31 citations · 58 across the 11 of their papers we have counts for
11 papers
ATOBench: Tracing How Autonomous Penetration-Testing Agents Verify Vulnerabilities When Target Evidence Lies
Qiyang Chen, Yixi Li, Fengwei Zhang +1
Autonomous penetration-testing agents rely on target responses. These responses guide both subsequent actions and the final report. A deceptive response can therefore redirect both…
Shielded but Lightweight: Building Practical Confidential Containers with ARM CCA
Liantao Song, Yiming Zhang, Fengwei Zhang +4
The rapid advancement of cloud-native technologies has created an urgent need for security. Currently, confidential containers are increasingly deployed in multi-tenant environment…
ClawLess: A Security Model of AI Agents
Hongyi Lu, Nian Liu, Shuai Wang +1
Autonomous AI agents powered by Large Language Models can reason, plan, and execute complex tasks, but their ability to autonomously retrieve information and run code introduces si…
GPU-Fuzz: Finding Memory Errors in Deep Learning Frameworks
Zihao Li, Hongyi Lu, Yanan Guo +3
GPU memory errors are a critical threat to deep learning (DL) frameworks, leading to crashes or even security issues. We introduce GPU-Fuzz, a fuzzer locating these issues efficien…
The HitchHiker's Guide to High-Assurance System Observability Protection with Efficient Permission Switches
Chuqi Zhang, Jun Zeng, Yiming Zhang +4
Protecting system observability records (logs) from compromised OSs has gained significant traction in recent times, with several note-worthy approaches proposed. Unfortunately, no…
Demystifying the DAO Governance Process
Junjie Ma, Muhui Jiang, Jinan Jiang +5
Decentralized Autonomous Organization (DAO) becomes a popular governance solution for decentralized applications (dApps) to achieve decentralized governance. In the DAO, no single…
MOAT: Towards Safe BPF Kernel Extension
Hongyi Lu, Shuai Wang, Yechang Wu +2
The Linux kernel extensively uses the Berkeley Packet Filter (BPF) to allow user-written BPF applications to execute in the kernel space. The BPF employs a verifier to check the se…
STC-IDS: Spatial-Temporal Correlation Feature Analyzing based Intrusion Detection System for Intelligent Connected Vehicles
Pengzhou Cheng, Mu Han, Aoxue Li +1
Intrusion detection is an important defensive measure for automotive communications security. Accurate frame detection models assist vehicles to avoid malicious attacks. Uncertaint…
Lessons Learned from Blockchain Applications of Trusted Execution Environments and Implications for Future Research
Rabimba Karanjai, Lei Xu, Lin Chen +3
Modern computer systems tend to rely on large trusted computing bases (TCBs) for operations. To address the TCB bloating problem, hardware vendors have developed mechanisms to enab…
Speedster: A TEE-assisted State Channel System
Jinghui Liao, Fengwei Zhang, Wenhai Sun +1
State channel network is the most popular layer-2 solution to theissues of scalability, high transaction fees, and low transaction throughput of public Blockchain networks. However…
DexLego: Reassembleable Bytecode Extraction for Aiding Static Analysis
Zhenyu Ning, Fengwei Zhang
The scale of Android applications in the market is growing rapidly. To efficiently detect the malicious behavior in these applications, an array of static analysis tools are propos…