5 papers
C-to-Rust Fallacy: Automatic Refactoring != Memory Security
Hung-Mao Chen, Xu He, Bo Lu +2
Rust has emerged as the leading system programming language, offering strong memory and type safety guarantees without compromising performance. This positions it as a compelling a…
Guiding AI to Fix Its Own Flaws: An Empirical Study on LLM-Driven Secure Code Generation
Hao Yan, Swapneel Suhas Vaidya, Xiaokuan Zhang +1
Large Language Models have become powerful tools for programming. However, they often overlook essential security practices, producing insecure code with vulnerabilities. Despite t…
TYPEPULSE: Detecting Type Confusion Bugs in Rust Programs
Hung-Mao Chen, Xu He, Shu Wang +2
Rust supports type conversions and safe Rust guarantees the security of these conversions through robust static type checking and strict ownership guidelines. However, there are in…
Stealing Trust: Unraveling Blind Message Attacks in Web3 Authentication
Kailun Yan, Xiaokuan Zhang, Wenrui Diao
As the field of Web3 continues its rapid expansion, the security of Web3 authentication, often the gateway to various Web3 applications, becomes increasingly crucial. Despite its w…
Penetration Vision through Virtual Reality Headsets: Identifying 360-degree Videos from Head Movements
Anh Nguyen, Xiaokuan Zhang, Zhisheng Yan
In this paper, we present the first contactless side-channel attack for identifying 360 videos being viewed in a Virtual Reality (VR) Head Mounted Display (HMD). Although the video…