23 citations · 38 across the 5 of their papers we have counts for
5 papers
Ambush from All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines
Ziyue Pan, Wenbo Shen, Xingkai Wang +6
The continuous integration and continuous deployment (CI/CD) pipelines are widely adopted on Internet hosting platforms, such as GitHub. With the popularity, the CI/CD pipeline fac…
PA-Boot: A Formally Verified Authentication Protocol for Multiprocessor Secure Boot
Zhuoruo Zhang, Rui Chang, Mingshuai Chen +5
Hardware supply-chain attacks are raising significant security threats to the boot process of multiprocessor systems. This paper identifies a new, prevalent hardware supply-chain a…
iLibScope: Reliable Third-Party Library Detection for iOS Mobile Apps
Jingyi Guo, Min Zheng, Yajin Zhou +4
Vetting security impacts introduced by third-party libraries in iOS apps requires a reliable library detection technique. Especially when a new vulnerability (or a privacy-invasive…
Towards Efficiently Establishing Mutual Distrust Between Host Application and Enclave for SGX
Yuan Chen, Jiaqi Li, Guorui Xu +4
Since its debut, SGX has been used in many applications, e.g., secure data processing. However, previous systems usually assume a trusted enclave and ignore the security issues cau…
Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection
Xiao Chen, Chaoran Li, Derui Wang +5
Machine learning based solutions have been successfully employed for automatic detection of malware on Android. However, machine learning models lack robustness to adversarial exam…