76 citations · 151 across the 11 of their papers we have counts for
8 papers · 1 filter
A Systematic Study of Android Non-SDK (Hidden) Service API Security
Yi He, Yacong Gu, Purui Su +4
Android allows apps to communicate with its system services via system service helpers so that these apps can use various functions provided by the system services. Meanwhile, the…
Towards Efficiently Establishing Mutual Distrust Between Host Application and Enclave for SGX
Yuan Chen, Jiaqi Li, Guorui Xu +4
Since its debut, SGX has been used in many applications, e.g., secure data processing. However, previous systems usually assume a trusted enclave and ignore the security issues cau…
Towards Understanding and Demystifying Bitcoin Mixing Services
Lei Wu, Yufeng Hu, Yajin Zhou +5
One reason for the popularity of Bitcoin is due to its anonymity. Although several heuristics have been used to break the anonymity, new approaches are proposed to enhance its anon…
PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses
Zhi Zhang, Yueqiang Cheng, Dongxi Liu +3
Rowhammer is a hardware vulnerability in DRAM memory, where repeated access to memory can induce bit flips in neighboring memory locations. Being a hardware vulnerability, rowhamme…
Time-Travel Investigation: Towards Building A Scalable Attack Detection Framework on Ethereum
Lei Wu, Siwei Wu, Yajin Zhou +5
As one of the representative blockchain platforms, Ethereum has attracted lots of attacks. Due to the existed financial loss, there is a pressing need to perform timely investigati…
TeleHammer: A Formal Model of Implicit Rowhammer
Zhi Zhang, Yueqiang Cheng, Dongxi Liu +2
The rowhammer bug allows an attacker to gain privilege escalation or steal private data. A key requirement of all existing rowhammer attacks is that an attacker must have access to…
CATTmew: Defeating Software-only Physical Kernel Isolation
Yueqiang Cheng, Zhi Zhang, Surya Nepal +1
All the state-of-the-art rowhammer attacks can break the MMU-enforced inter-domain isolation because the physical memory owned by each domain is adjacent to each other. To mitigate…
Downgrade Attack on TrustZone
Yue Chen, Yulong Zhang, Zhi Wang +1
Security-critical tasks require proper isolation from untrusted software. Chip manufacturers design and include trusted execution environments (TEEs) in their processors to secure…