Results

Paper	Avail.	Funct.	Repro.	Available At
The DOMino Effect: Detecting and Exploiting DOM Clobbering Gadgets via Concolic Execution with Symbolic DOM				📦 Artifact 📄 Appendix
"I’m trying to learn. . . and I’m shooting myself in the foot": Beginners’ Struggles When Solving Binary Exploitation Exercises				📦 Artifact 📄 Appendix
"Threat modeling is very formal, it’s very technical, and also very hard to do correctly": Investigating Threat Modeling Practices in Open-Source Software Projects				📦 Artifact
A Comprehensive Formal Security Analysis of OPC UA				📦 Artifact 📄 Appendix
A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks				📦 Artifact 📄 Appendix
A First Look at Governments Enterprise Security Guidance				📦 Artifact 📄 Appendix
A Formal Analysis of Apple’s iMessage PQ3 Protocol				📦 Artifact 📄 Appendix
A Framework for Designing Provably Secure Steganography				📦 Artifact 📄 Appendix
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features				📦 Artifact
A Tale of Two Worlds, a Formal Story of WireGuard Hybridization				📦 Artifact 📄 Appendix
A limited technical background is sufficient for attack-defense tree acceptability				📦 Artifact 📄 Appendix
AGNNCert: Defending Graph Neural Networks against Arbitrary Perturbations with Deterministic Certification				📦 Artifact
AKMA+: Security and Privacy-Enhanced and Standard-Compatible AKMA for 5G Communication				📦 Artifact
ALERT: Machine Learning-Enhanced Risk Estimation for Databases Supporting Encrypted Queries				📦 Artifact 📄 Appendix
APPATCH: Automated Adaptive Prompting Large Language Models for Real-World Software Vulnerability Patching				📦 Artifact 📄 Appendix
AUDIO WATERMARK: Dynamic and Harmless Watermark for Black-box Voice Dataset Copyright Protection				📦 Artifacts:       1, 2
AUTOVR: Automated UI Exploration for Detecting Sensitive Data Flow Exposures in Virtual Reality Apps				📦 Artifact 📄 Appendix
Achilles: A Formal Framework of Leaking Secrets from Signature Schemes via Rowhammer				📦 Artifact 📄 Appendix
Activation Approximations Can Incur Safety Vulnerabilities in Aligned LLMs: Comprehensive Analysis and Defense				📦 Artifact
Addressing Sensitivity Distinction in Local Differential Privacy : A General Utility-Optimized Framework				📦 Artifact 📄 Appendix
Aion: Robust and Efficient Multi-Round Single-Mask Secure Aggregation Against Malicious Participants				📦 Artifact 📄 Appendix
AirTag-Facilitated Stalking Protection: Evaluating Unwanted Tracking Notifications and Tracker Locating Features				📦 Artifact
An Industry Interview Study of Software Signing for Supply Chain Security				📦 Artifact
Analyzing the AI Nudification Application Ecosystem				📦 Artifact
Approve Once, Regret Forever: On the Exploitation of Ethereum’s Approve-TransferFrom Ecosystem				📦 Artifact
Approximation Enforced Execution of Untrusted Linux Kernel Extensions				📦 Artifact 📄 Appendix
Arbitrary-Threshold Fully Homomorphic Encryption with Lower Complexity				📦 Artifact
Are CAPTCHAs Still Bot-hard? Generalized Visual CAPTCHA Solving with Agentic Vision Language Model				📦 Artifact 📄 Appendix
Ares: Comprehensive Path Hijacking Detection via Routing Tree				📦 Artifact 📄 Appendix
Ariadne: Navigating through the Labyrinth of Data-Driven Customization Inconsistencies in Android				📦 Artifact 📄 Appendix
Artifacts for BarraCUDA: Edge GPUs do leak DNN weights				📦 Artifact
Assuring Certified Database Utility in Privacy-Preserving Database Fingerprinting				📦 Artifact 📄 Appendix
Atkscopes: Multiresolution Adversarial Perturbation as a Unified Attack on Perceptual Hashing and Beyond				📦 Artifact 📄 Appendix
Attacker Control and Bug Prioritization				📦 Artifact 📄 Appendix
AudioMarkNet: Audio Watermarking for Deepfake Speech Detection				📦 Artifact
Auspex: Unveiling Inconsistency Bugs of Transaction Fee Mechanism in Blockchain				📦 Artifact
AutoLabel: Automated Fine-Grained Log Labeling for Cyber Attack Dataset Generation				📦 Artifacts:       1, 2, 3, 4
Automated Discovery of Semantic Attacks in Multi-Robot Navigation Systems				📦 Artifact
Automated Soundness and Completeness Vetting of Polygon zkEVM				📦 Artifact
Available Attestation: Towards a Reorg-Resilient Solution for Ethereum Proof-of-Stake				📦 Artifact 📄 Appendix
Await() a Second: Evading Control Flow Integrity by Hijacking C++ Coroutines				📦 Artifact 📄 Appendix
BEAT-MEV: Epochless Approach to Batched Threshold Encryption for MEV Prevention				📦 Artifact
BGP Vortex: Update Message Floods Can Create Internet Instabilities				📦 Artifact 📄 Appendix
BLens: Contrastive Captioning of Binary Functions using Ensemble Embedding				📦 Artifact 📄 Appendix
BLuEMan: A Stateful Simulation-based Fuzzing Framework for Open-Source RTOS Bluetooth Low Energy Protocol Stacks				📦 Artifact 📄 Appendix
Backdooring Bias ((B^2)) into Diffusion Models				📦 Artifact
Beyond Exploit Scanning: A Functional Change-Driven Approach to Remote Software Version Identification				📦 Artifact 📄 Appendix
Beyond Statistical Estimation: Differentially Private Individual Computation via Shuffling				📦 Artifact
Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants				📦 Artifact 📄 Appendix
Blockchain Address Poisoning				📦 Artifact
BlueGuard: Accelerated Host and Guest Introspection Using DPUs				📦 Artifact
Boosting Gradient Leakage Attacks: Data Reconstruction in Realistic FL Settings				📦 Artifact
Bots can Snoop: Uncovering and Mitigating Privacy Risks of Bots in Group Chats				📦 Artifact 📄 Appendix
Branch Privilege Injection: Compromising Spectre v2 Hardware Mitigations by Exploiting Branch Predictor Race Conditions				📦 Artifact 📄 Appendix
Breaking Free: Efficient Multi-Party Private Set Union Without Non-Collusion Assumptions				📦 Artifact 📄 Appendix
Breaking the Blindfold: Deep Learning-based Blind Side-channel Analysis				📦 Artifact
Breaking the Layer Barrier: Remodeling Private Transformer Inference with Hybrid CKKS and MPC				📦 Artifact
Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities				📦 Artifact
BulletCT: Towards More Scalable Ring Confidential Transactions With Transparent Setup				📦 Artifact
CAMP in the Odyssey: Provably Robust Reinforcement Learning with Certified Radius Maximization				📦 Artifact 📄 Appendix
Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers				📦 Artifact
Catch-22: Uncovering Compromised Hosts using SSH Public Keys				📦 Artifact 📄 Appendix
Censorship Evasion with Unidentified Protocol Generation				📦 Artifact
CertPHash: Towards Certified Perceptual Hashing via Robust Training				📦 Artifact 📄 Appendix
CertTA: Certified Robustness Made Practical for Learning-Based Traffic Analysis				📦 Artifact 📄 Appendix
ChainFuzz: Exploiting Upstream Vulnerabilities in Open-Source Supply Chains				📦 Artifact
Challenging Overreach: Addressing the Discrepancy Between Mobile App Privacy Practices and User Intention				📦 Artifact
Characterizing and Detecting Propaganda-Spreading Accounts on Telegram				📦 Artifact 📄 Appendix
Characterizing the MrDeepFakes Sexual Deepfake Marketplace				📦 Artifact
Chimera: Creating Digitally Signed Fake Photos by Fooling Image Recapture and Deepfake Detectors				📦 Artifact 📄 Appendix
ChoiceJacking: Compromising Mobile Devices through Malicious Chargers like a Decade ago				📦 Artifact
Cloak, Honey, Trap: Proactive Defenses Against LLM Agents				📦 Artifact
CloudFlow Framework and CloudBench Suite				📦 Artifact 📄 Appendix
CoVault: Secure, Scalable Analytics of Personal Data				📦 Artifact 📄 Appendix
CollisionRepair: First-Aid and Automated Patching for Storage Collision Vulnerabilities in Smart Contracts				📦 Artifact 📄 Appendix
Comprehensive Deniability Analysis of Signal Handshake Protocols: X3DH, PQXDH to Fully Post-Quantum with Deniable Ring Signatures				📦 Artifact 📄 Appendix
Confusing Value with Enumeration: Studying the Use of CVEs in Academia				📦 Artifact
Context Matters: Qualitative Insights into Developers Approaches and Challenges with Software Composition Analysis				📦 Artifact
CoreCrisis: Threat-Guided and Context-Aware Iterative Learning and Fuzzing of 5G Core Networks				📦 Artifact 📄 Appendix
Cross-Modal Prompt Inversion: Unifying Threats to Text and Image Generative AI Models				📦 Artifact
Current Affairs: A Security Measurement Study of CCS EV Charging Deployments				📦 Artifact 📄 Appendix
Cyber-Physical Deception Through Coordinated IoT Honeypots				📦 Artifact
DFS: Delegation-friendly zkSNARK and Private Delegation of Provers				📦 Artifact 📄 Appendix
DISPATCH: Unraveling Security Patches from Entangled Code Changes				📦 Artifact
DNS FLaRE: A Flush-Reload Attack on DNS Forwarders				📦 Artifact
DarkGram: A Large-Scale Analysis of Cybercriminal Activity Channels on Telegram				📦 Artifact
Data Duplication: A Novel Multi-Purpose Attack Paradigm in Machine Unlearning				📦 Artifact
Data-Free Model-Related Attacks: Unleashing the Potential of Generative AI				📦 Artifact
DeBackdoor: A Deductive Framework for Detecting Backdoor Attacks on Deep Models with Limited Data				📦 Artifact
DeepFold: Efficient Multilinear Polynomial Commitment from Reed-Solomon Code and Its Application to Zero-knowledge Proofs				📦 Artifacts:       1, 2, 3
Demystifying the (In)Security of QR Code-based Login in Real-world Deployments				📦 Artifacts:       1, 2
Depth Gives a False Sense of Privacy: LLM Internal States Inversion				📦 Artifact
Detecting Compromise of Passkey Storage on the Cloud				📦 Artifact
DiskSpy: Exploring a Long-Range Covert-Channel Attack via mmWave Sensing of µm-level HDD Vibrations				📦 Artifact
Disparate Privacy Vulnerability: Targeted Attribute Inference Attacks and Defenses				📦 Artifact 📄 Appendix
Distributed Private Aggregation in Graph Neural Networks				📦 Artifact 📄 Appendix
Distributional Private Information Retrieval				📦 Artifact 📄 Appendix
Does Finality Gadget Finalize Your Block? A Case Study of Binance Consensus				📦 Artifact 📄 Appendix
Dorami: Privilege Separating Security Monitor on RISC-V TEEs				📦 Artifact
Dormant: Defending against Pose-driven Human Image Animation				📦 Artifact
Double-Edged Shield: On the Fingerprintability of Customized Ad Blockers				📦 Artifact 📄 Appendix
Doubly Dangerous: Evading Phishing Reporting Systems by Leveraging Email Tracking Techniques				📦 Artifacts:       1, 2 📄 Appendix
Dumbo-MPC: Efficient Fully Asynchronous MPC with Optimal Resilience				📦 Artifact 📄 Appendix
ECC.fail: Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory				📦 Artifact
EKC: A Portable and Extensible Kernel Compartment for De-Privileging Commodity OS				📦 Artifact 📄 Appendix
Easy As Child’s Play: An Empirical Study on Age Verification of Adult-Oriented Android Apps				📦 Artifact 📄 Appendix
EchoLLM: LLM-Augmented Acoustic Eavesdropping Attack on Bone Conduction Headphones with mmWave Radar				📦 Artifact
Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection				📦 Artifact 📄 Appendix
Effective PII Extraction from LLMs through Augmented Few-Shot Learning				📦 Artifact
Efficient 2PC for Constant Round Secure Equality Testing and Comparisons				📦 Artifact
Efficient Batchable Secure Outsourced Computation: Depth-Aware Arithmetization of Common Primitives for BFV & BGV				📦 Artifact
Efficient Ranking, Order Statistics, and Sorting under CKKS				📦 Artifact 📄 Appendix
Email Spoofing with SMTP Smuggling: How the Shared Email Infrastructures Magnify this Vulnerability				📦 Artifacts:       1, 2
EmbedX: Embedding-Based Cross-Trigger Backdoor Attack Against Large Language Models				📦 Artifact 📄 Appendix
Enabling Low-Cost Secure Computing on Untrusted In-Memory Architectures				📦 Artifact 📄 Appendix
Encarsia: Evaluating CPU Fuzzers via Automatic Bug Injection				📦 Artifact 📄 Appendix
Encrypted Access Logging for Online Accounts: Device Attributions without Device Tracking				📦 Artifact 📄 Appendix
Endangered Privacy: Large-Scale Monitoring of Video Streaming Services				📦 Artifact 📄 Appendix
Engorgio: An Arbitrary-Precision Unbounded-Size Hybrid Encrypted Database via Quantized Fully Homomorphic Encryption				📦 Artifact 📄 Appendix
Enhanced Label-Only Membership Inference Attacks with Fewer Queries				📦 Artifact 📄 Appendix
Evaluating LLM-based Personal Information Extraction and Countermeasures				📦 Artifact 📄 Appendix
Evaluating Privacy Policies under Modern Privacy Laws At Scale: An LLM-Based Automated Approach				📦 Artifact
Evaluating the Effectiveness and Robustness of Visual Similarity-based Phishing Detection Models				📦 Artifact 📄 Appendix
EvilEDR: Repurposing EDR as an Offensive Tool				📦 Artifact 📄 Appendix
Expert Insights into Advanced Persistent Threats: Analysis, Attribution, and Challenges				📦 Artifact
Exploiting Inaccurate Branch History in Side-Channel Attacks				📦 Artifact 📄 Appendix
Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs
Exploring User Security and Privacy Attitudes and Concerns Toward the Use of General-Purpose LLM Chatbots for Mental Health				📦 Artifact
Exploring and Exploiting the Resource Isolation Attack Surface of WebAssembly Containers				📦 Artifact 📄 Appendix
Exposing and Circumventing SNI-based QUIC Censorship of the Great Firewall of China				📦 Artifact 📄 Appendix
Exposing the Guardrails: Reverse-Engineering and Jailbreaking Safety Filters in DALL·E Text-to-Image Pipelines				📦 Artifact 📄 Appendix
FABLE: Batched Evaluation on Confidential Lookup Tables in 2PC				📦 Artifact 📄 Appendix
FIXX: FInding eXploits from eXamples				📦 Artifact 📄 Appendix
FLOP: Breaking the Apple M3 CPU via False Load Output Predictions				📦 Artifact
Fast Enhanced Private Set Union in the Balanced and Unbalanced Scenarios				📦 Artifact 📄 Appendix
FastLloyd: Federated, Accurate, Secure, and Tunable kk-Means Clustering with Differential Privacy				📦 Artifacts:       1, 2
Fighting Fire with Fire: Continuous Attack for Adversarial Android Malware Detection				📦 Artifact
Finding Metadata Inconsistencies in Distributed File Systems via Cross-Node Operation Modeling				📦 Artifact
Flexway O-Sort: Enclave-Friendly and Optimal Oblivious Sorting				📦 Artifact 📄 Appendix
Following Devils’ Footprint: Towards Real-time Detection of Price Manipulation Attacks				📦 Artifact
Found in Translation: A Generative Language Modeling Approach to Memory Access Pattern Attacks				📦 Artifact 📄 Appendix
Free Record-Level Privacy Risk Evaluation Through Artifact-Based Methods				📦 Artifact
From Alarms to Real Bugs: Multi-target Multi-step Directed Greybox Fuzzing for Static Analysis Result Verification				📦 Artifact 📄 Appendix
From Constraints to Cracks: Constraint Semantic Inconsistencies as Vulnerability Beacons for Embedded Systems				📦 Artifact 📄 Appendix
From Meme to Threat: On the Hateful Meme Understanding and Induced Hateful Content Generation in Open-Source Vision Language Models				📦 Artifact
From Purity to Peril: Backdooring Merged Models From "Harmless" Benign Components				📦 Artifacts:       1, 2, 3 📄 Appendix
From Risk to Resilience: Towards Assessing and Mitigating the Risk of Data Reconstruction Attacks in Federated Learning				📦 Artifact
From Threat to Trust: Exploiting Attention Mechanisms for Attacks and Defenses in Cooperative Perception				📦 Artifact 📄 Appendix
Further Study on Frequency Estimation under Local Differential Privacy				📦 Artifact 📄 Appendix
Fuzzing the PHP Interpreter via Dataflow Fusion				📦 Artifact
GDMA: Fully Automated DMA Rehosting via Iterative Type Overlays				📦 Artifact 📄 Appendix
GNSS-WASP: GNSS Wide Area SPoofing				📦 Artifact
GPC Web Crawler				📦 Artifact 📄 Appendix
GPUHammer: Rowhammer Attacks on GPU Memories are Practical				📦 Artifact 📄 Appendix
Game of Arrows: On the (In-)Security of Weight Obfuscation for On-Device TEE-Shielded LLM Partition Algorithms				📦 Artifact 📄 Appendix
GeCos Replacing Experts: Generalizable and Comprehensible Industrial Intrusion Detection				📦 Artifact 📄 Appendix
GenHuzz: An Efficient Generative Hardware Fuzzer				📦 Artifact
General-Purpose ff-DP Estimation and Auditing in a Black-Box Setting				📦 Artifact 📄 Appendix
Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data				📦 Artifact 📄 Appendix
GlitchFHE: Attacking Fully Homomorphic Encryption Using Fault Injection				📦 Artifact
Gotta Detect ’Em All: Fake Base Station and Multi-Step Attack Detection in Cellular Networks				📦 Artifact 📄 Appendix
GradEscape: A Gradient-Based Evader Against AI-Generated Text Detectors				📦 Artifact 📄 Appendix
GraphAce: Secure Two-Party Graph Analysis Achieving Communication Efficiency				📦 Artifact 📄 Appendix
Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack				📦 Artifact
H2O2RAM: A High-Performance Hierarchical Doubly Oblivious RAM				📦 Artifact 📄 Appendix
Harness: Transparent and Lightweight Protection of Vehicle Control on Untrusted Android Automotive Operating System				📦 Artifact 📄 Appendix
HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaigns				📦 Artifact 📄 Appendix
Haunted by Legacy: Discovering and Exploiting Vulnerable Tunnelling Hosts				📦 Artifact 📄 Appendix
HawkEye: Statically and Accurately Profiling the Communication Cost of Models in Multi-party Learning				📦 Artifact 📄 Appendix
Hercules Droidot and the murder on the JNI Express				📦 Artifact 📄 Appendix
High Stakes, Low Certainty: Evaluating the Efficacy of High-Level Indicators of Compromise in Ransomware Attribution: Artifacts				📦 Artifact 📄 Appendix
Hobbit: Space-Efficient zkSNARK with Optimal Prover Time				📦 Artifact
How Researchers De-identify Data in Practice				📦 Artifact
How Transparent is Usable Privacy and Security Research? A Meta-Study on Current Research Transparency Practices				📦 Artifact 📄 Appendix
How to Compare Two-Party Secure Messaging Protocols: A Quest for A More Efficient and Secure Post-Quantum Protocol				📦 Artifact 📄 Appendix
HubBub: Contention-Based Side-channel Attacks on USB Hubs				📦 Artifact
HyTrack: Resurrectable and Persistent Tracking Across Android Apps and the Web				📦 Artifact 📄 Appendix
Hybrid Language Processor Fuzzing via LLM-Based Constraint Solving				📦 Artifact
I Cannot Write This Because It Violates Our Content Policy: Understanding Content Moderation Policies and User Experiences in Generative AI Products				📦 Artifact
I have no idea how to make it safer: Studying Security and Privacy Mindsets of Browser Extension Developers				📦 Artifact 📄 Appendix
I wasn’t sure if this is indeed a security risk: Data-driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source npm Packages				📦 Artifact
IDFuzz: Intelligent Directed Grey-box Fuzzing				📦 Artifact
IRBlock: A Large-Scale Measurement Study of the Great Firewall of Iran				📦 Artifact
ImpROV: Measuring and Mitigating Collateral Damage of Route Origin Validation in RPKI				📦 Artifact
ImpROV: Measuring and Mitigating Collateral Damage of Route Origin Validation in RPKI				📦 Artifact
Investigating the Impact of Online Community Involvement on Safety Practices and Perceived Risks Among People Who Use Drugs				📦 Artifact
Invisible but Detected: Physical Adversarial Shadow Attack and Defense on LiDAR Object Detection				📦 Artifact 📄 Appendix
JBShield: Defending Large Language Models from Jailbreak Attacks through Activated Concept Analysis and Manipulation				📦 Artifact 📄 Appendix
Kintsugi: Secure Hotpatching for Code-Shadowing Real-Time Embedded Systems				📦 Artifact 📄 Appendix
LEMIX: Enabling Testing of Embedded Applications as Linux Applications				📦 Artifact
LEO-Range: Physical Layer Design for Secure Ranging with Low Earth Orbiting Satellites				📦 Artifact
LLFuzz: An Over-the-Air Dynamic Testing Framework for Cellular Baseband Lower Layers				📦 Artifact
LLMmap: Fingerprinting for Large Language Models				📦 Artifact
LLMxCPG: Context-Aware Vulnerability Detection Through Code Property Graph-Guided Large Language Models				📦 Artifact 📄 Appendix
Lancet: A Formalization Framework for Crash and Exploit Pathology				📦 Artifact 📄 Appendix
Learning from Functionality Outputs: Private Join and Compute in the Real World				📦 Artifact 📄 Appendix
Lemon: Network-wide DDoS Detection with Routing-Oblivious Per-flow Measurement				📦 Artifact
Lets Move2EVM				📦 Artifact 📄 Appendix
Levenshtein-trinary: Efficient FHE-based Edit Distance Computation with Single Bootstrap per Cell				📦 Artifact 📄 Appendix
LightShed: Defeating Perturbation-based Image Copyright Protections				📦 Artifact
Logs In, Patches Out: Automated Vulnerability Repair via Tree-of-Thought LLM Analysis				📦 Artifact 📄 Appendix
Lost in the Mists of Time: Expirations in DNS Footprints of Mobile Apps				📦 Artifact 📄 Appendix
Low-Cost and Comprehensive Non-textual Input Fuzzing with LLM-Synthesized Input Generators				📦 Artifact
MAESTRO: Multi-party AES using Lookup Tables				📦 Artifact 📄 Appendix
MBFuzzer: A Multi-Party Protocol Fuzzer for MQTT Brokers				📦 Artifact
Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents				📦 Artifact
Make Agent Defeat Agent: Automatic Detection of Taint-Style Vulnerabilities in LLM-based Agents				📦 Artifact
MalGuard: Towards Real-Time, Accurate, and Actionable Detection of Malicious Packages in PyPI Ecosystem				📦 Artifact
Malicious LLM-Based Conversational AI Makes Users Reveal Personal Information				📦 Artifact
McSee: Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis				📦 Artifact 📄 Appendix
Membership Inference Attacks Against Vision-Language Models				📦 Artifact
Mind the Inconspicuous: Revealing the Hidden Weakness in Aligned LLMs’ Ethical Boundaries				📦 Artifact
Mirage in the Eyes: Hallucination Attack on Multi-modal Large Language Models with Only Attention Sink				📦 Artifact
Misty Registry: An Empirical Study of Flawed Domain Registry Operation				📦 Artifact
Mitigating Injection Attacks against Encrypted Applications via View-Based Partitioning				📦 Artifact
More is Less: Extra Features in Contactless Payments Break Security				📦 Artifact
My ZIP isn’t your ZIP: Identifying and Exploiting Semantic Gaps Between ZIP Parsers				📦 Artifact 📄 Appendix
NASS: Fuzzing All Native Android System Services with Interface Awareness and Coverage				📦 Artifact 📄 Appendix
NOKEScam: Understanding and Rectifying Non-Sense Keywords Spear Scam in Search Engines				📦 Artifact
Narrowbeer: A Practical Replay Attack Against the Widevine DRM				📦 Artifact 📄 Appendix
Navigating Cookie Consent Violations Across the Globe				📦 Artifact
Navigating Security and Privacy Threats in Homeless Service Provision				📦 Artifact
No Way to Sign Out? Unpacking Non-Compliance with Google Play’s App Account Deletion Requirements				📦 Artifact 📄 Appendix
No, I Cant Be a Security Personnel on Your Phone: Security and Privacy Threats From Sharing Infrastructure in Rural Ghana				📦 Artifact
Not so Refreshing: Attacking GPUs using RFM Rowhammer Mitigation				📦 Artifact 📄 Appendix
Nothing is Unreachable: Automated Synthesis of Robust Code-Reuse Gadget Chains for Arbitrary Exploitation Primitives				📦 Artifact 📄 Appendix
OBLIVIATOR: OBLIVIous Parallel Joins and other OperATORs in Shared Memory Environments				📦 Artifact 📄 Appendix
ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion Detection Systems				📦 Artifacts:       1, 2
Oblivious Digital Tokens				📦 Artifact 📄 Appendix
On the Atomicity and Efficiency Blockchain Payment Channels				📦 Artifact
On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts				📦 Artifact
OneTouch: Effortless 2FA Scheme to Secure Fingerprint Authentication with Wearable OTP Token				📦 Artifact
OwlC: Compiling Security Protocols to Verified, Secure, High-Performance Libraries				📦 Artifact 📄 Appendix
PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs				📦 Artifact
PICACHV: Formally Verified Data Use Policy Enforcement for Secure Data Analytics				📦 Artifact 📄 Appendix
PRSA: Prompt Stealing Attacks against Real-World Prompt Services				📦 Artifact
Parallelizing Universal Atomic Swaps for Multi-Chain Cryptocurrency Exchanges				📦 Artifact
Passkeys in Interpersonal Threat Models: Abusability Analysis of Early Deployments				📦 Artifact
Password Guessing Using Large Language Models				📦 Artifact
PatchAgent: A Practical Program Repair Agent Mimicking Human Expertise				📦 Artifact
Persistent Backdoor Attacks in Continual Learning				📦 Artifact
Phantom Trails: Practical Pre-Silicon Discovery of Transient Data Leaks				📦 Artifact 📄 Appendix
Phantom: Privacy-Preserving Deep Neural Network Model Obfuscation in Heterogeneous TEE and GPU System				📦 Artifact
Pig in a Poke: Automatically Detecting and Exploiting Link Following Vulnerabilities in Windows File Operations				📦 Artifact
Place Protections at the Right Place: Targeted Hardening for Cryptographic Code against Spectre v1				📦 Artifact 📄 Appendix
Please don’t send that bot anything: Mixed-methods Study of Personal Impersonation Attacks to Steal Digital Payments on Social Media				📦 Artifacts:       1, 2
PoiSAFL: Scalable Poisoning Attack Framework to Byzantine-resilient Semi-asynchronous Federated Learning				📦 Artifact
PolySys: an Algebraic Leakage Attack Engine				📦 Artifact
Posthammer: Pervasive Browser-based Rowhammer Attacks with Postponed Refresh Commands				📦 Artifact 📄 Appendix
Practical Keyword Private Information Retrieval from Key-to-Index Mappings				📦 Artifact 📄 Appendix
Practical Mempool Privacy via One-time Setup Batched Threshold Encryption				📦 Artifact
Practically Secure Honey Password Vaults: New Design and New Evaluation against Online Guessing				📦 Artifacts:       1, 2 📄 Appendix
Precise and Effective Gadget Chain Mining through Deserialization Guided Call Graph Construction				📦 Artifact 📄 Appendix
Pretender: Universal Active Defense against Diffusion Finetuning Attacks				📦 Artifact
Preventing Automated Monitoring on Voice Data				📦 Artifact 📄 Appendix
Principled and Automated Approach for Investigating AR/VR Attacks				📦 Artifact
PrivaCI in VR: Exploring Perceptions and Acceptability of Data Sharing in Virtual Reality Through Contextual Integrity				📦 Artifact
Privacy Audit as Bits Transmission: (Im)possibilities for Audit by One Run				📦 Artifact
Privacy Solution or Menace? Investigating Perceptions of Radio Frequency Sensing				📦 Artifact
PrivacyXray: Detecting Privacy Breaches in LLMs through Semantic Consistency and Probability Certainty				📦 Artifact
Private Investigator: Extracting Personally Identifiable Information from Large Language Models Using Optimized Prompts				📦 Artifact 📄 Appendix
Prompt Obfuscation for Large Language Models				📦 Artifact 📄 Appendix
Provably Robust Multi-bit Watermarking for AI-generated Text				📦 Artifact
Qelect: Lattice-based Single Secret Leader Election Made Practical				📦 Artifact 📄 Appendix
Questionnaire Data – Digital Security Perceptions & Practices in 12 Countries				📦 Artifact
REVDECODE: Enhancing Binary Function Matching with Context-Aware Graph Representations and Relevance Decoding				📦 Artifacts:       1, 2, 3, 4
RangeSanitizer: Detecting Memory Errors with Efficient Range Checks				📦 Artifact 📄 Appendix
Recover from Excessive Faults in Partially-Synchronous BFT SMR				📦 Artifact 📄 Appendix
Rectifying Privacy and Efficacy Measurements in Machine Unlearning: A New Inference Attack Perspective				📦 Artifact
Red Bleed: A Pragmatic Near-Infrared Presentation Attack on Facial Biometric Authentication Systems				📦 Artifact 📄 Appendix
Refiner: Data Refining against Gradient Leakage Attacks in Federated Learning				📦 Artifact
Refusal Is Not an Option: Unlearning Safety Alignment of Large Language Models				📦 Artifact 📄 Appendix
Regulating Smart Device Support Periods: User Expectations and the European Cyber Resilience Act				📦 Artifact
Relocate-Vote: Using Sparsity Information to Exploit Ciphertext Side-Channels				📦 Artifact 📄 Appendix
Replication Package of ELFuzz				📦 Artifact 📄 Appendix
Revisiting Training-Inference Trigger Intensity in Backdoor Attacks				📦 Artifact 📄 Appendix
Robust, Efficient, and Widely Available Greybox Fuzzing for COTS Binaries with System Call Pattern Feedback				📦 Artifact 📄 Appendix
Robustifying ML-powered Network Classifiers with PANTS				📦 Artifact 📄 Appendix
RollingEvidence: Autoregressive Video Evidence via Rolling Shutter Effect				📦 Artifacts:       1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
Rowhammer-Based Trojan Injection: One Bit Flip Is Sufficient for Backdooring DNNs				📦 Artifact 📄 Appendix
S/MINE: Collecting and Analyzing S/MIME Certificates at Scale				📦 Artifact 📄 Appendix
SCASE: Automated Secret Recovery via Side-Channel-Assisted Symbolic Execution				📦 Artifact 📄 Appendix
SEAF: Secure Evaluation on Activation Functions with Dynamic Precision for Secure Two-Party Inference				📦 Artifact
SLOTHE : Lazy Approximation of Non-Arithmetic Neural Network Functions over Encrypted Data				📦 Artifact
SNI5GECT: A Practical Approach to Inject aNRchy into 5G NR				📦 Artifact 📄 Appendix
SOFT: Selective Data Obfuscation for Protecting LLM Fine-tuning against Membership Inference Attacks				📦 Artifact
STEK Sharing is Not Caring: Bypassing TLS Authentication in Web Servers using Session Tickets				📦 Artifact 📄 Appendix
SafeSpeech: Robust and Universal Voice Protection Against Malicious Speech Synthesis				📦 Artifact 📄 Appendix
Save what must be saved: Secure context switching with Sailor				📦 Artifact 📄 Appendix
Scalable Collaborative zk-SNARK and Its Application to Fully Distributed Proof Delegation				📦 Artifact 📄 Appendix
Scanned and Scammed: Insecurity by ObsQRity? Measuring User Susceptibility and Awareness of QR Code-Based Attacks				📦 Artifact
Scoop: Mitigation of Recapture Attacks on Provenance-Based Media Authentication				📦 Artifact 📄 Appendix
Secure Caches for Compartmentalized Software				📦 Artifact
Secure Information Embedding in Forensic 3D Fingerprinting				📦 Artifact
Security Implications of Malicious G-Codes in 3D Printing				📦 Artifact
Security and Privacy Advice for UPI Users in India				📦 Artifact
Seeing Through: Analyzing and Attacking Virtual Backgrounds in Video Calls				📦 Artifact 📄 Appendix
Self-interpreting Adversarial Images				📦 Artifact 📄 Appendix
SelfDefend: LLMs Can Defend Themselves against Jailbreaking in a Practical Manner				📦 Artifact
Serverless Functions Made Confidential and Efficient with Split Containers				📦 Artifact 📄 Appendix
Shadowed Realities: An Investigation of UI Attacks in WebXR				📦 Artifact
Shadows in Cipher Spaces: Exploiting Tweak Repetition in Hardware Memory Encryption				📦 Artifact 📄 Appendix
Sharpness-Aware Initialization: Improving Differentially Private Machine Learning from First Principles				📦 Artifact
Shechi: A Secure Distributed Computation Compiler Based on Multiparty Homomorphic Encryption				📦 Artifact 📄 Appendix
Shimmer: a Provably Secure Steganography Based on Entropy Collecting Mechanism				📦 Artifact
Shortcut Measurement Codes				📦 Artifact 📄 Appendix
SoK: Automated TTP Extraction from CTI Reports – Are We There Yet?				📦 Artifact 📄 Appendix
SoK: Automated Vulnerability Repair: Methods, Tools, and Assessments				📦 Artifact
SoK: Can Synthetic Images Replace Real Data? A Survey of Utility and Privacy of Synthetic Image Generation				📦 Artifact
SoK: Come Together – Unifying Security, Information Theory, and Cognition for a Mixed Reality Deception Attack Ontology & Analysis Framework				📦 Artifact
SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark				📦 Artifact
SoK: Efficiency Robustness of Dynamic Deep Learning Systems				📦 Artifact
SoK: Machine Learning for Misinformation Detection				📦 Artifact 📄 Appendix
SoK: On Gradient Leakage in Federated Learning				📦 Artifact
SoK: So, You Think You Know All About Secure Randomized Caches?				📦 Artifact 📄 Appendix
SoK: Towards Effective Security Patch Generation				📦 Artifact
SoK: Towards a Unified Approach of Applied Replicability for Computer Security				📦 Artifact
SoK: Understanding zk-SNARKs: The Gap Between Research and Practice				📦 Artifact 📄 Appendix
Software Availability Protection in Cyber-Physical Systems				📦 Artifact 📄 Appendix
Sometimes Simpler is Better: A Comprehensive Analysis of State-of-the-Art Provenance-Based Intrusion Detection Systems				📦 Artifact 📄 Appendix
Sound and Efficient Generation of Data-Oriented Exploits via Programming Language Synthesis				📦 Artifact 📄 Appendix
Sound of Interference: Electromagnetic Eavesdropping Attack on Digital Microphones Using Pulse Density Modulation				📦 Artifact 📄 Appendix
SparSamp: Efficient Provably Secure Steganography Based on Sparse Sampling				📦 Artifacts:       1, 2 📄 Appendix
Stack Overflow Meets Replication: Security Research Amid Evolving Code Snippets				📦 Artifact 📄 Appendix
Suda: An Efficient and Secure Unbalanced Data Alignment Framework for Vertical Privacy-Preserving Machine Learning				📦 Artifact 📄 Appendix
Surviving in Dark Forest: Towards Evading the Attacks from Front-Running Bots in Application Layer				📦 Artifact 📄 Appendix
Synthesis of Code-Reuse Attacks from p-code Programs				📦 Artifact 📄 Appendix
Synthetic Artifact Auditing: Tracing LLM-Generated Synthetic Data Usage in Downstream Applications				📦 Artifact
System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System				📦 Artifact 📄 Appendix
Systematic Evaluation of Randomized Cache Designs against Occupancy Attack				📦 Artifact 📄 Appendix
TAPAS: An Efficient Online APT Detection with Task-guided Process Provenance Graph Segmentation and Analysis				📦 Artifact
TDXploit: Novel Techniques for Single-Stepping and Cache Attacks on Intel TDX				📦 Artifact
TEEcorrelate: An Information-Preserving Defense against Performance Counter Attacks on TEEs				📦 Artifact 📄 Appendix
TETD: Trusted Execution in Trust Domains				📦 Artifact
THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models				📦 Artifact
TLBlur: Compiler-Assisted Automated Hardening against Controlled Channels on Off-the-Shelf Intel SGX Platforms				📦 Artifact 📄 Appendix
TORCHLIGHT: Shedding LIGHT on Real-World Attacks on Cloudless IoT Devices Concealed within the Tor Network				📦 Artifact 📄 Appendix
TRex: Practical Type Reconstruction for Binary Code				📦 Artifact 📄 Appendix
TYPEPULSE: Detecting Type Confusion Bugs in Rust Programs				📦 Artifact 📄 Appendix
Tady: A Neural Disassembler without Structural Constraint Violations				📦 Artifact 📄 Appendix
TapTrap: Animation-Driven Tapjacking on Android				📦 Artifact 📄 Appendix
The Cost of Performance: Breaking ThreadX with Kernel Object Masquerading Attacks				📦 Artifact 📄 Appendix
The Ransomware Decade: The Creation of a Fine-Grained Dataset and a Longitudinal Study				📦 Artifact
The Silent Danger in HTTP: Identifying HTTP Desync Vulnerabilities with Gray-box Testing				📦 Artifact
Third Party Private Set Operations				📦 Artifact
TockOwl: Asynchronous Consensus with Fault and Network Adaptability				📦 Artifact
Too Much of a Good Thing: (In-)Security of Mandatory Security Software for Financial Services in South Korea				📦 Artifact
Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models				📦 Artifact 📄 Appendix
Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation				📦 Artifact
Towards Internet-Based State Learning of TLS State Machines				📦 Artifact 📄 Appendix
Towards Label-Only Membership Inference Attack against Pre-trained Large Language Models				📦 Artifact
Towards Lifecycle Unlearning Commitment Management: Measuring Sample-level Unlearning Completeness				📦 Artifact
Towards Practical, End-to-End Formally Verified X.509 Certificate Validators with Verdict				📦 Artifact 📄 Appendix
Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification				📦 Artifact
Towards a Re-evaluation of Data Forging Attacks in Practice				📦 Artifact
TracLLM: A Generic Framework for Attributing Long Context LLMs				📦 Artifact
Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into an Apple AirTag Without Root Privileges				📦 Artifact 📄 Appendix
Tracking the Takes and Trajectories of News Narratives from Trustworthy and Worrisome Websites				📦 Artifact
Transparent Attested DNS for Confidential Computing Services				📦 Artifact 📄 Appendix
Treebeard: A Scalable and Fault Tolerant ORAM Datastore				📦 Artifact 📄 Appendix
Trust but Verify: An Assessment of Vulnerability Tagging Services				📦 Artifact 📄 Appendix
TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts				📦 Artifact 📄 Appendix
URL Inspection Tasks: Helping Users Detect Phishing Links in Emails				📦 Artifact
USD: NSFW Content Detection for Text-to-Image Models via Scene Graph				📦 Artifact
Understanding How Users Prepare for and React to Smartphone Theft				📦 Artifact
Universal Cross-app Attacks: Exploiting and Securing OAuth 2.0 in Integration Platforms				📦 Artifact
Unlocking the Power of Differentially Private Zeroth-order Optimization for Fine-tuning LLMs				📦 Artifact 📄 Appendix
Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search				📦 Artifact 📄 Appendix
V-ORAM: A Versatile and Adaptive ORAM Framework with Service Transformation for Dynamic Workloads				📦 Artifact 📄 Appendix
VAPD: An Anomaly Detection Model for PDF Malware Forensics with Adversarial Robustness				📦 Artifacts:       1, 2 📄 Appendix
VULCANBOOST: Boosting ReDoS Fixes through Symbolic Representation and Feature Normalization				📦 Artifact
Vest: Verified, Secure, High-Performance Parsing and Serialization for Rust				📦 Artifact 📄 Appendix
VoiceWukong: Benchmarking Deepfake Voice Detection				📦 Artifact
Voluntary Investment, Mandatory Minimums, or Cyber Insurance: What minimizes losses?				📦 Artifact 📄 Appendix
Voting-Bloc Entropy: A New Metric for DAO Decentralization				📦 Artifact 📄 Appendix
Vulnerability of Text-Matching in ML/AI Conference Reviewer Assignments to Collusions				📦 Artifact 📄 Appendix
Waltzz: WebAssembly Runtime Fuzzing with Stack-Invariant Transformation				📦 Artifact
Watch Out Your TV Box: Reversing and Blocking a P2P-based Illegal Streaming Ecosystem				📦 Artifact
Watch the Watchers! On the Security Risks of Robustness-Enhancing Diffusion Models				📦 Artifact
We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs				📦 Artifact
Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements				📦 Artifact 📄 Appendix
When Good Kernel Defenses Go Bad: Reliable and Stable Kernel Exploits via Defense-Amplified TLB Side-Channel Leaks				📦 Artifact 📄 Appendix
When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs				📦 Artifact
When Translators Refuse to Translate: A Novel Attack to Speech Translation Systems				📦 Artifact 📄 Appendix
Whispering Under the Eaves: Protecting User Privacy Against Commercial and LLM-powered Automatic Speech Recognition Systems				📦 Artifact 📄 Appendix
X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in Cryptographic Libraries using Crafted X.509 Certificates				📦 Artifact 📄 Appendix
XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing				📦 Artifact
Your Shield is My Sword: A Persistent Denial-of-Service Attack via the Reuse of Unvalidated Caches in DNSSEC Validation				📦 Artifact 📄 Appendix
ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency				📦 Artifact
ZK-GPT: An Efficient Non-interactive Zero-knowledge Proof Framework for LLM Inference				📦 Artifact
eSIMplicity or eSIMplification? Privacy and Security Risks in the eSIM Ecosystem				📦 Artifact
zk-promises: Anonymous Moderation, Reputation, and Blocking				📦 Artifact
“Helps me Take the Post With a Grain of Salt:” Soft Moderation Effects on Accuracy Perceptions and Sharing Intentions of Inauthentic Political Content on X				📦 Artifact 📄 Appendix
“It’s not my responsibility to write them”: An Empirical Study of Software Product Managers and Security Requirements				📦 Artifact
“That’s my perspective from 30 years of doing this”: An Interview Study on Practices, Experiences, and Challenges of Updating Cryptographic Code				📦 Artifact