166 citations · 232 across the 11 of their papers we have counts for
9 papers · 1 filter
Dep: Mutation-based Dependency Generation for Precise Taint Analysis on Android Native Code
Cong Sun, Yuwan Ma, Dongrui Zeng +3
The existence of native code in Android apps plays an important role in triggering inconspicuous propagation of secrets and circumventing malware detection. However, the state-of-t…
CryptoEval: Evaluating the Risk of Cryptographic Misuses in Android Apps with Data-Flow Analysis
Cong Sun, Xinpeng Xu, Yafei Wu +4
The misunderstanding and incorrect configurations of cryptographic primitives have exposed severe security vulnerabilities to attackers. Due to the pervasiveness and diversity of c…
Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking
Xiao Kan, Cong Sun, Shen Liu +4
Dynamic taint analysis (DTA) has been widely used in various security-relevant scenarios that need to track the runtime information flow of programs. Dynamic binary instrumentation…
ReCFA: Resilient Control-Flow Attestation
Yumei Zhang, Xinzhi Liu, Cong Sun +4
Recent IoT applications gradually adapt more complicated end systems with commodity software. Ensuring the runtime integrity of these software is a challenging task for the remote…
Analyzing Control Flow Integrity with LLVM-CFI
Paul Muntean, Matthias Neumayer, Zhiqiang Lin +3
Control-flow hijacking attacks are used to perform malicious com-putations. Current solutions for assessing the attack surface afteracontrol flow integrity(CFI) policy was applied…
Methodologies for Quantifying (Re-)randomization Security and Timing under JIT-ROP
Salman Ahmed, Ya Xiao, Gang Tan +4
Just-in-time return-oriented programming (JIT-ROP) allows one to dynamically discover instruction pages and launch code reuse attacks, effectively bypassing most fine-grained addre…
Program Analysis of Commodity IoT Applications for Security and Privacy: Challenges and Opportunities
Z. Berkay Celik, Earlence Fernandes, Eric Pauley +2
Recent advances in Internet of Things (IoT) have enabled myriad domains such as smart homes, personal monitoring devices, and enhanced manufacturing. IoT is now pervasive---new app…
Soteria: Automated IoT Safety and Security Analysis
Z. Berkay Celik, Patrick McDaniel, Gang Tan
Broadly defined as the Internet of Things (IoT), the growth of commodity devices that integrate physical processes with digital systems have changed the way we live, play and work.…
Sensitive Information Tracking in Commodity IoT
Z. Berkay Celik, Leonardo Babun, Amit K. Sikder +4
Broadly defined as the Internet of Things (IoT), the growth of commodity devices that integrate physical processes with digital connectivity has had profound effects on society--sm…