58 citations · 71 across the 6 of their papers we have counts for
6 papers
Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault Injection
Nils Bars, Lukas Bernhard, Moritz Schloegel +1
We use browsers daily to access all sorts of information. Because browsers routinely process scripts, media, and executable code from unknown sources, they form a critical security…
DarthShader: Fuzzing WebGPU Shader Translators & Compilers
Lukas Bernhard, Nico Schiller, Moritz Schloegel +2
A recent trend towards running more demanding web applications, such as video games or client-side LLMs, in the browser has led to the adoption of the WebGPU standard that provides…
No Peer, no Cry: Network Application Fuzzing via Fault Injection
Nils Bars, Moritz Schloegel, Nico Schiller +2
Network-facing applications are commonly exposed to all kinds of attacks, especially when connected to the internet. As a result, web servers like Nginx or client applications such…
SoK: Prudent Evaluation Practices for Fuzzing
Moritz Schloegel, Nils Bars, Nico Schiller +7
Fuzzing has proven to be a highly effective approach to uncover software bugs over the past decade. After AFL popularized the groundbreaking concept of lightweight coverage feedbac…
EF/CF: High Performance Smart Contract Fuzzing for Exploit Generation
Michael Rodler, David Paaßen, Wenting Li +4
Smart contracts are increasingly being used to manage large numbers of high-value cryptocurrency accounts. There is a strong demand for automated, efficient, and comprehensive meth…
xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64
Lukas Bernhard, Michael Rodler, Thorsten Holz +1
Memory safety in complex applications implemented in unsafe programming languages such as C/C++ is still an unresolved problem in practice. Many different types of defenses have be…