44 citations · 52 across the 7 of their papers we have counts for
8 papers
TENNOR: Trustworthy Execution for Neural Networks through Obliviousness and Retrievals
Zifan Qu, Vasileios P. Kemerlis, Giuseppe Ateniese +1
Training neural networks on sensitive data in untrusted cloud environments requires simultaneously achieving computational efficiency and rigorous privacy guarantees. Sparsificatio…
PickleBall: Secure Deserialization of Pickle-based Machine Learning Models (Extended Report)
Andreas D. Kellas, Neophytos Christou, Wenxin Jiang +6
Machine learning model repositories such as the Hugging Face Model Hub facilitate model exchanges. However, bad actors can deliver malware through compromised models. Existing defe…
FineIBT: Fine-grain Control-flow Enforcement with Indirect Branch Tracking
Alexander J. Gaidis, Joao Moreira, Ke Sun +3
We present the design, implementation, and evaluation of FineIBT: a CFI enforcement mechanism that improves the precision of hardware-assisted CFI solutions, like Intel IBT, by ins…
IvySyn: Automated Vulnerability Discovery in Deep Learning Frameworks
Neophytos Christou, Di Jin, Vaggelis Atlidakis +2
We present IvySyn, the first fully-automated framework for discovering memory error vulnerabilities in Deep Learning (DL) frameworks. IvySyn leverages the statically-typed nature o…
Timeloops: Automatic System Call Policy Learning for Containerized Microservices
Meghna Pancholi, Andreas D. Kellas, Vasileios P. Kemerlis +1
In this paper we introduce Timeloops a novel technique for automatically learning system call filtering policies for containerized microservices applications. At run-time, Timeloop…
Using Name Confusion to Enhance Security
Mohamed Tarek Ibn Ziad, Miguel A. Arroyo, Evgeny Manzhosov +2
We introduce a novel concept, called Name Confusion, and demonstrate how it can be employed to thwart multiple classes of code-reuse attacks. By building upon Name Confusion, we de…
Scanning the Internet for ROS: A View of Security in Robotics Research
Nicholas DeMarinis, Stefanie Tellex, Vasileios Kemerlis +2
Because robots can directly perceive and affect the physical world, security issues take on particular importance. In this paper, we describe the results of our work on scanning th…
The Spy in the Sandbox -- Practical Cache Attacks in Javascript
Yossef Oren, Vasileios P. Kemerlis, Simha Sethumadhavan +1
We present the first micro-architectural side-channel attack which runs entirely in the browser. In contrast to other works in this genre, this attack does not require the attacker…