97 citations · 501 across the 35 of their papers we have counts for
24 papers · 1 filter
Smart Contract and DeFi Security Tools: Do They Meet the Needs of Practitioners?
Stefanos Chaliasos, Marcos Antonios Charalambous, Liyi Zhou +4
The growth of the decentralized finance (DeFi) ecosystem built on blockchain technology and smart contracts has led to an increased demand for secure and reliable smart contract de…
Blocked or Broken? Automatically Detecting When Privacy Interventions Break Websites
Michael Smith, Peter Snyder, Moritz Haller +3
A core problem in the development and maintenance of crowd-sourced filter lists is that their maintainers cannot confidently predict whether (and where) a new filter list rule will…
Pool-Party: Exploiting Browser Resource Pools as Side-Channels for Web Tracking
Peter Snyder, Soroush Karami, Arthur Edelstein +2
We identify class of covert channels in browsers that are not mitigated by current defenses, which we call "pool-party" attacks. Pool-party attacks allow sites to create covert cha…
Towards Private On-Chain Algorithmic Trading
Ceren Kocaoğullar, Arthur Gervais, Benjamin Livshits
While quantitative automation related to trading crypto-assets such as ERC-20 tokens has become relatively commonplace, with services such as 3Commas and Shrimpy offering user-frie…
PrivateFetch: Scalable Catalog Delivery in Privacy-Preserving Advertising
Muhammad Haris Mughees, Gonçalo Pestana, Alex Davidson +1
In order to preserve the possibility of an Internet that is free at the point of use, attention is turning to new solutions that would allow targeted advertisement delivery based o…
STAR: Secret Sharing for Private Threshold Aggregation Reporting
Alex Davidson, Peter Snyder, E. B. Quirk +3
Threshold aggregation reporting systems promise a practical, privacy-preserving solution for developers to learn how their applications are used "\emph{in-the-wild}". Unfortunately…
Security, Privacy, and Decentralization in Web3
Philipp Winter, Anna Harbluk Lorimer, Peter Snyder +1
Much of the recent excitement around decentralized finance (DeFi) comes from hopes that DeFi can be a secure, private, less centralized alternative to traditional finance systems.…
THEMIS: A Decentralized Privacy-Preserving Ad Platform with Reporting Integrity
Gonçalo Pestana, Iñigo Querejeta-Azurmendi, Panagiotis Papadopoulos +1
Online advertising fuels the (seemingly) free internet. However, although users can access most of the web services free of charge, they pay a heavy coston their privacy. They are…
On the Just-In-Time Discovery of Profit-Generating Transactions in DeFi Protocols
Liyi Zhou, Kaihua Qin, Antoine Cully +2
In this paper, we investigate two methods that allow us to automatically create profitable DeFi trades, one well-suited to arbitrage and the other applicable to more complicated se…
There's No Trick, Its Just a Simple Trick: A Web-Compat and Privacy Improving Approach to Third-party Web Storage
Jordan Jueckstock, Peter Snyder, Shaown Sarker +2
While much current web privacy research focuses on browser fingerprinting, the boring fact is that the majority of current third-party web tracking is conducted using traditional,…
THEMIS: Decentralized and Trustless Ad Platform with Reporting Integrity
Gonçalo Pestana, Iñigo Querejeta-Azurmendi, Panagiotis Papadopoulos +1
Online advertising fuels the (seemingly) free internet. However, although users can access most websites free of charge, they need to pay a heavy cost on their privacy and blindly…
Improving Web Content Blocking With Event-Loop-Turn Granularity JavaScript Signatures
Quan Chen, Peter Snyder, Ben Livshits +1
Content blocking is an important part of a performant, user-serving, privacy respecting web. Most content blockers build trust labels over URLs. While useful, this approach has wel…
Attacking the DeFi Ecosystem with Flash Loans for Fun and Profit
Kaihua Qin, Liyi Zhou, Benjamin Livshits +1
Credit allows a lender to loan out surplus capital to a borrower. In the traditional economy, credit bears the risk that the borrower may default on its debt, the lender hence requ…
Revisiting Transactional Statistics of High-scalability Blockchains
Daniel Perez, Jiahua Xu, Benjamin Livshits
Scalability has been a bottleneck for major blockchains such as Bitcoin and Ethereum. Despite the significantly improved scalability claimed by several high--profile blockchain pro…
The Decentralized Financial Crisis
Lewis Gudgeon, Daniel Perez, Dominik Harz +2
The Global Financial Crisis of 2008, caused by the accumulation of excessive financial risk, inspired Satoshi Nakamoto to create Bitcoin. Now, more than ten years later, Decentrali…
ZKSENSE: A Friction-less Privacy-Preserving Human Attestation Mechanism for Mobile Devices
Iñigo Querejeta-Azurmendi, Panagiotis Papadopoulos, Matteo Varvello +3
Recent studies show that 20.4% of the internet traffic originates from automated agents. To identify and block such ill-intentioned traffic, mechanisms that verify the humanness of…
Filter List Generation for Underserved Regions
Alexander Sjosten, Peter Snyder, Antonio Pastor +2
Filter lists play a large and growing role in protecting and assisting web users. The vast majority of popular filter lists are crowd-sourced, where a large number of people manual…
Broken Metre: Attacking Resource Metering in EVM
Daniel Perez, Benjamin Livshits
Blockchain systems, such as Ethereum, use an approach called "metering" to assign a cost to smart contract execution, an approach which is designed to incentivise miners to operate…
Percival: Making In-Browser Perceptual Ad Blocking Practical With Deep Learning
Zain ul abi Din, Panagiotis Tigas, Samuel T. King +1
In this paper we present Percival, a browser-embedded, lightweight, deep learning-powered ad blocker. Percival embeds itself within the browser's image rendering pipeline, which ma…
Smart Contract Vulnerabilities: Vulnerable Does Not Imply Exploited
Daniel Perez, Benjamin Livshits
In recent years, we have seen a great deal of both academic and practical interest in the topic of vulnerabilities in smart contracts, particularly those developed for the Ethereum…
Who Filters the Filters: Understanding the Growth, Usefulness and Efficiency of Crowdsourced Ad Blocking
Peter Snyder, Antoine Vastel, Benjamin Livshits
Ad and tracking blocking extensions are popular tools for improving web performance, privacy and aesthetics. Content blocking extensions typically rely on filter lists to decide wh…
When the signal is in the noise: Exploiting Diffix's Sticky Noise
Andrea Gadotti, Florimond Houssiau, Luc Rocher +2
Anonymized data is highly valuable to both businesses and researchers. A large body of research has however shown the strong limits of the de-identification release-and-forget mode…
Security: Doing Whatever is Needed... and Not a Thing More!
Omer Katz, Benjamin Livshits
As malware, exploits, and cyber-attacks advance over time, so do the mitigation techniques available to the user. However, while attackers often abandon one form of exploitation in…
BLENDER: Enabling Local Search with a Hybrid Differential Privacy Model
Brendan Avent, Aleksandra Korolova, David Zeber +2
We propose a hybrid model of differential privacy that considers a combination of regular and opt-in users who desire the differential privacy guarantees of the local privacy model…