A Practical Approach for Taking Down Avalanche Botnets...
Victor Le Pochat (imec-DistriNet, KU Leuven), Tim Van hamme (imec-DistriNet, KU Leuven), Sourena Maroofi...
More DetailsNDSS Symposium 2020 Accepted Papers
The following papers are currently accepted for NDSS 2020. The final version of the program is available at https://www.ndss-symposium.org/ndss-program/2020-program/.
A View from the Cockpit: Exploring Pilot Reactions...
Matthew Smith (University of Oxford), Martin Strohmeier (University of Oxford), Jonathan Harman (Vrije Universiteit...
More DetailsABSynthe: Automatic Blackbox Side-channel Synthesis on Commodity Microarchitectures
Ben Gras (Vrije Universiteit Amsterdam, Intel Corporation), Cristiano Giuffrida (Vrije Universiteit Amsterdam), Michael Kurth...
More DetailsAdversarial Classification Under Differential Privacy
Jairo Giraldo (University of Utah), Alvaro Cardenas (UC Santa Cruz), Murat Kantarcioglu (UT Dallas),...
More DetailsAre You Going to Answer That? Measuring User...
Imani N. Sherman (University of Florida), Jasmine D. Bowers (University of Florida), Keith McNamara...
More DetailsAutomated Cross-Platform Reverse Engineering of CAN Bus Commands...
Haohuang Wen (The Ohio State University), Qingchuan Zhao (The Ohio State University), Qi Alfred...
More DetailsAutomated Discovery of Cross-Plane Event-Based Vulnerabilities in Software-Defined...
Benjamin E. Ujcich (University of Illinois at Urbana-Champaign), Samuel Jero (MIT Lincoln Laboratory), Richard...
More DetailsBLAG: Improving the Accuracy of Blacklists
Sivaramakrishnan Ramanathan (University of Southern California/Information Sciences Institute), Jelena Mirkovic (University of Southern California/Information...
More DetailsBLAZE: Blazing Fast Privacy-Preserving Machine Learning
Arpita Patra (Indian Institute of Science, Bangalore), Ajith Suresh (Indian Institute of Science, Bangalore)
More DetailsBobtail: Improved Blockchain Security with Low-Variance Mining
George Bissias (University of Massachusetts Amherst), Brian N. Levine (University of Massachusetts Amherst)
More DetailsBroken Metre: Attacking Resource Metering in EVM
Daniel Perez (Imperial College London), Benjamin Livshits (Imperial College London, UCL Centre for Blockchain...
More DetailsCarnus: Exploring the Privacy Threats of Browser Extension...
Soroush Karami (University of Illinois at Chicago), Panagiotis Ilia (University of Illinois at Chicago),...
More DetailsCDN Judo: Breaking the CDN DoS Protection with...
Run Guo (Tsinghua University), Weizhong Li (Tsinghua University), Baojun Liu (Tsinghua University), Shuang Hao...
More DetailsCloudLeak: Large-Scale Deep Learning Models Stealing Through Adversarial...
Honggang Yu (University of Florida), Kaichen Yang (University of Florida), Teng Zhang (University of...
More DetailsComplex Security Policy? A Longitudinal Analysis of Deployed...
Sebastian Roth (CISPA Helmholtz Center for Information Security), Timothy Barron (Stony Brook University), Stefano...
More DetailsCompliance Cautions: Investigating Security Issues Associated with U.S....
Rock Stevens (University of Maryland), Josiah Dykstra (Independent Security Researcher), Wendy Knox Everette (Leviathan...
More DetailsConTExT: A Generic Approach for Mitigating Spectre
Michael Schwarz (Graz University of Technology), Moritz Lipp (Graz University of Technology), Claudio Canella...
More DetailsCross-Origin State Inference (COSI) Attacks: Leaking Web Site...
Avinash Sudhodanan (IMDEA Software Institute), Soheil Khodayari (CISPA Helmholtz Center for Information Security), Juan...
More DetailsCustos: Practical Tamper-Evident Auditing of Operating Systems Using...
Riccardo Paccagnella (University of Illinois at Urbana–Champaign), Pubali Datta (University of Illinois at Urbana–Champaign),...
More DetailsData-Driven Debugging for Functional Side Channels
Saeid Tizpaz-Niari (University of Colorado Boulder), Pavol Černý (TU Wien), Ashutosh Trivedi (University of...
More DetailsDecentralized Control: A Case Study of Russia
Reethika Ramesh (University of Michigan), Ram Sundara Raman (University of Michgan), Matthew Bernhard (University...
More DetailsDeceptive Previews: A Study of the Link Preview...
Giada Stivala (CISPA Helmholtz Center for Information Security), Giancarlo Pellegrino (CISPA Helmholtz Center for...
More DetailsDeepBinDiff: Learning Program-Wide Code Representations for Binary Diffing
Yue Duan (Cornell University), Xuezixiang Li (UC Riverside), Jinghan Wang (UC Riverside), Heng Yin...
More DetailsDefRec: Establishing Physical Function Virtualization to Disrupt Reconnaissance...
Hui Lin (University of Nevada, Reno), Jianing Zhuang (University of Nevada, Reno), Yih-Chun Hu...
More DetailsDESENSITIZATION: Privacy-Aware and Attack-Preserving Crash Report
Ren Ding (Georgia Institute of Technology), Hong Hu (Georgia Institute of Technology), Wen Xu...
More DetailsDesigning a Better Browser for Tor with BLAST
Tao Wang (Hong Kong University of Science and Technology)
More DetailsDetecting Probe-resistant Proxies
Sergey Frolov (University of Colorado Boulder), Jack Wampler (University of Colorado Boulder), Eric Wustrow...
More DetailsDISCO: Sidestepping RPKI's Deployment Barriers
Tomas Hlavacek (Fraunhofer SIT), Italo Cunha (Universidade Federal de Minas Gerais), Yossi Gilad (Hebrew...
More DetailsDynamic Searchable Encryption with Small Client Storage
Ioannis Demertzis (University of Maryland), Javad Ghareh Chamani (Hong Kong University of Science and...
More DetailsEASI: Edge-Based Sender Identification on Resource-Constrained Platforms for...
Marcel Kneib (Robert Bosch GmbH), Oleg Schell (Bosch Engineering GmbH), Christopher Huth (Robert Bosch...
More DetailsEncrypted DNS –> Privacy? A Traffic Analysis Perspective
Sandra Siby (EPFL), Marc Juarez (University of Southern California), Claudia Diaz (imec-COSIC KU Leuven),...
More DetailsEt Tu Alexa? When Commodity WiFi Devices Turn...
Yanzi Zhu (UC Santa Barbara), Zhujun Xiao (University of Chicago), Yuxin Chen (University of...
More DetailsFinding Safety in Numbers with Secure Allegation Escrows
Venkat Arun (Massachusetts Institute of Technology), Aniket Kate (Purdue University), Deepak Garg (Max Planck...
More DetailsFlowPrint: Semi-Supervised Mobile-App Fingerprinting on Encrypted Network Traffic
Thijs van Ede (University of Twente), Riccardo Bortolameotti (Bitdefender), Andrea Continella (UC Santa Barbara),...
More DetailsFUSE: Finding File Upload Bugs via Penetration Testing
Taekjin Lee (KAIST, ETRI), Seongil Wi (KAIST), Suyoung Lee (KAIST), Sooel Son (KAIST)
More DetailsGenotype Extraction and False Relative Attacks: Security Risks...
Peter Ney (University of Washington), Luis Ceze (University of Washington), Tadayoshi Kohno (University of...
More DetailsHeterogeneous Private Information Retrieval
Hamid Mozaffari (University of Massachusetts Amherst), Amir Houmansadr (University of Massachusetts Amherst)
More DetailsHFL: Hybrid Fuzzing on the Linux Kernel
Kyungtae Kim (Purdue University), Dae R. Jeong (KAIST), Chung Hwan Kim (NEC Labs America),...
More DetailsHold the Door! Fingerprinting Your Car Key to...
Kyungho Joo (Korea University), Wonsuk Choi (Korea University), Dong Hoon Lee (Korea University)
More DetailsHotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing
William Blair (Boston University), Andrea Mambretti (Northeastern University), Sajjad Arshad (Northeastern University), Michael Weissbacher...
More DetailsHYPER-CUBE: High-Dimensional Hypervisor Fuzzing
Sergej Schumilo (Ruhr-Universität Bochum), Cornelius Aschermann (Ruhr-Universität Bochum), Ali Abbasi (Ruhr-Universität Bochum), Simon Wörner...
More DetailsIMP4GT: IMPersonation Attacks in 4G NeTworks
David Rupprecht (Ruhr University Bochum), Katharina Kohls (Ruhr University Bochum), Thorsten Holz (Ruhr University...
More DetailsInto the Deep Web: Understanding E-commerce Fraud from...
Peng Wang (Indiana University Bloomington), Xiaojing Liao (Indiana University Bloomington), Yue Qin (Indiana University...
More DetailsLearning-based Practical Smartphone Eavesdropping with Built-in Accelerometer
Zhongjie Ba (Zhejiang University and McGill University), Tianhang Zheng (University of Toronto), Xinyu Zhang...
More DetailsLet's Revoke: Scalable Global Certificate Revocation
Trevor Smith (Brigham Young University), Luke Dickenson (Brigham Young University), Kent Seamons (Brigham Young...
More DetailsLocally Differentially Private Frequency Estimation with Consistency
Tianhao Wang (Purdue University), Milan Lopuhaä-Zwakenberg (Eindhoven University of Technology), Zitao Li (Purdue University),...
More DetailsMACAO: A Maliciously-Secure and Client-Efficient Active ORAM Framework
Thang Hoang (University of South Florida), Jorge Guajardo (Robert Bosch Research and Technology Center),...
More DetailsMassBrowser: Unblocking the Censored Web for the Masses,...
Milad Nasr (University of Massachusetts Amherst), Hadi Zolfaghari (University of Massachusetts Amherst), Amir Houmansadr...
More DetailsMeasuring the Deployment of Network Censorship Filters at...
Ram Sundara Raman (University of Michigan), Adrian Stoll (University of Michigan), Jakub Dalek (Citizen...
More DetailsMelting Pot of Origins: Compromising the Intermediary Web...
Takuya Watanabe (NTT), Eitaro Shioji (NTT), Mitsuaki Akiyama (NTT), Tatsuya Mori (Waseda University, NICT,...
More DetailsMetal: A Metadata-Hiding File-Sharing System
Weikeng Chen (UC Berkeley), Raluca Ada Popa (UC Berkeley)
More DetailsMetamorph: Injecting Inaudible Commands into Over-the-air Voice Controlled...
Tao Chen (City University of Hong Kong), Longfei Shangguan (Microsoft), Zhenjiang Li (City University...
More DetailsMind the Portability: A Warriors Guide through Realistic...
Shivam Bhasin (Nanyang Technological University), Anupam Chattopadhyay (Nanyang Technological University), Annelie Heuser (Univ Rennes,...
More DetailsNoJITsu: Locking Down JavaScript Engines
Taemin Park (University of California, Irvine), Karel Dhondt (imec-DistriNet, KU Leuven), David Gens (University...
More DetailsNot All Coverage Measurements Are Equal: Fuzzing by...
Yanhao Wang (Institute of Software, Chinese Academy of Sciences), Xiangkun Jia (Pennsylvania State University),...
More DetailsOcuLock: Exploring Human Visual System for Authentication in...
Shiqing Luo (Georgia State University), Anh Nguyen (Georgia State University), Chen Song (San Diego...
More DetailsOmegaLog: High-Fidelity Attack Investigation via Transparent Multi-layer Log...
Wajih Ul Hassan (University of Illinois Urbana-Champaign), Mohammad A. Noureddine (University of Illinois Urbana-Champaign),...
More DetailsOn the Resilience of Biometric Authentication Systems against...
Benjamin Zi Hao Zhao (University of New South Wales and Data61 CSIRO), Hassan Jameel...
More DetailsOn Using Application-Layer Middlebox Protocols for Peeking Behind...
Teemu Rytilahti (Ruhr University Bochum), Thorsten Holz (Ruhr University Bochum)
More DetailsPacket-Level Signatures for Smart Home Devices
Rahmadi Trimananda (University of California, Irvine), Janus Varmarken (University of California, Irvine), Athina Markopoulou...
More DetailsPhantomCache: Obfuscating Cache Conflicts with Localized Randomization
Qinhan Tan (Zhejiang University), Zhihua Zeng (Zhejiang University), Kai Bu (Zhejiang University), Kui Ren...
More DetailsPoseidon: Mitigating Volumetric DDoS Attacks with Programmable Switches
Menghao Zhang (Tsinghua University), Guanyu Li (Tsinghua University), Shicheng Wang (Tsinghua University), Chang Liu...
More DetailsPost-Quantum Authentication in TLS 1.3: A Performance Study
Dimitrios Sikeridis (The University of New Mexico), Panos Kampanakis (Cisco Systems), Michael Devetsikiotis (The...
More DetailsPractical Traffic Analysis Attacks on Secure Messaging Applications
Alireza Bahramali (University of Massachusetts Amherst), Amir Houmansadr (University of Massachusetts Amherst), Ramin Soltani...
More DetailsPrecisely Characterizing Security Impact in a Flood of...
Qiushi Wu (University of Minnesota), Yang He (University of Minnesota), Stephen McCamant (University of...
More DetailsPrevalence and Impact of Low-Entropy Packing Schemes in...
Alessandro Mantovani (EURECOM), Simone Aonzo (University of Genoa), Xabier Ugarte-Pedrero (Cisco Systems), Alessio Merlo...
More DetailsProof of Storage-Time: Efficiently Checking Continuous Data Availability
Giuseppe Ateniese (Stevens Institute of Technology), Long Chen (New Jersey Institute of Technology), Mohammard...
More DetailsProtectIOn: Root-of-Trust for IO in Compromised Platforms
Aritra Dhar (ETH Zurich), Enis Ulqinaku (ETH Zurich), Kari Kostiainen (ETH Zurich), Srdjan Capkun...
More DetailsRevisiting Leakage Abuse Attacks
Laura Blackstone (Brown University), Seny Kamara (Brown University), Tarik Moataz (Brown University)
More DetailsSecure Sublinear Time Differentially Private Median Computation
Jonas Böhler (SAP Security Research), Florian Kerschbaum (University of Waterloo)
More DetailsSnappy: Fast On-chain Payments with Practical Collaterals
Vasilios Mavroudis (University College London), Karl Wüst (ETH Zurich), Aritra Dhar (ETH Zurich), Kari...
More DetailsSODA: A Generic Online Detection Framework for Smart...
Ting Chen (University of Electronic Science and Technology of China), Rong Cao (University of...
More DetailsSPEECHMINER: A Framework for Investigating and Measuring Speculative...
Yuan Xiao (The Ohio State University), Yinqian Zhang (The Ohio State University), Radu Teodorescu...
More DetailsStrong Authentication without Temper-Resistant Hardware and Application to...
Zhenfeng Zhang (Chinese Academy of Sciences, University of Chinese Academy of Sciences, and The...
More DetailsSurfingAttack: Interactive Hidden Attack on Voice Assistants Using...
Qiben Yan (Michigan State University), Kehai Liu (Chinese Academy of Sciences), Qin Zhou (University...
More DetailsSVLAN: Secure & Scalable Network Virtualization
Jonghoon Kwon (ETH), Taeho Lee (ETH), Claude Hähni (ETH), Adrian Perrig (ETH)
More DetailsSymTCP: Eluding Stateful Deep Packet Inspection with Automated...
Zhongjie Wang (University of California, Riverside), Shitong Zhu (University of California, Riverside), Yue Cao...
More DetailsThe Attack of the Clones Against Proof-of-Authority
Parinya Ekparinya (University of Sydney), Vincent Gramoli (University of Sydney and CSIRO-Data61), Guillaume Jourjon...
More DetailsTKPERM: Cross-platform Permission Knowledge Transfer to Detect Overprivileged...
Faysal Hossain Shezan (University of Virginia), Kaiming Cheng (University of Virginia), Zhen Zhang (Johns...
More DetailsTowards Plausible Graph Anonymization
Yang Zhang (CISPA Helmholtz Center for Information Security), Mathias Humbert (armasuisse Science and Technology),...
More DetailsTrident: Efficient 4PC Framework for Privacy Preserving Machine...
Harsh Chaudhari (Indian Institute of Science, Bangalore), Rahul Rachuri (Aarhus University, Denmark), Ajith Suresh...
More DetailsUIScope: Accurate, Instrumentation-free, and Visible Attack Investigation for...
Runqing Yang (Zhejiang University), Shiqing Ma (Rutgers University), Haitao Xu (Arizona State University), Xiangyu...
More DetailsUnicorn: Runtime Provenance-Based Detector for Advanced Persistent Threats
Xueyuan Han (Harvard University), Thomas Pasquier (University of Bristol), Adam Bates (University of Illinois...
More DetailsWhen Malware is Packin' Heat; Limits of Machine...
Hojjat Aghakhani (University of California, Santa Barbara), Fabio Gritti (University of California, Santa Barbara),...
More DetailsWhen Match Fields Do Not Need to Match:...
Jiahao Cao (Tsinghua University; George Mason University), Renjie Xie (Tsinghua University), Kun Sun (George...
More DetailsWithdrawing the BGP Re-Routing Curtain: Understanding the Security...
Jared M. Smith (University of Tennessee, Knoxville), Kyle Birkeland (University of Tennessee, Knoxville), Tyler...
More DetailsYou Are What You Do: Hunting Stealthy Malware...
Qi Wang (University of Illinois Urbana-Champaign), Wajih Ul Hassan (University of Illinois Urbana-Champaign), Ding...
More DetailsµRAI: Securing Embedded Systems with Return Address Integrity
Naif Saleh Almakhdhub (Purdue University and King Saud University), Abraham A. Clements (Sandia National...
More Details