356 citations · 956 across the 32 of their papers we have counts for
14 papers · 1 filter
VenoMave: Targeted Poisoning Against Speech Recognition
Hojjat Aghakhani, Lea Schönherr, Thorsten Eisenhofer +4
Despite remarkable improvements, automatic speech recognition is susceptible to adversarial perturbations. Compared to standard machine learning architectures, these attacks are si…
Unacceptable, where is my privacy? Exploring Accidental Triggers of Smart Speakers
Lea Schönherr, Maximilian Golla, Thorsten Eisenhofer +3
Voice assistants like Amazon's Alexa, Google's Assistant, or Apple's Siri, have become the primary (voice) interface in smart speakers that can be found in millions of households.…
VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching
Andre Pawlowski, Victor van der Veen, Dennis Andriesse +4
Polymorphism and inheritance make C++ suitable for writing complex software, but significantly increase the attack surface because the implementation relies on virtual function tab…
Automated Multi-Architectural Discovery of CFI-Resistant Code Gadgets
Patrick Wollgast, Robert Gawlik, Behrad Garmany +2
Memory corruption vulnerabilities are still a severe threat for software systems. To thwart the exploitation of such vulnerabilities, many different kinds of defenses have been pro…
Detile: Fine-Grained Information Leak Detection in Script Engines
Robert Gawlik, Philipp Koppe, Benjamin Kollenda +3
Memory disclosure attacks play an important role in the exploitation of memory corruption vulnerabilities. By analyzing recent research, we observe that bypasses of defensive solut…
An Exploratory Analysis of Microcode as a Building Block for System Defenses
Benjamin Kollenda, Philipp Koppe, Marc Fyrbiak +3
Microcode is an abstraction layer used by modern x86 processors that interprets user-visible CISC instructions to hardware-internal RISC instructions. The capability to update x86…
Breaking and Fixing Destructive Code Read Defenses
Jannik Pewny, Philipp Koppe, Lucas Davi +1
Just-in-time return-oriented programming (JIT-ROP) is a powerful memory corruption attack that bypasses various forms of code randomization. Execute-only memory (XOM) can potential…
EvilCoder: Automated Bug Insertion
Jannik Pewny, Thorsten Holz
The art of finding software vulnerabilities has been covered extensively in the literature and there is a huge body of work on this topic. In contrast, the intentional insertion of…
Static Detection of Uninitialized Stack Variables in Binary Code
Behrad Garmany, Martin Stoffel, Robert Gawlik +1
More than two decades after the first stack smashing attacks, memory corruption vulnerabilities utilizing stack anomalies are still prevalent and play an important role in practice…
Steroids for DOPed Applications: A Compiler for Automated Data-Oriented Programming
Jannik Pewny, Philipp Koppe, Thorsten Holz
The wide-spread adoption of system defenses such as the randomization of code, stack, and heap raises the bar for code-reuse attacks. Thus, attackers utilize a scripting engine in…
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems
Ali Abbasi, Jos Wetzels, Thorsten Holz +1
Memory corruption vulnerabilities have been around for decades and rank among the most prevalent vulnerabilities in embedded systems. Yet this constrained environment poses unique…
CORSICA: Cross-Origin Web Service Identification
Christian Dresen, Fabian Ising, Damian Poddebniak +3
Vulnerabilities in private networks are difficult to detect for attackers outside of the network. While there are known methods for port scanning internal hosts that work by luring…
Leveraging Frequency Analysis for Deep Fake Image Recognition
Joel Frank, Thorsten Eisenhofer, Lea Schönherr +3
Deep neural networks can generate images that are astonishingly realistic, so much so that it is often hard for humans to distinguish them from actual photos. These achievements ha…
Beyond the Front Page: Measuring Third Party Dynamics in the Field
Tobias Urban, Martin Degeling, Thorsten Holz +1
In the modern Web, service providers often rely heavily on third parties to run their services. For example, they make use of ad networks to finance their services, externally host…