4 citations · 7 across the 3 of their papers we have counts for
4 papers · 1 filter
DITTO: A Context-aware Pickle-based Pre-Trained Model Scanner for Effective Security Audits
Qiaolin Qin, Wanpeng Li, Benoit Baudry +3
Pre-trained models (PTMs) are widely distributed as serialized binaries, but their reuse often exposes software supply chains to deserialization attacks. Despite the emergence of s…
Minerva: A File-Based Ransomware Detector
Dorjan Hitaj, Giulio Pagnotta, Fabio De Gaspari +2
Ransomware attacks have caused billions of dollars in damages in recent years, and are expected to cause billions more in the future. Consequently, significant effort has been devo…
EnCoD: Distinguishing Compressed and Encrypted File Fragments
Fabio De Gaspari, Dorjan Hitaj, Giulio Pagnotta +2
Reliable identification of encrypted file fragments is a requirement for several security applications, including ransomware detection, digital forensics, and traffic analysis. A p…
Security Issues in Language-based Software Ecosystems
Ruturaj K. Vaidya, Lorenzo De Carli, Drew Davidson +1
Language-based ecosystems (LBE), i.e., software ecosystems based on a single programming language, are very common. Examples include the npm ecosystem for JavaScript, and PyPI for…