5 papers
VUPER: Verified ASN.1 UPER Parser
Xiaotian Zhou, Kai Tu, Ali Ranjbar +3
ASN.1 is a widely used interface description language, and UPER (Unaligned Packed Encoding Rules) is one of its key encoding rules, particularly popular in security-critical domain…
LogicEval: A Systematic Framework for Evaluating Automated Repair Techniques for Logical Vulnerabilities in Real-World Software
Syed Md Mukit Rashid, Abdullah Al Ishtiaq, Kai Tu +7
Logical vulnerabilities in software stem from flaws in program logic rather than memory safety, which can lead to critical security failures. Although existing automated program re…
GPS Spoofing Attacks on Automated Frequency Coordination System in Wi-Fi 6E and Beyond
Yilu Dong, Tianchang Yang, Arupjyoti Bhuyan +1
The 6 GHz spectrum, recently opened for unlicensed use under Wi-Fi 6E and Wi-Fi 7, overlaps with frequencies used by mission-critical incumbent systems such as public safety commun…
Securing 5G Bootstrapping: A Two-Layer IBS Authentication Protocol
Yilu Dong, Rouzbeh Behnia, Attila A. Yavuz +1
The lack of authentication during the initial bootstrapping phase between cellular devices and base stations allows attackers to deploy fake base stations and send malicious messag…
State Machine Mutation-based Testing Framework for Wireless Communication Protocols
Syed Md Mukit Rashid, Tianwei Wu, Kai Tu +5
This paper proposes Proteus, a protocol state machine, property-guided, and budget-aware automated testing approach for discovering logical vulnerabilities in wireless protocol imp…