326 citations · 701 across the 13 of their papers we have counts for
14 papers
DOVE: A Data-Oblivious Virtual Environment
Hyun Bin Lee, Tushar M. Jois, Christopher W. Fletcher +1
Users can improve the security of remote communications by using Trusted Execution Environments (TEEs) to protect against direct introspection and tampering of sensitive data. This…
Smartphone Security Behavioral Scale: A New Psychometric Measurement for Smartphone Security
Hsiao-Ying Huang, Soteris Demetriou, Rini Banerjee +3
Despite widespread use of smartphones, there is no measurement standard targeted at smartphone security behaviors. In this paper we translate a well-known cybersecurity behavioral…
Grand Challenges for Embedded Security Research in a Connected World
Wayne Burleson, Kevin Fu, Denise Anthony +7
Protecting embedded security is becoming an increasingly challenging research problem for embedded systems due to a number of emerging trends in hardware, software, networks, and a…
Detecting AI Trojans Using Meta Neural Analysis
Xiaojun Xu, Qi Wang, Huichen Li +3
In machine learning Trojan attacks, an adversary trains a corrupted model that obtains good performance on normal data but behaves maliciously on data samples with certain trigger…
WSEmail: A Retrospective on a System for Secure Internet Messaging Based on Web Services
Michael J. May, Kevin D. Lux, Carl A. Gunter
Web services offer an opportunity to redesign a variety of older systems to exploit the advantages of a flexible, extensible, secure set of standards. In this work we revisit WSEma…
Distributed and Secure ML with Self-tallying Multi-party Aggregation
Yunhui Long, Tanmay Gangwani, Haris Mughees +1
Privacy preserving multi-party computation has many applications in areas such as medicine and online advertisements. In this work, we propose a framework for distributed, secure m…
Understanding Membership Inferences on Well-Generalized Learning Models
Yunhui Long, Vincent Bindschaedler, Lei Wang +5
Membership Inference Attack (MIA) determines the presence of a record in a machine learning model's training data by querying the model. Prior work has shown that the attack is fea…
CommanderSong: A Systematic Approach for Practical Adversarial Voice Recognition
Xuejing Yuan, Yuxuan Chen, Yue Zhao +7
The popularity of ASR (automatic speech recognition) systems, like Google Voice, Cortana, brings in security concerns, as demonstrated by recent attacks. The impacts of such threat…
Towards Measuring Membership Privacy
Yunhui Long, Vincent Bindschaedler, Carl A. Gunter
Machine learning models are increasingly made available to the masses through public query interfaces. Recent academic work has demonstrated that malicious users who can query such…
Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX
Wenhao Wang, Guoxing Chen, Xiaorui Pan +5
Side-channel risks of Intel's SGX have recently attracted great attention. Under the spotlight is the newly discovered page-fault attack, in which an OS-level adversary induces pag…
Understanding IoT Security Through the Data Crystal Ball: Where We Are Now and Where We Are Going to Be
Nan Zhang, Soteris Demetriou, Xianghang Mi +11
Inspired by the boom of the consumer IoT market, many device manufacturers, start-up companies and technology giants have jumped into the space. Unfortunately, the exciting utility…
Guardian of the HAN: Thwarting Mobile Attacks on Smart-Home Devices Using OS-level Situation Awareness
Soteris Demetriou, Nan Zhang, Yeonjoon Lee +4
A new development of smart-home systems is to use mobile apps to control IoT devices across a Home Area Network (HAN). Those systems tend to rely on the Wi-Fi router to authenticat…
Privacy in the Genomic Era
Muhammad Naveed, Erman Ayday, Ellen W. Clayton +5
Genome sequencing technology has advanced at a rapid pace and it is now possible to generate highly-detailed genotypes inexpensively. The collection and analysis of such data has t…
Network-on-Chip Firewall: Countering Defective and Malicious System-on-Chip Hardware
Michael LeMay, Carl A. Gunter
Mobile devices are in roles where the integrity and confidentiality of their apps and data are of paramount importance. They usually contain a System-on-Chip (SoC), which integrate…