10.9k citations
Counting papers with at most 25 authors, so collaboration author lists do not stand in for the people here.
- Rutherford Appleton LaboratoryGB1.8k papers
- University of LiverpoolGB1.7k papers
- University of California, IrvineUS1.7k papers
- Queen Mary University of LondonGB1.7k papers
- University of ManchesterGB1.7k papers
- University of MilanIT1.7k papers
- University of EdinburghGB1.6k papers
- University of British ColumbiaCA1.6k papers
- University of California, Santa CruzUS1.6k papers
- Sapienza University of RomeIT1.6k papers
- Iowa State UniversityUS1.6k papers
- University of GenoaIT1.6k papers
56 papers · 1 filter
An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks
Zhuoran Tan, Wenbo Guo, Jiewen Luo +3
Advanced software supply chain (SSC) attacks are increasingly runtime-only and leave fragmented evidence across hosts, services, and build/dependency layers, making any single tele…
The Everyday Security of Living with Conflict
Jessica McClearn, Reem Talhouk, Rikke Bjerg Jensen
When `cyber' is used as a prefix, attention is typically drawn to the technological and spectacular aspects of war and conflict -- and, by extension, security. We offer a different…
SPECTRE: A Hybrid System for an Adaptative and Optimised Cyber Threats Detection, Response and Investigation in Volatile Memory
Arslan Tariq Syed, Mohamed Chahine Ghanem, Elhadj Benkhelifa +1
The increasing sophistication of modern cyber threats, particularly file-less malware relying on living-off-the-land techniques, poses significant challenges to traditional detecti…
Perceptual Hash Inversion Attacks on Image-Based Sexual Abuse Removal Tools
Sophie Hawkes, Christian Weinert, Teresa Almeida +1
We show that perceptual hashing, crucial for detecting and removing image-based sexual abuse (IBSA) online, faces vulnerabilities from low-budget inversion attacks based on generat…
The IoT Breaches your Household Again
Davide Bonaventura, Sergio Esposito, Giampaolo Bella
Despite their apparent simplicity, devices like smart light bulbs and electrical plugs are often perceived as exempt from rigorous security measures. However, this paper challenges…
Smart Bulbs can be Hacked to Hack into your Household
Davide Bonaventura, Sergio Esposito, Giampaolo Bella
The IoT is getting more and more pervasive. Even the simplest devices, such as a light bulb or an electrical plug, are made "smart" and controllable by our smartphone. This paper d…
A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards
Joshua Harrison, Ehsan Toreini, Maryam Mehrnezhad
With recent developments in deep learning, the ubiquity of micro-phones and the rise in online services via personal devices, acoustic side channel attacks present a greater threat…
PETIoT: PEnetration Testing the Internet of Things
Giampaolo Bella, Pietro Biondi, Stefano Bognanni +1
Attackers may attempt exploiting Internet of Things (IoT) devices to operate them unduly as well as to gather personal data of the legitimate device owners'. Vulnerability Assessme…
Transforming EU Governance: The Digital Integration through EBSI and GLASS
Dimitrios Kasimatis, William J Buchanan, Mwarwan Abubakar +6
Traditionally, government systems managed citizen identities through disconnected data systems, using simple identifiers and paper-based processes, limiting digital trust and requi…
ScionFL: Efficient and Robust Secure Quantized Aggregation
Yaniv Ben-Itzhak, Helen Möllering, Benny Pinkas +7
Secure aggregation is commonly used in federated learning (FL) to alleviate privacy concerns related to the central aggregator seeing all parameter updates in the clear. Unfortunat…
Remote Working Pre- and Post-COVID-19: An Analysis of New Threats and Risks to Security and Privacy
Jason R. C. Nurse, Nikki Williams, Emily Collins +3
COVID-19 has radically changed society as we know it. To reduce the spread of the virus, millions across the globe have been forced to work remotely, often in make-shift home offic…
Collective Information Security in Large-Scale Urban Protests: the Case of Hong Kong
Martin R. Albrecht, Jorge Blasco, Rikke Bjerg Jensen +1
The Anti-Extradition Law Amendment Bill protests in Hong Kong present a rich context for exploring information security practices among protesters due to their large-scale urban se…
argXtract: Deriving IoT Security Configurations via Automated Static Analysis of Stripped ARM Binaries
Pallavi Sivakumaran, Jorge Blasco
Recent high-profile attacks on the Internet of Things (IoT) have brought to the forefront the vulnerability of "smart" devices, and have resulted in numerous IoT-focused security a…
Physical Fault Injection and Side-Channel Attacks on Mobile Devices: A Comprehensive Analysis
Carlton Shepherd, Konstantinos Markantonakis, Nico van Heijningen +4
Today's mobile devices contain densely packaged system-on-chips (SoCs) with multi-core, high-frequency CPUs and complex pipelines. In parallel, sophisticated SoC-assisted security…
Towards Better Understanding of User Authorization Query Problem via Multi-variable Complexity Analysis
Jason Crampton, Gregory Gutin, Diptapriyo Majumdar
User authorization queries in the context of role-based access control have attracted considerable interest in the last 15 years. Such queries are used to determine whether it is p…
Return-Oriented Programming on RISC-V
Georges-Axel Jaloyan, Konstantinos Markantonakis, Raja Naeem Akram +3
This paper provides the first analysis on the feasibility of Return-Oriented Programming (ROP) on RISC-V, a new instruction set architecture targeting embedded systems. We show the…
How not to secure wireless sensor networks: A plethora of insecure polynomial-based key pre-distribution schemes
Chris J Mitchell
Three closely-related polynomial-based group key pre-distribution schemes have recently been proposed, aimed specifically at wireless sensor networks. The schemes enable any subset…
Yet another insecure group key distribution scheme using secret sharing
Chris J Mitchell
A recently proposed group key distribution scheme known as UMKESS, based on secret sharing, is shown to be insecure. Not only is it insecure, but it does not always work, and the r…
The impact of quantum computing on real-world security: A 5G case study
Chris J Mitchell
This paper provides a detailed analysis of the impact of quantum computing on the security of 5G mobile telecommunications. This involves considering how cryptography is used in 5G…
Catch Me (On Time) If You Can: Understanding the Effectiveness of Twitter URL Blacklists
Simon Bell, Kenny Paterson, Lorenzo Cavallaro
With more than 500 million daily tweets from over 330 million active users, Twitter constantly attracts malicious users aiming to carry out phishing and malware-related attacks aga…
Deep Learning Application in Security and Privacy -- Theory and Practice: A Position Paper
Julia A. Meister, Raja Naeem Akram, Konstantinos Markantonakis
Technology is shaping our lives in a multitude of ways. This is fuelled by a technology infrastructure, both legacy and state of the art, composed of a heterogeneous group of hardw…
A Study of the Feasibility of Co-located App Attacks against BLE and a Large-Scale Analysis of the Current Application-Layer Security Landscape
Pallavi Sivakumaran, Jorge Blasco
Bluetooth Low Energy (BLE) is a fast-growing wireless technology with a large number of potential use cases, particularly in the IoT domain. Increasingly, these use cases require t…
TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time
Feargus Pendlebury, Fabio Pierazzi, Roberto Jordaney +2
Is Android malware classification a solved problem? Published F1 scores of up to 0.99 appear to leave very little room for improvement. In this paper, we argue that results are com…
Consumer Centric Data Control, Tracking and Transparency -- A Position Paper
James Tapsell, Raja Naeem Akram, Konstantinos Markantonakis
Personal data related to a user's activities, preferences and services, is considered to be a valuable commodity not only for a wide range of technology-oriented companies like Goo…