162 citations · 207 across the 9 of their papers we have counts for
8 papers · 1 filter
Assessing Runtime Electromagnetic Detection of CPU Hardware Trojans Targeting Kernel Memory
Athanasios Moschos, Baki Berkay Yilmaz, Kevin Valakuzhy +1
Side-channels are a promising approach for hardware trojan detection, as they can passively reveal malicious hardware activity without requiring additional circuitry or destructive…
Exploiting Software-level Abstractions To Support Practical Hardware Trojan Attacks
Athanasios Moschos, Kevin Valakuzhy, Georgios Kokolakis +2
Hardware trojan (HT) attacks against CPUs typically assume threat scenarios where an attacker targeting a system with a trojanized CPU is able to execute arbitrary code (i.e. machi…
Revealing the True Indicators: Understanding and Improving IoC Extraction From Threat Reports
Evangelos Froudakis, Athanasios Avgetidis, Sean Tyler Frankum +3
Indicators of Compromise (IoCs) are critical for threat detection and response, marking malicious activity across networks and systems. Yet, the effectiveness of automated IoC extr…
Towards Practical Fabrication Stage Attacks Using Interrupt-Resilient Hardware Trojans
Athanasios Moschos, Fabian Monrose, Angelos D. Keromytis
We introduce a new class of hardware trojans called interrupt-resilient trojans (IRTs). Our work is motivated by the observation that hardware trojan attacks on CPUs, even under fa…
Redirect2Own: Protecting the Intellectual Property of User-uploaded Content through Off-site Indirect Access
Georgios Kontaxis, Angelos D. Keromytis, Georgios Portokalidis
Social networking services have attracted millions of users, including individuals, professionals, and companies, that upload massive amounts of content, such as text, pictures, an…
Tug-of-War: Observations on Unified Content Handling
Theofilos Petsios, Adrian Tang, Dimitris Mitropoulos +3
Modern applications and Operating Systems vary greatly with respect to how they register and identify different types of content. These discrepancies lead to exploits and inconsist…
SlowFuzz: Automated Domain-Independent Detection of Algorithmic Complexity Vulnerabilities
Theofilos Petsios, Jason Zhao, Angelos D. Keromytis +1
Algorithmic complexity vulnerabilities occur when the worst-case time/space complexity of an application is significantly higher than the respective average case for particular use…
The Spy in the Sandbox -- Practical Cache Attacks in Javascript
Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan +1
We present the first micro-architectural side-channel attack which runs entirely in the browser. In contrast to other works in this genre, this attack does not require the attacker…