{"id":5066,"date":"2021-10-29T12:23:25","date_gmt":"2021-10-29T03:38:25","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=5066"},"modified":"2021-10-29T17:45:22","modified_gmt":"2021-10-29T09:00:22","slug":"%e7%bd%91%e7%bb%9c%e7%a9%ba%e9%97%b4%e5%ae%89%e5%85%a8%e9%a2%86%e5%9f%9f%e9%a1%b6%e7%ba%a7%e4%bc%9a%e8%ae%ae%e4%b9%8bccs-2021%e5%bd%95%e5%8f%96%e7%9b%ae%e5%bd%95%e4%b8%80%e8%a7%88","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=5066","title":{"rendered":"\u7f51\u7edc\u7a7a\u95f4\u5b89\u5168\u9886\u57df\u9876\u7ea7\u4f1a\u8bae\u4e4bCCS 2021\u5f55\u53d6\u76ee\u5f55\u4e00\u89c8"},"content":{"rendered":"\n

2021\u5e74\u7f51\u7edc\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u7684\u8bba\u6587\u5f55\u7528\u5747\u5df2\u63ed\u6653\uff0cInForSec\u7279\u6574\u7406\u76f8\u5173\u4fe1\u606f\u5206\u4eab\u7ed9\u7f51\u7edc\u5b89\u5168\u5b66\u672f\u793e\u533a\u3002 <\/p>\n\n\n\n

Computer and Communications Security (CCS) \uff0c\u53c8\u79f0\u8ba1\u7b97\u673a\u548c\u901a\u4fe1\u5b89\u5168\u4f1a\u8bae\uff0c\u662f\u8ba1\u7b97\u673a\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u4e4b\u4e00\u3002 CCS\u4f1a\u8bae\u4e3b\u8981\u96c6\u7ed3\u4e86\u6765\u81ea\u4e16\u754c\u5404\u5730\u7684\u4fe1\u606f\u5b89\u5168\u7814\u7a76\u4eba\u5458\u3001\u5b9e\u8df5\u8005\u3001\u5f00\u53d1\u4eba\u5458\u7b49\uff0c\u63a2\u7d22\u548c\u4ea4\u6d41\u7f51\u7edc\u5b89\u5168\u9886\u57df\u7684\u524d\u6cbf\u6280\u672f\u548c\u6700\u65b0\u6210\u679c\u3002<\/p>\n\n\n\n

\u5b83\u662fCCF\u63a8\u8350A\u7c7b\u4f1a\u8bae\uff0c\u6bcf\u5e74\u7684\u8bba\u6587\u5f55\u53d6\u7387\u8f83\u4f4e\uff0c\u7ea6\u4e3a16%\u3002CCS 2021\u5171\u5f55\u53d6\u8bba\u6587196\u7bc7\uff0c\u5176\u4e2d\u6765\u81ea\u4e2d\u56fd\u9ad8\u6821\u3001\u79d1\u7814\u9662\u6240\u548c\u4f01\u4e1a\u754c\u7684\u5171\u670942\u7bc7\uff0c\u6709\u534e\u4eba\u5b66\u8005\u53c2\u4e0e\u7684\u5171\u670986\u7bc7\u3002\uff08\u6ce8\uff1a\u6570\u636e\u4e3a\u4eba\u5de5\u7edf\u8ba1\uff0c\u5982\u6709\u758f\u6f0f\uff0c\u8fd8\u8bf7\u6307\u6b63\u3002\uff09 <\/p>\n\n\n\n

\u4ee5\u4e0b\u4e3aCCS 2021\u5e74\u8bba\u6587\u5f55\u53d6\u5217\u8868\uff1a<\/p>\n\n\n\n
\u8bba\u6587\u6807\u9898<\/td>\u4f5c\u8005\u4fe1\u606f<\/td>\u7b2c\u4e00\u4f5c\u8005\u5355\u4f4d<\/td>\u4e00\u4f5c\u5355\u4f4d\u6240\u5728\u56fd\u5bb6<\/td><\/tr>
On the TOCTOU Problem in Remote Attestation<\/td>Ivan De Oliveira Nunes (UC\n Irvine); Sashidhar Jakkamsetti (UC Irvine); Norrathep Rattanavipanon (Prince\n of Songkla University); Gene Tsudik (UC Irvine)<\/td>UC Irvine<\/td>\u7f8e\u56fd<\/td><\/tr>
Search-based Approaches for Local Black-Box Code Deobfuscation:\n Understand, Improve and Mitigate<\/td>Gr\u00e9goire Menguy (CEA\n LIST); S\u00e9bastien Bardin (CEA LIST); Richard Bonichon (Nomadic Labs); Cauim de\n Souza Lima (CEA LIST)<\/td>CEA LIST<\/td>\u6cd5\u56fd<\/td><\/tr>
Exorcising Spectres with Secure Compilers<\/td>Marco Patrignani\n (CISPA Helmholtz Center for Information Security & Stanford); Marco\n Guarnieri (IMDEA Software Institute)<\/td>CISPA Helmholtz Center for\n Information Security & Stanford<\/td>\u5fb7\u56fd<\/td><\/tr>
Preventing Dynamic Library Compromise on Node.js via RWX-Based\n Privilege Reduction<\/td>Nikos Vasilakis\n (MIT); Cristian-Alexandru Staicu (CISPA Helmholtz Center for Information\n Security); Grigoris Ntousakis (TU Crete); Konstantinos Kallas (University of\n Pennsylvania); Ben Karel (Aarno Labs); Andre DeHon (University of\n Pennsylvania); Michael Pradel (University of Stuttgart)<\/td>MIT<\/td>\u7f8e\u56fd<\/td><\/tr>
Consistency Analysis of Data-Usage Purposes in Mobile Apps<\/td>Duc Bui (University\n of Michigan); Yuan Yao (University of Michigan); Kang G. Shin (The University\n of Michigan); Jong-Min Choi (Samsung Research); Junbum Shin (CryptoLab)<\/td>University of Michigan<\/td>\u7f8e\u56fd<\/td><\/tr>
C3PO: Large-Scale Study Of Covert Monitoring of C&C Servers\n via Over-Permissioned Protocol Infiltration<\/td>Jonathan Fuller\n (Georgia Institute of Technology); Ranjita Pai Kasturi (Georgia Institute of\n Technology); Amit Sikder (Georgia Institute of Technology); Haichuan Xu\n (Georgia Institute of Technology); Berat Arik (Georgia Institute of\n Technology); Vivek Verma (Georgia Institute of Technology); Ehsan Asdar\n (Georgia Institute of Technology); Brendan Saltaformaggio (Georgia Institute\n of Technology)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Cert-RNN: Towards Certifying the Robustness of Recurrent Neural\n Networks<\/td>Tianyu Du (Zhejiang\n University); Shouling Ji (Zhejiang University); Lujia Shen (Zhejiang\n University); Yao Zhang (Zhejiang University); Jinfeng Li (Zhejiang\n University); Jie Shi (Huawei International, Singapore); Chengfang Fang\n (Huawei International, Singapore); Jianwei Yin (Zhejiang University); Raheem\n Beyah (Georgia Institute of Technology); Ting Wang (Pennsylvania State\n University)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
Secure Source-Tracking for Encrypted Messaging<\/td>Charlotte Peale\n (Stanford University); Saba Eskandarian (Stanford University); Dan Boneh\n (Stanford University)<\/td>Stanford University<\/td>\u7f8e\u56fd<\/td><\/tr>
LEAP: Leakage-Abuse Attack on Efficiently Deployable,\n Efficiently Searchable Encryption with Partially Known Dataset<\/td>Jianting Ning (Fujian\n Normal University & Singapore Management University); Xinyi Huang (Fujian\n Normal University); Geong Sen Poh (NUS-Singtel Cyber Security Research and\n Development Laboratory); Jiaming Yuan (Singapore Management University);\n Yingjiu Li (University of Oregon); Jian Weng (Jinan University); Robert H.\n Deng (School of Information Systems, Singapore Management University,\n Singapore)<\/td>Fujian Normal University &\n Singapore Management University<\/td>\u4e2d\u56fd&\u65b0\u52a0\u5761<\/td><\/tr>
AHEAD: Adaptive Hierarchical Decomposition for Range Query under\n Local Differential Privacy<\/td>Linkang Du (Zhejiang\n University); Zhikun Zhang (CISPA Helmholtz Center for Information Security);\n Shaojie Bai (Zhejiang University); Changchang Liu (IBM Research); Shouling Ji\n (Zhejiang University); Peng Cheng (Zhejiang University); Jiming Chen\n (Zhejiang University)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
Key Agreement for Decentralized Secure Group Messaging with\n Strong Security Guarantees<\/td>Matthew Weidner\n (Carnegie Mellon University); Martin Kleppmann (University of Cambridge);\n Daniel Hugenroth (University of Cambridge); Alastair R. Beresford (University\n of Cambridge)<\/td>Carnegie Mellon University<\/td>\u7f8e\u56fd<\/td><\/tr>
SNIPUZZ: Black-box Fuzzing of IoT Firmware via Message Snippet\n Inference<\/td>Xiaotao Feng\n (Swinburne University of Technology); Ruoxi Sun (The University of Adelaide);\n Xiaogang Zhu (Swinburne University of Technology); Minhui Xue (The University\n of Adelaide); Sheng Wen (Swinburne University of Technology); Dongxi Liu\n (Data61, CSIRO); Surya Nepal (Data61 CSIRO Australia); Yang Xiang (Swinburne\n University of Technology)<\/td>Swinburne University of\n Technology<\/td>\u6fb3\u5927\u5229\u4e9a<\/td><\/tr>
Unleashing the Tiger: Inference Attacks on Split Learning<\/td>Dario Pasquini\n (Sapienza University of Rome; Institute of Applied Computing, IAC-CNR);\n Giuseppe Ateniese (Stevens Institute of Technology); Massimo Bernaschi\n (Institute of Applied Computing, IAC-CNR)<\/td>Sapienza University of Rome;\n Institute of Applied Computing, IAC-CNR<\/td>\u610f\u5927\u5229<\/td><\/tr>
Fuzzy Message Detection<\/td>Gabrielle Beck (Johns\n Hopkins University); Julia Len (Cornell Tech); Ian Miers (University of\n Maryland); Matthew Green (Johns Hopkins University)<\/td>Johns Hopkins University<\/td>\u7f8e\u56fd<\/td><\/tr>
Dissecting Click Fraud Autonomy in the Wild<\/td>Tong Zhu (Shanghai\n Jiao Tong University); Yan Meng (Shanghai Jiao Tong University); Haotian Hu\n (Shanghai Jiao Tong University); Xiaokuan Zhang (The Ohio State University);\n Minhui Xue (The University of Adelaide); Haojin Zhu (Shanghai Jiao Tong\n University)<\/td>Shanghai Jiao Tong University<\/td>\u4e2d\u56fd<\/td><\/tr>
Understanding and Detecting Mobile Ad Fraud Through the Lens of\n Invalid Traffic<\/td>Suibin Sun (Shanghai\n Jiao Tong University); Le Yu (Shanghai Jiao Tong University); Xiaokuan Zhang\n (The Ohio State University); Minhui (Jason) Xue (The University of Adelaide);\n Ren Zhou (Shanghai Jiao Tong University); Haojin Zhu (Shanghai Jiao Tong\n University); Shuang Hao (University of Texas at Dallas); Xiaodong Lin\n (University of Guelph)<\/td>Shanghai Jiao Tong University<\/td>\u4e2d\u56fd<\/td><\/tr>
Mechanized Proofs of Adversarial Complexity and Application to\n Universal Composability<\/td>Manuel Barbosa\n (University of Porto (FCUP) and INESC TEC); Gilles Barthe (MPI-SP and IMDEA\n Software Institute); Benjamin Gr\u00e9goire (INRIA Sophia Antipolis); Adrien\n Koutsos (INRIA Paris); Pierre-Yves Strub (Ecole Polytechnique)<\/td>University of Porto (FCUP) and\n INESC TEC<\/td>\u8461\u8404\u7259<\/td><\/tr>
Periscope: A Keystroke Inference Attack Using Human Coupled\n Electromagnetic Emanations<\/td>Wenqiang Jin (The\n University of Texas at Arlington); Srinivasan Murali (The University of Texas\n at Arlington); Huadi Zhu (The University of Texas at Arlington); Ming Li (The\n University of Texas at Arlington)<\/td>The University of Texas at\n Arlington<\/td>\u7f8e\u56fd<\/td><\/tr>
Meteor: Cryptographically Secure Steganography for\n RealisticDistributions<\/td>Gabriel Kaptchuk\n (Boston University); Tushar Jois (Johns Hopkins University); Matthew Green\n (Johns Hopkins University); Aviel Rubin (Johns Hopkins University)<\/td>Boston University<\/td>\u7f8e\u56fd<\/td><\/tr>
TableGAN-MCA: Evaluating Membership Collisions of\n GAN-Synthesized Tabular Data Releasing<\/td>Aoting Hu (Southeast\n University); Renjie Xie (Southeast University); Zhigang Lu (Macquarie\n University); Aiqun Hu (Southeast University); Minhui Xue (The University of\n Adelaide)<\/td>Southeast University<\/td>\u4e2d\u56fd<\/td><\/tr>
“I need a better description”: An Investigation Into\n User Expectations For Differential Privacy<\/td>Rachel Cummings\n (Columbia University); Gabriel Kaptchuk (Boston University); Elissa M.\n Redmiles (Max Planck Institute for Software Systems)<\/td>Columbia University<\/td>\u7f8e\u56fd<\/td><\/tr>
Usable User Authentication on a Smartwatch using Vibration<\/td>Sunwoo Lee (Korea\n University); Wonsuk Choi (Hansung University); Dong Hoon Lee (Korea\n University)<\/td>Korea University<\/td>\u97e9\u56fd<\/td><\/tr>
Multi-Threshold Byzantine Fault Tolerance<\/td>Atsuki Momose (Nagoya\n University); Ling Ren (University of Illinois at Urbana-Champaign)<\/td>Nagoya University<\/td>\u65e5\u672c<\/td><\/tr>
Verifying Table-Based Elections<\/td>David Basin\n (Institute of Information Security, Department of Computer Science, ETH\n Zurich); Jannik Dreier (Universite de Lorraine, CNRS, Inria, LORIA); Sofia\n Giampietro (Institute of Information Security, Department of Computer\n Science, ETH Zurich); Sasa Radomirovic (Department of Computer Science,\n Heriot-Watt University)<\/td>Institute of Information\n Security, Department of Computer Science, ETH Zurich<\/td>\u745e\u58eb<\/td><\/tr>
QuickSilver: Efficient and Affordable Zero-Knowledge Proofs for\n Circuits and Polynomials over Any Field<\/td>Kang Yang (State Key\n Laboratory of Cryptology); Pratik Sarkar (Boston University); Chenkai Weng\n (Northwestern University); Xiao Wang (Northwestern University)<\/td>State Key Laboratory of\n Cryptology<\/td>\u4e2d\u56fd<\/td><\/tr>
Secure Multi-party Computation of Differentially Private Heavy\n Hitters<\/td>Jonas B\u00f6hler (SAP\n Security Research); Florian Kerschbaum (University of Waterloo)<\/td>SAP Security Research<\/td>\u5fb7\u56fd<\/td><\/tr>
ZKCPlus: Optimized Fair-exchange Protocol Supporting Practical\n and Flexible Data Exchange<\/td>Yun Li (Institute for\n Network Sciences and Cyberspace of Tsinghua University); Cun Ye (SECBIT Labs,\n kecheng corp); Yuguang Hu (SECBIT Labs); Ivring Morpheus (SECBIT Labs); Guo\n Yu (SECBIT Labs); Chao Zhang (Institute for Network Science and Cyberspace of\n Tsinghua University); Yupeng Zhang (Texas A&M University); Zhipeng Sun\n (SECBIT Labs); Yiwen Lu (SECBIT Labs); Haodi Wang (Beijing Normal University)<\/td>Institute for Network Sciences\n and Cyberspace of Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
It’s Not What It Looks Like: Manipulating Perceptual Hashing\n based Applications<\/td>Qingying Hao\n (University of Illinois at Urbana-Champaign); Licheng Luo (University of\n Illinois at Urbana-Champaign); Steve TK Jan (University of Illinois at\n Urbana-Champaign); Gang Wang (University of Illinois at Urbana-Champaign)<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Secure Graph Analysis at Scale<\/td>Toshinori Araki\n (NEC); Jun Furukawa (NEC Israel Research Center); Benny Pinkas (VMware\n Research, Bar Ilan University); Kazuma Ohara (AIST); Hanan Rosemarin (Bar\n Ilan University); Hikaru Tsuchida (NEC corporation)<\/td>NEC<\/td>\u65e5\u672c<\/td><\/tr>
Revisiting Nakamoto Consensus in Asynchronous Networks: A\n Comprehensive Analysis of Bitcoin Safety and Chain Quality<\/td>Muhammad Saad\n (University of Central Florida); Afsah Anwar (University of Central Florida);\n Srivatsan Ravi (University of Southern California); David Mohaisen\n (University of Central Florida)<\/td>University of Central Florida<\/td>\u7f8e\u56fd<\/td><\/tr>
PPE Circuits for Rational Polynomials<\/td>Susan Hohenberger\n (Johns Hopkins University); Satyanarayana Vusirikala (University of Texas at\n Austin)<\/td>Johns Hopkins University<\/td>\u7f8e\u56fd<\/td><\/tr>
PARASITE: PAssword Recovery Attack against Srp Implementations\n in ThE wild<\/td>Daniel De Almeida\n Braga (Univ Rennes 1, CNRS, IRISA); Pierre-Alain Fouque (Univ Rennes 1, CNRS,\n IRISA); Mohamed Sabt (Univ Rennes 1, CNRS, IRISA)<\/td>Univ Rennes 1, CNRS, IRISA<\/td>\u6cd5\u56fd<\/td><\/tr>
CROSSLINE: Breaking “Security-by-Crash” based Memory Isolation\n in AMD SEV<\/td>Mengyuan Li (The Ohio\n State University); Yinqian Zhang (Southern University of Science and\n Technology); Zhiqiang Lin (The Ohio State University)<\/td>The Ohio State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Locally Private Graph Neural Networks<\/td>Sina Sajadmanesh\n (Idiap Research Institute, EPFL); Daniel Gatica-Perez (Idiap Research\n Institute, EPFL)<\/td>Idiap Research Institute, EPFL<\/td>\u745e\u58eb<\/td><\/tr>
BFT Protocol Forensics<\/td>Peiyao Sheng\n (University of Illinois at Urbana-Champaign); Gerui Wang (UIUC); Kartik Nayak\n (Duke University); Sreeram Kannan (University of Washington); Pramod\n Viswanath (UIUC)<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Securing Parallel-chain Protocols under Variable Mining Power<\/td>Xuechao Wang\n (University of Illinois Urbana-Champaign); Viswa Virinchi Muppirala\n (University of Washington at Seattle); Lei Yang (MIT CSAIL); Sreeram Kannan\n (University of Washington at Seattle); Pramod Viswanath (University of\n Illinois Urbana-Champaign)<\/td>University of Illinois\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
A One-Pass Distributed and Private Sketch for Kernel Sums with\n Applications to Machine Learning at Scale<\/td>Benjamin Coleman\n (Rice University); Anshumali Shrivastava (Rice University)<\/td>Rice University<\/td>\u7f8e\u56fd<\/td><\/tr>
All your credentials are belong to us: On Insecure\n WPA2-Enterprise Configurations<\/td>Man Hong Hue (The\n Chinese University of Hong Kong); Joyanta Debnath (The University of Iowa);\n Kin Man Leung (The University of British Columbia); Li Li (Syracuse\n University); Mohsen Minaei (Visa Research); M. Hammad Mazhar (The University\n of Iowa); Kailiang Xian (The Chinese University of Hong Kong); Endadul Hoque\n (Syracuse University); Omar Chowdhury (The University of Iowa); Sze Yiu Chau\n (The Chinese University of Hong Kong)<\/td>The Chinese University of Hong\n Kong<\/td>\u4e2d\u56fd<\/td><\/tr>
On the Robustness of Domain Constraints<\/td>Ryan Sheatsley (The\n Pennsylvania State University); Blaine Hoak (The Pennsylvania State\n University); Eric Pauley (The Pennsylvania State University); Yohan Beugin\n (The Pennsylvania State University); Michael J. Weisman (United States Army\n Research Laboratory); Patrick McDaniel (The Pennsylvania State University)<\/td>The Pennsylvania State\n University<\/td>\u7f8e\u56fd<\/td><\/tr>
Amortized Threshold Symmetric-key Encryption<\/td>Pratyay Mukherjee\n (Visa Research); Rohit Sinha (Swirlds Inc.); Sivanarayana Gaddam (C3 Inc.);\n Mihai Christodorescu (Visa Research)<\/td>Visa Research<\/td>\u7f8e\u56fd<\/td><\/tr>
Shorter and Faster Post-Quantum zkSNARKs from Lattices<\/td>Yuval Ishai\n (Technion); Hang Su (University of Virginia); David J. Wu (University of\n Virginia)<\/td>Technion<\/td>\u4ee5\u8272\u5217<\/td><\/tr>
Hardware Support to Improve Fuzzing Performance and Precision<\/td>Ren Ding (Georgia\n Institute of Technology); Yonghae Kim (Georgia Institute of Technology); Fan\n Sang (Georgia Institute of Technology); Wen Xu (Georgia Institute of\n Technology); Gururaj Saileshwar (Georgia Institute of Technology); Taesoo Kim\n (Georgia Institute of Technology)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
RandPiper — Reconfiguration-Friendly Random Beacons with\n Quadratic Communication<\/td>Adithya Bhat (Purdue\n University); Nibesh Shrestha (Rochester Institute of Technology); Zhongtang\n Luo (Purdue University); Aniket Kate (Purdue University); Kartik Nayak (Duke\n University)<\/td>Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
Membership Leakage in Label-Only Exposures<\/td>Zheng Li (CISPA\n Helmholtz Center for Information Security); Yang Zhang (CISPA Helmholtz\n Center for Information Security)<\/td>CISPA Helmholtz Center for\n Information Security <\/td>\u5fb7\u56fd<\/td><\/tr>
Hidden Backdoors in Human-Centric Language Models<\/td>Shaofeng Li (Shanghai\n Jiao Tong University); Hui Liu (Shanghai Jiao Tong University); Tian Dong\n (Shanghai Jiao Tong University); Benjamin Zi Hao Zhao (The University of New\n South Wales and CSIRO-Data61); Minhui Xue (The University of Adelaide);\n Haojin Zhu (Shanghai Jiao Tong University); Jialiang Lu (Shanghai Jiao Tong\n University)<\/td>Shanghai Jiao Tong University<\/td>\u4e2d\u56fd<\/td><\/tr>
Spinner: Automated Dynamic Command Subsystem Perturbation<\/td>Meng Wang (University\n of Virginia); Chijung Jung (University of Virginia); Ali Ahad (University of\n Virginia); Yonghwi Kwon (University of Virginia)<\/td>University of Virginia<\/td>\u7f8e\u56fd<\/td><\/tr>
SugarCoat: Programmatically Generating Privacy-Preserving,\n Web-Compatible Resource Replacements for Content Blocking<\/td>Michael Smith\n (University of California, San Diego); Peter Snyder (Brave Software);\n Benjamin Livshits (Brave Software, Imperial College London); Deian Stefan\n (University of California, San Diego)<\/td>University of California, San\n Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
DataLens: Scalable Privacy Preserving Training via Gradient\n Compression and Aggregation<\/td>Boxin Wang\n (University of Illinois at Urbana-Champaign); Fan Wu (UIUC); Yunhui Long\n (University of Illinois at Urbana-Champaign); Luka Rimanic (ETH Zurich); Ce\n Zhang (ETH Zurich); Bo Li (UIUC)<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
On-device IoT Certificate Revocation Checking with Small Memory\n and Low Latency<\/td>Xiaofeng Shi\n (University of California, Santa Cruz); Shouqian Shi (University of\n California, Santa Cruz); Minmei Wang (University of California, Santa Cruz);\n Jonne Kaunisto (University of California, Santa Cruz); Chen Qian (University\n of California, Santa Cruz)<\/td>University of California, Santa\n Cruz<\/td>\u7f8e\u56fd<\/td><\/tr>
MaMIoT: Manipulation of Energy Market Leveraging High Wattage\n IoT Botnets<\/td>Tohid Shekari\n (Georgia Institute of Technology); Celine Irvene (Georgia Institute of\n Technology); Alvaro Cardenas (UC Santa Cruz); Raheem Beyah (Georgia Institute\n of Technology)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
With a Little Help from My Friends: Constructing Practical\n Anonymous Credentials<\/td>Lucjan Hanzlik (CISPA\n Helmholtz Center for Information Security); Daniel Slamanig (AIT Austrian\n Institute of Technology)<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Constantine: Automatic Side-Channel Resistance Using Efficient\n Control and Data Flow Linearization<\/td>Pietro Borrello\n (Sapienza University of Rome); Daniele Cono D’Elia (Sapienza University of\n Rome); Leonardo Querzoni (Sapienza University of Rome); Cristiano Giuffrida\n (Vrije Universiteit Amsterdam)<\/td>Sapienza University of Rome<\/td>\u610f\u5927\u5229<\/td><\/tr>
Oblivious Linear Group Actions and Applications<\/td>Nuttapong Attrapadung\n (AIST, Japan); Goichiro Hanaoaka (AIST, Japan); Takahiro Matsuda (AIST,\n Japan); Hiraku Morita (University of St. Gallen, Switzerland); Kazuma Ohara\n (AIST, Japan); Jacob Schuldt (AIST, Japan); Tadanori Teruya (AIST, Japan);\n Kazunari Tozawa (University of Tokyo, Japan)<\/td>AIST, Japan<\/td>\u65e5\u672c<\/td><\/tr>
Realtime Robust Malicious Traffic Detection via Frequency Domain\n Analysis<\/td>Chuanpu Fu (Tsinghua\n University); Qi Li (Tsinghua University); Meng Shen (Beijing Institute of\n Technology); Ke Xu (Tsinghua University)<\/td>Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Revisiting Fuzzy Signatures: Towards a More Risk-Free\n Cryptographic Authentication System based on Biometrics<\/td>Shuichi Katsumata\n (AIST); Takahiro Matsuda (AIST); Wataru Nakamura (Hitachi, Ltd.) Kazuma Ohara\n (AIST); Kenta Takahashi (Hitachi, Ltd.);<\/td>AIST<\/td><\/tr>
PalmTree: Learning an Assembly Language Model for Instruction\n Embedding<\/td>Xuezixiang Li\n (University of California Riverside); Yu Qu (University of California\n Riverside); Heng Yin (University of California Riverside)<\/td>University of California\n Riverside<\/td>\u7f8e\u56fd<\/td><\/tr>
TSS: Transformation-Specific Smoothing for Robustness\n Certification<\/td>Linyi Li (University\n of Illinois at Urbana-Champaign); Maurice Weber (ETH Z\u00fcrich); Xiaojun Xu\n (University of Illinois at Urbana-Champaign); Luka Rimanic (ETH Z\u00fcrich);\n Bhavya Kailkhura (Lawrence Livermore National Laboratory); Tao Xie (Peking\n University); Ce Zhang (ETH Z\u00fcrich); Bo Li (University of Illinois at\n Urbana-Champaign)<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
DeepAID: Interpreting and Improving Deep Learning-based Anomaly\n Detection in Security Applications<\/td>Dongqi Han (Tsinghua\n University); Zhiliang Wang (Tsinghua University); Wenqi Chen (Tsinghua\n University); Ying Zhong (Tsinghua university); Su Wang (Tsinghua University);\n Han Zhang (Tsinghua University); Jiahai Yang (Tsinghua University); Xingang\n Shi (Tsinghua University); Xia Yin (Tsinghua University)<\/td>Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Hiding the Lengths of Encrypted Messages via Gaussian Padding<\/td>Jean Paul Degabriele\n (TU Darmstadt)<\/td>TU Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
Efficient Linear Multiparty PSI and Extensions to Circuit\/Quorum\n PSI<\/td>Nishanth Chandran\n (Microsoft Research, Bangalore); Nishka Dasgupta (Microsoft Research,\n Bangalore); Divya Gupta (Microsoft Research, Bangalore); Sai Lakshmi Bhavana\n Obbattu (Microsoft Research, Bangalore); Sruthi Sekar (Indian Institute of\n Science, Bangalore); Akash Shah (Microsoft Research, Bangalore)<\/td>Microsoft Research, Bangalore<\/td>\u5370\u5ea6<\/td><\/tr>
On the (in)security of ElGamal in OpenPGP<\/td>Luca De Feo (IBM\n Research – Zurich); Bertram Poettering (IBM Research – Zurich); Alessandro\n Sorniotti (IBM Research – Zurich)<\/td>IBM Research – Zurich<\/td>\u745e\u58eb<\/td><\/tr>
Locating the Security Patches for Disclosed OSS Vulnerabilities\n with Vulnerability-Commit Correlation Ranking<\/td>Xin Tan (Fudan\n University); Yuan Zhang (Fudan University); Chenyuan Mi (Fudan University);\n Jiajun Cao (Fudan University); Kun Sun (George Mason University); Yifan Lin\n (Fudan University); Min Yang (Fudan University)<\/td>Fudan University<\/td>\u4e2d\u56fd<\/td><\/tr>
Facilitating Vulnerability Assessment through PoC Migration<\/td>Jiarun Dai (Fudan\n University); Yuan Zhang (Fudan University); Hailong Xu (Fudan University);\n Haiming Lyu (Fudan University); Zicheng Wu (Fudan University); Xinyu Xing\n (Pennsylvania State University); Min Yang (Fudan University)<\/td>Fudan University<\/td>\u4e2d\u56fd<\/td><\/tr>
Efficient Zero-knowledge MPCitH-based Arguments<\/td>Cyprien Delpech de\n Saint Guilhem (KU Leuven); Emmanuela Orsini (KU Leuven); Titouan Tanguy (KU\n Leuven)<\/td>KU Leuven<\/td>\u6bd4\u5229\u65f6<\/td><\/tr>
Regression Greybox Fuzzing<\/td>Xiaogang Zhu\n (Swinburne University of Technology); Marcel B\u00f6hme (Monash University)<\/td>Swinburne University of\n Technology<\/td>\u6fb3\u5927\u5229\u4e9a<\/td><\/tr>
Honest-but-Curious Nets: Sensitive Attributes of Private Inputs\n Can Be Secretly Coded into the Classifiers’ Outputs<\/td>Mohammad Malekzadeh\n (Imperial College London); Anastasia Borovykh (Imperial College London);\n Deniz Gunduz (Imperial College London)<\/td>Imperial College London<\/td>\u82f1\u56fd<\/td><\/tr>
Wireless Charging Power Side-Channel Attacks<\/td>Alexander La Cour\n (Cornell University); Edward Suh (Cornell University); Khurram Afridi\n (Cornell University)<\/td>Cornell University<\/td>\u7f8e\u56fd<\/td><\/tr>
A Security Framework for Distributed Ledgers<\/td>Christoph Egger\n (Friedrich-Alexander University Erlangen-N\u00fcrnberg); Mike Graf (University of\n Stuttgart); Ralf K\u00fcsters (University of Stuttgart); Daniel Rausch (University\n of Stuttgart); Viktoria Ronge (Friedrich-Alexander University\n Erlangen-N\u00fcrnberg); Dominique Schr\u00f6der (Friedrich-Alexander University\n Erlangen-N\u00fcrnberg)<\/td>Friedrich-Alexander University\n Erlangen-N\u00fcrnberg<\/td>\u5fb7\u56fd<\/td><\/tr>
Differential Privacy for Directional Data<\/td>Benjamin Weggenmann\n (SAP SE); Florian Kerschbaum (University of Waterloo)<\/td>SAP SE<\/td>\u5fb7\u56fd<\/td><\/tr>
Automated Bug Hunting With Data-Driven Symbolic Root Cause\n Analysis<\/td>Carter Yagemann\n (Georgia Institute of Technology); Simon P. Chung (Georgia Institute of\n Technology); Brendan Saltaformaggio (Georgia Institute of Technology); Wenke\n Lee (Georgia Institute of Technology)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Differentially private sparse vectors with low error, optimal\n space, and fast access<\/td>Martin Aum\u00fcller (IT\n University of Copenhagen); Christian Janos Lebeda (BARC and IT University of\n Copenhagen); Rasmus Pagh (BARC and University of Copenhagen)<\/td>IT University of Copenhagen<\/td>\u4e39\u9ea6<\/td><\/tr>
Supply-Chain Vulnerability Elimination via Active Learning and\n Regeneration<\/td>Nikos Vasilakis\n (MIT); Achilles Benetopoulos (UC Santa Cruz); Shivam Handa (MIT); Alizee\n Schoen (MIT); Jiasi Shen (MIT); Martin Rinard (MIT)<\/td>MIT<\/td>\u7f8e\u56fd<\/td><\/tr>
Deterrence of Intelligent DDoS via Multi-Hop Traffic Divergence<\/td>Yuanjie Li (Tsinghua\n University); Hewu Li (Tsinghua University); Zhizheng Lv (Tsinghua\n University); Xingkun Yao (Tsinghua University); Qianru Li (University of\n California, Los Angeles); Jianping Wu (Tsinghua University)<\/td>Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Igor: Crash Deduplication Through Root-Cause Clustering<\/td>Zhiyuan Jiang\n (National University of Defense Technology); Xiyue Jiang (National University\n of Defense Technology); Ahmad Hazimeh (EPFL); Chaojing Tang (National\n University of Defense Technology); Chao Zhang (Tsinghua University); Mathias\n Payer (EPFL)<\/td>National University of Defense\n Technology<\/td>\u4e2d\u56fd<\/td><\/tr>
CPscan: Detecting Bugs Caused by Code Pruning in IoT Kernels<\/td>Lirong Fu (Zhejiang\n University); Shouling Ji (Zhejiang University); Kangjie Lu (University of\n Minnesota); Peiyu Liu (Zhejiang University); Xuhong Zhang (Zhejiang\n University); Yuxuan Duan (Zhejiang University); Zihui Zhang (Zhejiang\n University); Wenzhi Chen (Zhejiang University); Yanjun Wu (Institute of\n Software, Chinese Academy of Sciences)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
XSinator.com: From a Formal Model to the Automatic Evaluation of\n Cross-Site Leaks in Web Browsers<\/td>Lukas Knittel (Ruhr\n University Bochum); Christian Mainka (Ruhr University Bochum); Marcus\n Niemietz (Ruhr University Bochum); Dominik Trevor No\u00df (Ruhr University\n Bochum); J\u00f6rg Schwenk (Ruhr University Bochum)<\/td>Ruhr University Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
HardsHeap: A Universal and Extensible Framework for Evaluating\n Secure Allocators<\/td>Insu Yun (KAIST);\n Woosun Song (KAIST); Seunggi Min (KAIST); Taesoo Kim (Georgia Institute of\n Technology)<\/td>KAIST<\/td>\u97e9\u56fd<\/td><\/tr>
The Invisible Shadow: How Security Cameras Leak Private\n Activities<\/td>Jian Gong (Central\n South University); Xinyu Zhang (University of California, San Diego); Ju Ren\n (Central South University); Yaoxue Zhang (Tsinghua University)<\/td>Central South University<\/td>\u4e2d\u56fd<\/td><\/tr>
“Hello, It’s Me”: Deep Learning-based Speech Synthesis\n Attacks in the Real World<\/td>Emily Wenger\n (University of Chicago); Max Bronckers (University of Chicago); Christian\n Cianfarani (University of Chicago); Jenna Cryan (University of Chicago);\n Angela Sha (University of Chicago); Haitao Zheng (University of Chicago); Ben\n Y. Zhao (University of Chicago)<\/td>University of Chicago<\/td>\u4e2d\u56fd<\/td><\/tr>
Chunk-Level Password Guessing: Towards Modeling Refined Password\n Composition Representations<\/td>Ming Xu (Fudan\n University); Chuanwang Wang (Fudan University); Jitao Yu (Fudan University);\n Junjie Zhang (Fudan University); Kai Zhang (Fudan University); Weili Han\n (Fudan University)<\/td>Fudan University<\/td>\u4e2d\u56fd<\/td><\/tr>
MirChecker: Detecting Bugs in Rust Programs via Static Analysis<\/td>Zhuohua Li (The\n Chinese University of Hong Kong); Jincheng Wang (The Chinese University of\n Hong Kong); Mingshen Sun (Baidu Security); John C.S. Lui (The Chinese\n University of Hong Kong)<\/td>The Chinese University of Hong\n Kong<\/td>\u4e2d\u56fd<\/td><\/tr>
Demons in the Shared Kernel: Abstract Resource Attacks Against\n OS-level Virtualization<\/td>Nanzi Yang (Xidian\n University); Wenbo Shen (Zhejiang University); Jinku Li (Xidian University);\n Yutian Yang (Zhejiang University); Kangjie Lu (University of Minnesota);\n Jietao Xiao (Xidian University); Tianyu Zhou (Zhejiang University); Chenggang\n Qin (Ant Group); Wang Yu (Ant Group); Jianfeng Ma (Xidian University); Kui\n Ren (Zhejiang University)<\/td>Xidian University<\/td>\u4e2d\u56fd<\/td><\/tr>
FakeWake: Understanding and Mitigating Fake Wake-up Words of\n Voice Assistants<\/td>Yanjiao Chen\n (Zhejiang University); Yijie Bai (Zhejiang University); Kaibo Wang (Zhejiang\n University); Richard Mitev (Technische Universit\u00e4t Darmstadt); Wenyuan Xu\n (Zhejiang University); Ahmad-Reza Sadeghi (Technische Universit\u00e4t Darmstadt)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
Towards Transparent and Stealthy Android OS Sandboxing via\n Customizable Container-Based Virtualization<\/td>Wenna Song (Wuhan\n University); Jiang Ming (University of Texas at Arlington); Lin Jiang (XDJA);\n Yi Xiang (Wuhan University); Xuanchen Pan (Wuhan Antiy Information\n Technology); Jianming Fu (Wuhan University); Guojun Peng (Wuhan University)<\/td>Wuhan University<\/td>\u4e2d\u56fd<\/td><\/tr>
DoubleX: Statically Analyzing Browser Extensions at Scale<\/td>Aurore Fass (CISPA\n Helmholtz Center for Information Security); Doli\u00e8re Francis Som\u00e9 (CISPA\n Helmholtz Center for Information Security); Michael Backes (CISPA Helmholtz\n Center for Information Security); Ben Stock (CISPA Helmholtz Center for\n Information Security)<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Biometrics-Authenticated Key Exchange for Secure Messaging<\/td>Mei Wang (Wuhan\n University); Kun He (Wuhan University); Jing Chen (Wuhan University);\n Zengpeng Li (Shandong University); Wei Zhao (Science and Technology on\n Communication Security Laboratory); Ruiying Du (Wuhan University)<\/td>Wuhan University<\/td>\u4e2d\u56fd<\/td><\/tr>
Validating the Integrity of Audit Logs Against Execution\n Repartitioning Attacks<\/td>Carter Yagemann\n (Georgia Institute of Technology); Mohammad Noureddine (University of\n Illinois Urbana-Champaign); Wajih Ul Hassan (University of Illinois\n Urbana-Champaign); Simon Chung (Georgia Institute of Technology); Adam Bates\n (University of Illinois Urbana-Champaign); Wenke Lee (Georgia Institute of\n Technology)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Reconstructing with Less: Leakage Abuse Attacks in\n Two-Dimensions<\/td>Evangelia Anna\n Markatou (Brown University); Francesca Falzon (University of Chicago);\n Roberto Tamassia (Brown University); William Schor (Brown University)<\/td>Brown University<\/td>\u7f8e\u56fd<\/td><\/tr>
This Sneaky Piggy Went to the Android Ad Market: Misusing Mobile\n Sensors for Stealthy Data Exfiltration<\/td>Michalis Diamantaris\n (FORTH); Serafeim Moustakas (FORTH); Lichao Sun (Lehigh University); Sotiris\n Ioannidis (Technical University of Crete); Jason Polakis (University of\n Illinois at Chicago)<\/td>FORTH<\/td>\u5e0c\u814a<\/td><\/tr>
Scan, Test, Execute: Adversarial Tactics in Amplification DDoS\n Attacks<\/td>Harm Griffioen (Hasso\n Plattner Institute); Kris Oosthoek (Delft University of Technology); Paul van\n der Knaap (Delft University of Technology); Christian Doerr (Hasso Plattner\n Institute)<\/td>Hasso Plattner Institute<\/td>\u5fb7\u56fd<\/td><\/tr>
Out of Sight, Out of Mind: Detecting Orphaned Web Pages at\n Internet-Scale<\/td>Stijn Pletinckx (TU\n Delft); Kevin Borgolte (Ruhr University Bochum); Tobias Fiebig (TU Delft)<\/td>TU Delft<\/td>\u8377\u5170<\/td><\/tr>
HyperFuzzer: An Efficient Hybrid Fuzzer For Virtual CPUs<\/td>Xinyang Ge (Microsoft\n Research); Ben Niu (Microsoft); Robert Brotzman (The Pennsylvania State\n University); Yaohui Chen (Facebook); HyungSeok Han (KAIST); Patrice Godefroid\n (Microsoft Research); Weidong Cui (Microsoft Research)<\/td>Microsoft Research<\/td>\u7f8e\u56fd<\/td><\/tr>
EncoderMI: Membership Inference against Pre-trained Encoders in\n Contrastive Learning<\/td>Hongbin Liu (Duke\n University); Jinyuan Jia (Duke University); Wenjie Qu (Huazhong University of\n Science and Technology); Neil Gong (Duke University)<\/td>Duke University<\/td>\u7f8e\u56fd<\/td><\/tr>
Subpopulation Data Poisoning Attacks<\/td>Matthew Jagielski\n (Northeastern University); Giorgio Severi (Northeastern University); Niklas\n Pousette Harger (Northeastern University); Alina Oprea (Northeastern\n University)<\/td>Northeastern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Continuous Release of Data Streams under both Centralized and\n Local Differential Privacy<\/td>Tianhao Wang (Purdue\n University); Joann Qiongna Chen (University of California, Irvine); Zhikun\n Zhang (CISPA Helmholtz Center for Information Security); Dong Su (Alibaba);\n Yueqiang Cheng (NIO Security Research); Zhou Li (University of California,\n Irvine); Ninghui Li (Purdue University); Somesh Jha (University of Wisconsin)<\/td>Purdue University<\/td>\u7f8e\u56fd<\/td><\/tr>
Side-channel attacks on query-based data anonymization<\/td>Franziska Boenisch\n (Fraunhofer AISEC); Reinhard Munz (Max Planck Institute for Software Systems\n (MPI-SWS)); Marcel Tiepelt (Karlsruhe Institute of Technology); Simon Hanisch\n (Karlsruhe Institute of Technology); Christiane Kuhn (Karlsruhe Institute of\n Technology); Paul Francis (Max Planck Institute for Software Systems\n (MPI-SWS))<\/td>Fraunhofer AISEC<\/td>\u5fb7\u56fd<\/td><\/tr>
How Does Blockchain Security Dictate Blockchain Implementation?<\/td>Andrew Lewis-Pye\n (London School of Economics); Tim Roughgarden (Columbia University)<\/td>London School of Economics<\/td>\u82f1\u56fd<\/td><\/tr>
ECMO: Peripheral Transplantation to Rehost Embedded Linux\n Kernels<\/td>Muhui Jiang (The Hong\n Kong Polytechnic University; Zhejiang University); Lin Ma (Zhejiang\n University); Yajin Zhou (Zhejiang University); Qiang Liu (Zhejiang\n University); Cen Zhang (Nanyang Technological University); Zhi Wang (Florida\n State University); Xiapu Luo (The Hong Kong Polytechnic University); Lei Wu\n (Zhejiang University); Kui Ren (Zhejiang University)<\/td>The Hong Kong Polytechnic\n University; Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
The return of Eratosthenes: Secure Generation of RSA Moduli\n using Distributed Sieving<\/td>Cyprien Delpech de\n Saint Guilhem (imec-COSIC, KU Leuven, Belgium); Eleftheria Makri (imec-COSIC,\n KU Leuven, Belgium; ABRR, Saxion University of Applied Sciences, The\n Netherlands); Dragos Rotaru (Cape Privacy; imec-COSIC, KU Leuven, Belgium);\n Titouan Tanguy (imec-COSIC, KU Leuven, Belgium)<\/td>imec-COSIC, KU Leuven, Belgium<\/td>\u6bd4\u5229\u65f6<\/td><\/tr>
Robust Detection of Machine-induced Audio Attacks in Intelligent\n Audio Systems with Microphone Array<\/td>Zhuohang Li\n (University of Tennessee, Knoxville); Cong Shi (Rutgers University); Tianfang\n Zhang (Rutgers University); Yi Xie (Rutgers University); Jian Liu (University\n of Tennessee, Knoxville); Bo Yuan (Rutgers University); Yingying Chen\n (Rutgers University)<\/td>University of Tennessee,\n Knoxville<\/td>\u7f8e\u56fd<\/td><\/tr>
When Machine Unlearning Jeopardizes Privacy<\/td>Min Chen (CISPA\n Helmholtz Center for Information Security); Zhikun Zhang (CISPA Helmholtz\n Center for Information Security); Tianhao Wang (Purdue University); Michael\n Backes (CISPA Helmholtz Center for Information Security); Mathias Humbert\n (Cyber-Defence Campus, armasuisse S+T); Yang Zhang (CISPA Helmholtz Center\n for Information Security)<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
DetectorGuard: Provably Securing Object Detectors against\n Localized Patch Hiding Attacks<\/td>Chong Xiang\n (Princeton University); Prateek Mittal (Princeton University)<\/td>Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
New Directions in Automated Traffic Analysis<\/td>Jordan Holland\n (Princeton University); Paul Schmitt (Princeton University); Nick Feamster\n (University of Chicago); Prateek Mittal (Princeton University)<\/td>Princeton University<\/td>\u7f8e\u56fd<\/td><\/tr>
An Inside Look into the Practice of Malware Analysis<\/td>Miuyin Yong Wong\n (Georgia Institute of Technology); Matthew Landen (Georgia Institute of\n Technology); Manos Antonakakis (Georgia Tech); Douglas M. Blough (Georgia\n Institute of Technology); Elissa M. Redmiles (Max Planck Institute for\n Software Systems); Mustaque Ahamad (Georgia Tech)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
Labeled PSI from Homomorphic Encryption with Reduced Computation\n and Communication<\/td>Kelong Cong\n (imec-COSIC, KU Leuven); Radames Cruz Moreno (Microsoft Research); Mariana\n Botelho da Gama (imec-COSIC, KU Leuven); Wei Dai (Microsoft Research); Ilia\n Iliashenko (imec-COSIC, KU Leuven); Kim Laine (Microsoft Research); Michael\n Rosenberg (University of Maryland)<\/td>imec-COSIC, KU Leuven, Belgium<\/td>\u6bd4\u5229\u65f6<\/td><\/tr>
DETER: Denial of Ethereum Txpool sERvices<\/td>Kai Li (Syracuse\n University); Yibo Wang (Syracuse University); Yuzhe Tang (Syracuse\n University)<\/td>Syracuse University<\/td>\u7f8e\u56fd<\/td><\/tr>
Structured Leakage and Applications to Cryptographic\n Constant-Time and Cost<\/td>Gilles Barthe\n (MPI-SP, IMDEA Software Institute); Benjamin Gr\u00e9goire (Universit\u00e9 C\u00f4te\n d\u2019Azur, Inria, Sophia Antipolis); Vincent Laporte (Universit\u00e9 de Lorraine,\n CNRS, Inria, LORIA, F-54000 Nancy, France); Swarn Priya (Universit\u00e9 C\u00f4te\n d\u2019Azur, Inria, Sophia Antipolis)<\/td>MPI-SP, IMDEA Software Institute<\/td>\u5fb7\u56fd<\/td><\/tr>
Themis: Ambiguity-Aware Network Intrusion Detection based on\n Symbolic Model Comparison<\/td>Zhongjie Wang\n (University of California, Riverside); Shitong Zhu (University of California,\n Riverside); Keyu Man (University of California, Riverside); Pengxiong Zhu\n (University of California, Riverside); Yu Hao (University of California,\n Riverside); Zhiyun Qian (University of California, Riverside); Srikanth V.\n Krishnamurthy (University of California, Riverside); Tom La Porta\n (Pennsylvania State University); Michael J. De Lucia (U.S. Army Research\n Laboratory)<\/td>University of California,\n Riverside<\/td>\u7f8e\u56fd<\/td><\/tr>
SyzGen: Automated Generation of Syscall Specification of\n Closed-Source macOS Drivers<\/td>Weiteng Chen (UC\n Riverside); Yu Wang (Didi Research America); Zheng Zhang (UC Riverside);\n Zhiyun Qian (UC Riverside)<\/td>UC Riverside<\/td>\u7f8e\u56fd<\/td><\/tr>
The Effect of Google Search on Software Security<\/td>Felix Fischer\n (Professorship of Cyber Trust, Department of Informatics, Technical\n University Munich); Yannick Stachelscheid (Professorship of Cyber Trust,\n Department of Informatics, Technical University Munich); Jens Grossklags\n (Professorship of Cyber Trust, Department of Informatics, Technical\n University Munich)<\/td>Professorship of Cyber Trust,\n Department of Informatics, Technical University Munich<\/td>\u5fb7\u56fd<\/td><\/tr>
One Hot Garbling<\/td>David Heath (Georgia\n Institute of Technology); Vladimir Kolesnikov (Georgia Institute of\n Technology)<\/td>Georgia Institute of Technology<\/td>\u7f8e\u56fd<\/td><\/tr>
DNS Cache Poisoning Attack: Resurrections with Side Channels<\/td>Keyu Man (University\n of California, Riverside); Xinan Zhou (University of California, Riverside);\n Zhiyun Qian (University of California, Riverside)<\/td>University of California,\n Riverside<\/td>\u7f8e\u56fd<\/td><\/tr>
Catching Transparent Phish: Analyzing and Detecting MITM\n Phishing Toolkits<\/td>Brian Kondracki\n (Stony Brook University); Babak Amin Azad (Stony Brook University); Oleksii\n Starov (Palo Alto Networks); Nick Nikiforakis (Stony Brook University)<\/td>Stony Brook University<\/td>\u7f8e\u56fd<\/td><\/tr>
I Can See the Light: Attacks on Autonomous Vehicles Using\n Invisible Lights<\/td>Wei Wang (University\n of Maryland, Baltimore County); Yao Yao (University of Maryland, Baltimore\n County); Xin Liu (University of Maryland, Baltimore County); Xiang Li\n (Independent Researcher); Pei Hao (University of Maryland, Baltimore County);\n Ting Zhu (University of Maryland, Baltimore County)<\/td>University of Maryland,\n Baltimore County<\/td>\u7f8e\u56fd<\/td><\/tr>
EasyPQC: Verifying Post-Quantum Cryptography<\/td>Manuel Barbosa\n (University of Porto (FCUP) and INESC TEC); Gilles Barthe (MPI-SP and IMDEA\n Software Institute); Xiong Fan (University of Maryland); Benjamin Gr\u00e9goire\n (Inria); Shih-Han Hung (University of Maryland); Jonathan Katz (University of\n Maryland); Pierre-Yves Strub (\u00c9cole Polytechnique); Xiaodi Wu (University of\n Maryland); Li Zhou (MPI-SP)<\/td>University of Porto (FCUP) and\n INESC TEC<\/td>\u8461\u8404\u7259<\/td><\/tr>
SyncAttack: Double-spending in Bitcoin Without Mining Power<\/td>Muhammad Saad\n (University of Central Florida); Songqing Chen (George Mason University);\n David Mohaisen (University of Central Florida)<\/td>University of Central Florida<\/td>\u7f8e\u56fd<\/td><\/tr>
Backdoor Pre-trained Models Can Transfer to All<\/td>Lujia Shen (Zhejiang\n University); Shouling Ji (Zhejiang University); Xuhong Zhang (Zhejiang\n University); Jinfeng Li (Zhejiang University); Jing Chen (Wuhan University);\n Jie Shi (Huawei International, Singapore); Chengfang Fang (Huawei\n International, Singapore); Jianwei Yin (Zhejiang University); Ting Wang (Penn\n State)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
Packet scheduling with optional client privacy<\/td>Andrew Beams\n (University of Pennsylvania); Sampath Kannan (University of Pennsylvania);\n Sebastian Angel (University of Pennsylvania)<\/td>University of Pennsylvania<\/td>\u7f8e\u56fd<\/td><\/tr>
Warmonger: Inflicting Denial-of-Service via Serverless Functions\n in the Cloud<\/td>Junjie Xiong\n (University of South Florida); Mingkui Wei (George Mason University); Zhuo Lu\n (University of South Florida); Yao Liu (University of South Florida)<\/td>University of South Florida<\/td>\u7f8e\u56fd<\/td><\/tr>
Quantifying and Mitigating Privacy Risks of Contrastive Learning<\/td>Xinlei He (CISPA\n Helmholtz Center for Information Security); Yang Zhang (CISPA Helmholtz\n Center for Information Security)<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
Doubly Efficient Interactive Proofs for General Arithmetic\n Circuits with Linear Prover Time<\/td>Jiaheng Zhang (UC\n Berkeley); Tianyi Liu (Texas A&M University & Shanghai Key Laboratory\n of Privacy-Preserving Computation); Weijie Wang (Shanghai Jiao Tong\n University); Yinuo Zhang (UC Berkeley); Dawn Song (UC Berkeley); Xiang Xie\n (Shanghai Key Laboratory of Privacy-Preserving Computation); Yupeng Zhang\n (Texas A&M University)<\/td>UC Berkeley<\/td>\u7f8e\u56fd<\/td><\/tr>
Rusted Anchors: A National Client-Side View of Hidden Root CAs\n in the Web PKI Ecosystem<\/td>Yiming Zhang\n (Tsinghua University); Baojun Liu (Tsinghua University); Chaoyi Lu (Tsinghua\n University; 360 Netlab); Zhou Li (University of California, Irvine); Haixin\n Duan (Tsinghua University; QI-ANXIN Technology Research Institute; Beijing\n National Research Center for Information Science and Technology; Peng Cheng\n Laboratory); Jiachen Li (Tsinghua University); Zaifeng Zhang (360 Netlab)<\/td>Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
Indistinguishability Prevents Scheduler Side-Channels in\n Real-Time Systems<\/td>Chien-Ying Chen\n (University of Illinois at Urbana-Champaign); Debopam Sanyal (University of\n Illinois at Urbana-Champaign); Sibin Mohan (University of Illinois at\n Urbana-Champaign)<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Detecting Missed Security Operations Through Differential\n Checking of Object-based Similar Paths<\/td>Dinghao Liu (Zhejiang\n University); Qiushi Wu (University of Minnesota); Shouling Ji (Zhejiang\n University); Kangjie Lu (University of Minnesota); Zhenguang Liu (Zhejiang\n University); Jianhai Chen (Zhejiang University); Qinming He (Zhejiang\n University)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
Membership Inference Attacks Against Recommender Systems<\/td>Minxing Zhang\n (Shandong University); Zihan Wang (Shandong University); Yang Zhang (CISPA\n Helmholtz Center for Information Security); Zhaochun Ren (Shandong\n University); Pengjie Ren (Shandong University); Zhunmin Chen (Shandong\n University); Pengfei Hu (Shandong University)<\/td>Shandong University<\/td>\u4e2d\u56fd<\/td><\/tr>
Machine-checked ZKP for NP relations: Formally Verified Security\n Proofs and Implementations of MPC-in-the-Head<\/td>Jos\u00e9 Bacelar Almeida\n (University of Minho and INESC TEC); Manuel Barbosa (University of Porto\n (FCUP) and INESC TEC); Manuel L Correia (University of Porto (FCUP) and INESC\n TEC); Karim Eldefrawy (SRI International); St\u00e9phane Graham-Lengrand (SRI\n International); Hugo Pacheco (University of Porto (FCUP) and INESC TEC);\n Vitor Pereira (SRI International)<\/td>University of Minho and INESC\n TEC<\/td>\u8461\u8404\u7259<\/td><\/tr>
An In-Depth Symbolic Security Analysis of the ACME Standard<\/td>Karthikeyan Bhargavan\n (INRIA Paris, France); Abhishek Bichhawat (IIT Gandhinagar, India); Quoc Huy\n Do (University of Stuttgart, Germany and GLIWA GmbH, Germany); Pedram\n Hosseyni (University of Stuttgart, Germany); Ralf K\u00fcsters (University of\n Stuttgart, Germany); Guido Schmitz (University of Stuttgart, Germany); Tim\n W\u00fcrtele (University of Stuttgart, Germany)<\/td>INRIA Paris, France<\/td>\u6cd5\u56fd<\/td><\/tr>
Who’s In Control? On Security Risks of Disjointed IoT Device\n Management Channels<\/td>Yan Jia (Nankai\n University); Bin Yuan (Huazhong University of Science and Technology); Luyi\n Xing (Indiana University Bloomington); Dongfang Zhao (Indiana University\n Bloomington); XiaoFeng Wang (Indiana University Bloomington); Yifan Zhang\n (Indiana University Bloomington); Yijing Liu (Nankai University); Kaimin\n Zheng (Huazhong University of Science and Technology); Peyton Crnjak (Indiana\n University Bloomington); Yuqing Zhang (National Computer Network Intrusion\n Protection Center, University of Chinese Academy of Sciences); Deqing Zou\n (Huazhong University of Science and Technology); Hai Jin (Huazhong University\n of Science and Technology)<\/td>Nankai University<\/td>\u4e2d\u56fd<\/td><\/tr>
Simple, Fast Malicious Multiparty Private Set Intersection<\/td>Ofri Nevo (Open\n University of Israel); Ni Trieu (Arizona State University); Avishay Yanai\n (VMware Research)<\/td>Open University of Israel<\/td>\u4ee5\u8272\u5217<\/td><\/tr>
Efficient CCA Timed Commitments in Class Groups<\/td>Guilhem Castagnos\n (University of Bordeaux); Fabien Laguillaumie (Universit\u00e9 of Montpellier);\n Giulio Malavolta (Max Planck Institute for Security and Privacy); Sri\n Aravinda Krishnan Thyagarajan (Friedrich-Alexander University of\n Erlangen-Nuremberg)<\/td>University of Bordeaux<\/td>\u6cd5\u56fd<\/td><\/tr>
Android on PC: On the Security of End-user Android Emulators<\/td>Fenghao Xu (The\n Chinese University of Hong Kong); Siyu Shen (The Chinese University of Hong\n Kong); Wenrui Diao (Shandong University); Zhou Li (University of California,\n Irvine); Yi Chen (The Chinese University of Hong Kong); Rui Li (Shandong\n University); Kehuan Zhang (The Chinese University of Hong Kong)Fenghao Xu\n (The Chinese University of Hong Kong); Siyu Shen (The Chinese University of\n Hong Kong); Wenrui Diao (Shandong University); Zhou Li (University of\n California, Irvine); Yi Chen (The Chinese University of Hong Kong); Rui Li\n (Shandong University); Kehuan Zhang (The Chinese University of Hong Kong)<\/td>The Chinese University of Hong\n Kong<\/td>\u4e2d\u56fd<\/td><\/tr>
Glowworm Attack: Optical TEMPEST Sound Recovery via a Device\u2019s\n Power Indicator LED<\/td>Ben Nassi (Ben-Gurion\n University of the Negev); Yaron Pirutin (Ben-Gurion University of the Negev);\n Tomer Galor (Ben-Gurion University of the Negev); Yuval Elovici (Ben-Gurion\n University of the Negev); Boris Zadov (Ben-Gurion University of the Negev)<\/td>Ben-Gurion University of the\n Negev<\/td>\u4ee5\u8272\u5217<\/td><\/tr>
Learning Security Classifiers with Verified Global Robustness\n Properties<\/td>Yizheng Chen\n (Columbia University); Shiqi Wang (Columbia University); Yue Qin (Indiana\n University Bloomington); Xiaojing Liao (Indiana University Bloomington);\n Suman Jana (Columbia University); David Wagner (UC Berkeley)<\/td>Columbia University<\/td>\u7f8e\u56fd<\/td><\/tr>
Robust Adversarial Attacks Against DNN-Based Wireless\n Communication Systems<\/td>Alireza Bahramali\n (UMASS Amherst); Milad Nasr (UMASS Amherst); Amir Houmansadr (UMass Amherst);\n Dennis Goeckel (UMASS Amherst); Don Towsley (University of Massachusetts –\n Amherst)<\/td>UMASS Amherst<\/td>\u7f8e\u56fd<\/td><\/tr>
Compact and Malicious Private Set Intersection for Small Sets<\/td>Mike Rosulek (Oregon\n State University); Ni Trieu (Arizona State University)<\/td>Oregon State University<\/td>\u7f8e\u56fd<\/td><\/tr>
One Glitch to Rule Them All: Fault Injection Attacks Against\n AMD\u2019s Secure Encrypted Virtualization<\/td>Robert Buhren\n (Technische Universit\u00e4t Berlin); Hans-Niklas Jacob (Technische Universit\u00e4t\n Berlin); Thilo Krachenfels (Technische Universit\u00e4t Berlin); Jean-Pierre\n Seifert (Technische Universit\u00e4t Berlin)<\/td>Technische Universit\u00e4t Berlin<\/td>\u5fb7\u56fd<\/td><\/tr>
12 Angry Developers \u2013 A Qualitative Study on Developers\u2019\n Struggles with CSP<\/td>Sebastian Roth (CISPA\n Helmholtz Center for Information Security); Lea Theresa Gr\u00f6ber (CISPA\n Helmholtz Center for Information Security); Michael Backes (CISPA Helmholtz\n Center for Information Security); Katharina Krombholz (CISPA Helmholtz Center\n for Information Security); Ben Stock (CISPA Helmholtz Center for Information\n Security)<\/td>CISPA Helmholtz Center for\n Information Security<\/td>\u5fb7\u56fd<\/td><\/tr>
DPGen: Automated Program Synthesis for Differential Privacy<\/td>Yuxin Wang\n (Pennsylvania State University); Zeyu Ding (Pennsylvania State University);\n Yingtai Xiao (Pennsylvania State University); Daniel Kifer (Pennsylvania\n State University); Danfeng Zhang (Pennsylvania State University)<\/td>Pennsylvania State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Aion: Enabling Open Systems through Strong Availability\n Guarantees for Enclaves<\/td>Fritz Alder (KU\n Leuven); Jo Van Bulck (KU Leuven); Frank Piessens (KU Leuven); Jan Tobias\n M\u00fchlberg (KU Leuven)<\/td>KU Leuven<\/td>\u6bd4\u5229\u65f6<\/td><\/tr>
Util::Lookup: Exploiting key decoding in cryptographic libraries<\/td>Florian Sieck\n (University of L\u00fcbeck); Sebastian Berndt (University of L\u00fcbeck); Jan\n Wichelmann (University of L\u00fcbeck); Thomas Eisenbarth (University of L\u00fcbeck)<\/td>University of L\u00fcbeck<\/td>\u5fb7\u56fd<\/td><\/tr>
Mining in Logarithmic Space<\/td>Aggelos Kiayias\n (University of Edinburgh and IOHK); Nikos Leonardos (University of Athens);\n Dionysis Zindros (University of Athens)<\/td>University of Edinburgh and IOHK<\/td>\u82cf\u683c\u5170<\/td><\/tr>
Dissecting Residual APIs in Custom Android ROMs<\/td>Zeinab El-Rewini\n (University of Waterloo); Yousra Aafer (University of Waterloo)<\/td>University of Waterloo<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
MPC-Friendly Commitments for Publicly Verifiable Covert Security<\/td>Nitin Agrawal\n (University of Oxford); James Bell (The Alan Turing Institute); Adria Gascon\n (Google LLC); Matt Kusner (University College London, The Alan Turing\n Institute)<\/td>University of Oxford<\/td>\u82f1\u56fd<\/td><\/tr>
A formally verified configuration for Hardware Security Modules\n in the cloud<\/td>Riccardo Focardi\n (University Ca’ Foscari, Venice and Cryptosense); Flaminia L. Luccio\n (University Ca’ Foscari, Venice)<\/td>University Ca’ Foscari, Venice\n and Cryptosense<\/td>\u610f\u5927\u5229<\/td><\/tr>
VIP: Safeguard Value Invariant Property for Thwarting Critical\n Memory Corruption Attacks<\/td>Mohannad Ismail\n (Virginia Tech); Jinwoo Yom (Virginia Tech); Christopher Jelesnianski\n (Virginia Tech); Yeongjin Jang (Oregon State University); Changwoo Min\n (Virginia Tech)<\/td>Virginia Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
Epsolute: Efficiently Querying Databases While Providing\n Differential Privacy<\/td>Dmytro Bogatov\n (Boston University); Georgios Kellaris (Boston University); George Kollios\n (Boston University); Kobbi Nissim (Georgetown University); Adam O’Neill\n (University of Massachusetts, Amherst)<\/td>Boston University<\/td>\u7f8e\u56fd<\/td><\/tr>
Same Coverage, Less Bloat: Accelerating Binary-only Fuzzing with\n Coverage-preserving Coverage-guided Tracing<\/td>Stefan Nagy (Virginia\n Tech); Anh Nguyen-Tuong (University of Virginia); Jason Hiser (University of\n Virginia); Jack Davidson (University of Virginia); Matthew Hicks (Virginia\n Tech)<\/td>Virginia Tech<\/td>\u7f8e\u56fd<\/td><\/tr>
RealSWATT: Remote Software-based Attestation for Embedded\n Devices under Realtime Constraints<\/td>Sebastian Surminski\n (University of Duisburg-Essen); Christian Niesler (University of\n Duisburg-Essen); Ferdinand Brasser (TU Darmstadt); Lucas Davi (University of\n Duisburg-Essen); Ahmad-Reza Sadeghi (TU Darmstadt)<\/td>University of Duisburg-Essen<\/td>\u5fb7\u56fd<\/td><\/tr>
Can We Use Arbitrary Objects to Attack LiDAR Perception in\n Autonomous Driving?<\/td>Yi Zhu (University at\n Buffalo, the State University at New York); Chenglin Miao (University of\n Georgia); Tianhang Zheng (University of Toronto); Foad Hajiaghajani\n (University at Buffalo, the State University at New York); Lu Su (Purdue\n University); Chunming Qiao (SUNY at Buffalo)<\/td>University at Buffalo, the State\n University at New York<\/td>\u7f8e\u56fd<\/td><\/tr>
DroneKey: A Drone-Aided Group-Key Generation Scheme for\n Large-Scale IoT Networks<\/td>Dianqi Han (Arizona\n State University); Ang Li (Arizona State University); Jiawei Li (Arizona\n State University); Yan Zhang (Arizona State University); Tao Li (Indiana\n University\u2013Purdue University Indianapolis); Yanchao Zhang (Arizona State\n University)<\/td>Arizona State University<\/td>\u7f8e\u56fd<\/td><\/tr>
The One-Page Setting: A Higher Standard for Evaluating Website\n Fingerprinting Defenses<\/td>Tao Wang (Simon\n Fraser University)<\/td>Simon Fraser University<\/td>\u52a0\u62ff\u5927<\/td><\/tr>
Don’t Forget the Stuffing! Revisiting the Security Impact of\n Typo-Tolerant Password<\/td>Sena Sahin (Georgia\n Institute of Technology); Frank Li (Georgia Institute of Technology)<\/td>\u7f8e\u56fd<\/td><\/tr>
Compressed Oblivious Encoding for Homomorphically Encrypted\n Search<\/td>Seung Geol Choi (US\n Naval Academy); Dana Dachman-Soled (University of Maryland, College Park); S.\n Dov Gordon (George Mason University); Linsheng Liu (George Washington\n University); Arkady Yerukhimovich (George Washington University)<\/td>US Naval Academy<\/td>\u7f8e\u56fd<\/td><\/tr>
Feature Indistinguishable Attack to Circumvent Trapdoor-enabled\n Defense<\/td>Chaoxiang He\n (Huazhong University of Science and Technology); Bin (Benjamin) Zhu\n (Microsoft Research Asia); Xiaojing Ma (Huazhong University of Science and\n Technology); Hai Jin (Huazhong University of Science and Technology);\n Shengshan Hu (Huazhong University of Science and Technology)<\/td>Huazhong University of Science\n and Technology<\/td>\u4e2d\u56fd<\/td><\/tr>
On Reengineering the X.509 PKI with Executable Specification for\n Better Implementation Guarantees<\/td>Joyanta Debnath (The\n University of Iowa); Sze Yiu Chau (The Chinese University of Hong Kong); Omar\n Chowdhury (The University of Iowa)<\/td>The University of Iowa<\/td>\u7f8e\u56fd<\/td><\/tr>
On the Renyi Differential Privacy of the Shuffle Model<\/td>Antonious M. Girgis\n (University of California Los Angeles, USA); Deepesh Data (University of\n California Los Angeles, USA); Suhas Diggavi (University of California Los\n Angeles, USA); Ananda Suresh (Google Research); Peter Kairouz (Google\n Research)<\/td>University of California Los\n Angeles, USA<\/td>\u7f8e\u56fd<\/td><\/tr>
Zero Knowledge Static Program Analysis<\/td>Zhiyong Fang (Texas\n A&M University); David Darais (Galois, Inc); Joe Near (University of\n Vermont); Yupeng Zhang (Texas A&M University)<\/td>Texas A&M University<\/td>\u7f8e\u56fd<\/td><\/tr>
A Hard Label Black-box Adversarial Attack Against Graph Neural\n Networks<\/td>Jiaming Mu (Tsinghua\n University); Binghui Wang (Duke University); Qi Li (Tsinghua University); Kun\n Sun (George Mason University); Mingwei Xu (Tsinghua University); Zhuotao Liu\n (Tsinghua University)<\/td>Tsinghua University<\/td>\u4e2d\u56fd<\/td><\/tr>
COINN: Crypto\/ML Codesign for Oblivious Inference via Neural\n Networks<\/td>Siam U. Hussain\n (University of California San Diego); Mojan Javaheripi (University of\n California San Diego); Mohammad Samragh (University of California San Diego);\n Farinaz Koushanfar (University of California San Diego)<\/td>University of California San\n Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
Statically Discovering High-Order Taint Style Vulnerabilities in\n OS Kernels<\/td>Hang Zhang\n (University of California, Riverside); Weiteng Chen (University of\n California, Riverside); Yu Hao (University of California, Riverside); Guoren\n Li (University of California, Riverside); Yizhuo Zhai (University of\n California, Riverside); Xiaochen Zou (University of California, Riverside);\n Zhiyun Qian (University of California, Riverside)<\/td>University of California,\n Riverside<\/td>\u7f8e\u56fd<\/td><\/tr>
WristPrint: Characterizing User Re-identification Risks from\n Wrist-worn Accelerometry Data<\/td>Nazir Saleheen\n (University of Memphis); Md Azim Ullah (University of Memphis); Supriyo\n Chakraborty (IBM T. J. Watson Research Center); Deniz Ones (University of\n Minnesota); Mani Srivastava (University of California, Los Angeles); Santosh\n Kumar (University of Memphis)<\/td>University of Memphis<\/td>\u7f8e\u56fd<\/td><\/tr>
Constant-Overhead Zero-Knowledge for RAM Programs<\/td>Nicholas Franzese\n (Northwestern University); Jonathan Katz (University of Maryland); Steve Lu\n (Stealth Software Technologies, Inc.); Rafail Ostrovsky (UCLA); Xiao Wang\n (Northwestern University); Chenkai Weng (Northwestern University)<\/td>Northwestern University<\/td>\u7f8e\u56fd<\/td><\/tr>
Ghost in the Binder: Binder Transaction Redirection Attacks in\n Android System Services<\/td>Xiaobo Xiang\n (Institute of Information Engineering, Chinese Academy of Sciences; School of\n Cyber Security, University of Chinese Academy of Sciences); Ren Zhang\n (Nervos); Hanxiang Wen (Ant Group); Xiaorui Gong (Institute of Information\n Engineering, Chinese Academy of Sciences; School of Cyber Security,\n University of Chinese Academy of Sciences); Baoxu Liu (Institute of\n Information Engineering, Chinese Academy of Sciences; School of Cyber\n Security, University of Chinese Academy of Sciences)<\/td>Institute of Information\n Engineering, Chinese Academy of Sciences; School of Cyber Security,\n University of Chinese Academy of Sciences<\/td>\u4e2d\u56fd<\/td><\/tr>
Generalized Proof of Liabilities<\/td>Yan Ji (Cornell\n University); Konstantinos Chalkias (Novi \/ Facebook)<\/td>Cornell University<\/td>\u7f8e\u56fd<\/td><\/tr>
Efficient Online-friendly Two-Party ECDSA Signature<\/td>Haiyang Xue (The\n University of Hong Kong,); Man Ho Au (The University of Hong Kong); Xiang Xie\n (Shanghai Key Laboratory of Privacy-Preserving Computation); Tsz Hon Yuen\n (The University of Hong Kong); Handong Cui (The University of Hong Kong)<\/td>The University of Hong Kong<\/td>\u4e2d\u56fd<\/td><\/tr>
APECS: A Distributed Access Control Framework for Pervasive Edge\n Computing Services<\/td>Sean Dougherty (Saint\n Louis University); Reza Tourani (Saint Louis University); Gaurav Panwar (New\n Mexico State University); Roopa Vishwanathan (New Mexico State University);\n Satyajayant Misra (New Mexico State University); Srikathyayani Srikanteswara\n (Intel Corp.)<\/td>Saint Louis University<\/td>\u7f8e\u56fd<\/td><\/tr>
Reverse Attack: Black-box Attacks on Collaborative\n Recommendation<\/td>Yihe Zhang\n (University of Louisiana at Lafayette); Xu Yuan (University of Louisiana at\n Lafayette); Jin Li (Guangzhou University, China); Jiadong Lou (University of\n Louisiana at Lafayette); Li Chen (University of Louisiana at Lafayette);\n Nianfeng Tzeng (University of Louisiana at Lafayette)<\/td>University of Louisiana at\n Lafayette<\/td>\u7f8e\u56fd<\/td><\/tr>
zkCNN: Zero Knowledge Proofs for Convolutional Neural Network\n Predictions and Accuracy<\/td>Tianyi Liu (Texas\n A&M University & Shanghai Key Laboratory of Privacy-Preserving\n Computation); Xiang Xie (Shanghai Key Laboratory of Privacy-Preserving\n Computation); Yupeng Zhang (Texas A&M University)<\/td>Texas A&M University &\n Shanghai Key Laboratory of Privacy-Preserving Computation<\/td>\u4e2d\u56fd<\/td><\/tr>
A PKI-based Framework for Establishing Efficient MPC Channels<\/td>Daniel Masny (Visa\n Research); Gaven Watson (Visa Research)<\/td>Visa Research<\/td>\u7f8e\u56fd<\/td><\/tr>
The Exact Security of BIP32 Wallets<\/td>Poulami Das\n (Technische Universit\u00e4t Darmstadt); Andreas Erwig (Technische Universit\u00e4t\n Darmstadt); Sebastian Faust (Technische Universit\u00e4t Darmstadt); Julian Loss\n (University of Maryland); Siavash Riahi (Technische Universit\u00e4t Darmstadt)<\/td>Technische Universit\u00e4t Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
Asynchronous Data Replication Protocol and its Applications<\/td>Sourav Das (UIUC);\n Zhuolun Xiang (UIUC); Ling Ren (UIUC)<\/td>UIUC<\/td>\u7f8e\u56fd<\/td><\/tr>
OpenSquare: Decentralized Repeated Modular Squaring Service<\/td>Sri Aravinda Krishnan\n Thyagarajan (Friedrich-Alexander University of Erlangen-Nuremberg); Adithya\n Bhat (Purdue University); Tiantian Gong (Purdue University); Aniket Kate\n (Purdue University); Dominique Schr\u00f6der (Friedrich-Alexander Universit\u00e4t\n Erlangen-N\u00fcrnberg)<\/td>Friedrich-Alexander University\n of Erlangen-Nuremberg<\/td>\u5fb7\u56fd<\/td><\/tr>
Rosita++: Automatic Higher-Order Leakage Elimination from\n Cryptographic Code<\/td>Madura Shelton\n (University of Adelaide); \u0141ukasz Chmielewski (University of Radboud and\n Riscure); Niels Samwel (Radboud University); Markus Wagner (University of\n Adelaide); Lejla Batina (Radboud University); Yuval Yarom (University of\n Adelaide)<\/td>University of Adelaide<\/td>\u6fb3\u5927\u5229\u4e9a<\/td><\/tr>
OnionPIR: Response Efficient Single-Server PIR<\/td>Muhammad Haris\n Mughees (University of Illinois at Urbana-Champaign); Hao Chen (Facebook,\n USA); Ling Ren (University of Illinois at Urbana-Champaign);<\/td>University of Illinois at\n Urbana-Champaign<\/td>\u7f8e\u56fd<\/td><\/tr>
Morpheus: Bringing The (PKCS) One To Meet the Oracle<\/td>Moosa Yahyazadeh (The\n University of Iowa); Sze Yiu Chau (The Chinese University of Hong Kong); Li\n Li (Syracuse University); Man Hong Hue (The Chinese University of Hong Kong);\n Joyanta Debnath (The University of Iowa); Sheung Chiu Ip (The Chinese\n University of Hong Kong); Li Chun Ngai (The Chinese University of Hong Kong);\n Endadul Hoque (Syracuse University); Omar Chowdhury (The University of Iowa)<\/td>The University of Iowa<\/td>\u7f8e\u56fd<\/td><\/tr>
Black-box Adversarial Attacks on Commercial Speech Platforms\n with Minimal Information<\/td>Baolin Zheng (Wuhan\n University); Peipei Jiang (Wuhan University); Qian Wang (Wuhan University);\n Qi Li (Tsinghua University); Chao Shen (Xi’an Jiaotong University); Cong Wang\n (City University of Hong Kong); Yunjie Ge (Wuhan University); Qingyang Teng\n (Wuhan University); Shenyi Zhang (Wuhan University)<\/td>Wuhan University<\/td>\u4e2d\u56fd<\/td><\/tr>
Solver-Aided Constant-Time Hardware Verification<\/td>Rami G\u00f6khan K\u0131c\u0131\n (University of California, San Diego); Klaus v. Gleissenthall (Vrije\n Universiteit Amsterdam); Deian Stefan (University of California, San Diego);\n Ranjit Jhala (University of California, San Diego)<\/td>University of California, San\n Diego<\/td>\u7f8e\u56fd<\/td><\/tr>
V-SHUTTLE: Scalable and Semantics-Aware Hypervisor Fuzzing<\/td>Gaoning Pan (Zhejiang\n University & Ant Group); Xingwei Lin (Ant Group); Xuhong Zhang (Zhejiang\n University); Yongkang Jia (Zhejiang University); Shouling Ji (Zhejiang\n University); Chunming Wu (Zhejiang University); Xinlei Ying (Ant Group);\n Jiashui Wang (Ant Group); Yanjun Wu (Institute of Software, Chinese Academy\n of Sciences)<\/td>Zhejiang University & Ant\n Group<\/td>\u4e2d\u56fd<\/td><\/tr>
T-Reqs: HTTP Request Smuggling with Differential Fuzzing<\/td>Bahruz Jabiyev\n (Northeastern University); Steven Sprecher (Northeastern University); Kaan\n Onarlioglu (Akamai Technologies); Engin Kirda (Northeastern University)<\/td>Northeastern University<\/td>\u7f8e\u56fd<\/td><\/tr>
United We Stand: Collaborative Detection and Mitigation of\n Amplification DDoS Attacks at Scale<\/td>Daniel Wagner\n (DE-CIX\/MPI-INF); Daniel Kopp (DE-CIX); Matthias Wichtlhuber (DE-CIX);\n Christoph Dietzel (DE-CIX\/MPI-INF); Oliver Hohlfeld (Brandenburg University\n of Technology); Georgios Smaragdakis (TU Delft); Anja Feldmann (MPI-INF)<\/td>DE-CIX\/MPI-INF<\/td>\u5fb7\u56fd<\/td><\/tr>
Appenzeller to Brie: Efficient Zero-Knowledge Proofs for\n Mixed-Mode Arithmetic and $\\Z_{2^k}$<\/td>Carsten Baum (Aarhus\n University); Lennart Braun (Aarhus University); Alexander Munch-Hansen\n (Aarhus University); Peter Scholl (Aarhus University)<\/td>Aarhus University<\/td>\u4e39\u9ea6<\/td><\/tr>
Learning to Explore Paths for Symbolic Execution<\/td>Jingxuan He (ETH\n Zurich); Gishor Sivanrupan (ETH Zurich); Petar Tsankov (ETH Zurich); Martin\n Vechev (ETH Zurich)<\/td>ETH Zurich<\/td>\u745e\u58eb<\/td><\/tr>
You Make Me Tremble: A First Look at Attacks Against Structural\n Control Systems<\/td>Abel Zambrano\n (Universidad de los Andes); Alejandro Palacio Betancur (Penn State\n University); Luis Burbano (University of California, Santa Cruz); Andres\n Felipe Ni\u00f1o (Universidad de los Andes); Luis Felipe Giraldo (Universidad de\n los Andes); Mariantonieta Gutierrez Soto (Penn State University); Jairo\n Giraldo (University of Utah); Alvaro A. Cardenas (University of California,\n Santa Cruz)<\/td>Universidad de los Andes<\/td>\u7f8e\u56fd<\/td><\/tr>
Structural Attack against Graph Based Android Malware Detection<\/td>Kaifa Zhao (The Hong\n Kong Polytechnic University); Hao Zhou (The Hong Kong Polytechnic\n University); Yulin Zhu (The Hong Kong Polytechnic University); Xian Zhan (The\n Hong Kong Polytechnic University); Kai Zhou (The Hong Kong Polytechnic\n University); Jianfeng Li (The Hong Kong Polytechnic University); Le Yu (The\n Hong Kong Polytechnic University); Wei Yuan (Huazhong University of Science\n and Technology); Xiapu Luo (The Hong Kong Polytechnic University)<\/td>The Hong Kong Polytechnic\n University<\/td>\u4e2d\u56fd<\/td><\/tr>
The Security of ChaCha20-Poly1305 in the Multi-User Setting<\/td>Jean Paul Degabriele\n (TU Darmstadt); J\u00e9r\u00f4me Govinden (TU Darmstadt); Felix G\u00fcnther (ETH Zurich);\n Kenny Paterson (ETH Zurich)<\/td>TU Darmstadt<\/td>\u5fb7\u56fd<\/td><\/tr>
Noncompliance as Deviant Behavior: An Automated Black-box\n Noncompliance Checker for 4G LTE Cellular Devices<\/td>Syed Rafiul Hussain\n (Pennsylvania State University); Imtiaz Karim (Purdue University); Abdullah\n Al Ishtiaq (Pennsylvania State University); Omar Chowdhury (The University of\n Iowa); Elisa Bertino (Purdue University)<\/td>Pennsylvania State University<\/td>\u7f8e\u56fd<\/td><\/tr>
Let’s Downgrade Let’s Encrypt<\/td>Tianxiang Dai (ATHENE\n Center & Fraunhofer SIT); Haya Shulman (ATHENE Center & Fraunhofer\n SIT); Michael Waidner (ATHENE Center & TU Darmstadt & Fraunhofer SIT)<\/td>ATHENE Center & Fraunhofer\n SIT<\/td>\u5fb7\u56fd<\/td><\/tr>
Prime+Scope: Overcoming the Observer Effect for High-Precision\n Cache Contention Attacks<\/td>Antoon Purnal\n (imec-COSIC, KU Leuven); Furkan Turan (imec-COSIC, KU Leuven); Ingrid\n Verbauwhede (imec-COSIC, KU Leuven)<\/td>imec-COSIC, KU Leuven<\/td>\u8377\u5170<\/td><\/tr>
CapSpeaker: Injecting Sounds to Microphones via Capacitors<\/td>Xiaoyu Ji (Zhejiang\n University); Juchuan Zhang (Zhejiang University); Shui Jiang (Zhejiang\n University); Jishen Li (Zhejiang University); Wenyuan Xu (Zhejiang\n University)<\/td>Zhejiang University<\/td>\u4e2d\u56fd<\/td><\/tr>
A Concrete Treatment of Efficient Continuous Group Key Agreement\n via Multi-Recipient PKEs<\/td>Keitaro Hashimoto\n (Tokyo Institute of Technology and AIST, Japan); Shuichi Katsumata (AIST,\n Japan); Eamonn W. Postlethwaite (Royal Holloway, University of London, Egham,\n UK); Thomas Prest (PQShield Ltd., UK); Bas Westerbaan (PQShield Ltd., UK)<\/td>Tokyo Institute of Technology\n and AIST, Japan<\/td>\u65e5\u672c<\/td><\/tr>
AI-Lancet: Locating Error-inducing Neurons to Optimize Neural\n Networks<\/td>Yue Zhao (SKLOIS,\n Institute of Information Engineering, Chinese Academy of Sciences, China;\n School of Cyber Security, University of Chinese Academy of Sciences, China);\n Hong Zhu (SKLOIS, Institute of Information Engineering, Chinese Academy of\n Sciences, China; School of Cyber Security, University of Chinese Academy of\n Sciences, China); Kai Chen (Institute of Information Engineering, Chinese\n Academy of Sciences, China); Shengzhi Zhang (Department of Computer Science,\n Metropolitan College, Boston University, USA)<\/td>SKLOIS, Institute of Information\n Engineering, Chinese Academy of Sciences, China; School of Cyber Security,\n University of Chinese Academy of Sciences, China<\/td>\u4e2d\u56fd<\/td><\/tr>
Faster Lattice-Based KEMs via a Generic Fujisaki-Okamoto\n Transform Using Prefix Hashing<\/td>Julien Duman\n (Ruhr-Universit\u00e4t Bochum); Kathrin H\u00f6velmanns (Eindhoven University of\n Technology); Eike Kiltz (Ruhr-Universit\u00e4t Bochum); Vadim Lyubashevsky (IBM\n Research Europe, Zurich); Gregor Seiler (IBM Research Europe, Zurich, ETH\n Zurich)<\/td>Ruhr-Universit\u00e4t Bochum<\/td>\u5fb7\u56fd<\/td><\/tr>
Modular Design of Secure Group Messaging Protocols and the\n Security of MLS<\/td>Yiannis Tselekounis\n (University of Edinburgh); Sandro Coretti (IOHK); Jo\u00ebl Alwen (Wickr);\n Yevgeniy Dodis (New York University)<\/td>University of Edinburgh<\/td>\u82cf\u683c\u5170<\/td><\/tr>
SmashEx: Smashing SGX Enclaves Using Exceptions<\/td>Jinhua Cui (National\n University of Defense Technology, National University of Singapore);\n Zhijingcheng Yu (National University of Singapore); Shweta Shinde (ETH\n Zurich); Prateek Saxena (National University of Singapore); Zhiping Cai\n (National University of Defense Technology)<\/td>National University of Defense\n Technology, National University of Singapore<\/td>\u65b0\u52a0\u5761<\/td><\/tr>
Private Hierarchical Clustering in Federated Networks<\/td>Aashish Kolluri\n (National University Of Singapore); Teodora Baluta (National University of\n Singapore); Prateek Saxena (National University of Singapore)<\/td>National University Of Singapore<\/td>\u65b0\u52a0\u5761<\/td><\/tr>
SoFi: Reflection-Augmented Fuzzing for JavaScript Engines<\/td>Xiaoyu He (Institute\n of Information Engineering, Chinese Academy of Sciences; School of Cyber\n Security, University of Chinese Academy of Sciences); Xiaofei Xie (Nanyang\n Technological University); Yuekang Li (Nanyang Technological University);\n Jianwen Sun (Nanyang Technological University); Feng Li (Institute of\n Information Engineering, Chinese Academy of Sciences; School of Cyber\n Security, University of Chinese Academy of Sciences); Wei Zou (Institute of\n Information Engineering, Chinese Academy of Sciences; School of Cyber\n Security, University of Chinese Academy of Sciences); Yang Liu (Nanyang\n Technological University); Lei Yu (Institute of Information Engineering,\n Chinese Academy of Sciences; School of Cyber Security, University of Chinese\n Academy of Sciences); Jianhua Zhou (Institute of Information Engineering,\n Chinese Academy of Sciences; School of Cyber Security, University of Chinese\n Academy of Sciences); Wenchang Shi (Renmin University of China); Wei Huo\n (Institute of Information Engineering, Chinese Academy of Sciences; School of\n Cyber Security, University of Chinese Academy of Sciences)<\/td>Institute of Information\n Engineering, Chinese Academy of Sciences; School of Cyber Security,\n University of Chinese Academy of Sciences<\/td>\u4e2d\u56fd<\/td><\/tr><\/tbody><\/table>\n","protected":false},"excerpt":{"rendered":"

2021\u5e74\u7f51\u7edc\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u4f1a\u7684\u8bba\u6587\u5f55\u7528\u5747\u5df2\u63ed\u6653\uff0cInForSec\u7279\u6574\u7406\u76f8\u5173\u4fe1\u606f\u5206\u4eab\u7ed9\u7f51\u7edc\u5b89\u5168\u5b66\u672f\u793e… Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-5066","post","type-post","status-publish","format-standard","hentry","category-research"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/5066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5066"}],"version-history":[{"count":9,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/5066\/revisions"}],"predecessor-version":[{"id":5092,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/5066\/revisions\/5092"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5066"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}