Results

Paper	Avail.	Funct.	Repro.	Available At
The DOMino Effect: Detecting and Exploiting DOM Clobbering Gadgets via Concolic Execution with Symbolic DOM				📦 Artifact 📄 Appendix
"I’m trying to learn. . . and I’m shooting myself in the foot": Beginners’ Struggles When Solving Binary Exploitation Exercises				📦 Artifact 📄 Appendix
"Threat modeling is very formal, it’s very technical, and also very hard to do correctly": Investigating Threat Modeling Practices in Open-Source Software Projects				📦 Artifact
A Comprehensive Formal Security Analysis of OPC UA				📦 Artifact 📄 Appendix
A Formal Analysis of Apple’s iMessage PQ3 Protocol				📦 Artifact 📄 Appendix
A Framework for Designing Provably Secure Steganography				📦 Artifact 📄 Appendix
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features				📦 Artifact
A limited technical background is sufficient for attack-defense tree acceptability				📦 Artifact 📄 Appendix
AGNNCert: Defending Graph Neural Networks against Arbitrary Perturbations with Deterministic Certification				📦 Artifact
AKMA+: Security and Privacy-Enhanced and Standard-Compatible AKMA for 5G Communication				📦 Artifact
ALERT: Machine Learning-Enhanced Risk Estimation for Databases Supporting Encrypted Queries				📦 Artifact 📄 Appendix
APPATCH: Automated Adaptive Prompting Large Language Models for Real-World Software Vulnerability Patching				📦 Artifact 📄 Appendix
AUDIO WATERMARK: Dynamic and Harmless Watermark for Black-box Voice Dataset Copyright Protection				📦 Artifacts:       1, 2
Achilles: A Formal Framework of Leaking Secrets from Signature Schemes via Rowhammer				📦 Artifact 📄 Appendix
An Industry Interview Study of Software Signing for Supply Chain Security				📦 Artifact
Analyzing the AI Nudification Application Ecosystem				📦 Artifact
Arbitrary-Threshold Fully Homomorphic Encryption with Lower Complexity				📦 Artifact
Artifacts for BarraCUDA: Edge GPUs do leak DNN weights				📦 Artifact
Assuring Certified Database Utility in Privacy-Preserving Database Fingerprinting				📦 Artifact 📄 Appendix
Atkscopes: Multiresolution Adversarial Perturbation as a Unified Attack on Perceptual Hashing and Beyond				📦 Artifact 📄 Appendix
Attacker Control and Bug Prioritization				📦 Artifact 📄 Appendix
AudioMarkNet: Audio Watermarking for Deepfake Speech Detection				📦 Artifact
Auspex: Unveiling Inconsistency Bugs of Transaction Fee Mechanism in Blockchain				📦 Artifact
Available Attestation: Towards a Reorg-Resilient Solution for Ethereum Proof-of-Stake				📦 Artifact 📄 Appendix
Await() a Second: Evading Control Flow Integrity by Hijacking C++ Coroutines				📦 Artifact 📄 Appendix
BEAT-MEV: Epochless Approach to Batched Threshold Encryption for MEV Prevention				📦 Artifact
BLens: Contrastive Captioning of Binary Functions using Ensemble Embedding				📦 Artifact 📄 Appendix
Beyond Statistical Estimation: Differentially Private Individual Computation via Shuffling				📦 Artifact
BlueGuard: Accelerated Host and Guest Introspection Using DPUs				📦 Artifact
Bots can Snoop: Uncovering and Mitigating Privacy Risks of Bots in Group Chats				📦 Artifact 📄 Appendix
Breaking Free: Efficient Multi-Party Private Set Union Without Non-Collusion Assumptions				📦 Artifact 📄 Appendix
BulletCT: Towards More Scalable Ring Confidential Transactions With Transparent Setup				📦 Artifact
CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization				📦 Artifact 📄 Appendix
Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers				📦 Artifact
Catch-22: Uncovering Compromised Hosts using SSH Public Keys				📦 Artifact 📄 Appendix
CertPHash: Towards Certified Perceptual Hashing via Robust Training				📦 Artifact 📄 Appendix
ChainFuzz: Exploiting Upstream Vulnerabilities in Open-Source Supply Chains				📦 Artifact
Challenging Overreach: Addressing the Discrepancy Between Mobile App Privacy Practices and User Intention				📦 Artifact
Characterizing and Detecting Propaganda-Spreading Accounts on Telegram				📦 Artifact 📄 Appendix
Characterizing the MrDeepFakes Sexual Deepfake Marketplace				📦 Artifact
Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors				📦 Artifact 📄 Appendix
ChoiceJacking: Compromising Mobile Devices through Malicious Chargers like a Decade ago				📦 Artifact
CoVault: Secure, Scalable Analytics of Personal Data				📦 Artifact 📄 Appendix
CoreCrisis: Threat-Guided and Context-Aware Iterative Learning and Fuzzing of 5G Core Networks				📦 Artifact 📄 Appendix
Current Affairs: A Security Measurement Study of CCS EV Charging Deployments				📦 Artifact 📄 Appendix
Cyber-Physical Deception Through Coordinated IoT Honeypots				📦 Artifact
DFS: Delegation-friendly zkSNARK and Private Delegation of Provers				📦 Artifact 📄 Appendix
DISPATCH: Unraveling Security Patches from Entangled Code Changes				📦 Artifact
DarkGram: A Large-Scale Analysis of Cybercriminal Activity Channels on Telegram				📦 Artifact
Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning				📦 Artifact
Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI				📦 Artifact
DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data				📦 Artifact
DeepFold: Efficient Multilinear Polynomial Commitment from Reed-Solomon Code and Its Application to Zero-knowledge Proofs				📦 Artifacts:       1, 2, 3
Demystifying the (In)Security of QR Code-based Login in Real-world Deployments				📦 Artifacts:       1, 2
Detecting Compromise of Passkey Storage on the Cloud				📦 Artifact
DiskSpy: Exploring a Long-Range Covert-Channel Attack via mmWave Sensing of µm-level HDD Vibrations				📦 Artifact
Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses				📦 Artifact 📄 Appendix
Distributed Private Aggregation in Graph Neural Networks				📦 Artifact 📄 Appendix
Distributional Private Information Retrieval				📦 Artifact 📄 Appendix
Dorami: Privilege Separating Security Monitor on RISC-V TEEs				📦 Artifact
Dormant: Defending against Pose-driven Human Image Animation				📦 Artifact
Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers				📦 Artifact 📄 Appendix
Dumbo-MPC: Efficient Fully Asynchronous MPC with Optimal Resilience				📦 Artifact 📄 Appendix
Easy As Child’s Play: An Empirical Study on Age Verification of Adult-Oriented Android Apps				📦 Artifact 📄 Appendix
Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection				📦 Artifact 📄 Appendix
Efficient 2PC for Constant Round Secure Equality Testing and Comparisons				📦 Artifact
Efficient Ranking, Order Statistics, and Sorting under CKKS				📦 Artifact 📄 Appendix
Email Spoofing with SMTP Smuggling: How the Shared Email Infrastructures Magnify this Vulnerability				📦 Artifacts:       1, 2
Enabling Low-Cost Secure Computing on Untrusted In-Memory Architectures				📦 Artifact 📄 Appendix
Encarsia: Evaluating CPU Fuzzers via Automatic Bug Injection				📦 Artifact 📄 Appendix
Encrypted Access Logging for Online Accounts: Device Attributions without Device Tracking				📦 Artifact 📄 Appendix
Endangered Privacy: Large-Scale Monitoring of Video Streaming Services				📦 Artifact 📄 Appendix
Engorgio: An Arbitrary-Precision Unbounded-Size Hybrid Encrypted Database via Quantized Fully Homomorphic Encryption				📦 Artifact 📄 Appendix
Enhanced Label-Only Membership Inference Attacks with Fewer Queries				📦 Artifact 📄 Appendix
Evaluating LLM-based Personal Information Extraction and Countermeasures				📦 Artifact 📄 Appendix
Evaluating the Effectiveness and Robustness of Visual Similarity-based Phishing Detection Models				📦 Artifact 📄 Appendix
EvilEDR: Repurposing EDR as an Offensive Tool				📦 Artifact 📄 Appendix
Expert Insights into Advanced Persistent Threats: Analysis, Attribution, and Challenges				📦 Artifact
Exposing the Guardrails: Reverse-Engineering and Jailbreaking Safety Filters in DALL·E Text-to-Image Pipelines				📦 Artifact 📄 Appendix
FIXX: FInding eXploits from eXamples				📦 Artifact 📄 Appendix
FLOP: Breaking the Apple M3 CPU via False Load Output Predictions				📦 Artifact
Fast Enhanced Private Set Union in the Balanced and Unbalanced Scenarios				📦 Artifact 📄 Appendix
Fighting Fire with Fire: Continuous Attack for Adversarial Android Malware Detection				📦 Artifact
Finding Metadata Inconsistencies in Distributed File Systems via Cross-Node Operation Modeling				📦 Artifact
Flexway O-Sort: Enclave-Friendly and Optimal Oblivious Sorting				📦 Artifact 📄 Appendix
Following Devils’ Footprint: Towards Real-time Detection of Price Manipulation Attacks				📦 Artifact
From Alarms to Real Bugs: Multi-target Multi-step Directed Greybox Fuzzing for Static Analysis Result Verification				📦 Artifact 📄 Appendix
From Meme to Threat: On the Hateful Meme Understanding and Induced Hateful Content Generation in Open-Source Vision Language Models				📦 Artifact
Further Study on Frequency Estimation under Local Differential Privacy				📦 Artifact 📄 Appendix
Fuzzing the PHP Interpreter via Dataflow Fusion				📦 Artifact
GNSS-WASP: GNSS Wide Area SPoofing				📦 Artifact
GPC Web Crawler				📦 Artifact 📄 Appendix
GeCos Replacing Experts: Generalizable and Comprehensible Industrial Intrusion Detection				📦 Artifact 📄 Appendix
GenHuzz: An Efficient Generative Hardware Fuzzer				📦 Artifact
Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data				📦 Artifact 📄 Appendix
Gotta Detect ’Em All: Fake Base Station and Multi-Step Attack Detection in Cellular Networks				📦 Artifact 📄 Appendix
GraphAce: Secure Two-Party Graph Analysis Achieving Communication Efficiency				📦 Artifact 📄 Appendix
Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack				📦 Artifact
H2O2RAM: A High-Performance Hierarchical Doubly Oblivious RAM				📦 Artifact 📄 Appendix
Harness: Transparent and Lightweight Protection of Vehicle Control on Untrusted Android Automotive Operating System				📦 Artifact 📄 Appendix
HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns				📦 Artifact 📄 Appendix
HawkEye: Statically and Accurately Profiling the Communication Cost of Models in Multi-party Learning				📦 Artifact 📄 Appendix
High Stakes, Low Certainty: Evaluating the Efficacy of High-Level Indicators of Compromise in Ransomware Attribution: Artifacts				📦 Artifact 📄 Appendix
How Researchers De-identify Data in Practice				📦 Artifact
HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web				📦 Artifact 📄 Appendix
ImpROV: Measuring and Mitigating Collateral Damage of Route Origin Validation in RPKI				📦 Artifact
ImpROV: Measuring and Mitigating Collateral Damage of Route Origin Validation in RPKI				📦 Artifact
Invisible but Detected: Physical Adversarial Shadow Attack and Defense on LiDAR Object Detection				📦 Artifact 📄 Appendix
JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation				📦 Artifact 📄 Appendix
LLMmap: Fingerprinting for Large Language Models				📦 Artifact
Learning from Functionality Outputs: Private Join and Compute in the Real World				📦 Artifact 📄 Appendix
Lemon: Network-wide DDoS Detection with Routing-Oblivious Per-flow Measurement				📦 Artifact
LightShed: Defeating Perturbation-based Image Copyright Protections				📦 Artifact
Lost in the Mists of Time: Expirations in DNS Footprints of Mobile Apps				📦 Artifact 📄 Appendix
Low-Cost and Comprehensive Non-textual Input Fuzzing with LLM-Synthesized Input Generators				📦 Artifact
MAESTRO: Multi-party AES using Lookup Tables				📦 Artifact 📄 Appendix
MBFuzzer: A Multi-Party Protocol Fuzzer for MQTT Brokers				📦 Artifact
Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents				📦 Artifact
Membership Inference Attacks Against Vision-Language Models				📦 Artifact
Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink				📦 Artifact
Misty Registry: An Empirical Study of Flawed Domain Registry Operation				📦 Artifact
More is Less: Extra Features in Contactless Payments Break Security				📦 Artifact
NOKEScam: Understanding and Rectifying Non-Sense Keywords Spear Scam in Search Engines				📦 Artifact
Not so Refreshing: Attacking GPUs using RFM Rowhammer Mitigation				📦 Artifact 📄 Appendix
Nothing is Unreachable: Automated Synthesis of Robust Code-Reuse Gadget Chains for Arbitrary Exploitation Primitives				📦 Artifact 📄 Appendix
OBLIVIATOR: OBLIVIous Parallel Joins and other OperATORs in Shared Memory Environments				📦 Artifact 📄 Appendix
ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion Detection Systems				📦 Artifacts:       1, 2
Oblivious Digital Tokens				📦 Artifact 📄 Appendix
On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts				📦 Artifact
OneTouch: Effortless 2FA Scheme to Secure Fingerprint Authentication with Wearable OTP Token				📦 Artifact
PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs				📦 Artifact
PICACHV: Formally Verified Data Use Policy Enforcement for Secure Data Analytics				📦 Artifact 📄 Appendix
Passkeys in Interpersonal Threat Models: Abusability Analysis of Early Deployments				📦 Artifact
Persistent Backdoor Attacks in Continual Learning				📦 Artifact
Phantom Trails: Practical Pre-Silicon Discovery of Transient Data Leaks				📦 Artifact 📄 Appendix
Phantom: Privacy-Preserving Deep Neural Network Model Obfuscation in Heterogeneous TEE and GPU System				📦 Artifact
PoiSAFL: Scalable Poisoning Attack Framework to Byzantine-resilient Semi-asynchronous Federated Learning				📦 Artifact
Posthammer: Pervasive Browser-based Rowhammer Attacks with Postponed Refresh Commands				📦 Artifact 📄 Appendix
Practical Keyword Private Information Retrieval from Key-to-Index Mappings				📦 Artifact 📄 Appendix
Practical Mempool Privacy via One-time Setup Batched Threshold Encryption				📦 Artifact
Pretender: Universal Active Defense against Diffusion Finetuning Attacks				📦 Artifact
Principled and Automated Approach for Investigating AR/VR Attacks				📦 Artifact
Privacy Audit as Bits Transmission: (Im)possibilities for Audit by One Run				📦 Artifact
Provably Robust Multi-bit Watermarking for AI-generated Text				📦 Artifact
Qelect: Lattice-based Single Secret Leader Election Made Practical				📦 Artifact 📄 Appendix
Questionnaire Data – Digital Security Perceptions & Practices in 12 Countries				📦 Artifact
RangeSanitizer: Detecting Memory Errors with Efficient Range Checks				📦 Artifact 📄 Appendix
Recover from Excessive Faults in Partially-Synchronous BFT SMR				📦 Artifact 📄 Appendix
Revisiting Training-Inference Trigger Intensity in Backdoor Attacks				📦 Artifact 📄 Appendix
Robust, Efficient, and Widely Available Greybox Fuzzing for COTS Binaries with System Call Pattern Feedback				📦 Artifact 📄 Appendix
Robustifying ML-powered Network Classifiers with PANTS				📦 Artifact 📄 Appendix
SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis				📦 Artifact 📄 Appendix
Secure Caches for Compartmentalized Software				📦 Artifact
Secure Information Embedding in Forensic 3D Fingerprinting				📦 Artifact
Security Implications of Malicious G-Codes in 3D Printing				📦 Artifact
Security and Privacy Advice for UPI Users in India				📦 Artifact
Seeing Through: Analyzing and Attacking Virtual Backgrounds in Video Calls				📦 Artifact 📄 Appendix
SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner				📦 Artifact
Serverless Functions Made Confidential and Efficient with Split Containers				📦 Artifact 📄 Appendix
Shadowed Realities: An Investigation of UI Attacks in WebXR				📦 Artifact
Shechi: A Secure Distributed Computation Compiler Based on Multiparty Homomorphic Encryption				📦 Artifact 📄 Appendix
SoK: Come Together – Unifying Security, Information Theory, and Cognition for a Mixed Reality Deception Attack Ontology & Analysis Framework				📦 Artifact
SoK: On Gradient Leakage in Federated Learning				📦 Artifact
SoK: Towards Effective Security Patch Generation				📦 Artifact
SoK: Understanding zk-SNARKs: The Gap Between Research and Practice				📦 Artifact 📄 Appendix
Software Availability Protection in Cyber-Physical Systems				📦 Artifact 📄 Appendix
Sound and Efficient Generation of Data-Oriented Exploits via Programming Language Synthesis				📦 Artifact 📄 Appendix
Sound of Interference: Electromagnetic Eavesdropping Attack on Digital Microphones Using Pulse Density Modulation				📦 Artifact 📄 Appendix
SparSamp: Efficient Provably Secure Steganography Based on Sparse Sampling				📦 Artifacts:       1, 2 📄 Appendix
Stack Overflow Meets Replication: Security Research Amid Evolving Code Snippets				📦 Artifact 📄 Appendix
Suda: An Efficient and Secure Unbalanced Data Alignment Framework for Vertical Privacy-Preserving Machine Learning				📦 Artifact 📄 Appendix
Surviving in Dark Forest: Towards Evading the Attacks from Front-Running Bots in Application Layer				📦 Artifact 📄 Appendix
Synthesis of Code-Reuse Attacks from p-code Programs				📦 Artifact 📄 Appendix
Synthetic Artifact Auditing: Tracing LLM-Generated Synthetic Data Usage in Downstream Applications				📦 Artifact
System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System				📦 Artifact 📄 Appendix
Systematic Evaluation of Randomized Cache Designs against Occupancy Attack				📦 Artifact 📄 Appendix
THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models				📦 Artifact
TLBlur: Compiler-Assisted Automated Hardening against Controlled Channels on Off-the-Shelf Intel SGX Platforms				📦 Artifact 📄 Appendix
TORCHLIGHT: Shedding LIGHT on Real-World Attacks on Cloudless IoT Devices Concealed within the Tor Network				📦 Artifact 📄 Appendix
TYPEPULSE: Detecting Type Confusion Bugs in Rust Programs				📦 Artifact 📄 Appendix
The Cost of Performance: Breaking ThreadX with Kernel Object Masquerading Attacks				📦 Artifact 📄 Appendix
The Silent Danger in HTTP: Identifying HTTP Desync Vulnerabilities with Gray-box Testing				📦 Artifact
Third Party Private Set Operations				📦 Artifact
TockOwl: Asynchronous Consensus with Fault and Network Adaptability				📦 Artifact
Too Much of a Good Thing: (In-)Security of Mandatory Security Software for Financial Services in South Korea				📦 Artifact
Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation				📦 Artifact
Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models				📦 Artifact
Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification				📦 Artifact
Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into an Apple AirTag Without Root Privileges				📦 Artifact 📄 Appendix
Tracking the Takes and Trajectories of News Narratives from Trustworthy and Worrisome Websites				📦 Artifact
Trust but Verify: An Assessment of Vulnerability Tagging Services				📦 Artifact 📄 Appendix
URL Inspection Tasks: Helping Users Detect Phishing Links in Emails				📦 Artifact
Universal Cross-app Attacks: Exploiting and Securing OAuth 2.0 in Integration Platforms				📦 Artifact
V-ORAM: A Versatile and Adaptive ORAM Framework with Service Transformation for Dynamic Workloads				📦 Artifact 📄 Appendix
VoiceWukong: Benchmarking Deepfake Voice Detection				📦 Artifact
Voluntary Investment, Mandatory Minimums, or Cyber Insurance: What minimizes losses?				📦 Artifact 📄 Appendix
Voting-Bloc Entropy: A New Metric for DAO Decentralization				📦 Artifact 📄 Appendix
Waltzz: WebAssembly Runtime Fuzzing with Stack-Invariant Transformation				📦 Artifact
Watch the Watchers! On the Security Risks of Robustness-Enhancing Diffusion Models				📦 Artifact
We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs				📦 Artifact
Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements				📦 Artifact 📄 Appendix
When Good Kernel Defenses Go Bad: Reliable and Stable Kernel Exploits via Defense-Amplified TLB Side-Channel Leaks				📦 Artifact 📄 Appendix
When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs				📦 Artifact
When Translators Refuse to Translate: A Novel Attack to Speech Translation Systems				📦 Artifact 📄 Appendix
Whispering Under the Eaves: Protecting User Privacy Against Commercial and LLM-powered Automatic Speech Recognition Systems				📦 Artifact 📄 Appendix
X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in Cryptographic Libraries using Crafted X.509 Certificates				📦 Artifact 📄 Appendix
ZK-GPT: An Efficient Non-interactive Zero-knowledge Proof Framework for LLM Inference				📦 Artifact
zk-promises: Anonymous Moderation, Reputation, and Blocking				📦 Artifact
“That’s my perspective from 30 years of doing this”: An Interview Study on Practices, Experiences, and Challenges of Updating Cryptographic Code				📦 Artifact