1.3k citations · 2.7k across the 38 of their papers we have counts for
18 papers · 1 filter
NeuDep: Neural Binary Memory Dependence Analysis
Kexin Pei, Dongdong She, Michael Wang +6
Determining whether multiple instructions can access the same memory location is a critical task in binary analysis. It is challenging as statically computing precise alias informa…
: Rigorous and Efficient Directed Greybox Fuzzing
Abhishek Shah, Dongdong She, Samanway Sadhu +3
Directed greybox fuzzing is a popular technique for targeted software testing that seeks to find inputs that reach a set of target sites in a program. Most existing directed greybo…
Effective Seed Scheduling for Fuzzing with Graph Centrality Analysis
Dongdong She, Abhishek Shah, Suman Jana
Seed scheduling, the order in which seeds are selected, can greatly affect the performance of a fuzzer. Existing approaches schedule seeds based on their historical mutation data,…
Evaluating the Robustness of Trigger Set-Based Watermarks Embedded in Deep Neural Networks
Suyoung Lee, Wonho Song, Suman Jana +2
Trigger set-based watermarking schemes have gained emerging attention as they provide a means to prove ownership for deep neural network model owners. In this paper, we argue that…
Learning Security Classifiers with Verified Global Robustness Properties
Yizheng Chen, Shiqi Wang, Yue Qin +3
Many recent works have proposed methods to train classifiers with local robustness properties, which can provably eliminate classes of evasion attacks for most inputs, but not all…
Trex: Learning Execution Semantics from Micro-Traces for Binary Similarity
Kexin Pei, Zhou Xuan, Junfeng Yang +2
Detecting semantically similar functions -- a crucial analysis capability with broad real-world security usages including vulnerability detection, malware lineage, and forensics --…
XDA: Accurate, Robust Disassembly with Transfer Learning
Kexin Pei, Jonas Guan, David Williams-King +2
Accurate and robust disassembly of stripped binaries is challenging. The root of the difficulty is that high-level structures, such as instruction and function boundaries, are abse…
Grand Challenges in Resilience: Autonomous System Resilience through Design and Runtime Measures
Saurabh Bagchi, Vaneet Aggarwal, Somali Chaterji +13
A set of about 80 researchers, practitioners, and federal agency program managers participated in the NSF-sponsored Grand Challenges in Resilience Workshop held on Purdue campus on…
Cost-Aware Robust Tree Ensembles for Security Applications
Yizheng Chen, Shiqi Wang, Weifan Jiang +2
There are various costs for attackers to manipulate the features of security classifiers. The costs are asymmetric across features and to the directions of changes, which cannot be…
Fine Grained Dataflow Tracking with Proximal Gradients
Gabriel Ryan, Abhishek Shah, Dongdong She +2
Dataflow tracking with Dynamic Taint Analysis (DTA) is an important method in systems security with many applications, including exploit analysis, guided fuzzing, and side-channel…
Neutaint: Efficient Dynamic Taint Analysis with Neural Networks
Dongdong She, Yizheng Chen, Abhishek Shah +2
Dynamic taint analysis (DTA) is widely used by various applications to track information flow during runtime execution. Existing DTA techniques use rule-based taint-propagation, wh…
On Training Robust PDF Malware Classifiers
Yizheng Chen, Shiqi Wang, Dongdong She +1
Although state-of-the-art PDF malware classifiers can be trained with almost perfect test accuracy (99%) and extremely low false positive rate (under 0.1%), it has been shown that…
NEUZZ: Efficient Fuzzing with Neural Program Smoothing
Dongdong She, Kexin Pei, Dave Epstein +3
Fuzzing has become the de facto standard technique for finding software vulnerabilities. However, even state-of-the-art fuzzers are not very efficient at finding hard-to-trigger so…
Towards Practical Verification of Machine Learning: The Case of Computer Vision Systems
Kexin Pei, Linjie Zhu, Yinzhi Cao +3
Due to the increasing usage of machine learning (ML) techniques in security- and safety-critical domains, such as autonomous systems and medical diagnosis, ensuring correct behavio…
Tug-of-War: Observations on Unified Content Handling
Theofilos Petsios, Adrian Tang, Dimitris Mitropoulos +3
Modern applications and Operating Systems vary greatly with respect to how they register and identify different types of content. These discrepancies lead to exploits and inconsist…
SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities
Theofilos Petsios, Jason Zhao, Angelos D. Keromytis +1
Algorithmic complexity vulnerabilities occur when the worst-case time/space complexity of an application is significantly higher than the respective average case for particular use…
Apples and Oranges: Detecting Least-Privilege Violators with Peer Group Analysis
Suman Jana, Úlfar Erlingsson, Iulia Ion
Clustering software into peer groups based on its apparent functionality allows for simple, intuitive categorization of software that can, in particular, help identify which softwa…
Robust and Efficient Elimination of Cache and Timing Side Channels
Benjamin A. Braun, Suman Jana, Dan Boneh
Timing and cache side channels provide powerful attacks against many sensitive operations including cryptographic implementations. Existing defenses cannot protect against all clas…