5 papers
POZZER: A Power Side Channel-guided Fuzzer for Black-Box Embedded Systems
Pouya Narimani, Kseniia Rogova, Addison Crump +5
Firmware fuzzing is an effective technique for discovering vulnerabilities in embedded systems. However, existing coverage-guided firmware fuzzers typically obtain feedback through…
PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration
Meng Wang, Yue Ma, Majid Garoosi +4
The rapid expansion of the Python ecosystem has fueled two distinct but converging threats: adversaries increasingly target the software supply chain via the Python Package Index (…
Anota: Identifying Business Logic Vulnerabilities via Annotation-Based Sanitization
Meng Wang, Philipp Görz, Joschua Schilling +4
Detecting business logic vulnerabilities is a critical challenge in software security. These flaws come from mistakes in an application's design or implementation and allow attacke…
Exploring Power Side-Channel Challenges in Embedded Systems Security
Pouya Narimani, Meng Wang, Ulysse Planta +1
Power side-channel (PSC) attacks are widely used in embedded microcontrollers, particularly in cryptographic applications, to extract sensitive information. However, expanding the…
Spinner: Automated Dynamic Command Subsystem Perturbation
Meng Wang, Chijung Jung, Ali Ahad +1
Injection attacks have been a major threat to web applications. Despite the significant effort in thwarting injection attacks, protection against injection attacks remains challeng…