50 citations · 206 across the 19 of their papers we have counts for
13 papers · 1 filter
MFDPG: Multi-Factor Authenticated Password Management With Zero Stored Secrets
Vivek Nair, Dawn Song
While password managers are a vital tool for internet security, they can also create a massive central point of failure, as evidenced by several major recent data breaches. For ove…
Do you still need a manual smart contract audit?
Isaac David, Liyi Zhou, Kaihua Qin +3
We investigate the feasibility of employing large language models (LLMs) for conducting the security audit of smart contracts, a traditionally time-consuming and costly process. Ou…
Multi-Factor Credential Hashing for Asymmetric Brute-Force Attack Resistance
Vivek Nair, Dawn Song
Since the introduction of bcrypt in 1999, adaptive password hashing functions, whereby brute-force resistance increases symmetrically with computational difficulty for legitimate u…
Decentralizing Custodial Wallets with MFKDF
Vivek Nair, Dawn Song
The average cryptocurrency user today faces a difficult choice between centralized custodial wallets, which are notoriously prone to spontaneous collapse, or cumbersome self-custod…
Enhancing Smart Contract Security Analysis with Execution Property Graphs
Kaihua Qin, Zhe Ye, Zhun Wang +5
Smart contract vulnerabilities have led to significant financial losses, with their increasing complexity rendering outright prevention of hacks increasingly challenging. This tren…
Blockchain Large Language Models
Yu Gai, Liyi Zhou, Kaihua Qin +2
This paper presents a dynamic, real-time approach to detecting anomalous blockchain transactions. The proposed tool, BlockGPT, generates tracing representations of blockchain activ…
Specular: Towards Secure, Trust-minimized Optimistic Blockchain Execution
Zhe Ye, Ujval Misra, Jiajun Cheng +2
An optimistic rollup (ORU) scales a blockchain's throughput by delegating computation to an untrusted remote chain (L2), refereeing any state claim disagreements between mutually d…
Lessons Learned: Surveying the Practicality of Differential Privacy in the Industry
Gonzalo Munilla Garrido, Xiaoyuan Liu, Florian Matthes +1
Since its introduction in 2006, differential privacy has emerged as a predominant statistical tool for quantifying data privacy in academic works. Yet despite the plethora of resea…
zkBridge: Trustless Cross-chain Bridges Made Practical
Tiancheng Xie, Jiaheng Zhang, Zerui Cheng +5
Blockchains have seen growing traction with cryptocurrencies reaching a market cap of over 1 trillion dollars, major institution investors taking interests, and global impacts on g…
Cerberus: A Formal Approach to Secure and Efficient Enclave Memory Sharing
Dayeol Lee, Kevin Cheang, Alexander Thomas +7
Hardware enclaves rely on a disjoint memory model, which maps each physical address to an enclave to achieve strong memory isolation. However, this severely limits the performance…
SoK: Decentralized Finance (DeFi) Attacks
Liyi Zhou, Xihan Xiong, Jens Ernstberger +7
Within just four years, the blockchain-based Decentralized Finance (DeFi) ecosystem has accumulated a peak total value locked (TVL) of more than 253 billion USD. This surge in DeFi…
Going Incognito in the Metaverse: Achieving Theoretically Optimal Privacy-Usability Tradeoffs in VR
Vivek Nair, Gonzalo Munilla Garrido, Dawn Song
Virtual reality (VR) telepresence applications and the so-called "metaverse" promise to be the next major medium of human-computer interaction. However, with recent studies demonst…
Shades of Finality and Layer 2 Scaling
Bennet Yee, Dawn Song, Patrick McCorry +1
Blockchains combine a distributed append-only log with a virtual machine that defines how log entries are interpreted. By viewing transactions as state transformation functions for…