2 citations · 4 across the 15 of their papers we have counts for
13 papers · 1 filter
Sustained Participation as a Security Resource: The Bounded Participation Channel
Homayoun Maleki, Nekane Sainz, Jon Legarda +1
Can sustained, per-identity participation be engineered into a security resource? Most anti-Sybil defenses price identity creation rather than identity survival. Once admitted, an…
When Does Authorization End? Effect Closure at Provider Boundaries
Igor Santos-Grueiro
Revocation completion, clean state, or operation success can leave authorized work able to cause an effect the application rejects while the provider stays within its contract. We…
When Binaries Talk Back: Representation-Confusion Attacks on LLM-Assisted Reverse Engineering
Igor Santos-Grueiro
LLM-assisted reverse-engineering (RE) systems analyze strings, decompiler output, and tool reports derived from ttacker-controlled binaries. A binary can make data look like instru…
Temporary Authority, Permanent Effects: Commit-Time Authorization for LLM Agents
Igor Santos-Grueiro
LLM agents can commit durable effects from authority evidence that was valid earlier in execution: a DOM snapshot, approval epoch, version witness, branch token, or worker result.…
Context-to-Execution Integrity for LLM Agents
Igor Santos-Grueiro
Language-model agents read attacker-writable context to solve tasks. Tool execution needs a separate authority check for protected sink fields, sink-interpreted payloads, and the i…
Ghost in the Context: Policy-Carriage Integrity in LLM Agents
Igor Santos-Grueiro
LLM agents choose actions from bounded decision states assembled from system policy, runtime state, tools, workload content, and the final request. We study policy-carriage integri…
What Browsers Do in the Shaders: A Measurement Study of WebGPU Privacy
Igor Santos-Grueiro
WebGPU lets ordinary web pages run GPU workloads through a validated programming model. Validation protects memory safety, but shared browser, driver, OS, and GPU state can still e…
Lingering Authority: Revocable Resource-and-Effect Capabilities for Coding Agents
Igor Santos-Grueiro
Coding agents often receive broad tool access for an entire task, even when a resource is needed only for one subgoal. We call this gap lingering authority: a temporary resource/ef…
Scarcity Is Not Enough: Structural Limits of Linear Sybil Cost Under Parallelizable Resources
Homayoun Maleki, Nekane Sainz, Jon Legarda +1
Permissionless systems resist Sybil attacks by binding influence to scarce resources. Yet influence concentration persists across systems built on computation, capital, and other r…
Gerrymandering the Warp: Non-Control-Data Attacks on CUDA Collective Decision
Igor Santos-Grueiro
CUDA collective operations often sit on security decision paths: votes accept batches, reductions aggregate evidence, shuffles select representatives, and barriers order checked st…
WarpGuard: Protected-Site Control-Flow Integrity for CUDA SASS Binaries
Igor Santos-Grueiro
Recent CUDA exploitation work shows that GPU memory bugs can escalate into device-side control-flow corruption, as kernels later consume corrupted return continuations, function po…
Unveiling Dynamic Binary Instrumentation Techniques
Oscar Llorente-Vazquez, Xabier Ugarte-Pedrero, Igor Santos-Grueiro +1
Dynamic Binary Instrumentation (DBI) is the set of techniques that enable instrumentation of programs at run-time, making it possible to monitor and modify the execution of compile…
Keep your Identity Small: Privacy-preserving Client-side Fingerprinting
Alberto Fernandez-de-Retana, Igor Santos-Grueiro
Device fingerprinting is a widely used technique that allows a third party to identify a particular device. Applications of device fingerprinting include authentication, attacker i…