30 citations · 82 across the 6 of their papers we have counts for
9 papers · 1 filter
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation
Michael Rodler, David Paaßen, Wenting Li +4
Smart contracts are increasingly being used to manage large numbers of high-value cryptocurrency accounts. There is a strong demand for automated, efficient, and comprehensive meth…
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64
Lukas Bernhard, Michael Rodler, Thorsten Holz +1
Memory safety in complex applications implemented in unsafe programming languages such as C/C++ is still an unresolved problem in practice. Many different types of defenses have be…
HCC: A Language-Independent Hardening Contract Compiler for Smart Contracts
Jens-Rene Giesen, Sebastien Andreina, Michael Rodler +2
Developing secure smart contracts remains a challenging task. Existing approaches are either impractical or leave the burden to developers for fixing bugs. In this paper, we propos…
My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers
David Paaßen, Sebastian Surminski, Michael Rodler +1
Fuzzing has become one of the most popular techniques to identify bugs in software. To improve the fuzzing process, a plethora of techniques have recently appeared in academic lite…
EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts
Michael Rodler, Wenting Li, Ghassan O. Karame +1
Recent attacks exploiting errors in smart contract code had devastating consequences thereby questioning the benefits of this technology. It is currently highly challenging to fix…
TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves
Tobias Cloosters, Michael Rodler, Lucas Davi
Intel's Software Guard Extensions (SGX) introduced new instructions to switch the processor to enclave mode which protects it from introspection. While the enclave mode strongly pr…
Control Behavior Integrity for Distributed Cyber-Physical Systems
Sridhar Adepu, Ferdinand Brasser, Luis Garcia +4
Cyber-physical control systems, such as industrial control systems (ICS), are increasingly targeted by cyberattacks. Such attacks can potentially cause tremendous damage, affect cr…
Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks
Michael Rodler, Wenting Li, Ghassan O. Karame +1
Recently, a number of existing blockchain systems have witnessed major bugs and vulnerabilities within smart contracts. Although the literature features a number of proposals for s…
ANANAS - A Framework For Analyzing Android Applications
Thomas Eder, Michael Rodler, Dieter Vymazal +1
Android is an open software platform for mobile devices with a large market share in the smartphone sector. The openness of the system as well as its wide adoption lead to an incre…