ESORICS 2022

Program

Denmark Local Time (CEST / GMT + 2)

ESORICS 2022 Proc. I

ESORICS 2022 Proc. II

ESORICS 2022 Proc. III

ESORICS 2022
Program Brochure

08:00 - 08:45

Registration

08:45 - 09:00

Welcome Ceremony

Sankt Hans Torv & Nørrebros Runddel

09:00 - 10:00

Keynote Session:

Sankt Hans Torv & Nørrebros Runddel

Vijay Atluri

Cyber Resilience: an agenda for the future of cyberspace security

Paulo Verissimo

King Abdullah University of Science and Technology

10:00 - 10:20

Coffee Break

10:20 - 11:20

Long Meng, Liqun Chen

A Blockchain-based Long-term Time-Stamping Scheme

Maxime Buser, Rafael Dowsley
Muhammed F. Esgin
Shabnam Kasra Kermanshahi
Joseph Liu, Raphael Phan
Veronika Kuchta, Zhenfei Zhang

Post-Quantum Verifiable Random Function from Symmetric Primitives in PoS Blockchain

Nicholas Stifter, Aljosha Judmayer
Philipp Schindler, Edgar Weippl

Opportunistic Algorithmic Double-Spending: How I learned to stop worrying and love the Fork

Mengqi Wei, Wenxing Zhu
Liangkun Cui, Xiangxue Li
Qiang Li

Privacy Leakage in Privacy-Preserving Neural Network Inference

Ricardo Mendes, Mariana Cunha
João P. Vilela, Alastair Beresford

Enhancing User Privacy in Mobile Devices Through Prediction of Privacy Preferences

Stephanie Delaune
Joseph Lallemand

One vote is enough for analysing privacy

Fucai Luo, Saif Al-Kuwari
Haiyan Wang, Weihong Han

Generic Construction of Trace-and-Revoke Inner Product Functional Encryption

Huy Quoc Le, Dung Hoang Duong
Willy Susilo, Josef Pieprzyk

Spatial Encryption Revisited: From Delegatable Multiple Inner Product Encryption and More

Leixiao Cheng, Fei Meng

Public Key Authenticated Encryption with Keyword Search from LWE

11:20 - 12:20

Jayamine Alupotha
Xavier Boyen, Matthew McKague

Zero-History Confidential Chains with Zero-Knowledge Contracts: A New Normal for Decentralized Ledgers?

Xin Yin, Zhen Liu
Guomin Yang, Guoxing Chen
Haojin Zhu

Secure Hierarchical Deterministic Wallet Supporting Stealth Address

Özgür Kesim, Christian Grothoff
Florian Dold, Martin Schanzenbach

Zero-Knowledge Age Restriction for GNU Taler

Pathum Chamikara Mahawaga Arachchige
Dongxi Liu, Seyit Camtepe
Surya Nepal, Marthie Grobler
Peter Bertok, Ibrahim Khalil

Local Differential Privacy for Federated Learning in Industrial Settings

Chengyu Lin, Zeyu Liu
Tal Malkin

XSPIR: Efficient Symmetrically Private Information Retrieval from Ring-LWE

Liron David, Avinatan Hassidim
Yossi Matias, Moti Yung

Scaling Up GAEN Pseudorandom Processes: Preparing for a More Extensive Pandemic

Francesca Falzon
Kenneth G. Paterson

An Efficient Query Recovery Attack Against a Graph Encryption Scheme

Jiaojiao Wu, Jianfeng Wang
Xinwei Yong, Xinyi Huang
Xiaofeng Chen

New Unbounded Verifiable Data Streaming for Batch Query with Almost Optimal Overhead

Massimiliano Albanese
Karin L. Johnsgard
Vipin Swarup

A Formal Model for Credential Hopping Attacks

12:20 - 14:00

Luncheon

14:00 - 15:20

Huanhuan Chen, Shihui Fu
Kaitai Liang

No-directional and Backward-leak Uni-directional Updatable Encryption are Equivalent

Jelle Vos, Daniël Vos
Zekeriya Erkin

Efficient Circuits for Permuting and Mapping Packed Values Across Leveled Homomorphic Ciphertexts

Yi Liu, Qi Wang
Siu-Ming Yiu

Towards Practical Homomorphic Time-Lock Puzzles: Usability and Verifiability

Yue Qin, Ruoyu Ding
Chi Cheng, Nina Bindel
Yanbin Pan, Jintai Ding

Light the Signal: Optimization of Signal Leakage Attacks against LWE-Based Key Exchange

Yanbo Chen, Yunlei Zhao

Half-Aggregation of Schnorr Signatures with Tight Reductions

Dario Fiore, Lydia Garms
Dimitris Kolonelos
Claudio Soriente, Ida Tucker

Ring Signatures with User-Controlled Linkability

Jonathan Bootle
Kaoutar Elkhiyaoui
Julia Hesse, Yacov Manevich

DualDory: Logarithmic-verifier linkable ring signatures through preprocessing

Tuong Ngoc Nguyen, Anh The Ta
Huy Quoc Le, Dung Hoang Duong
Willy Susilo, Fuchun Guo
Kazuhide Fukushima, Shinsaku Kiyomoto

Efficient Unique Ring Signatures From Lattices

15:20 - 15:40

Coffee Break

15:40 - 16:40

Xiaoyi Chen, Yinpeng Dong
Zeyu Sun, Shengfang Zhai
Qingni Shen, Zhonghai Wu

Kallima: A Clean-label Framework for Textual Backdoor Attacks

Hengxian Song, Jing Liu
Jianing Yang, Xinyu Lei
Gang Xue

Two Types of Novel DoS Attacks against CDNs Based on HTTP/2 Flow Control Mechanism

Mauro Conti, Denis Donadel
Radha Poovendran, Federico Turrin

EVExchange: A Relay Attack on Electric Vehicle Charging System

Sri Aravindakrishnan Thyagarajan
Giulio Malavolta, Fritz Schmidt
Dominique Schröder

Verifiable Timed Linkable Ring Signatures For Scalable Payments for Monero

Andreas Erwig, Siavash Riahi

Deterministic Wallets for Adaptor Signatures

Mei Jiang, Dung Duong Willy Susilo

Puncturable Signature: A Generic Construction and Instantiations

Kiran Balagani, Matteo Cardaioli
Stefano Cecconello
Mauro Conti, Gene Tsudik

We can hear your PIN drop: A new acoustic side channel attack to profile PIN pads keys

Steven Lambregts, Huanhuan Chen
Jianting Ning, Kaitai Liang

Explore More, Reveal More - VAL: Volume and Access Pattern Leakage-abuse Attack with Leaked Documents

Ankit Gangwal, Shubham Singh
Riccardo Spolaor
Abhijeet Srivastava

BLEWhisperer: Exploiting BLE Advertisements for Data Exfiltration

16:40 - 17:40

Tomas Hlavacek, Haya Shulman
Michael Waidner

Smart RPKI Validation: Avoiding Errors and Preventing Hijacks

Alesia Chernikova, Nicolò Gozzi
Simona Boboila, Priyanka Angadi
John Loughner, Matthew Wilden
Nicola Perra, Tina Eliassi-Rad
Alina Oprea

Cyber Network Resilience against Self-Propagating Malware Attacks

Kurt Friday, Elie Kfoury
Elias Bou-Harb, Jorge Crichigno

INC: In-Network Classification of Botnet Propagation at Line Rate

Isabel Wagner

A Machine Learning Approach to Detect Differential Treatment of Anonymous Users

Bill Moriarty, Chun-Fu Chen
Shaohan Hu, Sean Moran
Marco Pistoia
Vincenzo Piuri, Pierangela Samarati

Utility Preserving Biometric Information Anonymization

Erin Kenney, Qiang Tang
Chase Wu

Anonymous Traceback for End to End Encryption

Mohammad Nur Nobi
Ram Krishnan
Yufei Huang, Ravi Sandhu

Administration of Machine Learning Based Access Control

François Hublet, David Basin
Srđan Krstić

Real-time Policy Enforcement with Metric First-Order Temporal Logic

Abdulla Aldoseri
David Oswald, Robert Chiper

A Tale of Four Gates | Privilege Escalation and Permission Bypasses on Android through App Components

18:00 ~

Welcome Reception at Conference Venue

Daniel Mølmark-O'Connor
Emmanouil Vasilomanolakis

Is your password sexist? A gamification-based analysis of the cultural context of leaked passwords.

Abdelrahaman Aly
Sara Cleemput

A Fast, Practical and Simple Shortest Path Protocol for Multiparty Computation

Feng Yue, Jiale Chen
Zhaopin Su, Niansong Wang
Guofu Zhang

Audio Spoofing Detection Using Constant-Q Spectral Sketches and Parallel-Attention SE-ResNet

Jiajun Du, Zhonghui Ge
Yu Long, Zhen Liu
Shifeng Sun, Xian Xu
Dawu Gu.

MixCT: Mixing Confidential Transactions from Homomorphic Commitment

Héber H. Arcolezi
Jean-François Couchot
Sébastien Gambs
Catuscia Palamidessi
Majid Zolfaghari

Multi-Freq-LDPy: Multiple Frequency Estimation Under Local Differential Privacy in Python

Ambrish Rawat
Killian Levacher
Mathieu Sinn

The Devil is in the GAN: Backdoor Attacks and Defenses in Deep Generative Models

08:00 - 09:00

Registration

09:00 - 10:00

Keynote Session:

Sankt Hans Torv & Nørrebros Runddel

Roberto Di Pietro

Lessons Learned from Building and Attacking Secure Computing Systems

Ahmad Reza Sadeghi

Technical University of Darmstadt

10:00 - 10:20

Coffee Break

10:20 - 11:20

Yi Xie, Mengdie Huang
Xiaoyu Zhang, Changyu Dong
Willy Susilo, Xiaofeng Chen

GAME: Generative-Based Adaptive Model Extraction Attack

Zhenyuan Li, Jun Zeng
Yan Chen, Zhenkai Liang

AttacKG: Constructing Technique Knowledge Graph from Cyber Threat Intelligence Reports

Xinjing Liu, Zhuo Ma
Yang Liu, Zhan Qin
Junwei Zhang, Zhuzhu Wang

SeInspect: Defending Model Stealing via Heterogeneous Semantic Inspection

Fuchun Guo, Yannan Li
Willy Susilo, Jianchang Lai
Ge Wu

Public Cloud Data Auditing Revisited: Removing the Tradeoff Between Proof Size and Storage Cost

Yubo Zheng, Peng Xu
Wei Wang, Tianyang Chen
Willy Susilo, Kaitai Liang
Hai Jin

DEKS: a Secure Cloud-based Searchable Service can Make Attackers Pay

Xingkai Wang, Zhenfu Cao
Zhen Liu, Kaitai Liang

MVOC: A Lighter Multi-Client Verifiable Outsourced Computation with Hybrid Homomorphic Encryption

Bertram Poettering
Simon Rastikian

Cryptographic Software-Update Authentication

John Chan, Phillip Rogaway

On Committing Authenticated Encryption

Jingwei Jiang, Ding Wang
Guoyin Zhang, Zhiyuan Chen

Quantum-Resistant Password-Based Threshold Single-Sign-On Authentication with Updatable Server Private Key

11:20 - 12:20

Zeyan Liu, Fengjun Li
Jingqiang Lin, Zhu Li
Bo Luo

Hide and Seek: on the Stealthiness of Attacks against Deep Learning Systems

Younghan Lee, Sohee Jun
Yungi Cho, Woorim Han
Hyungon Moon, Yunheung Paek

Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices

Buse G. A. Tekgul, Shelly Wang Samuel Marchal, N. Asokan

Real-time Adversarial Perturbations against Deep Reinforcement Learning Policies: Attacks and Defenses

Peiyang Li, Ye Wang
Zhuotao Liu, Ke Xu
Qian Wang, Chao Shen
Qi Li

Verifying the Quality of Outsourced Training on Clouds

Sunwoo Jang, Somin Song
Byungchul Tak, Sahil Suneja
Michael V. Le, Chuan Yue
Dan Williams

SecQuant: Quantifying Container System Call Exposure

Martin Schwarzl, Pietro Borrello
Andreas Kogler, Kenton Varda
Thomas Schuster, Daniel Gruss
Michael Schwarz

Robust and Scalable Process Isolation against Spectre in the Cloud

Alessia Michela Di Campi
Riccardo Focardi
Flaminia Luccio

The Revenge of Password Crackers: Automated Training of Password Cracking Tools

Mingming Jiang, Shengli Liu
Shuai Han, Dawu Gu

Fuzzy Authenticated Key Exchange with Tight Security

Benjamin Dowling
Felix Günther
Alexandre Poirrier

Continuous Authentication in Secure Messaging

12:20 - 14:00

Luncheon

14:00 - 15:20

Qi Guo, Di Wu
Yong Qi, Saiyu Qi
Qian Li

FLMJR: Improving Robustness of Federated Learning via Model Stability

Dorjan Hitaj, Giulio Pagnotta
Briland Hitaj, Luigi V. Mancini
Fernando Perez-Cruz

MaleficNet: Hiding Malware into Deep Neural Networks using Spread-Spectrum Channel Coding

Ashish Gupta, Tony T. Luo
Mao V. Ngo, Sajal K. Das

Long-Short History of Gradients is All You Need: Detecting Malicious and Unreliable Clients in Federated Learning

Alaa Oqaily, Yosr Jarraya
Lingyu Wang, Makan Pourzandi
Suryadipta Majumdar

MLFM: Machine Learning Meets Formal Method for Efficient Security Verification in Network Functions Virtualization (NFV)

Jingjing Guan, Hui Li
Haisong Ye, Ziming Zhao

A Formal Analysis of the FIDO2 Protocols

Christian Badertscher, Peter Gaži
Inigo Querejeta-Azurmendi
Alexander Russell

Composable Security Treatment of ECVRF and Batch Verifications

Gennaro Avitabile, Vincenzo Botta
Daniele Friolo, Ivan Visconti

Efficient Proofs of Knowledge for Threshold Relations

Sofía Celi, Jonathan Hoyland
Douglas Stebila, Thom Wiggers

A tale of two models: formal verification of KEMTLS via Tamarin

Clement Fung, Shreya Srinarasi
Keane Lucas, Hay Bryan Phee
Lujo Bauer

Perspectives from a Comprehensive Evaluation of Reconstruction-based Anomaly Detection in Industrial Control Systems

Lipeng Wan, Fangyu Zheng
Guang Fan, Rong Wei
Lili Gao, Yuewu Wang
Jingqiang Lin, Jiankuo Dong

A Novel High-performance Implementation of CRYSTALS-Kyber with AI Accelerator

Ahmed Amro, Vasileios Gkioulos

From Click To Sink: utilizing AIS for command and control in maritime cyber attacks

Fei Zhu, Xun Yi
Alsharif Abuadbba, Junwei Luo
Surya Nepal, Xinyi Huang

Efficient Hash-Based Redactable Signature for Smart Grid Applications

15:20 - 15:40

Coffee Break

15:40 - 16:40

Keynote Session:

Sankt Hans Torv & Nørrebros Runddel

Vijay Atluri

What does the future hold for AI and privacy?

Giuseppe Ateniese

George Mason University

17:30 - 19:00

Social Event

19:00 ~

Conference Banquet

08:00 - 09:00

Registration

09:00 - 10:00

Keynote Session:

Sankt Hans Torv & Nørrebros Runddel

Roberto Di Pietro

A Perspective on IoT Security

Ravi Sandhu

University of Texas at San Antonio

10:00 - 10:20

Coffee Break

10:20 - 11:20

Xinhui Shao, Lan Luo
Zhen Ling, Huaiyu Yan
Yumeng Wei, Xinwen Fu

fASLR: Function-Based ASLR for Resource-Constrained IoT Systems

Hyunwoo Lee, Anand Mudgerikar
Ashish Kundu, Ninghui Li
Elisa Bertino

An Infection-Identifying and Self-Evolving System for IoT Early Defense from Multi-Step Attacks

Ruoyu Li, Qing Li Yucheng Huang, Wenbin Zhang Peican Zhu, Yong Jiang

IoTEnsemble: Detection of Botnet Attacks on Internet of Things

Veronique Cortier
Pierrick Gaudry
Quentin Yang.

A toolbox for verifiable tally-hiding e-voting systems

Henri Devillez, Olivier Pereira
Thomas Peters

How to Verifiably Encrypt Many Bits for an Election?

Michael Backes, Pascal Berrang
Lucjan Hanzlik, Ivan Pryvalov

A framework for constructing Single Secret Leader Election from MPC

Aina Toky Rasoamanana
Olivier Levillain
Hervé Debar

Towards a Systematic and Automatic Use of State Machine Inference to Uncover Security Flaws and Fingerprint TLS Stacks

Bogdan Groza, Lucian Popa
Tudor Andreica, Pal-Stefan Murvay
Asaf Shabtai, Yuval Elovici

PanoptiCANs - Adversary-resilient Architectures for Controller Area Networks

Zhuohua Li, Jincheng Wang
Mingshen Sun, John C.S. Lui

Detecting Cross-Language Memory Management Issues in Rust

11:40 - 12:20

Javaria Ahmad
Fengjun Li, Bo Luo

IoTPrivComp: A Measurement Study of Privacy Compliance in IoT Apps

Yuantian Miao, Chao Chen
Lei Pan, Shigang Liu
Seyit Camtepe, Jun Zhang
Yang Xiang

No-Label User-Level Membership Inference for ASR Model Auditing

Darius Suciu, Radu Sion
Michael Ferdman

AppBastion: Protection from Untrusted Apps and OSes on ARM

Jesus Cumplido, Cristina Alcaraz
Javier Lopez

Collaborative anomaly detection system for charging stations

Luca Borzacchiello, Emilio Coppa
Davide Maiorca, Andrea Columbu
Camil Demetrescu, Giorgio Giacinto

Reach Me if You Can: On Native Vulnerability Reachability in Android Apps

Yuancheng Jiang, Gregory Duck
Roland Yap, Zhenkai Liang
Pinghai Yuan

Extensible Virtual Call Integrity

12:20 - 14:00

Luncheon

14:00 - 15:00

Thomas Rokicki, Clémentine Maurice
Michael Schwarz

CPU Port Contention Without SMT

Jose Moreira, Mark Ryan
Flavio Garcia

Protocols for a Two-Tiered Trusted Computing Base

Florian Frank, Tolga Arul
Nikolaos Athanasios Anagnostopoulos
Stefan Katzenbeisser

Using Memristor Arrays as Physical Unclonable Functions

Leon Trampert
Christian Rossow
Michael Schwarz

Browser-based CPU Fingerprinting

August See, Leon Fritz
Mathias Fischer

Introducing polymorphic protocols to limit the influence of web bots

Nick Frymann, Mark Manulis
Daniel Gardham

Unlinkable Delegation of WebAuthn Credentials

Konrad Wolsing, Lea Thiemt
Christian van Sloun
Eric Wagner, Klaus Wehrle
Martin Henze.

Can Industrial Intrusion Detection Be SIMPLE?

Matteo Cardaioli, Mauro Conti
Arpita Ravindranath

For your Voice Only: Exploiting Side Channels in Voice Messaging for Environment Detection

Ayoosh Bansal, Anant Kandikuppa
Chien-Ying Chen, Monowar Hasan
Adam Bates, Sibin Mohan

Towards Efficient Auditing for Real-Time Systems

15:00 - 15:40

Coffee Break

15:40 - 16:40

Wenxing Zhu, Mengqi Wei
Xiangxue Li, Qiang Li

SecureBiNN: 3-Party Secure Computation Framework for Binarized Neural Network Inference

Erik-Oliver Blass
Florian Kerschbaum

Mixed-Technique Multi-Party Computations Composed of Two-Party Computations

Kay Hamacher, Tobias Kussel
Thomas Schneider
Oleksandr Tkachenko

PEA: Practical Private Epistasis Analysis using MPC

Sebastian García
Joaquin Bogado, Karel Hynek
Dmitrii Vekshin, Armin Wasicek
Tomáš Čejka

Large Scale Analysis of DoH Deployment on the Internet

Joshua Reynolds, Adam Bates
Michael Bailey.

Equivocal URLs: Understanding the Fragmented Space of URL Parser Implementations

Mingxuan Liu, Yiming Zhang
Baojun Liu, Haixin Duan

Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names

16:40 - 17:00

Best Paper Award & Concluding Remarks

17:00 ~

See you all on Workshop! (29-30 Sep.)

09:00 - 13:00

Coffee Break at:
10:00 - 10:20

Workshop Session : STAST

Socio-Technical Aspects in Security

Hovedbanegården

Workshop Session : CBT

Cryptocurrencies and Blockchain Technology

Tivoli

Workshop Session : CyberICPS

Security of Industrial Control Systems and of Cyper-Physical Systems

Enghave Plads

Workshop Session : SECPRE

Security and Privacy Requirements Engineering

Enghave Plads

Workshop Session : DPM

Data Privacy Management

Vesterbros Torv

Workshop Session : STM

Security and Trust Management

Kødbyen

12:20 - 14:00

Luncheon

14:00 - 18:00

Coffee Break at:
15:20 - 15:40

Workshop Session : STAST

Socio-Technical Aspects in Security

Hovedbanegården

Workshop Session : CBT

Cryptocurrencies and Blockchain Technology

Tivoli

Workshop Session : CyberICPS

Security of Industrial Control Systems and of Cyper-Physical Systems

Enghave Plads

Workshop Session : SECPRE

Security and Privacy Requirements Engineering

Enghave Plads

Workshop Session : DPM

Data Privacy Management

Vesterbros Torv

Workshop Session : STM

Security and Trust Management

Kødbyen

09:00 - 13:00

Coffee Break at:
10:00 - 10:20

Workshop Session : ETAA

Emerging Technologies for Authorization and Authentication

Kødbyen

Workshop Session : ADIoT

Attacks and Defenses for Internet-of-Things

Hovedbanegården

Workshop Session : SP-MIoT

Security and Privacy of Mobile IoT

Hovedbanegården

Workshop Session : CPS4CIP

Cyber-Physical Security for Critical infrastructure Protection

Enghave Plads

Workshop Session : SPOSE

Security, Privacy, Organizations, and Systems Engineering

Tivoli & Vesterbros Torv

Workshop Session : CDT & SECOMANE

Cyber Defense Technologies and Secure Communications at the Network Edge

Online-Only

12:20 - 14:00

Luncheon

14:00 - 18:00

Coffee Break at:
15:20 - 15:40

Workshop Session : ETAA

Emerging Technologies for Authorization and Authentication

Kødbyen

Workshop Session : ADIoT

Attacks and Defenses for Internet-of-Things

Hovedbanegården

Workshop Session : SP-MIoT

Security and Privacy of Mobile IoT

Hovedbanegården

Workshop Session : SecAssure

System Security Assurance

Enghave Plads

Workshop Session : EIS

Election Infrastructure Security

Online-Only

Fucai Luo, Saif Al-Kuwari
Haiyan Wang, Weihong Han

Generic Construction of Trace-and-Revoke Inner Product Functional Encryption

Kiran Balagani, Matteo Cardaioli
Stefano Cecconello
Mauro Conti, Gene Tsudik

We can hear your PIN drop: A new acoustic side channel attack to profile PIN pads keys

Lipeng Wan, Fangyu Zheng
Guang Fan, Rong Wei
Lili Gao, Yuewu Wang
Jingqiang Lin, Jiankuo Dong

A Novel High-performance Implementation of CRYSTALS-Kyber with AI Accelerator

Maxime Buser, Rafael Dowsley
Muhammed F. Esgin
Shabnam Kasra Kermanshahi
Joseph Liu, Raphael Phan
Veronika Kuchta, Zhenfei Zhang

Post-Quantum Verifiable Random Function from Symmetric Primitives in PoS Blockchain

Long Meng, Liqun Chen

A Blockchain-based Long-term Time-Stamping Scheme

Mauro Conti, Denis Donadel
Radha Poovendran, Federico Turrin

EVExchange: A Relay Attack on Electric Vehicle Charging System

Sunwoo Jang, Somin Song
Byungchul Tak, Sahil Suneja
Michael V. Le, Chuan Yue
Dan Williams

SecQuant: Quantifying Container System Call Exposure

Mengqi Wei, Wenxing Zhu
Liangkun Cui, Xiangxue Li
Qiang Li

Privacy Leakage in Privacy-Preserving Neural Network Inference

Huy Quoc Le, Dung Hoang Duong
Willy Susilo, Josef Pieprzyk

Spatial Encryption Revisited: From Delegatable Multiple Inner Product Encryption and More

Isabel Wagner

A Machine Learning Approach to Detect Differential Treatment of Anonymous Users

Martin Schwarzl, Pietro Borrello
Andreas Kogler, Kenton Varda
Thomas Schuster, Daniel Gruss
Michael Schwarz

Robust and Scalable Process Isolation against Spectre in the Cloud

Ricardo Mendes, Mariana Cunha
João P. Vilela, Alastair Beresford

Enhancing User Privacy in Mobile Devices Through Prediction of Privacy Preferences

Darius Suciu, Radu Sion
Michael Ferdman

AppBastion: Protection from Untrusted Apps and OSes on ARM

Xinhui Shao, Lan Luo
Zhen Ling, Huaiyu Yan
Yumeng Wei, Xinwen Fu

fASLR: Function-Based ASLR for Resource-Constrained IoT Systems

Chengyu Lin, Zeyu Liu
Tal Malkin

XSPIR: Efficient Symmetrically Private Information Retrieval from Ring-LWE

Younghan Lee, Sohee Jun
Yungi Cho, Woorim Han
Hyungon Moon, Yunheung Paek

Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices

Erik-Oliver Blass
Florian Kerschbaum

Mixed-Technique Multi-Party Computations Composed of Two-Party Computations

Yanbo Chen, Yunlei Zhao

Half-Aggregation of Schnorr Signatures with Tight Reductions

Jingjing Guan, Hui Li
Haisong Ye, Ziming Zhao

A Formal Analysis of the FIDO2 Protocols

Fuchun Guo, Yannan Li
Willy Susilo, Jianchang Lai
Ge Wu

Public Cloud Data Auditing Revisited: Removing the Tradeoff Between Proof Size and Storage Cost

Yi Liu, Qi Wang
Siu-Ming Yiu

Towards Practical Homomorphic Time-Lock Puzzles: Usability and Verifiability

Clement Fung, Shreya Srinarasi
Keane Lucas, Hay Bryan Phee
Lujo Bauer

Perspectives from a Comprehensive Evaluation of Reconstruction-based Anomaly Detection in Industrial Control Systems

Yubo Zheng, Peng Xu
Wei Wang, Tianyang Chen
Willy Susilo, Kaitai Liang
Hai Jin

DEKS: a Secure Cloud-based Searchable Service can Make Attackers Pay

Christian Badertscher, Peter Gaži
Inigo Querejeta-Azurmendi
Alexander Russell

Composable Security Treatment of ECVRF and Batch Verifications

Liron David, Avinatan Hassidim
Yossi Matias, Moti Yung

Scaling Up GAEN Pseudorandom Processes: Preparing for a More Extensive Pandemic

Alaa Oqaily, Yosr Jarraya
Lingyu Wang, Makan Pourzandi
Suryadipta Majumdar

MLFM: Machine Learning Meets Formal Method for Efficient Security Verification in Network Functions Virtualization (NFV)

François Hublet, David Basin
Srđan Krstić

Real-time Policy Enforcement with Metric First-Order Temporal Logic

John Chan, Phillip Rogaway

On Committing Authenticated Encryption

Michael Backes, Pascal Berrang
Lucjan Hanzlik, Ivan Pryvalov

A framework for constructing Single Secret Leader Election from MPC

Nicholas Stifter
Aljosha Judmayer
Philipp Schindler
Edgar Weippl

Opportunistic Algorithmic Double-Spending: How I learned to stop worrying and love the Fork

Wenxing Zhu, Mengqi Wei
Xiangxue Li, Qiang Li

SecureBiNN: 3-Party Secure Computation Framework for Binarized Neural Network Inference

Ahmed Amro, Vasileios Gkioulos

From Click To Sink: utilizing AIS for command and control in maritime cyber attacks

Xiaoyi Chen, Yinpeng Dong
Zeyu Sun, Shengfang Zhai
Qingni Shen, Zhonghai Wu

Kallima: A Clean-label Framework for Textual Backdoor Attacks

Zhenyuan Li, Jun Zeng
Yan Chen, Zhenkai Liang.

AttacKG: Constructing Technique Knowledge Graph from Cyber Threat Intelligence Reports

Javaria Ahmad
Fengjun Li, Bo Luo

IoTPrivComp: A Measurement Study of Privacy Compliance in IoT Apps

Francesca Falzon
Kenneth G. Paterson

An Efficient Query Recovery Attack Against a Graph Encryption Scheme

Qi Guo, Di Wu
Yong Qi, Saiyu Qi
Qian Li

FLMJR: Improving Robustness of Federated Learning via Model Stability

Sofía Celi, Jonathan Hoyland
Douglas Stebila, Thom Wiggers

A tale of two models: formal verification of KEMTLS via Tamarin

Stephanie Delaune
Joseph Lallemand

One vote is enough for analysing privacy

Abdulla Aldoseri
David Oswald, Robert Chiper

A Tale of Four Gates | Privilege Escalation and Permission Bypasses on Android through App Components

Massimiliano Albanese
Karin L. Johnsgard
Vipin Swarup

A Formal Model for Credential Hopping Attacks

Hengxian Song, Jing Liu
Jianing Yang, Xinyu Lei
Gang Xue

Two Types of Novel DoS Attacks against CDNs Based on HTTP/2 Flow Control Mechanism

Yue Qin, Ruoyu Ding
Chi Cheng, Nina Bindel
Yanbin Pan, Jintai Ding

Light the Signal: Optimization of Signal Leakage Attacks against LWE-Based Key Exchange

Bill Moriarty, Chun-Fu Chen
Shaohan Hu, Sean Moran
Marco Pistoia
Vincenzo Piuri, Pierangela Samarati

Utility Preserving Biometric Information Anonymization

Leon Trampert
Christian Rossow
Michael Schwarz

Browser-based CPU Fingerprinting

Yuantian Miao, Chao Chen
Lei Pan, Shigang Liu
Seyit Camtepe, Jun Zhang
Yang Xiang

No-Label User-Level Membership Inference for ASR Model Auditing

Veronique Cortier
Pierrick Gaudry
Quentin Yang.

A toolbox for verifiable tally-hiding e-voting systems

Benjamin Dowling
Felix Günther
Alexandre Poirrier

Continuous Authentication in Secure Messaging

Thomas Rokicki, Clémentine Maurice
Michael Schwarz

CPU Port Contention Without SMT

Florian Frank, Tolga Arul
Nikolaos Athanasios Anagnostopoulos
Stefan Katzenbeisser

Using Memristor Arrays as Physical Unclonable Functions

Ankit Gangwal, Shubham Singh
Riccardo Spolaor
Abhijeet Srivastava

BLEWhisperer: Exploiting BLE Advertisements for Data Exfiltration

Aina Toky Rasoamanana
Olivier Levillain
Hervé Debar

Towards a Systematic and Automatic Use of State Machine Inference to Uncover Security Flaws and Fingerprint TLS Stacks

Kay Hamacher, Tobias Kussel
Thomas Schneider
Oleksandr Tkachenko

PEA: Practical Private Epistasis Analysis using MPC

Konrad Wolsing, Lea Thiemt
Christian van Sloun
Eric Wagner, Klaus Wehrle
Martin Henze.

Can Industrial Intrusion Detection Be SIMPLE?

Joshua Reynolds, Adam Bates
Michael Bailey.

Equivocal URLs: Understanding the Fragmented Space of URL Parser Implementations

Yi Xie, Mengdie Huang
Xiaoyu Zhang, Changyu Dong
Willy Susilo, Xiaofeng Chen

GAME: Generative-Based Adaptive Model Extraction Attack

Alesia Chernikova, Nicolò Gozzi
Simona Boboila, Priyanka Angadi
John Loughner, Matthew Wilden
Nicola Perra, Tina Eliassi-Rad
Alina Oprea

Cyber Network Resilience against Self-Propagating Malware Attacks

Xinjing Liu, Zhuo Ma
Yang Liu, Zhan Qin
Junwei Zhang, Zhuzhu Wang

SeInspect: Defending Model Stealing via Heterogeneous Semantic Inspection

Ayoosh Bansal, Anant Kandikuppa
Chien-Ying Chen, Monowar Hasan
Adam Bates, Sibin Mohan

Towards Efficient Auditing for Real-Time Systems

Sri Aravindakrishnan Thyagarajan
Giulio Malavolta, Fritz Schmidt
Dominique Schröder

Verifiable Timed Linkable Ring Signatures For Scalable Payments for Monero

Bogdan Groza, Lucian Popa
Tudor Andreica, Pal-Stefan Murvay
Asaf Shabtai, Yuval Elovici

PanoptiCANs - Adversary-resilient Architectures for Controller Area Networks

Zhuohua Li, Jincheng Wang
Mingshen Sun, John C.S. Lui

Detecting Cross-Language Memory Management Issues in Rust

Luca Borzacchiello, Emilio Coppa
Davide Maiorca, Andrea Columbu
Camil Demetrescu, Giorgio Giacinto

Reach Me if You Can: On Native Vulnerability Reachability in Android Apps

Jesus Cumplido, Cristina Alcaraz
Javier Lopez

Collaborative anomaly detection system for charging stations

Ashish Gupta, Tony T. Luo
Mao V. Ngo, Sajal K. Das

Long-Short History of Gradients is All You Need: Detecting Malicious and Unreliable Clients in Federated Learning

Bertram Poettering
Simon Rastikian

Cryptographic Software-Update Authentication

Yuancheng Jiang, Gregory Duck
Roland Yap, Zhenkai Liang
Pinghai Yuan

Extensible Virtual Call Integrity

Ruoyu Li, Qing Li
Yucheng Huang, Wenbin Zhang
Peican Zhu, Yong Jiang

IoTEnsemble: Detection of Botnet Attacks on Internet of Things

Jiaojiao Wu, Jianfeng Wang
Xinwei Yong, Xinyi Huang
Xiaofeng Chen

New Unbounded Verifiable Data Streaming for Batch Query with Almost Optimal Overhead

Jose Moreira, Mark Ryan
Flavio Garcia

Protocols for a Two-Tiered Trusted Computing Base

Jonathan Bootle
Kaoutar Elkhiyaoui
Julia Hesse, Yacov Manevich

DualDory: Logarithmic-verifier linkable ring signatures through preprocessing

Andreas Erwig, Siavash Riahi

Deterministic Wallets for Adaptor Signatures

Sebastian García
Joaquin Bogado, Karel Hynek
Dmitrii Vekshin, Armin Wasicek
Tomáš Čejka

Large Scale Analysis of DoH Deployment on the Internet

Dario Fiore, Lydia Garms
Dimitris Kolonelos
Claudio Soriente, Ida Tucker

Ring Signatures with User-Controlled Linkability

Özgür Kesim, Christian Grothoff
Florian Dold, Martin Schanzenbach

Zero-Knowledge Age Restriction for GNU Taler

Nick Frymann, Mark Manulis
Daniel Gardham

Unlinkable Delegation of WebAuthn Credentials

Mingxuan Liu, Yiming Zhang
Baojun Liu, Haixin Duan

Exploring the Characteristics and Security Risks of Emerging Emoji Domain Names

Dorjan Hitaj, Giulio Pagnotta
Briland Hitaj, Luigi V. Mancini
Fernando Perez-Cruz

MaleficNet: Hiding Malware into Deep Neural Networks using Spread-Spectrum Channel Coding

Mingming Jiang, Shengli Liu
Shuai Han, Dawu Gu

Fuzzy Authenticated Key Exchange with Tight Security

Buse G. A. Tekgul, Shelly Wang
Samuel Marchal, N. Asokan

Real-time Adversarial Perturbations against Deep Reinforcement Learning Policies: Attacks and Defenses

Hyunwoo Lee, Anand Mudgerikar
Ashish Kundu, Ninghui Li
Elisa Bertino

An Infection-Identifying and Self-Evolving System for IoT Early Defense from Multi-Step Attacks

Henri Devillez, Olivier Pereira
Thomas Peters

How to Verifiably Encrypt Many Bits for an Election?

Gennaro Avitabile, Vincenzo Botta
Daniele Friolo, Ivan Visconti.

Efficient Proofs of Knowledge for Threshold Relations

Jelle Vos, Daniël Vos
Zekeriya Erkin

Efficient Circuits for Permuting and Mapping Packed Values Across Leveled Homomorphic Ciphertexts

August See, Leon Fritz
Mathias Fischer

Introducing polymorphic protocols to limit the influence of web bots

Alessia Michela Di Campi
Riccardo Focardi
Flaminia Luccio

The Revenge of Password Crackers: Automated Training of Password Cracking Tools

Leixiao Cheng, Fei Meng

Public Key Authenticated Encryption with Keyword Search from LWE

Huanhuan Chen, Shihui Fu
Kaitai Liang

No-directional and Backward-leak Uni-directional Updatable Encryption are Equivalent

Jayamine Alupotha
Xavier Boyen, Matthew McKague

Zero-History Confidential Chains with Zero-Knowledge Contracts: A New Normal for Decentralized Ledgers?

Tuong Ngoc Nguyen, Anh The Ta
Huy Quoc Le, Dung Hoang Duong
Willy Susilo, Fuchun Guo
Kazuhide Fukushima, Shinsaku Kiyomoto

Efficient Unique Ring Signatures From Lattices

Zeyan Liu, Fengjun Li
Jingqiang Lin, Zhu Li
Bo Luo

Hide and Seek: on the Stealthiness of Attacks against Deep Learning Systems

Mohammad Nur Nobi
Ram Krishnan
Yufei Huang, Ravi Sandhu

Administration of Machine Learning Based Access Control

Mei Jiang, Dung Duong
Willy Susilo

Puncturable Signature: A Generic Construction and Instantiations

Fei Zhu, Xun Yi
Alsharif Abuadbba, Junwei Luo
Surya Nepal, Xinyi Huang

Efficient Hash-Based Redactable Signature for Smart Grid Applications

Jingwei Jiang, Ding Wang
Guoyin Zhang, Zhiyuan Chen

Quantum-Resistant Password-Based Threshold Single-Sign-On Authentication with Updatable Server Private Key

Pathum Chamikara Mahawaga Arachchige
Dongxi Liu, Seyit Camtepe
Surya Nepal, Marthie Grobler
Peter Bertok, Ibrahim Khalil

Local Differential Privacy for Federated Learning in Industrial Settings

Xin Yin, Zhen Liu
Guomin Yang, Guoxing Chen
Haojin Zhu

Secure Hierarchical Deterministic Wallet Supporting Stealth Address

Tomas Hlavacek, Haya Shulman
Michael Waidner

Smart RPKI Validation: Avoiding Errors and Preventing Hijacks

Steven Lambregts, Huanhuan Chen
Jianting Ning, Kaitai Liang

Explore More, Reveal More - VAL: Volume and Access Pattern Leakage-abuse Attack with Leaked Documents

Peiyang Li, Ye Wang
Zhuotao Liu, Ke Xu
Qian Wang, Chao Shen
Qi Li

Verifying the Quality of Outsourced Training on Clouds

Erin Kenney, Qiang Tang
Chase Wu

Anonymous Traceback for End to End Encryption

Xingkai Wang, Zhenfu Cao
Zhen Liu, Kaitai Liang

MVOC: A Lighter Multi-Client Verifiable Outsourced Computation with Hybrid Homomorphic Encryption

Matteo Cardaioli, Mauro Conti
Arpita Ravindranath

For your Voice Only: Exploiting Side Channels in Voice Messaging for Environment Detection

Kurt Friday, Elie Kfoury
Elias Bou-Harb, Jorge Crichigno

INC: In-Network Classification of Botnet Propagation at Line Rate

Last Update : 14.03 Sep. 28, 2022 GMT+2