24 citations · 63 across the 8 of their papers we have counts for
4 papers · 1 filter
PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration
Meng Wang, Yue Ma, Majid Garoosi +4
The rapid expansion of the Python ecosystem has fueled two distinct but converging threats: adversaries increasingly target the software supply chain via the Python Package Index (…
Anota: Identifying Business Logic Vulnerabilities via Annotation-Based Sanitization
Meng Wang, Philipp Görz, Joschua Schilling +4
Detecting business logic vulnerabilities is a critical challenge in software security. These flaws come from mistakes in an application's design or implementation and allow attacke…
Protecting File Activities via Deception for ARM TrustZone
Liwei Guo, Kaiyang Zhao, Yiying Zhang +1
A TrustZone TEE often invokes an external filesystem. While filedata can be encrypted, the revealed file activities can leak secrets. To hide the file activities from the filesyste…
Let the Cloud Watch Over Your IoT File Systems
Liwei Guo, Yiying Zhang, Felix Xiaozhu Lin
Smart devices produce security-sensitive data and keep them in on-device storage for persistence. The current storage stack on smart devices, however, offers weak security guarante…