2 citations · 3 across the 5 of their papers we have counts for
5 papers
A Practical Guideline and Taxonomy to LLVM's Control Flow Integrity
Sabine Houy, Bruno Kreyssig, Timothee Riom +2
Memory corruption vulnerabilities remain one of the most severe threats to software security. They often allow attackers to achieve arbitrary code execution by redirecting a vulner…
Sleeping Giants -- Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
Bruno Kreyssig, Sabine Houy, Timothée Riom +1
Java deserialization gadget chains are a well-researched critical software weakness. The vast majority of known gadget chains rely on gadgets from software dependencies. Furthermor…
In the Magma chamber: Update and challenges in ground-truth vulnerabilities revival for automatic input generator comparison
Timothée Riom, Sabine Houy, Bruno Kreyssig +1
Fuzzing is a well-established technique for detecting bugs and vulnerabilities. With the surge of fuzzers and fuzzer platforms being developed such as AFL and OSSFuzz rises the nec…
Deserialization Gadget Chains are not a Pathological Problem in Android:an In-Depth Study of Java Gadget Chains in AOSP
Bruno Kreyssig, Timothée Riom, Sabine Houy +2
Inter-app communication is a mandatory and security-critical functionality of operating systems, such as Android. On the application level, Android implements this facility through…
Anchor: Locating Android Framework-specific Crashing Faults
Pingfan Kong, Li Li, Jun Gao +4
Android framework-specific app crashes are hard to debug. Indeed, the callback-based event-driven mechanism of Android challenges crash localization techniques that are developed f…