163 citations
Counting papers with at most 25 authors, so collaboration author lists do not stand in for the people here.
- Ruhr University BochumDE27 papers
- Helmholtz Center for Information SecurityDE7 papers
- Leibniz University HannoverDE5 papers
- TU Dortmund UniversityDE4 papers
- University of Illinois Urbana-ChampaignUS4 papers
- University of Maryland, College ParkUS4 papers
- University of OxfordGB4 papers
- University of PaduaIT4 papers
- University of WashingtonUS4 papers
- Arizona State UniversityUS3 papers
- Carnegie Mellon UniversityUS3 papers
- ETH ZurichCH3 papers
63 papers
dfence: Fine-Grained Speculation Barriers for Efficient and Effective Hardware-Software Protection in the Spectre Era (Extended Version)
Davide Davoli, Marton Bognar, Lesly-Ann Daniel +3
Speculative execution attacks such as Spectre-PHT and Spectre-STL remain a critical security concern in modern processors. While software-based mitigations like Speculative Load Ha…
Characterizing Scam-Driven Human Trafficking Across Chinese Borders and Online Community Responses on RedNote
Jiamin Zheng, Yue Deng, Jessica Chen +3
A new form of human trafficking has emerged across Chinese borders, where individuals are lured to Southeast Asia with fraudulent job offers and then coerced into operating online…
Hardware Trojans from Invisible Inversions: On the Trojanizability of Standard Cell Libraries
Kolja Dorschel, René Walendy, Lukas Plätz +3
At S&P 2023, Puschner et al. made a valuable dataset for hardware Trojan detection research publicly available. It contains a complete set of Scanning Electron Microscope (SEM) ima…
SAMSEM -- A Generic and Scalable Approach for IC Metal Line Segmentation
Christian Gehrmann, Jonas Ricker, Simon Damm +5
In light of globalized hardware supply chains, the assurance of hardware components has gained significant interest, particularly in cryptographic applications and high-stakes scen…
What is Safety? Corporate Discourse, Power, and the Politics of Generative AI Safety
Ankolika De, Gabriel Lima, Yixin Zou
This work examines how leading generative artificial intelligence companies construct and communicate the concept of "safety" through public-facing documents. Drawing on critical d…
Triosecuris: Formally Verified Protection Against Speculative Control-Flow Hijacking
Jonathan Baumann, Yonghyun Kim, Yan Farba +2
This paper introduces Triosecuris, a formally verified defense against Spectre BTB, RSB, and PHT that combines CET-style hardware-assisted control-flow integrity with compiler-inse…
From Harm to Healing: Understanding Individual Resilience after Cybercrimes
Xiaowei Chen, Mindy Tran, Yue Deng +2
How do individuals recover from cybercrimes? Victims experience various types of harm after cybercrimes, including monetary loss, data breaches, negative emotions, and even psychol…
Chasing Shadows: Pitfalls in LLM Security Research
Jonathan Evertz, Niklas Risse, Nicolai Neuer +12
Large language models (LLMs) are increasingly prevalent in security research. Their unique characteristics, however, introduce challenges that undermine established paradigms of re…
On Interaction Effects in Greybox Fuzzing
Konstantinos Kitsios, Marcel Böhme, Alberto Bacchelli
A greybox fuzzer is an automated software testing tool that generates new test inputs by applying randomly chosen mutators (e.g., flipping a bit or deleting a block of bytes) to a…
Computational Monogamy of Entanglement and Non-Interactive Quantum Key Distribution
Alex B. Grilo, Giulio Malavolta, Michael Walter +1
Quantum key distribution (QKD) enables Alice and Bob to exchange a secret key over a public, untrusted quantum channel. Compared to classical key exchange, QKD achieves everlasting…
Protocol-Aware Firmware Rehosting for Effective Fuzzing of Embedded Network Stacks
Moritz Bley, Tobias Scharnowski, Simon Wörner +2
One of the biggest attack surfaces of embedded systems is their network interfaces, which enable communication with other devices. Unlike their general-purpose counterparts, embedd…
Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection
Nils Bars, Lukas Bernhard, Moritz Schloegel +1
We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security…
Campus AI vs. Commercial AI: Comparing How Students and Employees Perceive their University's LLM Chatbot vs. ChatGPT
Leon Hannig, Annika Bush, Meltem Aksoy +3
As the use of LLM chatbots by students and researchers becomes more prevalent, universities are pressed to develop AI strategies. One strategy that many universities pursue is to c…
EchoAid: Enhancing Livestream Shopping Accessibility for the DHH Community
Zeyu Yang, Zheng Wei, Yang Zhang +4
Livestream shopping platforms often overlook the accessibility needs of the Deaf and Hard of Hearing (DHH) community, leading to barriers such as information inaccessibility and ov…
Underrepresentation, Label Bias, and Proxies: Towards Data Bias Profiles for the EU AI Act and Beyond
Marina Ceccon, Giandomenico Cornacchia, Davide Dalle Pezze +2
Undesirable biases encoded in the data are key drivers of algorithmic discrimination. Their importance is widely recognized in the algorithmic fairness literature, as well as legis…
How malicious AI swarms can threaten democracy: The fusion of agentic AI and LLMs marks a new frontier in information warfare
Daniel Thilo Schroeder, Meeyoung Cha, Andrea Baronchelli +19
Advances in AI offer the prospect of manipulating beliefs and behaviors on a population-wide level. Large language models and autonomous agents now let influence campaigns reach un…
Campus AI vs Commercial AI: A Late-Breaking Study on How LLM As-A-Service Customizations Shape Trust and Usage Patterns
Leon Hannig, Annika Bush, Meltem Aksoy +2
As the use of Large Language Models (LLMs) by students, lecturers and researchers becomes more prevalent, universities - like other organizations - are pressed to develop coherent…
Refining Fuzzed Crashing Inputs for Better Fault Diagnosis
Kieun Kim, Seongmin Lee, Shin Hong
We present DiffMin, a technique that refines a fuzzed crashing input to gain greater similarities to given passing inputs to help developers analyze the crashing input to identify…
"That's another doom I haven't thought about": A User Study on AI Labels as a Safeguard Against Image-Based Misinformation
Sandra Höltervennhoff, Jonas Ricker, Maike M. Raphael +6
As generative AI is increasingly contributing to the spread of deceptively realistic misinformation, lawmakers have introduced regulations requiring the disclosure of AI-generated…
An Empirical Study of Fuzz Harness Degradation
Philipp Görz, Joschua Schilling, Nicolai Bissantz +1
The purpose of continuous fuzzing platforms is to enable fuzzing for software projects via fuzz harnesses -- but as the projects continue to evolve, are these harnesses updated in…
Humanity's Last Exam
Long Phan, Alice Gatti, Ziwen Han +1168
Benchmarks are important tools for tracking the rapid advancements in large language model (LLM) capabilities. However, benchmarks are not keeping pace in difficulty: LLMs now achi…
Evaluating LLM-Based Regression Test Generation
Jing Liu, Seongmin Lee, Eleonora Losiouk +1
Large Language Models (LLMs) have shown tremendous promise in automated software engineering. In this paper, we investigate LLMs for just-in-time regression test generation for pro…
Decompiling for Constant-Time Analysis
Santiago Arranz-Olmos, Gilles Barthe, Lionel Blatter +3
The CT programming discipline is commonly used to protect cryptographic libraries against side-channel attacks. However, it is hard to write CT code; moreover, compilers can introd…
Automating Equational Proofs in Dirac Notation
Yingte Xu, Gilles Barthe, Li Zhou
Dirac notation is widely used in quantum physics and quantum programming languages to define, compute and reason about quantum states. This paper considers Dirac notation from the…