3 citations · 4 across the 9 of their papers we have counts for
10 papers
InterType: Breaking the Single-Function Barrier in Neural Binary Type Inference
Shan Wang, Tianming Cui, Stephen McCamant +2
Variable type recovery is a critical task in binary reverse engineering, enabling downstream applications such as vulnerability discovery, malware analysis, and security enforcemen…
DIG: Oracle-Guided Directed Input Generation for One-Day Vulnerabilities
Andrew Bao, Haochen Zeng, Peng Chen +2
One-day vulnerabilities pose significant risks due to delayed or incomplete patch adoption. Generating proof-of-concept (PoC) inputs is therefore essential for assessing real-world…
Partitioned Tags, Shared Data: Reconciling Strict Cache Isolation with Write-Shared Coherence
Kartik Ramkrishnan, Stephen McCamant, Antonia Zhai +1
Cache partitioning is among the strongest structural defenses against eviction-based cache side channels, yet a decade-old design issue has blocked its widespread deployment in sec…
XuanJia: A Comprehensive Virtualization-Based Code Obfuscator for Binary Protection
Xianyu Zou, Xiaoli Gong, Jin Zhang +2
Virtualization-based binary obfuscation is widely adopted to protect software intellectual property, yet existing approaches leave exception-handling (EH) metadata unprotected to p…
Supporting Secured Integration of Microarchitectural Defenses
Kartik Ramkrishnan, Stephen McCamant, Antonia Zhai +1
There has been a plethora of microarchitectural-level attacks leading to many proposed countermeasures. This has created an unexpected and unaddressed security issue where naive in…
Shield Bash: Abusing Defensive Coherence State Retrieval to Break Timing Obfuscation
Kartik Ramkrishnan, Antonia Zhai, Stephen McCamant +1
Microarchitectural attacks are a significant concern, leading to many hardware-based defense proposals. However, different defenses target different classes of attacks, and their i…
A System-Level Dynamic Binary Translator using Automatically-Learned Translation Rules
Jinhu Jiang, Chaoyi Liang, Rongchao Dong +5
System-level emulators have been used extensively for system design, debugging and evaluation. They work by providing a system-level virtual machine to support a guest operating sy…
SPECWANDS: An Efficient Priority-based Scheduler Against Speculation Contention Attacks
Bowen Tang, Chenggang Wu, Pen-Chung Yew +7
Transient Execution Attacks (TEAs) have gradually become a major security threat to modern high-performance processors. They exploit the vulnerability of speculative execution to i…
SpecBox: A Label-Based Transparent Speculation Scheme Against Transient Execution Attacks
Bowen Tang, Chenggang Wu, Zhe Wang +6
Speculative execution techniques have been a cornerstone of modern processors to improve instruction-level parallelism. However, recent studies showed that this kind of techniques…
New Attacks and Defenses for Randomized Caches
Kartik Ramkrishnan, Antonia Zhai, Stephen McCamant +1
The last level cache is vulnerable to timing based side channel attacks because it is shared by the attacker and the victim processes even if they are located on different cores. T…