activity
20212024
most citedAmbush from All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines

23 citations · 30 across the 5 of their papers we have counts for

collaborators

5 papers

cs.CR2024★ 23 cited

Ambush from All Sides: Understanding Security Threats in Open-Source Software CI/CD Pipelines

Ziyue Pan, Wenbo Shen, Xingkai Wang +6

The continuous integration and continuous deployment (CI/CD) pipelines are widely adopted on Internet hosting platforms, such as GitHub. With the popularity, the CI/CD pipeline fac…

cs.SE2023★ 2 cited

Demystifying Compiler Unstable Feature Usage and Impacts in the Rust Ecosystem

Chenghao Li, Yifei Wu, Wenbo Shen +5

Rust programming language is gaining popularity rapidly in building reliable and secure systems due to its security guarantees and outstanding performance. To provide extra functio…

cs.CR2022

PA-Boot: A Formally Verified Authentication Protocol for Multiprocessor Secure Boot

Zhuoruo Zhang, Rui Chang, Mingshuai Chen +5

Hardware supply-chain attacks are raising significant security threats to the boot process of multiprocessor systems. This paper identifies a new, prevalent hardware supply-chain a…

cs.CR2021★ 5 cited

A Measurement Study on the (In)security of End-of-Life (EoL) Embedded Devices

Dingding Wang, Muhui Jiang, Rui Chang +5

Embedded devices are becoming popular. Meanwhile, researchers are actively working on improving the security of embedded devices. However, previous work ignores the insecurity caus…

cs.CR2021

Revisiting Challenges for Selective Data Protection of Real Applications

Lin Ma, Jinyan Xu, Jiadong Sun +5

Selective data protection is a promising technique to defend against the data leakage attack. In this paper, we revisit technical challenges that were neglected when applying this…