL<\/td>\u745e\u58eb<\/td><\/tr>
Senate: A Maliciously-Secure MPC Platform for Collaborative\n Analytics<\/td>Rishabh Poddar and Sukrit Kalra,\n UC Berkeley; Avishay Yanai, VMware Research; Ryan Deng, Raluca Ada Popa,\n and
\n Joseph M. Hellerstein, UC Berkeley<\/td>		UC Berkeley<\/td>\u7f8e\u56fd<\/td><\/tr>
GForce: GPU-Friendly Oblivious and Rapid Neural Network\n Inference <\/td>Lucien K. L. Ng and Sherman S.\n M. Chow, The Chinese University of Hong Kong, Hong Kong<\/td>The Chinese University of Hong\n Kong<\/td>\u4e2d\u56fd<\/td><\/tr>
ABY2.0: Improved Mixed-Protocol Secure Two-Party Computation<\/td>Arpita Patra, Indian Institute\n of Science; Thomas Schneider, TU Darmstadt; Ajith Suresh, Indian Institute of\n Science;
\n Hossein Yalame, TU Darmstadt<\/td>		Indian Institute of Science<\/td>\u5370\u5ea6<\/td><\/tr>
Fantastic Four: Honest-Majority Four-Party Secure Computation\n With Malicious Security<\/td>Anders Dalskov, Aarhus\n University & Partisia; Daniel Escudero, Aarhus University; Marcel Keller,\n CSIRO\u2019s Data61<\/td>Aarhus University & Partisia<\/td>\u4e39\u9ea6<\/td><\/tr>
Muse: Secure Inference Resilient to Malicious Clients <\/td>Ryan Lehmkuhl and Pratyush\n Mishra, UC Berkeley; Akshayaram Srinivasan, Tata Institute of Fundamental\n Research;
\n Raluca Ada Popa, UC Berkeley<\/td>		UC Berkeley<\/td>\u7f8e\u56fd<\/td><\/tr>
ObliCheck: Efficient Verification of Oblivious Algorithms with\n Unobservable State<\/td>Jeongseok Son, Griffin Prechter,\n Rishabh Poddar, Raluca Ada Popa, and Koushik Sen, University of California,\n Berkeley<\/td>University of California<\/td>\u7f8e\u56fd<\/td><\/tr>
PatchGuard: A Provably Robust Defense against Adversarial\n Patches via Small Receptive Fields and Masking<\/td>Chong Xiang, Princeton University; Arjun Nitin Bhagoji, University of\n Chicago; Vikash Sehwag and Prateek Mittal,
\n Princeton University<\/td>		Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
T-Miner: A Generative Approach to Defend Against Trojan Attacks\n on DNN-based Text Classification<\/td>Ahmadreza Azizi and Ibrahim\n Asadullah Tahmid, Virginia Tech; Asim Waheed, LUMS Pakistan; Neal\n Mangaokar,
\n University of Michigan; Jiameng Pu, Virginia Tech; Mobin Javed, LUMS\n Pakistan; Chandan K. Reddy and Bimal
\n Viswanath, Virginia Tech<\/td>		Virginia Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
WaveGuard: Understanding and Mitigating Audio Adversarial\n Examples<\/td>Shehzeen Hussain, Paarth\n Neekhara, Shlomo Dubnov, Julian McAuley, and Farinaz Koushanfar, University\n of California,
\n San Diego<\/td>		 University of California,
\n San Diego<\/td>		\u7f8e\u56fd<\/td><\/tr>
Cost-Aware Robust Tree Ensembles for Security Applications<\/td>Yizheng Chen, Shiqi Wang, Weifan\n Jiang, Asaf Cidon, and Suman Jana, Columbia University<\/td>Yizheng Chen, Shiqi Wang, Weifan\n Jiang, Asaf Cidon, and Suman Jana, Columbia University<\/td>\u7f8e\u56fd<\/td><\/tr>
Dompteur: Taming Audio Adversarial Examples<\/td>Thorsten Eisenhofer, Lea\n Sch\u00f6nherr, and Joel Frank, Ruhr University Bochum; Lars Speckemeier,\n University College
\n London; Dorothea Kolossa and Thorsten Holz, Ruhr University Bochum<\/td>		Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
CADE: Detecting and Explaining Concept Drift Samples for\n Security Applications<\/td>Limin Yang, University of Illinois at Urbana-Champaign; Wenbo Guo, The\n Pennsylvania State University; Qingying
\n Hao, University of Illinois at Urbana-Champaign; Arridhana Ciptadi and Ali\n Ahmadzadeh, Blue Hexagon; Xinyu Xing,
\n The Pennsylvania State University; Gang Wang, University of Illinois at\n Urbana-Champaign<\/td>		University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Sigl: Securing Software Installations Through Deep Graph\n Learning<\/td>Xueyuan Han, Harvard University; Xiao Yu, NEC Laboratories America; Thomas\n Pasquier, University of Bristol; Ding
\n Li, Peking University; Junghwan Rhee, NEC Laboratories America; James\n Mickens, Harvard University; Margo Seltzer,
\n University of British Columbia; Haifeng Chen, NEC Laboratories America<\/td>		Harvard University<\/td>\u7f8e\u56fd<\/td><\/tr>
ExpRace: Exploiting Kernel Races through Raising Interrupts<\/td>Yoochan Lee, Seoul National\n University; Changwoo Min, Virginia Tech; Byoungyoung Lee, Seoul National\n University<\/td>Seoul National University<\/td>\u97e9\u56fd<\/td><\/tr>
Undo Workarounds for Kernel Bugs<\/td>Seyed Mohammadjavad Seyed\n Talebi, Zhihao Yao, and Ardalan Amiri Sani, UC Irvine; Zhiyun Qian, UC\n Riverside;
\n Daniel Austin, Atlassian<\/td>		UC Irvine<\/td>\u7f8e\u56fd<\/td><\/tr>
An Analysis of Speculative Type Confusion Vulnerabilities in the\n Wild<\/td>Ofek Kirzner and Adam Morrison,\n Tel Aviv University<\/td>Tel Aviv University<\/td>\u4ee5\u8272\u5217<\/td><\/tr>
Blinder: Partition-Oblivious Hierarchical Scheduling<\/td>Man-Ki Yoon, Mengqi Liu, Hao\n Chen, Jung-Eun Kim, and Zhong Shao, Yale University<\/td>Yale University<\/td>\u7f8e\u56fd<\/td><\/tr>
Shard: Fine-Grained Kernel Specialization with Context-Aware\n Hardening<\/td>Muhammad Abubakar, Adil Ahmad,\n Pedro Fonseca, and Dongyan Xu, Purdue University<\/td>Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
Preventing Use-After-Free Attacks with Fast Forward Allocation<\/td>Brian Wickman, GTRI; Hong Hu,\n PennState; Insu Yun, Daehee Jang, and JungWon Lim, GeorgiaTech; Sanidhya\n Kashyap,
\n EPFL; Taesoo Kim, GeorgiaTech<\/td>		GTRI<\/td>\u7f8e\u56fd<\/td><\/tr>
Detecting Kernel Refcount Bugs with Two-Dimensional Consistency\n Checking<\/td>Xin Tan, Yuan Zhang, and Xiyu\n Yang, Fudan University; Kangjie Lu, University of Minnesota; Min Yang, Fudan\n University<\/td> Fudan University<\/td>\u4e2d\u56fd<\/td><\/tr>
Effective Notification Campaigns on the Web: A Matter of Trust,\n Framing, and Support <\/td>Max Maass and Alina St\u00f6ver, TU\n Darmstadt; Henning Prid\u00f6hl, Universit\u00e4t Bamberg; Sebastian Bretthauer,\n GoetheUniversit\u00e4t Frankfurt; Dominik Herrmann, Universit\u00e4t Bamberg; Matthias\n Hollick, TU Darmstadt; Indra Spiecker,
\n Goethe-Universit\u00e4t Frankfurt<\/td>		TU Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
Fingerprinting in Style: Detecting Browser Extensions via\n Injected Style Sheets <\/td>Pierre Laperdrix, Univ. Lille,\n CNRS, Inria; Oleksii Starov, Palo Alto Networks; Quan Chen and Alexandros\n Kapravelos,
\n North Carolina State University; Nick Nikiforakis, Stony Brook University<\/td>		CNRS, Inria<\/td>\u5370\u5ea6<\/td><\/tr>
JAW: Studying Client-side CSRF with Hybrid Property Graphs and\n Declarative Traversals<\/td>Soheil Khodayari and Giancarlo\n Pellegrino, CISPA Helmholtz Center for Information Security<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
AdCube: WebVR Ad Fraud and Practical Confinement of Third-Party\n Ads<\/td>Hyunjoo Lee, Jiyeon Lee, and\n Daejun Kim, Korea Advanced Institute of Science and Technology; Suman\n Jana,
\n Columbia University; Insik Shin and Sooel Son, Korea Advanced Institute of\n Science and Technology<\/td>		 Korea Advanced Institute of Science and\n Technology<\/td>\u97e9\u56fd<\/td><\/tr>
CACTI: Captcha Avoidance via Client-side TEE Integration<\/td>Yoshimichi Nakatsuka and Ercan\n Ozturk, University of California, Irvine; Andrew Paverd, Microsoft\n Research;
\n Gene Tsudik, University of California, Irvine<\/td>		University of California, Irvine<\/td>\u7f8e\u56fd<\/td><\/tr>
PolyScope: Multi-Policy Access Control Analysis to Compute\n Authorized Attack Operations in Android Systems<\/td>Yu-Tsung Lee, Penn State\n University; William Enck, North Carolina State University; Haining Chen,\n Google;
\n Hayawardh Vijayakumar, Samsung Research; Ninghui Li, Purdue University;\n Zhiyun Qian and Daimeng Wang,
\n UC Riverside; Giuseppe Petracca, Lyft; Trent Jaeger, Penn State University<\/td>		Penn State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Nyx: Greybox Hypervisor Fuzzing using Fast Snapshots and Affine\n Types<\/td>Sergej Schumilo, Cornelius\n Aschermann, Ali Abbasi, Simon W\u00f6rner, and Thorsten Holz, Ruhr-Universit\u00e4t\n Bochum<\/td>Ruhr-Universit\u00e4t Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
Systematic Evaluation of Privacy Risks of Machine Learning\n Models<\/td>Liwei Song and Prateek Mittal, Princeton University<\/td> Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
Extracting Training Data from Large Language Models<\/td>Nicholas Carlini, Google;\n Florian Tram\u00e8r, Stanford University; Eric Wallace, UC Berkeley; Matthew\n Jagielski,
\n Northeastern University; Ariel Herbert-Voss, OpenAI and Harvard University;\n Katherine Lee and Adam Roberts,
\n Google; Tom Brown, OpenAI; Dawn Song, UC Berkeley; \u00dalfar Erlingsson, Apple;\n Alina Oprea, Northeastern University;
\n Colin Raffel, Google<\/td>		Google<\/td>\u7f8e\u56fd<\/td><\/tr>
SWIFT: Super-fast and Robust Privacy-Preserving Machine Learning<\/td>Nishat Koti, Mahak Pancholi,\n Arpita Patra, and Ajith Suresh, Indian Institute of Science, Bangalore<\/td>Indian Institute of Science,\n Bangalore<\/td>\u5370\u5ea6<\/td><\/tr>
Stealing Links from Graph Neural Networks<\/td>Xinlei He, CISPA Helmholtz Center for Information Security; Jinyuan Jia,\n Duke University; Michael Backes, CISPA
\n Helmholtz Center for Information Security; Neil Zhenqiang Gong, Duke\n University; Yang Zhang, CISPA Helmholtz
\n Center for Information Security<\/td>		CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Leakage of Dataset Properties in Multi-Party Machine Learning<\/td>Wanrong\n Zhang, Georgia Institute of Technology; Shruti\n Tople, Microsoft Research; Olga Ohrimenko, The University of
\n Melbourne<\/td>		Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Defeating DNN-Based Traffic Analysis Systems in Real-Time With\n Blind Adversarial Perturbations <\/td>Milad Nasr, Alireza Bahramali,\n and Amir Houmansadr, University of Massachusetts Amherst<\/td>University of Massachusetts\n Amherst<\/td>\u7f8e\u56fd<\/td><\/tr>
Cerebro: A Platform for Multi-Party Cryptographic Collaborative\n Learning<\/td>Wenting\n Zheng, UC Berkeley\/CMU; Ryan Deng, Weikeng Chen,\n and Raluca Ada Popa, UC Berkeley; Aurojit Panda,
\n New York University; Ion Stoica, UC Berkeley<\/td>		UC Berkeley\/CMU<\/td>\u7f8e\u56fd<\/td><\/tr>
SyzVegas: Beating Kernel Fuzzing Odds with Reinforcement\n Learning<\/td>Daimeng Wang, Zheng Zhang, Hang Zhang, Zhiyun Qian, Srikanth V.\n Krishnamurthy, and Nael Abu-Ghazaleh,
\n University of California, Riverside<\/td>		University of California,\n Riverside<\/td>\u7f8e\u56fd<\/td><\/tr>
Android SmartTVs Vulnerability Discovery via Log-Guided Fuzzing<\/td>Yousra Aafer, University of\n Waterloo; Wei You, Renmin University of China; Yi Sun, Yu Shi, and Xiangyu\n Zhang,
\n Purdue University; Heng Yin, UC Riverside<\/td>		University of Waterloo<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
UniFuzz: A Holistic and Pragmatic Metrics-Driven Platform for\n Evaluating Fuzzers <\/td>Yuwei Li, Zhejiang University;\n Shouling Ji, Zhejiang University\/Zhejiang University NGICS Platform; Yuan\n Chen,
\n Zhejiang University; Sizhuang Liang, Georgia Institute of Technology;\n Wei-Han Lee, IBM Research; Yueyao Chen
\n and Chenyang Lyu, Zhejiang University; Chunming Wu, Zhejiang\n University\/Zhejiang Lab, Hangzhou, China;
\n Raheem Beyah, Georgia Institute of Technology; Peng Cheng, Zhejiang\n University NGICS Platform\/Zhejiang University;
\n Kangjie Lu, University of Minnesota; Ting Wang, Pennsylvania State\n University<\/td>		Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
Token-Level Fuzzing<\/td>Christopher Salls, UC Santa\n Barbara; Chani Jindal, Microsoft; Jake Corina, Seaside Security; Christopher\n Kruegel and Giovanni Vigna, UC Santa Barbara<\/td>UC Santa Barbara<\/td>\u7f8e\u56fd<\/td><\/tr>
APICraft: Fuzz Driver Generation for Closed-source SDK\n Libraries <\/td>Cen Zhang, Nanyang Technological University; Xingwei Lin, Ant Group;\n Yuekang Li, Nanyang Technological University;
\n Yinxing Xue, University of Science and Technology of China; Jundong Xie,\n Ant Group; Hongxu Chen, Nanyang
\n Technological University; Xinlei Ying and Jiashui Wang, Ant Group; Yang\n Liu, Nanyang Technological University<\/td>		Nanyang Technological University<\/td>\u65b0\u52a0\u5761<\/td><\/tr>
The Use of Likely Invariants as Feedback for Fuzzers<\/td>Andrea Fioraldi, EURECOM;\n Daniele Cono D\u2019Elia, Sapienza University of Rome; Davide Balzarotti, EURECOM<\/td>EURECOM<\/td>\u6cd5\u56fd<\/td><\/tr>
ICSFuzz: Manipulating I\/Os and Repurposing Binary Code to Enable\n Instrumented Fuzzing in ICS Control Applications<\/td>Dimitrios Tychalas, NYU Tandon\n School of Engineering; Hadjer Benkraouda and Michail Maniatakos, New York\n University
\n Abu Dhabi<\/td>		NYU Tandon School of Engineering<\/td>\u7f8e\u56fd<\/td><\/tr>
Prime+Probe 1, JavaScript 0: Overcoming Browser-based\n Side-Channel Defenses<\/td>Anatoly Shusterman, Ben-Gurion\n University of the Negev; Ayush Agarwal, University of Michigan; Sioli\n O\u2019Connell,
\n University of Adelaide; Daniel Genkin, University of Michigan; Yossi Oren,\n Ben-Gurion University of the Negev;
\n Yuval Yarom, University of Adelaide and Data61<\/td>		Ben-Gurion University of the\n Negev<\/td>\u4ee5\u8272\u5217<\/td><\/tr>
Saphire: Sandboxing PHP Applications with Tailored System Call\n Allowlists<\/td>Alexander Bulekov, Rasoul\n Jahanshahi, and Manuel Egele, Boston University<\/td>Boston University<\/td>\u7f8e\u56fd<\/td><\/tr>
SandTrap: Securing JavaScript-driven Trigger-Action Platforms<\/td>Mohammad M. Ahmadpanah, Chalmers\n University of Technology; Daniel Hedin, Chalmers University of\n Technology
\n and M\u00e4lardalen University; Musard Balliu, KTH Royal Institute of\n Technology; Lars Eric Olsson and Andrei Sabelfeld,
\n Chalmers University of Technology<\/td>		Chalmers University of\n Technology<\/td>\u745e\u5178<\/td><\/tr>
Can I Take Your Subdomain? Exploring Same-Site Attacks in the\n Modern Web<\/td>Marco Squarcina, Mauro Tempesta,\n and Lorenzo Veronese, TU Wien; Stefano Calzavara, Universit\u00e0 Ca\u2019 Foscari\n Venezia & OWASP; Matteo Maffei, TU Wien<\/td>TU Wien<\/td>\u5965\u5730\u5229<\/td><\/tr>
U Can\u2019t Debug This: Detecting JavaScript Anti-Debugging\n Techniques in the Wild<\/td>Marius Musch and Martin Johns,\n TU Braunschweig<\/td>TU Braunschweig<\/td>\u5fb7\u56fd<\/td><\/tr>
Abusing Hidden Properties to Attack the Node.js Ecosystem<\/td>Feng Xiao, Georgia Tech; Jianwei Huang, Texas A&M University;\n Yichang Xiong, Independent Researcher; Guangliang
\n Yang, Georgia Tech; Hong Hu, Penn State University; Guofei Gu, Texas\n A&M University; Wenke Lee, Georgia Tech<\/td>		 Georgia Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
mID: Tracing Screen Photos via Moir\u00e9 Patterns<\/td>Yushi Cheng, Xiaoyu Ji, Lixu\n Wang, and Qi Pang, Zhejiang University; Yi-Chao Chen, Shanghai Jiao Tong\n University;
\n Wenyuan Xu, Zhejiang University<\/td>		Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
SEAL: Storage-efficient Causality Analysis on Enterprise Logs\n with Query-friendly Compression <\/td>Peng Fei, Zhou Li, and Zhiying Wang, University of California, Irvine;\n Xiao Yu, NEC Laboratories America, Inc.;
\n Ding Li, Peking University; Kangkook Jee, University of Texas at Dallas<\/td>		University of California, Irvine<\/td>\u7f8e\u56fd<\/td><\/tr>
ATLAS: A Sequence-based Learning Approach for Attack\n Investigation<\/td>Abdulellah Alsaheel and Yuhong\n Nan, Purdue University; Shiqing Ma, Rutgers University; Le Yu, Gregory\n Walkup,
\n Z. Berkay Celik, Xiangyu Zhang, and Dongyan Xu, Purdue University<\/td>		Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
Elise: A Storage Efficient Logging System Powered by Redundancy\n Reduction and Representation Learning<\/td>Hailun Ding, Shenao Yan, Juan Zhai, and Shiqing Ma, Rutgers University<\/td>Rutgers University<\/td>\u7f8e\u56fd<\/td><\/tr>
V0Finder: Discovering the Correct Origin of Publicly Reported\n Software Vulnerabilities<\/td>Seunghoon Woo, Dongwook Lee,\n Sunghan Park, and Heejo Lee, Korea University; Sven Dietrich, City University\n of New York<\/td>Korea University<\/td>\u97e9\u56fd<\/td><\/tr>
Minerva\u2013 An Efficient Risk-Limiting Ballot Polling Audit<\/td>Filip Zag\u00f3rski, Wroclaw\n University of Science and Technology; Grant McClearn and Sarah Morin, The\n George Washington University; Neal McBurnett; Poorvi L. Vora, The George\n Washington University<\/td>Wroclaw University of Science\n and Technology<\/td>\u6ce2\u5170<\/td><\/tr>
Security Analysis of the Democracy Live Online Voting\n System <\/td>Michael Specter, MIT; J. Alex\n Halderman, University of Michigan<\/td>MIT<\/td>\u7f8e\u56fd<\/td><\/tr>
Hopper: Modeling and Detecting Lateral Movement<\/td>Grant Ho, UC San Diego, UC\n Berkeley, and Dropbox; Mayank Dhiman, Dropbox; Devdatta Akhawe, Figma,\n Inc.;
\n Vern Paxson, UC Berkeley and International Computer Science Institute;\n Stefan Savage and Geoffrey M. Voelker,
\n UC San Diego; David Wagner, UC Berkeley<\/td>		UC San Diego, UC Berkeley, and\n Dropbox<\/td>\u7f8e\u56fd<\/td><\/tr>
LZR: Identifying Unexpected Internet Services<\/td>Liz Izhikevich, Stanford\n University; Renata Teixeira, Inria; Zakir Durumeric, Stanford University<\/td>Stanford University<\/td>\u7f8e\u56fd<\/td><\/tr>
Blind In\/On-Path Attacks and Applications to VPNs<\/td>William J. Tolley and Beau\n Kujath, Breakpointing Bad\/Arizona State University; Mohammad Taha Khan,\n Washington and
\n Lee University; Narseo Vallina-Rodriguez, IMDEA Networks Institute\/ICSI;\n Jedidiah R. Crandall, Breakpointing Bad\/
\n Arizona State University<\/td>		Breakpointing Bad\/Arizona State\n University<\/td>\u7f8e\u56fd<\/td><\/tr>
The Hijackers Guide To The Galaxy: Off-Path Taking Over Internet\n Resources<\/td>Tianxiang\n Dai, Fraunhofer Institute for Secure Information\n Technology SIT; Philipp Jeitner, Fraunhofer Institute for
\n Secure Information Technology SIT, Technical University of Darmstadt; Haya\n Shulman, Fraunhofer Institute for
\n Secure Information Technology SIT; Michael Waidner, Fraunhofer Institute\n for Secure Information Technology SIT,
\n Technical University of Darmstadt<\/td>		Fraunhofer Institute for Secure\n Information Technology SIT<\/td>\u5fb7\u56fd<\/td><\/tr>
Injection Attacks Reloaded: Tunnelling Malicious Payloads over\n DNS<\/td>Philipp Jeitner, TU Darmstadt;\n Haya Shulman, Fraunhofer SIT<\/td>Fraunhofer SIT<\/td>\u5fb7\u56fd<\/td><\/tr>
Causal Analysis for Software-Defined Networking Attacks<\/td>Benjamin E. Ujcich, Georgetown\n University; Samuel Jero and Richard Skowyra, MIT Lincoln Laboratory; Adam\n Bates,
\n University of Illinois at Urbana-Champaign; William H. Sanders, Carnegie\n Mellon University; Hamed Okhravi,
\n MIT Lincoln Laboratory<\/td>		Georgetown University<\/td>\u7f8e\u56fd<\/td><\/tr>
Weak Links in Authentication Chains: A Large-scale Analysis of\n Email Sender Spoofing Attacks<\/td>Kaiwen Shen, Chuhan Wang, and\n Minglei Guo, Tsinghua University; Xiaofeng Zheng, Tsinghua University and Qi\n An
\n Xin Technology Research Institute; Chaoyi Lu and Baojun Liu, Tsinghua\n University; Yuxuan Zhao, North China Institute
\n of Computing Technology; Shuang Hao, University of Texas at Dallas; Haixin\n Duan, Tsinghua University; Qi An Xin
\n Technology Research Institute; Qingfeng Pan, Coremail Technology Co. Ltd;\n Min Yang, Fudan University<\/td>		Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Automated Discovery of Denial-of-Service Vulnerabilities in\n Connected Vehicle Protocols<\/td>Shengtuo Hu, University of\n Michigan; Qi Alfred Chen, UC Irvine; Jiachen Sun, Yiheng Feng, Z. Morley Mao,\n and
\n Henry X. Liu, University of Michigan<\/td>		University of Michigan<\/td>\u7f8e\u56fd<\/td><\/tr>
Too Good to Be Safe: Tricking Lane Detection in Autonomous\n Driving with Crafted Perturbations<\/td>Pengfei Jing, The Hong Kong\n Polytechnic University and Keen Security Lab, Tencent; Qiyi Tang and Yuefeng\n Du,
\n Keen Security Lab, Tencent; Lei Xue and Xiapu Luo, The Hong Kong\n Polytechnic University; Ting Wang,
\n Pennsylvania State University; Sen Nie and Shi Wu, Keen Security Lab,\n Tencent<\/td>		The Hong Kong Polytechnic\n University and Keen Security Lab, Tencent<\/td>\u4e2d\u56fd<\/td><\/tr>
Acoustics to the Rescue: Physical Key Inference Attack Revisited<\/td>Soundarya Ramesh and Rui Xiao,\n National University of Singapore; Anindya Maiti, University of Oklahoma; Jong\n Taek
\n Lee, Harini Ramprasad, and Ananda Kumar, National University of Singapore;\n Murtuza Jadliwala, University of Texas at
\n San Antonio; Jun Han, National University of Singapore<\/td>		National University of Singapore<\/td>\u65b0\u52a0\u5761<\/td><\/tr>
Messy States of Wiring: Vulnerabilities in Emerging Personal\n Payment Systems<\/td>Jiadong Lou\n and Xu Yuan, University of Louisiana at Lafayette;\n Ning Zhang, Washington University in St. Louis<\/td>University of Louisiana at\n Lafayette<\/td>\u7f8e\u56fd<\/td><\/tr>
Research on the Security of Visual Reasoning CAPTCHA <\/td>Yipeng Gao, Haichang Gao, Sainan\n Luo, Yang Zi, Shudong Zhang, Wenjie Mao, Ping Wang, and Yulong Shen,
\n Xidian University; Jeff Yan, Link\u00f6ping University<\/td>		Xidian University<\/td>\u4e2d\u56fd<\/td><\/tr>
Dirty Road Can Attack: Security of Deep Learning based Automated\n Lane Centering under
\n Physical-World Attack<\/td>		Takami Sato, Junjie Shen, and\n Ningfei Wang, University of California, Irvine; Yunhan Jia, ByteDance; Xue\n Lin,
\n Northeastern University; Qi Alfred Chen, University of California, Irvine<\/td>		University of California, Irvine<\/td>\u7f8e\u56fd<\/td><\/tr>
Domain Shadowing: Leveraging Content Delivery Networks for\n Robust Blocking-Resistant Communications<\/td>Mingkui Wei, George Mason University<\/td>George Mason University<\/td>\u7f8e\u56fd<\/td><\/tr>
Weaponizing Middleboxes for TCP Reflected Amplification<\/td>Kevin Bock, University of\n Maryland; Abdulrahman Alaraj, University of Colorado Boulder; Yair Fax and\n Kyle Hurley,
\n University of Maryland; Eric Wustrow, University of Colorado Boulder; Dave\n Levin, University of Maryland<\/td>		University of Maryland<\/td>\u7f8e\u56fd<\/td><\/tr>
Collective Information Security in Large-Scale Urban Protests:\n the Case of Hong Kong<\/td>Martin R. Albrecht, Jorge\n Blasco, Rikke Bjerg Jensen, and Lenka Marekov\u00e1, Royal Holloway, University of\n London<\/td>University of London<\/td>\u82f1\u56fd<\/td><\/tr>
How Great is the Great Firewall? Measuring China\u2019s DNS\n Censorship<\/td>Nguyen Phong Hoang, Stony Brook\n University and Citizen Lab, University of Toronto; Arian Akhavan Niaki,\n University
\n of Massachusetts, Amherst; Jakub Dalek, Jeffrey Knockel, and Pellaeon Lin,\n Citizen Lab, University of Toronto; Bill
\n Marczak, Citizen Lab, University of Toronto, and University of California,\n Berkeley; Masashi Crete-Nishihata, Citizen Lab,
\n University of Toronto; Phillipa Gill, University of Massachusetts, Amherst;\n Michalis Polychronakis, Stony Brook University<\/td>		University of Toronto<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
Balboa: Bobbing and Weaving around Network Censorship<\/td>Marc B. Rosen, James Parker, and\n Alex J. Malozemoff, Galois, Inc.<\/td>Galois, Inc.<\/td>\u7f8e\u56fd<\/td><\/tr>
Once is Never Enough: Foundations for Sound Statistical\n Inference in Tor Network Experimentation<\/td>Rob Jansen, U.S. Naval Research\n Laboratory; Justin Tracey and Ian Goldberg, University of Waterloo<\/td>U.S. Naval Research Laboratory<\/td>\u7f8e\u56fd<\/td><\/tr>
Rollercoaster: An Efficient Group-Multicast Scheme for Mix\n Networks<\/td>Daniel Hugenroth, Martin\n Kleppmann, and Alastair R. Beresford, University of Cambridge<\/td>University of Cambridge<\/td>\u82f1\u56fd<\/td><\/tr>
Obfuscation-Resilient Executable Payload Extraction From Packed\n Malware<\/td>Binlin Cheng, Hubei Normal\n University & Wuhan University; Jiang Ming, Erika A Leal, and Haotian\n Zhang,
\n The University of Texas at Arlington; Jianming Fu and Guojun Peng, Wuhan\n University; Jean-Yves Marion,
\n Universit\u00e9 de Lorraine, CNRS, LORIA<\/td>		Hubei Normal University &\n Wuhan University<\/td>\u4e2d\u56fd<\/td><\/tr>
DeepReflect: Discovering Malicious Functionality through Binary\n Reconstruction<\/td>Evan Downing, Georgia Institute\n of Technology; Yisroel Mirsky, Georgia Institute of Technology &\n Ben-Gurion University;
\n Kyuhong Park and Wenke Lee, Georgia Institute of Technology<\/td>		Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
When Malware Changed Its Mind: An Empirical Study of Variable\n Program Behaviors in the Real World<\/td>Erin Avllazagaj, University of\n Maryland, College Park; Ziyun Zhu, Facebook; Leyla Bilge, NortonLifeLock\n Research
\n Group; Davide Balzarotti, EURECOM; Tudor Dumitras, University of Maryland,\n College Park<\/td>		University of Maryland, College\n Park<\/td>\u7f8e\u56fd<\/td><\/tr>
The Circle Of Life: A Large-Scale Study of The IoT Malware\n Lifecycle<\/td>Omar Alrawi, Charles Lever, and\n Kevin Valakuzhy, Georgia Institute of Technology; Ryan Court and Kevin\n Snow,
\n Zero Point Dynamics; Fabian Monrose, University of North Carolina at Chapel\n Hill; Manos Antonakakis,
\n Georgia Institute of Technology<\/td>		Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Forecasting Malware Capabilities From Cyber Attack Memory Images<\/td>Omar Alrawi, Moses Ike, Matthew\n Pruett, Ranjita Pai Kasturi, Srimanta Barua, Taleb Hirani, Brennan Hill,\n and
\n Brendan Saltaformaggio, Georgia Institute of Technology<\/td>		Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
YarIx: Scalable YARA-based Malware Intelligence <\/td>Michael Brengel and Christian\n Rossow, CISPA Helmholtz Center for Information Security<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Constraint-guided Directed Greybox Fuzzing<\/td>Gwangmu Lee, Seoul National\n University; Woochul Shim, Samsung Research; Byoungyoung Lee, Seoul National\n University<\/td>Seoul National University<\/td>\u97e9\u56fd<\/td><\/tr>
PrivateDrop: Practical Privacy-Preserving Authentication for\n Apple AirDrop <\/td>Alexander Heinrich, Matthias\n Hollick, Thomas Schneider, Milan Stute, and Christian Weinert, TU Darmstadt<\/td>TU Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
Privacy-Preserving and Standard-Compatible AKA Protocol for 5G<\/td>Yuchen Wang, TCA of State Key\n Laboratory of Computer Science, Institute of Software, Chinese Academy of\n Sciences
\n & Alibaba Group; Zhenfeng Zhang, TCA of State Key Laboratory of\n Computer Science, Institute of Software, Chinese
\n Academy of Sciences; Yongquan Xie, Commercial Cryptography Testing Center\n of State Cryptography Administration<\/td>		TCA of State Key Laboratory of\n Computer Science, Institute of Software, Chinese Academy of Sciences
\n & Alibaba Group<\/td>		\u4e2d\u56fd<\/td><\/tr>
SEApp: Bringing Mandatory Access Control to Android Apps<\/td>Matthew Rossi, Dario\n Facchinetti, and Enrico Bacis, Universit\u00e0 degli Studi di Bergamo; Marco Rosa,\n SAP Security
\n Research; Stefano Paraboschi, Universit\u00e0 degli Studi di Bergamo<\/td>		Universit\u00e0 degli Studi di\n Bergamo<\/td>\u610f\u5927\u5229<\/td><\/tr>
A11y and Privacy don\u2019t have to be mutually exclusive:\n Constraining Accessibility Service Misuse on Android<\/td>Jie Huang, Michael Backes, and Sven Bugiel, CISPA Helmholtz Center for\n Information Security<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
An Investigation of the Android Kernel Patch Ecosystem<\/td>Zheng Zhang, UC RIverside; Hang Zhang and Zhiyun Qian, UC Riverside; Billy\n Lau, Google Inc.<\/td>UC RIverside<\/td>\u7f8e\u56fd<\/td><\/tr>
Share First, Ask Later (or Never?) Studying Violations of GDPR\u2019s\n Explicit Consent in Android Apps<\/td>Trung Tin Nguyen, CISPA\n Helmholtz Center for Information Security; Saarbr\u00fccken Graduate School of\n Computer Science,
\n Saarland University; Michael Backes, Ninja Marnau, and Ben Stock, CISPA\n Helmholtz Center for Information Security<\/td>		CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
DEFInit: An Analysis of Exposed Android Init Routines<\/td>Yuede Ji, University of North Texas; Mohamed Elsabagh, Ryan Johnson,\n and Angelos Stavrou, Kryptowire<\/td>University of North Texas<\/td>\u7f8e\u56fd<\/td><\/tr>
Scalable Detection of Promotional Website Defacements in Black\n Hat SEO Campaigns<\/td>Ronghai Yang, Sangfor\n Technologies Inc.; Xianbo Wang, The Chinese University of Hong Kong; Cheng\n Chi, Dawei Wang,
\n Jiawei He, and Siming Pang, Sangfor Technologies Inc.; Wing Cheong Lau, The\n Chinese University of Hong Kong<\/td>		Sangfor Technologies Inc<\/td>\u4e2d\u56fd<\/td><\/tr>
Compromised or Attacker-Owned: A Large Scale Classification and\n Study of Hosting Domains of
\n Malicious URLs<\/td>		Ravindu De Silva, SCoRe Lab and\n Qatar Computing Research Institute; Mohamed Nabeel, Qatar Computing\n Research
\n Institute; Charith Elvitigala, SCoRe Lab; Issa Khalil and Ting Yu, Qatar\n Computing Research Institute; Chamath
\n Keppitiyagama, University of Colombo School of Computing<\/td>		SCoRe Lab and Qatar Computing\n Research Institute<\/td>\u5361\u5854\u5c14<\/td><\/tr>
Assessing Browser-level Defense against IDN-based Phishing<\/td>Hang Hu, Virginia Tech; Steve T.K. Jan, University of Illinois at\n Urbana-Champaign\/Virginia Tech; Yang Wang and
\n Gang Wang, University of Illinois at Urbana-Champaign<\/td>		Virginia Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
Catching Phishers By Their Bait: Investigating the Dutch\n Phishing Landscape through Phishing Kit Detection<\/td>Hugo Bijmans, Tim Booij, and\n Anneke Schwedersky, Netherlands Organisation for Applied Scientific Research\n (TNO);
\n Aria Nedgabat, Eindhoven University of Technology; Rolf van Wegberg, Delft\n University of Technology<\/td>		 Eindhoven University of Technology<\/td>\u8377\u5170<\/td><\/tr>
PhishPrint: Evading Phishing Detection Crawlers by Prior\n Profiling <\/td>Bhupendra Acharya and Phani\n Vadrevu, UNO Cyber Center, University of New Orleans<\/td>UNO Cyber Center, University of\n New Orleans<\/td>\u7f8e\u56fd<\/td><\/tr>
Phishpedia: A Hybrid Deep Learning Based Approach to Visually\n Identify Phishing Webpages <\/td>Yun Lin and\n Ruofan Liu, National University of Singapore;\n Dinil Mon Divakaran, Trustwave; Jun Yang Ng and Qing
\n Zhou Chan, National University of Singapore; Yiwen Lu, Yuxuan Si, and Fan\n Zhang, Zhejiang University; Jin Song Dong,
\n National University of Singapore<\/td>		 National University of Singapore<\/td>\u65b0\u52a0\u5761<\/td><\/tr>
Is Real-time Phishing Eliminated with FIDO? Social Engineering\n Downgrade Attacks against FIDO Protocols<\/td>Enis Ulqinaku, ETH Z\u00fcrich; Hala\n Assal, AbdelRahman Abdou, and Sonia Chiasson, Carleton University; Srdjan\n Capkun,
\n ETH Z\u00fcrich<\/td>		Carleton University<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
Jaqen: A High-Performance Switch-Native Approach for Detecting\n and Mitigating Volumetric DDoS Attacks with Programmable Switches<\/td>Zaoxing Liu, Boston University; Hun Namkung, Carnegie Mellon University;\n Georgios Nikolaidis, Jeongkeun Lee,
\n and Changhoon Kim, Intel, Barefoot Switch Division; Xin Jin, Peking\n University; Vladimir Braverman, Johns Hopkins
\n University; Minlan Yu, Harvard University; Vyas Sekar, Carnegie Mellon\n University<\/td>		Boston University<\/td>\u7f8e\u56fd<\/td><\/tr>
ReDoSHunter: A Combined Static and Dynamic Approach for Regular\n Expression DoS Detection<\/td>Yeting Li and Zixuan Chen,\n SKLCS, ISCAS, UCAS; Jialun Cao, HKUST; Zhiwu Xu, Shenzhen University;\n Qiancheng
\n Peng, SKLCS, ISCAS, UCAS; Haiming Chen, SKLCS, ISCAS; Liyuan Chen, Tencent;\n Shing-Chi Cheung, HKUST<\/td>		SKLCS, ISCAS, UCAS<\/td>\u4e2d\u56fd<\/td><\/tr>
Ripple: A Programmable, Decentralized Link-Flooding Defense\n Against Adaptive Adversaries<\/td>Jiarong Xing, Wenqing Wu, and Ang Chen, Rice University<\/td>Rice University<\/td>\u7f8e\u56fd<\/td><\/tr>
Accurately Measuring Global Risk of Amplification Attacks using\n AmpMap<\/td>Soo-Jin Moon, Yucheng Yin, and\n Rahul Anand Sharma, Carnegie Mellon University; Yifei Yuan, Alibaba\n Group;
\n Jonathan M. Spring, CERT\/CC, SEI, Carnegie Mellon University; Vyas Sekar,\n Carnegie Mellon University<\/td>		Carnegie Mellon University<\/td>\u7f8e\u56fd<\/td><\/tr>
A Stealthy Location Identification Attack Exploiting Carrier\n Aggregation in Cellular Networks<\/td>Nitya Lakshmanan and Nishant\n Budhdev, National University of Singapore; Min Suk Kang, KAIST; Mun Choon\n Chan
\n and Jun Han, National University of Singapore<\/td>		National University of Singapore<\/td>\u65b0\u52a0\u5761<\/td><\/tr>
Disrupting Continuity of Apple\u2019s Wireless Ecosystem Security:\n New Tracking, DoS, and MitM Attacks on iOS
\n and macOS Through Bluetooth Low Energy, AWDL, and Wi-Fi <\/td>		Milan Stute, Alexander Heinrich,\n Jannik Lorenz, and Matthias Hollick, Technical University of Darmstadt<\/td>Technical University of\n Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
Stars Can Tell: A Robust Method to Defend against GPS Spoofing\n Attacks using Off-the-shelf Chipset<\/td>Shinan Liu, University of Chicago; Xiang Cheng and Hanchao Yang, Virginia\n Tech; Yuanchao Shu, Microsoft Research;
\n Xiaoran Weng, University of Electronic Science and Technology of China;\n Ping Guo, City University of Hong Kong;
\n Kexiong (Curtis) Zeng, Facebook; Gang Wang, University of Illinois at\n Urbana-Champaign; Yaling Yang, Virginia Tech<\/td>		University of Chicago<\/td>\u7f8e\u56fd<\/td><\/tr>
Formally Verified Memory Protection for a Commodity\n Multiprocessor Hypervisor<\/td>Shih-Wei Li, Xupeng Li, Ronghui\n Gu, Jason Nieh, and John Zhuang Hui, Columbia University<\/td>Columbia University<\/td>\u7f8e\u56fd<\/td><\/tr>
Automatic Policy Generation for Inter-Service Access Control of\n Microservices<\/td>Xing Li, Zhejiang University;\n Yan Chen, Northwestern University; Zhiqiang Lin, The Ohio State University;\n Xiao Wang
\n and Jim Hao Chen, Northwestern University<\/td>		Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
CLARION: Sound and Clear Provenance Tracking for Microservice\n Deployments<\/td>Xutong Chen, Northwestern University; Hassaan Irshad, SRI International;\n Yan Chen, Northwestern University;
\n Ashish Gehani and Vinod Yegneswaran, SRI International<\/td>		Northwestern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Virtual Secure Platform: A Five-Stage Pipeline Processor over\n TFHE<\/td>Kotaro Matsuoka, Ryotaro Banno,\n Naoki Matsumoto, Takashi Sato, and Song Bian, Kyoto University<\/td>Kyoto University<\/td>\u65e5\u672c<\/td><\/tr>
Searching Encrypted Data with Size-Locked Indexes <\/td>Min Xu, University of Chicago; Armin Namavari, Cornell University;\n David Cash, University of Chicago; Thomas
\n Ristenpart, Cornell Tech<\/td>		University of Chicago<\/td>\u7f8e\u56fd<\/td><\/tr>
Blitz: Secure Multi-Hop Payments Without Two-Phase Commits<\/td>Lukas Aumayr, TU Wien; Pedro\n Moreno-Sanchez, IMDEA Software Institute; Aniket Kate, Purdue\n University;
\n Matteo Maffei, TU Wien<\/td>		TU Wien<\/td>\u5965\u5730\u5229<\/td><\/tr>
Reducing HSM Reliance in Payments through Proxy Re-Encryption<\/td>Sivanarayana Gaddam, Visa; Atul\n Luykx, Security Engineering Research, Google; Rohit Sinha, Swirlds Inc.;\n Gaven
\n Watson, Visa Research<\/td>		Visa<\/td>\u7f8e\u56fd<\/td><\/tr>
Risky Business? Investigating the Security Practices of Vendors\n on an Online Anonymous Market using
\n Ground-Truth Data <\/td>		Jochem van de Laarschot and Rolf\n van Wegberg, Delft University of Technology<\/td>Delft University of Technology<\/td>\u8377\u5170<\/td><\/tr>
Deep Entity Classification: Abusive Account Detection for Online\n Social Networks <\/td>Teng Xu, Gerard Goossen, Huseyin Kerem Cevahir, Sara Khodeir, and\n Yingyezhe Jin, Facebook, Inc; Frank Li,
\n Facebook, Inc, and Georgia Institute of Technology; Shawn Shan, Facebook,\n Inc, and University of Chicago; Sagar Patel
\n and David Freeman, Facebook, Inc; Paul Pearce, Facebook, Inc, and Georgia\n Institute of Technology<\/td>		 Facebook, Inc<\/td>\u7f8e\u56fd<\/td><\/tr>
SocialHEISTing: Understanding Stolen Facebook Accounts <\/td>Jeremiah Onaolapo, University of\n Vermont; Nektarios Leontiadis and Despoina Magka, Facebook; Gianluca\n Stringhini,
\n Boston University<\/td>		University of Vermont<\/td>\u7f8e\u56fd<\/td><\/tr>
Understanding Malicious Cross-library Data Harvesting on Android<\/td>Jice Wang, National Computer\n Network Intrusion Protection Center, University of Chinese Academy of\n Sciences;
\n Indiana University Bloomington; Yue Xiao and Xueqiang Wang, Indiana\n University Bloomington; Yuhong Nan,
\n Purdue University; Luyi Xing and Xiaojing Liao, Indiana University\n Bloomington; JinWei Dong, School of Cyber
\n Engineering, Xidian University; Nicolas Serrano, Indiana University,\n Bloomington; Haoran Lu and XiaoFeng Wang,
\n Indiana University Bloomington; Yuqing Zhang, National Computer Network\n Intrusion Protection Center, University
\n of Chinese Academy of Sciences; School of Cyber Engineering, Xidian\n University; School of Computer Science and
\n Cyberspace Security, Hainan University<\/td>		 National Computer Network Intrusion\n Protection Center, University of Chinese Academy of Sciences<\/td>\u4e2d\u56fd<\/td><\/tr>
Swiped: Analyzing Ground-truth Data of a Marketplace for Stolen\n Debit and Credit Cards <\/td>Maxwell Aliapoulios, Cameron\n Ballard, Rasika Bhalerao, Tobias Lauinger, and Damon McCoy, New York\n University<\/td>New York University<\/td>\u7f8e\u56fd<\/td><\/tr>
Having Your Cake and Eating It: An Analysis of\n Concession-Abuse-as-a-Service<\/td>Zhibo Sun, Adam Oest, and Penghui Zhang, Arizona State University;\n Carlos Rubio-Medrano, Texas A&M University –
\n Corpus Christi; Tiffany Bao and Ruoyu Wang, Arizona State University;\n Ziming Zhao, Rochester Institute of Technology;
\n Yan Shoshitaishvili and Adam Doup\u00e9, Arizona State University; Gail-Joon\n Ahn, Arizona State University and Samsung
\n Research<\/td>		Texas A&M University –
\n Corpus Christi<\/td>		\u5fb7\u56fd<\/td><\/tr>
Capture: Centralized Library Management for Heterogeneous IoT\n Devices<\/td>Han Zhang, Abhijith Anilkumar, Matt Fredrikson, and Yuvraj Agarwal,\n Carnegie Mellon University<\/td>Carnegie Mellon University<\/td>\u7f8e\u56fd<\/td><\/tr>
MPInspector: A Systematic and Automatic Approach for Evaluating\n the Security of IoT Messaging Protocols<\/td>Qinying Wang, Zhejiang\n University; Shouling Ji, Zhejiang University; Binjiang Institute of Zhejiang\n University;
\n Yuan Tian, University of Virginia; Xuhong Zhang, Zhejiang University;\n Binjiang Institute of Zhejiang University;
\n Binbin Zhao, Georgia Institute of Technology; Yuhong Kan and Zhaowei Lin,\n Zhejiang University; Changting Lin and
\n Shuiguang Deng, Zhejiang University; Binjiang Institute of Zhejiang\n University; Alex X. Liu, Ant Group; Raheem Beyah,
\n Georgia Institute of Technology<\/td>		Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
HAWatcher: Semantics-Aware Anomaly Detection for Appified Smart\n Homes<\/td>Chenglong Fu, Temple University; Qiang Zeng, University of South Carolina;\n Xiaojiang Du, Temple University<\/td>Temple University<\/td>\u7f8e\u56fd<\/td><\/tr>
Exposing New Vulnerabilities of Error Handling Mechanism in\n CAN <\/td>Khaled Serag and Rohit Bhatia,\n Purdue University; Vireshwar Kumar, Indian Institute of Technology Delhi; Z.\n Berkay Celik
\n and Dongyan Xu, Purdue University<\/td>		Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
CANARY – a reactive defense mechanism for Controller Area\n Networks based on Active RelaYs <\/td>Bogdan Groza, Lucian Popa, and\n Pal-Stefan Murvay, Universitatea Politehnica Timisoara; Yuval Elovici and\n Asaf Shabtai,Ben-Gurion University of the Negev<\/td>Universitatea Politehnica\n Timisoara\uff08\u8482\u7c73\u4ec0\u74e6\u62c9\u7406\u5de5\u5b66\u9662\uff09<\/td>\u7f57\u9a6c\u5c3c\u4e9a<\/td><\/tr>
ReDMArk: Bypassing RDMA Security Mechanisms<\/td>Benjamin Rothenberger,\n Konstantin Taranov, Adrian Perrig, and Torsten Hoefler, ETH Zurich<\/td>ETH Zurich<\/td>\u745e\u58eb<\/td><\/tr>
ALPACA: Application Layer Protocol Confusion – Analyzing and\n Mitigating Cracks in TLS Authentication<\/td>Marcus Brinkmann, Ruhr\n University Bochum; Christian Dresen, M\u00fcnster University of Applied Sciences;\n Robert Merget,
\n Ruhr University Bochum; Damian Poddebniak, M\u00fcnster University of Applied\n Sciences; Jens M\u00fcller, Ruhr University
\n Bochum; Juraj Somorovsky, Paderborn University; J\u00f6rg Schwenk, Ruhr\n University Bochum; Sebastian Schinzel,
\n M\u00fcnster University of Applied Sciences<\/td>		Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
Experiences Deploying Multi-Vantage-Point Domain Validation at\n Let\u2019s Encrypt<\/td>Henry Birge-Lee and Liang Wang,\n Princeton University; Daniel McCarney, Square Inc.; Roland Shoemaker,\n unaffiliated;
\n Jennifer Rexford and Prateek Mittal, Princeton University<\/td>		Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
SiamHAN: IPv6 Address Correlation Attacks on TLS Encrypted\n Traffic via Siamese Heterogeneous Graph
\n Attention Network<\/td>		Tianyu Cui, Gaopeng Gou, Gang\n Xiong, Zhen Li, Mingxin Cui, and Chang Liu, Institute of Information\n Engineering,
\n Chinese Academy of Sciences, and School of Cyber Security, University of\n Chinese Academy of Sciences<\/td>		Institute of Information\n Engineering,
\n Chinese Academy of Sciences, and School of Cyber Security, University of\n Chinese Academy of Sciences<\/td>		\u4e2d\u56fd<\/td><\/tr>
Why Eve and Mallory Still Love Android: Revisiting TLS\n (In)Security in Android Applications <\/td>Marten Oltrogge, CISPA Helmholtz\n Center for Information Security; Nicolas Huaman, Sabrina Amft, and Yasemin\n Acar,
\n Leibniz University Hannover; Michael Backes, CISPA Helmholtz Center for\n Information Security; Sascha Fahl,
\n Leibniz University Hannover<\/td>		CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Why TLS is better without STARTTLS: A Security Analysis of\n STARTTLS in the Email Context<\/td>Damian Poddebniak and Fabian\n Ising, M\u00fcnster University of Applied Sciences; Hanno B\u00f6ck, Independent\n Researcher;
\n Sebastian Schinzel, M\u00fcnster University of Applied Sciences<\/td>		M\u00fcnster University of Applied\n Sciences<\/td>\u5fb7\u56fd<\/td><\/tr>
What\u2019s in a Name? Exploring CA Certificate Control<\/td>Zane Ma and Joshua Mason,\n University of Illinois at Urbana-Champaign; Manos Antonakakis, Georgia\n Institute of
\n Technology; Zakir Durumeric, Stanford University; Michael Bailey,\n University of Illinois at Urbana-Champaign<\/td>		University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr><\/tbody><\/table>\n","protected":false},"excerpt":{"rendered":"

2021\u5e74\u7f51\u7edc\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u7684\u8bba\u6587\u5f55\u7528\u5747\u5df2\u63ed\u6653\uff0cInForSec\u7279\u6574\u7406\u76f8\u5173\u4fe1\u606f\u5206\u4eab\u7ed9\u7f51\u7edc\u5b89\u5168\u5b66\u672f\u793e… Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-5064","post","type-post","status-publish","format-standard","hentry","category-research"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/5064","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5064"}],"version-history":[{"count":6,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/5064\/revisions"}],"predecessor-version":[{"id":5095,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/5064\/revisions\/5095"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5064"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5064"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5064"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}