1 citations · 1 across the 6 of their papers we have counts for
6 papers
Following Dragons: Code Review-Guided Fuzzing
Viet Hoang Luu, Amirmohammad Pasdar, Wachiraphan Charoenwet +3
Modern fuzzers scale to large, real-world software but often fail to exercise the program states developers consider most fragile or security-critical. Such states are typically de…
UIXPOSE: Mobile Malware Detection via Intention-Behaviour Discrepancy Analysis
Amirmohammad Pasdar, Toby Murray, Van-Thuan Pham
We introduce UIXPOSE, a source-code-agnostic framework that operates on both compiled and open-source apps. This framework applies Intention Behaviour Alignment (IBA) to mobile mal…
DynamiQ: Unlocking the Potential of Dynamic Task Allocation in Parallel Fuzzing
Wenqi Yan, Toby Murray, Benjamin I. P. Rubinstein +1
We present DynamiQ, a full-fledged and optimized successor to AFLTeam that supports dynamic and adaptive parallel fuzzing. Unlike most existing approaches that treat individual see…
Combining Classical and Probabilistic Independence Reasoning to Verify the Security of Oblivious Algorithms (Extended Version)
Pengbo Yan, Toby Murray, Olga Ohrimenko +2
We consider the problem of how to verify the security of probabilistic oblivious algorithms formally and systematically. Unfortunately, prior program logics fail to support a numbe…
Proving the Absence of Microarchitectural Timing Channels
Scott Buckley, Robert Sison, Nils Wistoff +4
Microarchitectural timing channels are a major threat to computer security. A set of OS mechanisms called time protection was recently proposed as a principled way of preventing in…
Assume but Verify: Deductive Verification of Leaked Information in Concurrent Applications (Extended Version)
Toby Murray, Mukesh Tiwari, Gidon Ernst +1
We consider the problem of specifying and proving the security of non-trivial, concurrent programs that intentionally leak information. We present a method that decomposes the prob…