6 citations · 15 across the 11 of their papers we have counts for
11 papers
Disa: Accurate Learning-based Static Disassembly with Attentions
Peicheng Wang, Monika Santra, Mingyu Liu +3
For reverse engineering related security domains, such as vulnerability detection, malware analysis, and binary hardening, disassembly is crucial yet challenging. The fundamental c…
DeepCatra: Learning Flow- and Graph-based Behaviors for Android Malware Detection
Yafei Wu, Jian Shi, Peicheng Wang +2
As Android malware is growing and evolving, deep learning has been introduced into malware detection, resulting in great effectiveness. Recent work is considering hybrid models and…
Control Parameters Considered Harmful: Detecting Range Specification Bugs in Drone Configuration Modules via Learning-Guided Search
Ruidong Han, Chao Yang, Siqi Ma +4
In order to support a variety of missions and deal with different flight environments, drone control programs typically provide configurable control parameters. However, such a fle…
Dep: Mutation-based Dependency Generation for Precise Taint Analysis on Android Native Code
Cong Sun, Yuwan Ma, Dongrui Zeng +3
The existence of native code in Android apps plays an important role in triggering inconspicuous propagation of secrets and circumventing malware detection. However, the state-of-t…
CryptoEval: Evaluating the Risk of Cryptographic Misuses in Android Apps with Data-Flow Analysis
Cong Sun, Xinpeng Xu, Yafei Wu +4
The misunderstanding and incorrect configurations of cryptographic primitives have exposed severe security vulnerabilities to attackers. Due to the pervasiveness and diversity of c…
Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking
Xiao Kan, Cong Sun, Shen Liu +4
Dynamic taint analysis (DTA) has been widely used in various security-relevant scenarios that need to track the runtime information flow of programs. Dynamic binary instrumentation…
ReCFA: Resilient Control-Flow Attestation
Yumei Zhang, Xinzhi Liu, Cong Sun +4
Recent IoT applications gradually adapt more complicated end systems with commodity software. Ensuring the runtime integrity of these software is a challenging task for the remote…
Information flow based defensive chain for data leakage detection and prevention: a survey
Ning Xi, Chao Chen, Jun Zhang +4
Mobile and IoT applications have greatly enriched our daily life by providing convenient and intelligent services. However, these smart applications have been a prime target of adv…
Fine with "1234"? An Analysis of SMS One-Time Password Randomness in Android Apps
Siqi Ma, Juanru Li, Hyoungshick Kim +4
A fundamental premise of SMS One-Time Password (OTP) is that the used pseudo-random numbers (PRNs) are uniquely unpredictable for each login session. Hence, the process of generati…
A New Enforcement on Declassification with Reachability Analysis
Cong Sun, Liyong Tang, Zhong Chen
Language-based information flow security aims to decide whether an action-observable program can unintentionally leak confidential information if it has the authority to access con…
Secure Information Flow by Model Checking Pushdown System
Cong Sun, Liyong Tang, Zhong Chen
We propose an approach on model checking information flow for imperative language with procedures. We characterize our model with pushdown system, which has a stack of unbounded le…