80 citations · 123 across the 17 of their papers we have counts for
10 papers · 1 filter
SoK: Evolution, Security, and Fundamental Properties of Transactional Systems
Sky Pelletier Waterpeace, Nikolay Ivanov
Transaction processing systems underpin modern commerce, finance, and critical infrastructure, yet their security has never been studied across the full evolutionary arc of these s…
SoK: Self-Sovereign Digital Identities
Sushanth Ambati, Kainat Adeel, Jack Myers +1
Self-Sovereign Digital Identity (SSDI) enables individuals to control their own identity assertions and data, rather than relying on centralized or federated systems prone to large…
A Practical Survey on Emerging Threats from AI-driven Voice Attacks: How Vulnerable are Commercial Voice Control Systems?
Yuanda Wang, Qiben Yan, Nikolay Ivanov +1
The emergence of Artificial Intelligence (AI)-driven audio attacks has revealed new security vulnerabilities in voice control systems. While researchers have introduced a multitude…
Security Defense For Smart Contracts: A Comprehensive Survey
Nikolay Ivanov, Chenning Li, Qiben Yan +3
The blockchain technology has been used for recording state transitions of smart contracts - decentralized applications that can be invoked through external transactions. Smart con…
TxT: Real-time Transaction Encapsulation for Ethereum Smart Contracts
Nikolay Ivanov, Qiben Yan, Anurag Kompalli
Ethereum is a permissionless blockchain ecosystem that supports execution of smart contracts, the key enablers of decentralized finance (DeFi) and non-fungible tokens (NFT). Howeve…
Decentralization Paradox: A Study of Hegemonic and Risky ERC-20 Tokens
Nikolay Ivanov, Qiben Yan
In this work, we explore the class of Ethereum smart contracts called the administrated ERC20 tokens. We demonstrate that these contracts are more owner-controlled and less safe th…
Et tu, Blockchain? Outsmarting Smart Contracts via Social Engineering
Nikolay Ivanov, Qiben Yan
We reveal six zero-day social engineering attacks in Ethereum, and subdivide them into two classes: Address Manipulation and Homograph. We demonstrate the attacks by embedding them…
EthClipper: A Clipboard Meddling Attack on Hardware Wallets with Address Verification Evasion
Nikolay Ivanov, Qiben Yan
Hardware wallets are designed to withstand malware attacks by isolating their private keys from the cyberspace, but they are vulnerable to the attacks that fake an address stored i…
Rectifying Administrated ERC20 Tokens
Nikolay Ivanov, Hanqing Guo, Qiben Yan
The developers of Ethereum smart contracts often implement administrating patterns, such as censoring certain users, creating or destroying balances on demand, destroying smart con…
Targeting the Weakest Link: Social Engineering Attacks in Ethereum Smart Contracts
Nikolay Ivanov, Jianzhi Lou, Ting Chen +2
Ethereum holds multiple billions of U.S. dollars in the form of Ether cryptocurrency and ERC-20 tokens, with millions of deployed smart contracts algorithmically operating these fu…