8 papers
Speed Kills: Exploring Confused Deputy Attacks Through Edge AI Accelerators
Datta Manikanta Sri Hari Danduri, Aravind Kumar Machiry
AI Accelerator (AIA) are specialized hardware e.g., Tensor Processing Unit (TPU), that enable optimal and efficient execution of AI applications and on-device inference. The growin…
AutoSOUP: Safety-Oriented Unit Proof Generation for Component-level Memory-Safety Verification
Paschal C. Amusuo, Ricardo Calvo, Dharun Anandayuvaraj +5
Memory-safety errors remain a persistent source of zero-day vulnerabilities in low-level software. The problem is especially acute in embedded systems, where hardware protections a…
Reactive Bottom-Up Testing
Siddharth Muralee, Sourag Cherupattamoolayil, James C. Davis +2
Modern computing systems remain rife with software vulnerabilities. Engineers apply many means to detect them, of which dynamic testing is one of the most common and effective. How…
LEMIX: Enabling Testing of Embedded Applications as Linux Applications (Extended Report)
Sai Ritvik Tanksalkar, Siddharth Muralee, Srihari Danduri +4
Dynamic analysis, through rehosting, is an important capability for security assessment in embedded systems software. Existing rehosting techniques aim to provide high-fidelity exe…
LM-Scout: Analyzing the Security of Language Model Integration in Android Apps
Muhammad Ibrahim, Gűliz Seray Tuncay, Z. Berkay Celik +2
Developers are increasingly integrating Language Models (LMs) into their mobile apps to provide features such as chat-based assistants. To prevent LM misuse, they impose various re…
Finding 709 Defects in 258 Projects: An Experience Report on Applying CodeQL to Open-Source Embedded Software (Experience Paper) -- Extended Report
Mingjie Shen, Akul Abhilash Pillai, Brian A. Yuan +2
In this experience paper, we report on a large-scale empirical study of Static Application Security Testing (SAST) in Open-Source Embedded Software (EMBOSS) repositories. We collec…