4 papers
Privacy Detective: A Narrative Game that Cultivates Student Developers' Privacy Awareness by Harnessing Legal Documents
Shao-Yu Chu, Jennifer Forsyth, Xu Wang +1
Developers' choices about what data a system collects, how it is used and shared, and what defaults govern user choices directly shape users' privacy experiences. Yet, developers o…
ClawGuard: Out-of-Band Detection of LLM Agent Workflow Hijacking via EM Side Channel
Leo Linqian Gan, Jeffery Wu, Longyuan Ge +6
Autonomous LLM agents face a critical security risk known as workflow hijacking, where attackers subtly alter tool and skill invocations. Existing defenses rely on host-internal te…
OAuthHub: Mitigating OAuth Data Overaccess through a Local Data Hub
Qiyu Li, Yuhe Tian, Haojian Jin
Most OAuth service providers, such as Google and Microsoft, offer only a limited range of coarse-grained data access. As a result, third-party OAuth applications often end up acces…
DPCheatSheet: Using Worked and Erroneous LLM-usage Examples to Scaffold Differential Privacy Implementation
Shao-Yu Chu, Yuhe Tian, Yu-Xiang Wang +1
This paper explores how programmers without specialized expertise in differential privacy (DP) (i.e., novices) can leverage LLMs to implement DP programs with minimal training. We…