3 papers
cs.CR2026
One Click to Leak: Characterizing the Real-World Usage and Threat Impact of MNO-based Single Sign-On Websites
Jiasheng Huang, Mingxuan Liu, Pei Chen +7
Mobile Network Operator (MNO)-based Single Sign-On (MSSO) is a password-free authentication framework relying on mobile data sessions. Unlike traditional SSO, it shifts the Identit…
cs.CR2026
Your Space is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs
Yacong Gu, Lingyun Ying, Zidong Zhang +6
AI-powered Applications (AI-Apps), hosted on platforms such as Hugging Face, are democratizing access to pre-trained models through online inference and fine-tuning services. While…
cs.CR2024
PowerPeeler: A Precise and General Dynamic Deobfuscation Method for PowerShell Scripts
Ruijie Li, Chenyang Zhang, Huajun Chai +3
PowerShell is a powerful and versatile task automation tool. Unfortunately, it is also widely abused by cyber attackers. To bypass malware detection and hinder threat analysis, att…