166 citations · 232 across the 11 of their papers we have counts for
11 papers
Dep: Mutation-based Dependency Generation for Precise Taint Analysis on Android Native Code
Cong Sun, Yuwan Ma, Dongrui Zeng +3
The existence of native code in Android apps plays an important role in triggering inconspicuous propagation of secrets and circumventing malware detection. However, the state-of-t…
CryptoEval: Evaluating the Risk of Cryptographic Misuses in Android Apps with Data-Flow Analysis
Cong Sun, Xinpeng Xu, Yafei Wu +4
The misunderstanding and incorrect configurations of cryptographic primitives have exposed severe security vulnerabilities to attackers. Due to the pervasiveness and diversity of c…
Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking
Xiao Kan, Cong Sun, Shen Liu +4
Dynamic taint analysis (DTA) has been widely used in various security-relevant scenarios that need to track the runtime information flow of programs. Dynamic binary instrumentation…
ReCFA: Resilient Control-Flow Attestation
Yumei Zhang, Xinzhi Liu, Cong Sun +4
Recent IoT applications gradually adapt more complicated end systems with commodity software. Ensuring the runtime integrity of these software is a challenging task for the remote…
A Derivative-based Parser Generator for Visibly Pushdown Grammars
Xiaodong Jia, Ashish Kumar, Gang Tan
In this paper, we present a derivative-based, functional recognizer and parser generator for visibly pushdown grammars. The generated parser accepts ambiguous grammars and produces…
IoTRepair: Systematically Addressing Device Faults in Commodity IoT (Extended Paper)
Michael Norris, Berkay Celik, Patrick McDaniel +4
IoT devices are decentralized and deployed in un-stable environments, which causes them to be prone to various kinds of faults, such as device failure and network disruption. Yet,…
Analyzing Control Flow Integrity with LLVM-CFI
Paul Muntean, Matthias Neumayer, Zhiqiang Lin +3
Control-flow hijacking attacks are used to perform malicious com-putations. Current solutions for assessing the attack surface afteracontrol flow integrity(CFI) policy was applied…
Methodologies for Quantifying (Re-)randomization Security and Timing under JIT-ROP
Salman Ahmed, Ya Xiao, Gang Tan +4
Just-in-time return-oriented programming (JIT-ROP) allows one to dynamically discover instruction pages and launch code reuse attacks, effectively bypassing most fine-grained addre…
Program Analysis of Commodity IoT Applications for Security and Privacy: Challenges and Opportunities
Z. Berkay Celik, Earlence Fernandes, Eric Pauley +2
Recent advances in Internet of Things (IoT) have enabled myriad domains such as smart homes, personal monitoring devices, and enhanced manufacturing. IoT is now pervasive---new app…
Soteria: Automated IoT Safety and Security Analysis
Z. Berkay Celik, Patrick McDaniel, Gang Tan
Broadly defined as the Internet of Things (IoT), the growth of commodity devices that integrate physical processes with digital systems have changed the way we live, play and work.…
Sensitive Information Tracking in Commodity IoT
Z. Berkay Celik, Leonardo Babun, Amit K. Sikder +4
Broadly defined as the Internet of Things (IoT), the growth of commodity devices that integrate physical processes with digital connectivity has had profound effects on society--sm…