118 citations · 158 across the 9 of their papers we have counts for
10 papers
The Hitchhiker's Guide to Program Analysis: A Journey with Large Language Models
Haonan Li, Yu Hao, Yizhuo Zhai +1
Static analysis is a widely used technique in software engineering for identifying and mitigating bugs. However, a significant hurdle lies in achieving a delicate balance between p…
PolyScope: Multi-Policy Access Control Analysis to Triage Android Scoped Storage
Yu-Tsung Lee, Haining Chen, William Enck +5
Android's filesystem access control is a crucial aspect of its system integrity. It utilizes a combination of mandatory access controls, such as SELinux, and discretionary access c…
Unsafe at Any Copy: Name Collisions from Mixing Case Sensitivities
Aditya Basu, John Sampson, Zhiyun Qian +1
File name confusion attacks, such as malicious symbolic links and file squatting, have long been studied as sources of security vulnerabilities. However, a recently emerged type, i…
SyzScope: Revealing High-Risk Security Impacts of Fuzzer-Exposed Bugs in Linux kernel
Xiaochen Zou, Guoren Li, Weiteng Chen +2
Fuzzing has become one of the most effective bug finding approach for software. In recent years, 24*7 continuous fuzzing platforms have emerged to test critical pieces of software,…
You Do (Not) Belong Here: Detecting DPI Evasion Attacks with Context Learning
Shitong Zhu, Shasha Li, Zhongjie Wang +5
As Deep Packet Inspection (DPI) middleboxes become increasingly popular, a spectrum of adversarial attacks have emerged with the goal of evading such middleboxes. Many of these att…
PolyScope: Multi-Policy Access Control Analysis to Triage Android Systems
Yu-Tsung Lee, William Enck, Haining Chen +6
Android filesystem access control provides a foundation for Android system integrity. Android utilizes a combination of mandatory (e.g., SEAndroid) and discretionary (e.g., UNIX pe…
A4 : Evading Learning-based Adblockers
Shitong Zhu, Zhongjie Wang, Xun Chen +6
Efforts by online ad publishers to circumvent traditional ad blockers towards regaining fiduciary benefits, have been demonstrably successful. As a result, there have recently emer…
IoTSan: Fortifying the Safety of IoT Systems
Dang Tu Nguyen, Chengyu Song, Zhiyun Qian +3
Today's IoT systems include event-driven smart applications (apps) that interact with sensors and actuators. A problem specific to IoT systems is that buggy apps, unforeseen bad ap…
AdGraph: A Graph-Based Approach to Ad and Tracker Blocking
Umar Iqbal, Peter Snyder, Shitong Zhu +3
User demand for blocking advertising and tracking online is large and growing. Existing tools, both deployed and described in research, have proven useful, but lack either the comp…
Behavior Query Discovery in System-Generated Temporal Graphs
Bo Zong, Xusheng Xiao, Zhichun Li +5
Computer system monitoring generates huge amounts of logs that record the interaction of system entities. How to query such data to better understand system behaviors and identify…