| Title | Author |
|---|---|
| Exploring the Exposure of IPv6 End-Host Networks | Hugo Hue (Georgia Institute of Technology) Abhishek Bhaskar (Georgia Institute of Technology) Amanda Hsu (Georgia Institute of Technology) Paul Pearce (University of California, Irvine) Frank Li (Georgia Institute of Technology) |
| The Trade-off Between Performance and Security: Exploring Vulnerabilities in DNS Task Queue Scheduling | Shiming Liu (Tsinghua University) Yunyi Zhang (Tsinghua University) Ruixuan Li (Tsinghua University) Shiyao Guo (Tsinghua University) Baojun Liu (Tsinghua University) Donghong Sun (Tsinghua University) Yong Ma (Alibaba Group) Linjian Song (Alibaba Group) |
| Demystifying GhostTap: Breaking Android Tapjacking Defenses by Exploiting State Inconsistencies | Yanjie Zhao (Huazhong University of Science and Technology) Zhiyuan Yang (Huazhong University of Science and Technology) Weimin Cheng (Independent Researcher) Sheng Cao (Huazhong University of Science and Technology) Hao Zhou (The Hong Kong Polytechnic University) Haoyu Wang (Huazhong University of Science and Technology) |
| Breaking the Curse of Dimensionality: Fuzzy PSI without O((logδ)^d) Overhead | Cong Zhang (Tsinghua University) Yang Cao (Shandong University) Yujie Bai (Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security) Shuaishuai Li (Zhongguancun Laboratory) Juntong Lin (Shandong University) Yu Chen (Shandong University) Anyu Wang (Tsinghua University) Xiaoyun Wang (Tsinghua University) |
| iEnFlow: Endogenous Control-Flow Attacks via Conditional Branch Prediction on Apple Silicon | Kaiyuan Rong (Tsinghua University) Jiajie Chen (Tsinghua University) Junqi Fang (Tsinghua University) Peng Qu (Tsinghua University) Hanyin Liu (Harbin Institute of Technology) Youhui Zhang (Tsinghua University) Dapeng Ju (Tsinghua University) Dongsheng Wang (Tsinghua University) |
| TapSpy: Semantic Usage Analysis and Triangulated Risk Assessment of Session Replay in Mobile Apps | Jiawei Guo (University at Buffalo, SUNY) Zongze Li (University at Buffalo, SUNY) Haipeng Cai (University at Buffalo, SUNY) |
| Time-Delayed Publicly Verifiable Quantum Computation with Classical Verifiers | Ameer Mohammed (Kuwait University) Aydin Abadi (Newcastle University) Jaffer Mahdi (Kuwait Oil Company) |
| Dependency Triad: A Metric to Quantify the Dependencies Between Attributes for Local Differential Privacy | Sandaru Jayawardana (The University of Sydney) Sennur Ulukus (University of Maryland) Ming Ding (CSIRO) Kanchana Thilakarathna (The University of Sydney) |
| Implementation Bugs as Attacks: Adversarial Neuron Fuzzing and Supply-Chain Backdoors | Zizhuang Deng (Shandong University) Yiying Shan (Shandong University) Sanchuan Chen (Auburn University) Guozhu Meng (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences) Qingxin Wang (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences) Xueqing Zhang (Auburn University) Tong Liu (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences) |
| eBind: Privacy-Enhanced and eIDAS 2.0-Compliant Binding of Anonymous Credentials to Humans | Yang Yang (Singapore Management University) Guomin Yang (Singapore Management University) Yingjiu Li (University of Oregon) Minming Huang (Singapore Management University) David Basin (ETH Zurich) Hwee Hwa Pang (Singapore Management University) Robert H. Deng (Singapore Management University) |
| FirmCred: Detecting Authentication Bypass Vulnerabilities in Firmware from Credential Initialization Perspective | Ziqi Wei (Fudan University) Haoyu Xiao (Fudan University) Yuan Zhang (Fudan University) Chi Chen (Fudan University) Jiarun Dai (Fudan University) |
| Resilient Alerting Protocols for Blockchains | Marwa Mouallem (Technion) Lorenz Breidenbach (Chainlink Labs) Ittay Eyal (Technion) Ari Juels (Chainlink Labs) |
| DRIP: Defending Prompt Injection via Token-wise Representation Editing and Residual Fusion | Ruofan Liu (National University of Singapore) Yun Lin (Shanghai Jiao Tong University) Zhiyong Huang (National University of Singapore) Jin Song Dong (National University of Singapore) |
| FeatureFuzz: Treating Bug-prone Features as Core Primitives for Compiler Fuzzing | Xingbang He (Nanjing University) Yuanwei Chen (Nanjing University) Hao Wu (Nanjing University) Jikang Zhang (Institute of Dataspace, Hefei Comprehensive National Science Center) Zicheng Wang (Honor Device Co.,Ltd) Ligeng Chen (Honor Device Co., Ltd) Junjie Peng (Nanjing University) Haiyang Wei (Nanjing University) Yi Qian (Nanjing University) Tiantai Zhang (Nanjing University) Linzhang Wang (Nanjing University) Bing Mao (Nanjing University) |
| DynOP: Blow Away the Cobwebs in NX Bypassing with Dynamic-Source Gadget Oriented Programming | Hong Guo (National University of Defense Technology) Ruipeng Wang (National University of Defense Technology) Shiwen Ou (National University of Defense Technology) Songtao Yang (Zhongguancun Laboratory) Yu Chen (National University of Defense Technology) TaiYan Wang (National University of Defense Technology) Zexiang Zhang (National University of Defense Technology) Yuwei Li (National University of Defense Technology) Yang Li (National University of Defense Technology) Zulie Pan (National University of Defense Technology) |
| Walrus: An Efficient Decentralized Storage Network | George Danezis (Mysten Labs) Giacomo Giuliari (Mysten Labs) Lefteris Kokoris Kogias (Mysten Labs) Markus Legner (Mysten Labs) Jean-Pierre Smith (Mysten Labs) Alberto Sonnino (Mysten Labs) Karl Wüst (Mysten Labs) |
| PhantomSeal: Proactive Deepfakes Defense with Identity/Context Protection and Forensic Tracing | Liangqin Ren (The University of Kansas) Zeyan Liu (University of Louisville) Ye Wang (The University of Kansas) Yuxin Chen (The University of Chicago) Fengjun Li (The University of Kansas) Bo Luo (The University of Kansas) |
| GDPRuler: A Trusted GDPR Monitor for Cloud Data Systems | Dimitrios Stavrakakis (TU Munich) Masanori Misono (TU Munich) Julian Pritzi (TU Munich) Harshavardhan Unnibhavi (TU Munich) Nuno Santos (INESC-ID / Instituto Superior Tecnico, University of Lisbon) Pramod Bhatotia (TU Munich) |
| NFSA: Non-Forward Secure Aggregation with One Server via Two Layer Secret Sharing | Yufei Zhou (Sun Yat-sen University) |
| A Formal Analysis of Signal's Sparse Post-Quantum Ratchet Protocol and its Implementation | Karthikeyan Bhargavan (Cryspen) Maxime Buyse (Cryspen) Graeme Connell (Signal) Franziskus Kiefer (CE Labs) Rolfe Schmidt (Signal) |
| TurboRetry: Mitigating Large-Scale QUIC Handshake Floods with Off-the-Shelf DPU Offloading | Jiahao Wu (Institute of Computing Technology, Chinese Academy of Sciences) Heng Pan (Computer Network Information Center, Chinese Academy of Sciences) Kai Lv (Institute of Computing Technology, Chinese Academy of Sciences) Zhenyu Li (Institute of Computing Technology, Chinese Academy of Sciences) Yanbiao Li (Computer Network Information Center, Chinese Academy of Sciences) Gaogang Xie (Computer Network Information Center, Chinese Academy of Sciences) |
| GhostTac: Manipulating Tactile Sensors without Physical Contact | Kun Wang (Zhejiang University) Xuancun Lu (Zhejiang University) Ruochen Zhou (The Hong Kong University of Science and Technology) Kai Wang (Zhejiang University) Tongjun Ye (Zhejiang University) Yihao Shao (Zhejiang University) Chen Yan (Zhejiang University) Xiaoyu Ji (Zhejiang University) Wenyuan Xu (Zhejiang University) |
| Penetrating the Reality Wall: Long-Range and Through-Wall AR/VR Privacy Eavesdropping via Wireless Power Side Channel | Tao Ni (King Abdullah University of Science and Technology) Zehua Sun (National University of Singapore) Yihe Zhou (City University of Hong Kong) Yuefeng Du (City University of Hong Kong) Qingchuan Zhao (City University of Hong Kong) Cong Wang (City University of Hong Kong) |
| Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem | Jiahao Chen (Zhejiang University) Xing He (Zhejiang University) Yong Yang (Zhejiang University) Xinfeng Li (The Hong Kong Polytechnic University) Chunyi Zhou (Zhejiang University) Junhao Li (Zhejiang University) Zhe Ma (Tianjin University) Tianyu Du (Zhejiang University) Shouling Ji (Zhejiang University) |
| A Single Glance Is Better Than Words: Vision-Guided Targeted Concept Erasing | Yuyang Zhang (Wuhan University) Yuxiang Sun (Wuhan University) Ke Liang (Wuhan University) Junlin Li (Wuhan University) Kangjie Chen (Tianjin University) Run Wang (Wuhan University) |
| Mind the Gap: Action Rebinding Attacks against Android GUI Agents | Yi Qian (Nanjing University) Kunwei Qian (Nanjing University) Xingbang He (Nanjing University) Ligeng Chen (Honor Device Co., Ltd) Jikang Zhang (Institute of Dataspace, Hefei Comprehensive National Science Center) Tiantai Zhang (Nanjing University) Haiyang Wei (Nanjing University) Linzhang Wang (Nanjing University) Hao Wu (Nanjing University) Bing Mao (Nanjing University) |
| Private Direct Preference Optimization for LLM Alignment | Yangfan Jiang (National University of Singapore) Fei Wei (Alibaba Group) Ergute Bao (Inria) Xiaokui Xiao (National University of Singapore) Yaliang Li (Alibaba Group) Bolin Ding (Alibaba Group) |
| Neurosymbolic Disassembly | Zhaoqi Xiao (University of California, Riverside) Yeqi Fu (National University of Singapore) Lambang Akbar Wijayadi (National University of Singapore) Zhenkai Liang (National University of Singapore) Heng Yin (University of California, Riverside) |
| Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning | Weitao Feng (Nanyang Technological University) Lixu Wang (Nanyang Technological University) Peizhuo Lv (Nanyang Technological University) Tianyi Wei (Nanyang Technological University) Jie Zhang (CFAR and IHPC, A*STAR) Chongyang Gao (Northwestern University) Sinong Simon Zhan (Northwestern University) Wei Dong (Nanyang Technological University) |
| Diagnosing Programmable Data Plane Attacks with Provenance Observability | Dhiraj Saharia (Georgetown University) Ashish Gehani (SRI International) Vinod Yegneswaran (SRI International) Benjamin E. Ujcich (Georgetown University) |
| Designated-Verifier Dynamic zk-SNARKs with Applications to Dynamic Proofs of Index | Weijie Wang (Yale University) Charalampos Papamanthou (Yale University) Shravan Srinivasan (Lagrange Labs) Dimitrios Papadopoulos (Hong Kong University of Science & Technology) |
| BABE: Verifying Proofs on Bitcoin Made 1000x Cheaper | Sanjam Garg (University of California, Berkeley) Dimitris Kolonelos (University of California, Berkeley) Mikhail Sergeevitch (Babylon Labs) Srivatsan Sridhar (Byzantine Research) David Tse (Byzantine Research) |
| On the Limits of Consensus under Dynamic Availability and Reconfiguration | Javier Nieto (University of Illinois Urbana-Champaign) Joachim Neu (a16z Crypto Research) Ling Ren (University of Illinois Urbana-Champaign) |
| DisarmRAG: Stealthy Retriever Poisoning to Disable Self-Correction in Retrieval-Augmented Generation | Yanbo Dai (The Hong Kong University of Science and Technology) Zhenlan Ji (Nara Institute of Science and Technology (NAIST)) Zongjie Li (The Hong Kong University of Science and Technology) Kuan Li (The Hong Kong University of Science and Technology) Shuai Wang (The Hong Kong University of Science and Technology) |
| MMAligner: Safeguarding Multimodal Large Language Models through Representation Calibration | Shenyi Zhang (Wuhan University) Keyan Guo (University at Buffalo) Zihao Wang (Wuhan University) Xuebin Li (Wuhan University) Lingchen Zhao (Wuhan University) Hongxin Hu (University at Buffalo) Chao Shen (Xi'an Jiaotong University) Qian Wang (Wuhan University) |
| Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications | Yong Yang (Zhejiang University) Chong Fu (Zhengzhou University) Tong Zhang (Zhejiang University) Rui Zeng (Zhejiang University) Qingming Li (Zhejiang University) Tianyu Du (Zhejiang University) Zonghui Wang (Zhejiang University) Shouling Ji (Zhejiang University) Wenzhi Chen (Zhejiang University) |
| Mini-Programs, Mega-Problems: Unveiling OAuth-based Authentication Misuses in Mini-Programs via Dynamic Analysis | Zidong Zhang (Simon Fraser University) Zhentao Xie (Shandong University) Lingyun Ying (QI-ANXIN Technology Research Institute) Qinsheng Hou (Shanghai Jiao Tong University) Yacong Gu (Tsinghua University) Wenrui Diao (Shandong University) Jianliang Wu (Simon Fraser University) |
| CVE-Genie: An LLM-Based Multi-Agent Framework for Reproducing CVEs | Saad Ullah (Boston University) Praneeth Balasubramanian (University of California, Santa Barbara) Wenbo Guo (University of California, Santa Barbara) Amanda Burnett (Arizona State University) Hammond Pearce (University of New South Wales) Christopher Kruegel (University of California, Santa Barbara) Giovanni Vigna (University of California, Santa Barbara) Gianluca Stringhini (Boston University) |
| NVBleed: Covert and Side-Channel Attacks on NVIDIA Multi-GPU Interconnect | Yicheng Zhang (University of California, Riverside) Ravan Nazaraliyev (University of California, Riverside) Sankha Baran Dutta (Brookhaven National Laboratory) Andres Marquez (Pacific Northwest National Laboratory) Kevin J. Barker (Pacific Northwest National Laboratory) Nael Abu-Ghazaleh (University of California, Riverside) |
| Theseus: Smart Web Crawling via Resource-Guided Semantic Modeling | Yongheng Huang (Institute of Computing Technology, CAS) Chenghang Shi (Institute of Computing Technology, CAS) Wenxiao Yao (Institute of Computing Technology, CAS) Jie Lu (Institute of Computing Technology, CAS) Haofeng Li (Institute of Computing Technology, CAS) Youlong Chen (Institute of Computing Technology, CAS) Dong Liu (Zhongguancun Laboratory) Mengna Ma (Zhongguancun Laboratory) Yong Liu (Zhongguancun Laboratory) Qinfen Hao (Institute of Computing Technology, CAS) Lian Li (Institute of Computing Technology, CAS) |
| HysterAuth: A Robust and Frictionless Continuous Authentication Framework via Diffusion Augmentation and Hysteresis Decision | Junchao Ma (Institute of Information Engineering, Chinese Academy of Sciences) Kun Zhang (Institute of Information Engineering, Chinese Academy of Sciences) Haiqiang Li (Tianyi Telecom Terminal Co. Ltd.) Zeyu Li (Institute of Information Engineering, Chinese Academy of Sciences) Yanchang Feng (Institute of Information Engineering, Chinese Academy of Sciences) Xuefei Chen (Institute of Information Engineering, Chinese Academy of Sciences) Mingming Hu (Yellow River Henan Bureau) Bibo Tu (Institute of Information Engineering, Chinese Academy of Sciences) |
| GoSe: Command-Line Option Sequence Generation with Runtime-Based Option Relationship Modeling for Security Testing | Zhineng Zhong (Peking University) Hanqin Guan (Peking University) Ding Li (Peking University) |
| Angelfish: Leader, DAG, or Anywhere in Between | Qianyu Yu (The Hong Kong University of Science and Technology (Guangzhou)) Giuliano Losa (Stellar Development Foundation) Nibesh Shrestha (Supra Research) Xuechao Wang (The Hong Kong University of Science and Technology (Guangzhou)) |
| Opaque Shader: Dynamic Code Execution on GPUs via Explicit Graphics APIs | Hao Li (ShanghaiTech University) Yihong Hang (ShanghaiTech University) Yuan Xiao (ShanghaiTech University) Zhice Yang (ShanghaiTech University) |
| From Documentation to Zero-day Vulnerabilities: LLM-Driven Fuzzing of JavaScript Engines in PDF Readers | Suyue Guo (University of California, Santa Barbara) Stijn Pletinckx (University of California, Santa Barbara) Tianle Yu (University of California, Santa Barbara) Yigitcan Kaya (University of California, Santa Barbara) Saad Ullah (Boston University) Wenbo Guo (University of California, Santa Barbara) Christopher Kruegel (University of California, Santa Barbara) Giovanni Vigna (University of California, Santa Barbara) |
| Censorship Resistance vs Throughput in Multi-Proposer BFT Protocols | Fatima Elsheimy (Yale University) Ioannis Kaklamanis (Yale University) Charalampos Papamanthou (Yale University) Sarisht Wadhwa (Duke University) Fan Zhang (Yale University) |
| You Can't Talk Your Way Out of Cyber Extortion: An Empirical Study of Ransomware Negotiations | Tom Meurs (Dutch Police) Edward Cartwright (De Montfort University) Anna Cartwright (Independent researcher) Harold Houba (Vrije Universiteit University) Daniel W. Woods (University of Edinburgh) |
| Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation | Zhibo Wang (Zhejiang University) Wenhui Zhang (Zhejiang University) Huiyu Xu (Zhejiang University) Zeqing He (Zhejiang University) Ziqi Zhu (Zhejiang University) Kui Ren (Zhejiang University) |
| MAKO: Refining Indirect-Call Targets with Type Relation Unfolding | Yibo Jin (Hong Kong University of Science and Technology) Wei Chen (Hong Kong University of Science and Technology) Bowen Zhang (Hong Kong University of Science and Technology) Charles Zhang (Hong Kong University of Science and Technology) |
| Private Signaling Secure Against Actively Corrupted Servers | Haotian Chu (Northwestern University) Xiao Wang (Northwestern University) Yanxue Jia (Illinois Institute of Technology) |
| Decoupled TFHE-type Functional Bootstrapping | Zhihao Li (Ant Group) Xuan Shen (Institute of Information Engineering, CAS; UCAS) Xianhui Lu (Institute of Information Engineering, CAS; UCAS) Ruida Wang (Institute of Information Engineering, CAS; UCAS) Yuan Zhao (Ant Group) Zhiwei Wang (Institute of Information Engineering, CAS; UCAS) |
| The SecureDrop Protocol: End-to-End Encrypted Whistleblowing for All | Giulio Berra (Freedom of the Press Foundation) Felix Linker (ETH Zurich) Luca Maier (ETH Zurich) Cory Francis Myers (Freedom of the Press Foundation) Kenneth G. Paterson (ETH Zurich) Rowen Shane (Freedom of the Press Foundation) Shannon Veitch (ETH Zurich) |
| Compiling Oblivious Schemes Against Coercion: The Anamorphic Construction | Xianglong Zhang (Huazhong University of Science and Technology) Wei Wang (Huazhong University of Science and Technology) Peng Xu (Huazhong University of Science and Technology) Laurence T. Yang (Zhengzhou University) Stjepan Picek (University of Zagreb) Kaitai Liang (University of Turku) |
| SlowPerception: Physical-World Latency Attack against Camera-based Perception in Autonomous Driving | Chen Ma (Xi'an Jiaotong University) Ningfei Wang (Independent Researcher) Zhengyu Zhao (Xi'an Jiaotong University) Qian Wang (Wuhan University) Chao Shen (Xi'an Jiaotong University) |
| DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration | Tian Dong (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Shaofeng Li (Southeast University) Guoxing Chen (Shanghai Jiao Tong University) Yuling Chen (Guizhou University) Zhen Liu (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) Hao Chen (The University of Hong Kong) |
| RT-MD: Host-Centric Real-Time Detection of Multi-Domain DNS Data Exfiltration | Pengfei Ren (University of Science and Technology of China) Lutong Chen (University of Science and Technology of China) Xuanbo Huang (Xi'an Jiaotong University) Jiankang Sun (University of Science and Technology of China) Huanjie Zhang (University of Science and Technology of China) Jian Li (University of Science and Technology of China) Kaiping Xue (University of Science and Technology of China) |
| RustGo: Fairly Directed Greybox Fuzzing for Enforcing Rust Memory Safety | Dongyeon Yu (Korea University) Jiun Min (Korea University) Yewan Na (Ulsan National Institute of Science and Technology) Mijung Kim (Ulsan National Institute of Science and Technology) Taegyu Kim (The Pennsylvania State University) Yuseok Jeon (Korea University) |
| DeepProve: Verifiable End-to-End Large Language Model Inference | Nicolas Gailly (Lagrange Labs) Ismael Hishon-Rezaizadeh (Lagrange Labs) Tianyi Liu (University of Illinois Urbana-Champaign) Nicholas Mainardi (Lagrange Labs) Dimitrios Papadopoulos (Hong Kong University of Science & Technology) Charalampos Papamanthou (Yale University) Christodoulos Pappas (Hong Kong University of Science & Technology) Shravan Srinivasan (Lagrange Labs) Zack Youell (Lagrange Labs) Yupeng Zhang (University of Illinois Urbana-Champaign) |
| Accio: Detecting Privilege Escalation Vulnerabilities in DBMSs via Minimum Privilege Set Calculation | Jingzhou Fu (Tsinghua University) Zongrui Peng (Tsinghua University) Jie Liang (Beihang University) Zhiyong Wu (Tsinghua University) Chi Zhang (Tsinghua University) Yu Jiang (Tsinghua University) |
| When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output | Shuoming Zhang (Institute of Computing Technology, Chinese Academy of Sciences) Jiacheng Zhao (Institute of Computing Technology, Chinese Academy of Sciences) Hanyuan Dong (Institute of Computing Technology, Chinese Academy of Sciences) Ruiyuan Xu (Institute of Computing Technology, Chinese Academy of Sciences) Zhicheng Li (Institute of Computing Technology, Chinese Academy of Sciences) Yangyu Zhang (Institute of Computing Technology, Chinese Academy of Sciences) Shuaijiang Li (Institute of Computing Technology, Chinese Academy of Sciences) Yuan Wen (University of Aberdeen) Chunwei Xia (University of Leeds) Zheng Wang (University of Leeds) Xiaobing Feng (Institute of Computing Technology, Chinese Academy of Sciences) Huimin Cui (Institute of Computing Technology, Chinese Academy of Sciences) |
| Melior, Verifiable Mixed-Integer Programming via zkSNARKs | Wenjie Qu (National University of Singapore) Yanze Jiang (National University of Singapore) Yanpei Guo (National University of Singapore) Jiaheng Zhang (National University of Singapore) |
| VeriPRAC: Verifiable Formal Contracts for Secure Per Row Activation Counting | Ali Hajiabadi (ETH Zurich) Silvan Niederer (ETH Zurich) Kaveh Razavi (ETH Zurich) |
| Expose Your Disguise: Recovering Source Speaker Identity From Voice Conversion | Hanlei Zhang (Zhejiang University) Zhongming Ma (Zhejiang University) Mingyang Zhang (Ant Group) Tengfei Liu (Ant Group) Yushi Cheng (Zhejiang University) Yanjiao Chen (Zhejiang University) |
| Hitchhiking on Inherent Randomness: Diffusion-based Graph Generation under Differential Privacy | Renxuan Hou (The Hong Kong Polytechnic University) Qingqing Ye (The Hong Kong Polytechnic University) Lyu Xu (Nanyang Technological University) Xun Ran (The Hong Kong Polytechnic University) Haibo Hu (The Hong Kong Polytechnic University) |
| Fundamental Limitations of Favorable Privacy–Utility Guarantees for DP-SGD | Murat Bilgehan Ertan (Centrum Wiskunde & Informatica (CWI)) Marten van Dijk (Centrum Wiskunde & Informatica (CWI)) |
| An Ounce of Prevention Is Worth a Pound of Cure: A Pre-filtering Framework to Against Asymmetric DoS in Group Authentication at the IoT Edge | Yizhao Zhou (Hangzhou Dianzi University) Qingxiang Xu (Hangzhou Dianzi University) Yingjie Xia (Hangzhou Dianzi University) |
| Braid: Sybil-Resistant Decentralized Identity with Trustless Key Recovery and Non-Transferable Anonymous Credentials | Rui Song (The Hong Kong Polytechnic University) Tianyu Zheng (The Hong Kong Polytechnic University) Shang Gao (The Hong Kong Polytechnic University) Guyue Li (Southeast University) Xue Liu (McGill University) Bin Xiao (The Hong Kong Polytechnic University) |
| MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks | Tailun Chen (Zhejiang University) Yu He (Zhejiang University) Yan Wang (Alibaba Group) Shuo Shao (Zhejiang University) Haolun Zheng (Zhejiang University) Zhihao Liu (Zhejiang University) Jinfeng Li (Alibaba Group) Zhizhen Qin (Amazon) Yuefeng Chen (Alibaba Group) Zhixuan Chu (Zhejiang University) Zhan Qin (Zhejiang University) Kui Ren (Zhejiang University) |
| The Rise and Fall of Google's Privacy Sandbox | Rachid Youssef Grib (Politecnico di Torino) Alberto Verna (Politecnico di Torino) Nikhil Jha (Politecnico di Torino) Martino Trevisan (University of Trieste) Marco Mellia (Politecnico di Torino) |
| Stop My Dancing! Understanding, Detecting and Attributing Motion-Aware Deepfake Videos | Fazhong Liu (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Tian Dong (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) |
| Mosaic: A Modular Framework for Private Fuzzy Heavy Hitters | Gayathri Garimella (Brown University) Peihan Miao (Brown University) Eileen Nolan (Brown University) Phuoc Van Long Pham (Brown University) Siddarth Sitaraman (Brown University) |
| PolyVoice: Exploiting Cluster-Level Vulnerabilities for One-to-Many Impersonation in Speaker Verification Systems | Yunjie Ge (Wuhan University) Jinlong Jiang (Wuhan University) Yuchen Liu (Wuhan University) Huayi Duan (The Hong Kong University of Science and Technology (Guangzhou)) Shenyi Zhang (Wuhan University) Lingchen Zhao (Wuhan University) Chao Shen (Xi'an Jiaotong University) Qian Wang (Wuhan University) |
| SpecStega: Provably Secure Linguistic Steganography Based on Speculative Sampling in Asymmetric Resource Scenarios | Jun Jiang (University of Science and Technology of China) Kejiang Chen (University of Science and Technology of China) Yuang Qi (University of Science and Technology of China) Jiawei Zhao (University of Science and Technology of China) Weiming Zhang (University of Science and Technology of China) Nenghai Yu (University of Science and Technology of China) |
| Relect: Single Secret Leader Election via FHE with Reduced Computation and Communication and Transparent Setup | Haofei Liang (Shanghai Jiao Tong University) Zeyu Liu (Yale University) Yunhao Wang (Yale University) Xiang Xie (East China Normal University) Yu Yu (Shanghai Jiao Tong University) Fan Zhang (Yale University) |
| Auditing Data Provenance in LLM Fine-tuning via Intrinsic Distributional Fingerprints | Zirui Huang (Nanjing University) Yunlong Mao (Nanjing University) Wei Tong (Nanjing University) Tingting Wu (China Mobile Research Institute) Xin Ge (China Mobile Research Institute) Sheng Zhong (Nanjing University) |
| BadTV: Unveiling Backdoor Threats in Third-Party Task Vectors | Chia-Yi Hsu (National Yang Ming Chiao Tung University) Yu-Lin Tsai (University of California, Berkeley) Zhe Yu (RIKEN Center for Advanced Intelligence Project) Yan-Lun Chen (National Yang Ming Chiao Tung University) Chih-Hsun Lin (National Chengchi University) Chia-Mu Yu (National Yang Ming Chiao Tung University) Yang Zhang (CISPA Helmholtz Center for Information Security) Chun-Ying Huang (National Yang Ming Chiao Tung University) Jun Sakuma (Institute of Science Tokyo) |
| qedb: Expressive and Modular Verifiable Databases (without SNARKs) | Vincenzo Botta (Independent) Simone Bottoni (Provably Technologies) Matteo Campanelli (Offchain Labs) Emanuele Ragnoli (Provably Technologies) Alberto Trombetta (Università degli Studi dell'Insubria) |
| BACAgent: LLM-Powered Detection of Broken-Access-Control Vulnerabilities in Web Applications | Fengyu Liu (Fudan University) Yuan Zhang (Fudan University) Zheng Lou (Fudan University) Tian Chen (Fudan University) Youkun Shi (Fudan University) Jiarun Dai (Fudan University) Enhao Li (Fudan University) Guangyu Zhou (ByteDance Inc.) Zhongfu Su (ByteDance Inc.) Zequn Fang (ByteDance Inc.) |
| HEGIDE: A MIMD Oblivious Processor for Private Function Evaluation over CKKS | Jules Dumezy (Université Paris-Saclay, CEA-List) Nicolas Ye (Université Paris-Saclay, CEA-List) Pierre-Emmanuel Clet (Université Paris-Saclay, CEA-List) Olive Chakraborty (Université Paris-Saclay, CEA-List) Aymen Boudguiga (Université Paris-Saclay, CEA-List) |
| GALAS: Compact VOLE-in-the-Head Signatures from Subfield Compression | Guoxiao Liu (Tsinghua University) Yimeng Sun (Shandong University) Zhuoqing Peng (Tsinghua University) Chongxu Ren (Tsinghua University) Guowei Liu (Shandong University) Juntong Lin (Shandong University) Keting Jia (Tsinghua University) Meiqin Wang (Shandong University) |
| Finding and Exploiting Discrepancies in QR Code Payload Processing | Jianyu Lu (The Chinese University of Hong Kong) Yikang Chen (The Chinese University of Hong Kong) Wong Kin Ting (The Chinese University of Hong Kong) Xianbo Wang (The Chinese University of Hong Kong) Che Wei Tu (The Chinese University of Hong Kong) Mak Sui Ling Angela (The Chinese University of Hong Kong) Sze Yiu Chau (Simon Fraser University) |
| Asymmetric Grid Quorum Systems for Heterogeneous Processes | Michael Senn (University of Bern) Christian Cachin (University of Bern) |
| TANTRUM: Breaking the Heap Sandbox in JavaScript Engines via Protection Domain Fuzzing | Seunghyun Lee (Carnegie Mellon University) David Brumley (Carnegie Mellon University) |
| Exploiting Body-Coupled Leakage for Keystroke Inference on Smartphones | Yao Wang (Xidian University) An He (Xidian University) Xiaolong Li (Xidian University) Haibin Zhang (Xidian University) Tao Gu (Macquarie University) |
| Illusion of Depth: Revealing Hidden Stereo Vision Vulnerabilities in Depth Estimation | Sri Hrushikesh Varma Bhupathiraju (University of Florida) Tetsu Ishizue (The University of Electro-Communications) Nicholas U. Costagliola (University of Florida) Ozora Sako (Keio University) Kentaro Yoshioka (Keio University) Takeshi Sugawara (The University of Electro-Communications) Sara Rampazzi (University of Florida) |
| Usability Compliance vs. Legal Compliance of Consent Withdrawal on the Web: An Expert Evaluation of 200 Websites | Sanju Ahuja (International Institute of Information Technology Bangalore) Gayatri Priyadarsini Kancherla (Indian Institute of Technology Gandhinagar) Cristiana Santos (Utrecht University) Nataliia Bielova (Inria) Abhishek Bichhawat (Indian Institute of Technology Gandhinagar) |
| AuditVotes: Elevating Provable Defense for GNNs with Efficient Augmentation and Conditional Smoothing | Yuni Lai (Xidian University) Yulin Zhu (Hong Kong Chu Hai College) Yixuan Sun (The Hong Kong Polytechnic University) Yulun Wu (National University of Defense Technology) Bin Xiao (The Hong Kong Polytechnic University) Gaolei Li (Shanghai Jiao Tong University) Jianhua Li (Shanghai Jiao Tong University) Qi Xie (Hubei University) Kai Zhou (The Hong Kong Polytechnic University) |
| New Designs of Multivariate-Polynomial Universal Hash Functions | Jean Paul Degabriele (Technology Innovation Institute) Jan Gilcher (ETH Zurich) Jérôme Govinden (Technology Innovation Institute) Kenneth G. Paterson (ETH Zurich) |
| What Does the Server See- Understanding Privacy Leakage from Large Language Models in Split Inference | Mingyuan Fan (East China Normal University) Yu Liu (East China Normal University) Fuyi Wang (RMIT University) Cen Chen (East China Normal University) |
| Designing an Automated Fact-Checking Pipeline for Recent Claims | Arshia Arya (University of California, San Diego) Gauthami Yenne (University of Illinois Urbana-Champaign) Deepak Kumar (University of California San Diego) |
| Kairos: Efficient High-Threshold Asynchronous Distributed Key Generation from Lightweight Cryptography | Xinxin Xing (Beihang University) Yizhong Liu (Beihang University) Zifan Li (Beihang University) Jianwei Liu (Beihang University) Yudi Yang (Beihang University) Yuan Lu (A*STAR IAIC) Song Bian (Beihang University) Zhenyu Guan (Beihang University) Tianwei Zhang (Nanyang Technological University) |
| Models Trump Code: An Empirical Analysis of GDPR Compliance | Hoàng Nguyễn (ETH Zurich) Srđan Krstić (ETH Zurich) David Basin (ETH Zurich) |
| Preprocessed Private Function Evaluation: Achieving Sublinear Online Complexity for Lookup Tables | Tanping Zhou (Engineering University of People's Armed Police) Xiaoyi Wang (Institute of Software, Chinese Academy of Sciences) Yi Qu (Institute of Software, Chinese Academy of Sciences) Wenchao Liu (Engineering University of People's Armed Police) Long Chen (Institute of Software, Chinese Academy of Sciences) Zhenfeng Zhang (Institute of Software, Chinese Academy of Sciences) |
| How to Back Up High-Value Secret Keys | Sanjam Garg (University of California, Berkeley) Noemi Glaeser (Technical University of Darmstadt) Abhishek Jain (Johns Hopkins University) Michael Lodder (Tectonic Labs) Hart Montgomery (Linux Foundation) |
| ReasoningBomb: A Stealthy Denial-of-Service Attack by Inducing Pathologically Long Reasoning in Large Reasoning Models | Xiaogeng Liu (Johns Hopkins University) Xinyan Wang (University of Wisconsin–Madison) Yechao Zhang (Nanyang Technological University) Sanjay Kariyappa (NVIDIA Corporation) Chong Xiang (NVIDIA Corporation) Muhao Chen (University of California, Davis) G. Edward Suh (NVIDIA Corporation) Chaowei Xiao (Johns Hopkins University) |
| Olingo: Threshold Lattice Signatures with DKG and Identifiable Abort | Kamil Doruk Gur (Norwegian University of Science and Technology) Patrick Hough (Universität der Bundeswehr München) Jonathan Katz (Google) Caroline Sandsbråten (Norwegian University of Science and Technology) Tjerand Silde (Norwegian University of Science and Technology) |
| Poros: Secure and Highly Parallel Sharding Blockchain with Optimized Cross-Shard Transaction Processing | Zhuocheng Pan (Beihang University) Jianwei Liu (Beihang University) Andi Liu (Beihang University) Yuxuan Hu (Beihang University) Boyu Zhao (Beihang University) Zhenyu Guan (Beihang University) Gerui Wang (Beijing Academy of Blockchain and Edge Computing) Mingchao Wan (Beijing Academy of Blockchain and Edge Computing) Yizhong Liu (Beihang University) |
| Anchor-DKG: Distributed Key Generation with Repeating Parties | Hanwen Feng (University of Canterbury) Qiang Tang (University of Sydney) Sri AravindaKrishnan Thyagarajan (University of Sydney) |
| PBFuzz: Agentic Directed Fuzzing for PoV Generation | Haochen Zeng (University of California, Riverside) Andrew Bao (University of Minnesota, Twin Cities) Jiajun Cheng (University of California, Riverside) Chengyu Song (University of California, Riverside) |
| N00B: Bounds Checking for the Masses | Adriaan Jacobs (KU Leuven) Carlo Ramponi (University of Trento) Jonas Roels (KU Leuven) Bruno Crispo (University of Trento) Silviu Vlasceanu (Huawei Research) Mahmoud Ammar (Huawei Research) Stijn Volckaert (KU Leuven) |
| Towards Effective and Stealthy Data Poisoning Attacks to Locally Differentially Private Triangle Counting Protocols | Xinyu Li (Xi'an Jiaotong University) Xuebin Ren (Xi'an Jiaotong University) Shusen Yang (Xi'an Jiaotong University) Cong Zhao (Xi'an Jiaotong University) |
| DP4SQL: Differentially Private SQL with Flexible Privacy Policies | Andrew Cascio (Duke University) KinChin Tong (Binghamton University) Daniel Kifer (The Pennsylvania State University) Zeyu Ding (Binghamton University) Danfeng Zhang (Duke University) |
| Towards Scalable Fuzzy PSI via Efficient Fuzzy Matching | Meng Hao (Singapore Management University) Xinpeng Yang (Nanyang Technological University) Hanxiao Chen (University of Electronic Science and Technology of China) Tianwei Zhang (Nanyang Technological University) Haiyang Xue (Singapore Management University) Guomin Yang (Singapore Management University) Hongwei Li (University of Electronic Science and Technology of China) Robert H. Deng (Singapore Management University) |
| Formal Security Analysis of the Olvid Messenger | Noemi Terzo (Max Planck Institute for Security and Privacy (MPI-SP)) Cas Cremers (CISPA Helmholtz Center for Information Security) Ruben Gonzalez (Neodyme AG) Peter Schwabe (Max Planck Institute for Security and Privacy (MPI-SP)) Yuval Yarom (Ruhr University Bochum) Zhiyuan Zhang (Max Planck Institute for Security and Privacy (MPI-SP)) |
| Head Unit at Risk: Cross-Domain Attacks via In-Vehicle Infotainment Systems | Yanbo Xu (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) |
| ZEE200: Zero Knowledge for Everything and Everyone @ 200 KHz | Sunghyeon Jo (Georgia Institute of Technology) Vladimir Kolesnikov (Georgia Institute of Technology) Yibin Yang (NTT Research) |
| Revisiting Shamir Secret Sharing for Threshold Fully Homomorphic Encryption | Jiseung Kim (Jeonbuk National University) Seunghu Kim (Chung-Ang University) Hyung Tae Lee (Chung-Ang University) |
| PHPBench: Automated Generation of Verifiable and Hierarchical Benchmarks for PHP Web Fuzzing | Youkun Shi (Fudan University) Yuan Zhang (Fudan University) Lei Zhang (Fudan University) Jiarun Dai (Fudan University) Tianhao Bai (Fudan University) Fengyu Liu (Fudan University) Bocheng Xiang (Fudan University) Xiapu Luo (The Hong Kong Polytechnic University) Min Yang (Fudan University) |
| Effects of Explanations on Driver Situation Awareness Under Physical Adversarial Attacks in Automated Driving: A Driving Simulator Study | Rao Li (The Pennsylvania State University) Jiazheng Gao (The Pennsylvania State University) Yiqi Zhang (The Pennsylvania State University) Aiping Xiong (The Pennsylvania State University) |
| Turning Everyday Earphones into a Full-Duplex Speech Eavesdropping Platform via Zero-permission IMU | Ming Gao (Nanjing University of Posts and Telecommunications) Ayijiaken Amantai (Nanjing University of Posts and Telecommunications) Yichen Dai (Nanjing University of Posts and Telecommunications) Jia Lv (Nanjing University of Posts and Telecommunications) Kaiyan Cui (Nanjing University of Posts and Telecommunications) Jinsong Han (Zhejiang University) Minhao Cui (Seoul National University) Fu Xiao (Nanjing University of Posts and Telecommunications) |
| Casting the Net! Revisiting MasterFace Impersonation Attacks | Seunghun Paik (Hanyang University) Sunpill Kim (Sookmyung Women's University) Chanwoo Hwang (Hanyang University) Jae Hong Seo (Hanyang University) |
| Automated Side-Channel Analysis of Cryptographic Protocol Implementations | Faezeh Nasrabadi (CISPA Helmholtz Center for Information Security) Robert Künnemann (CISPA Helmholtz Center for Information Security) Hamed Nemati (KTH Royal Institute of Technology) |
| Understanding and Preserving Safety in Fine-Tuned LLMs | Jiawen Zhang (Zhejiang University) Yangfan Hu (University of Wisconsin-Madison) Kejia Chen (Zhejiang University) Lipeng He (University of Waterloo) Jiachen Ma (Shanghai Artificial Intelligence Laboratory) Jian Lou (Sun Yat-sen University) Dan Li (Sun Yat-sen University) Jian Liu (Zhejiang University) Xiaohu Yang (Zhejiang University) Ruoxi Jia (Virginia Tech) |
| Reproducing Web Application Vulnerabilities with Patch-Guided Routing Inference and Sink Exploration | Youkun Shi (Fudan University) Yuan Zhang (Fudan University) Feng Xue (Fudan University) Jiarun Dai (Fudan University) Lei Zhang (Fudan University) Fengyu Liu (Fudan University) Bocheng Xiang (Fudan University) Xiapu Luo (The Hong Kong Polytechnic University) |
| Don't Trust the AI Ecosystem: Analyzing Privacy Leakage in Compromised Open-Source Components | Jin-Seong Kim (Yonsei University) Han-Ju Lee (Yonsei University) Seok-Won Hong (Yonsei University) Takeshi Takahashi (National Institute of Information and Communications Technology) Chansu Han (National Institute of Information and Communications Technology) Tomohiro Morikawa (University of Hyogo) Seok-Hwan Choi (Yonsei University) |
| Mitigating Code Injection Attacks on Modern GPUs | Carlo Ramponi (University of Trento) Adriaan Jacobs (KU Leuven) Luigi Dell'Eva (University of Trento) Stijn Volckaert (KU Leuven) Silviu Vlasceanu (Huawei Research) Mahmoud Ammar (Huawei Research) Bruno Crispo (University of Trento) |
| 'We just went with what seemed the best supported': Lessons on Cryptographic Practices in Securing Microcontrollers from Embedded CTFs | Zheyuan Ma (University at Buffalo) Xi Tan (University of Colorado Colorado Springs) Gaoxiang Liu (University at Buffalo) Alex Eastman (University at Buffalo) Md Armanuzzaman (University of Texas at El Paso) Ziming Zhao (Northeastern University) |
| From Fix to Flaw: Understanding and Revealing Incomplete Patches for Link Following Vulnerabilities | Bocheng Xiang (Fudan University) Yuan Zhang (Fudan University) Hao Huang (Fudan university) Youkun Shi (Fudan University) |
| It's About Time: Detecting Timing Side-Channel Vulnerabilities in High-Level Synthesis Designs | Denis Zuppiger (ETH Zurich) Katharina Ceesay-Seitz (ETH Zurich) Jiahui Xu (ETH Zurich) Lana Josipović (ETH Zurich) Kaveh Razavi (ETH Zurich) |
| HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learning | Han Chen (University of Technology Sydney) Hanchen Wang (University of Technology Sydney) Hongmei Chen (Yunnan University) Lu Qin (University of Technology Sydney) Wenjie Zhang (University of New South Wales) Ying Zhang (University of Technology Sydney) |
| STMark: Watermarking Scalar and Textual Data Robustly Using Frequency Statistics | Jiongyang Ji (Xidian University) Yanguo Peng (Xidian University) Zhen Lv (Xi'an International Studies University) Gengquan Guo (Xidian University) Hui Li (Xidian University) Jiangtao Cui (Xidian University) |
| MPCArbiter: Detect Numeric Error Vulnerabilities in MPC Implementations via Distribution-Aware Differential Oracle | Guopeng Lin (Fudan University) Zhengting Jin (Fudan University) Shuyu Chen (Fudan University) Jingwei Pu (Fudan University) Zheng Qu (Fudan University) Jiaheng Zhang (National University of Singapore) Weili Han (Fudan University) |
| PC^2: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models | Wonwoo Choi (ADD) Minjae Seo (ETRI) Minkyoo Song (KAIST) Hwanjo Heo (ETRI) Seungwon Shin (KAIST) Myoungsung You (University of Seoul) |
| eMicro: Real-Time Multi-Hop Access Control for Microservices with eBPF | Rizky Ramadhana Putra (Virginia Tech) Osama Bajaber (King Abdulaziz University) Saimon Amanuel Tsegai (Virginia Tech) Teryl Taylor (IBM Research) Frederico Araujo (IBM Research) Yuede Ji (UT Arlington) Peng Gao (Virginia Tech) |
| Reflection, Education, Consistency: Towards Best Ethics Practices At Security And Privacy Conferences | Florian Hantke (CISPA Helmholtz Center for Information Security) Rafael Mrowczynski (CISPA Helmholtz Center for Information Security) Til Dralle (CISPA Helmholtz Center for Information Security) Ben Stock (CISPA Helmholtz Center for Information Security) |
| Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning | Zhenqian Zhu (Harbin Institute of Technology, Shenzhen) Yamin Hu (Harbin Institute of Technology, Shenzhen) Yujiang Liu (Harbin Institute of Technology, Shenzhen) Luping Wei (Harbin Institute of Technology, Shenzhen) Wenbo Hou (Harbin Institute of Technology, Shenzhen) Bin Li (Shenzhen University) Haodong Li (Shenzhen University) Wenjian Luo (Harbin Institute of Technology, Shenzhen) |
| UnifOMR: Oblivious Message Retrieval with Near-optimal Concrete Efficiency | Ben Fisch (Yale University) Zeyu Liu (Yale University) Eran Tromer (Boston University) Yunhao Wang (Yale University) |
| Blue Bubbles, Red Flags: Investigating Privacy Leakage in Apple iMessage | Viktor E. Garske (University of Applied Sciences Stralsund) Swantje Lange (Hasso Plattner Institute, University of Potsdam) Gabriel K. Gegenhuber (Interdisciplinary Transformation University (IT:U)) David Schmidt (University of Vienna) Andreas Noack (University of Applied Sciences Stralsund) Jiska Classen (Hasso Plattner Institute, University of Potsdam) |
| Thinking More, Harnessing Better: Automatic Harness Generation with Dataflow Aggregation and Workflow Decomposition | Xing Zhang (QI-ANXIN Technology Research Institute) Zikang Huang (Wuhan University) Gang Yang (Information Support Force Engineering University) CongChong Wang (QI-ANXIN Technology Research Institute) Lu Liu (Shandong University) Bin Yin (QI-ANXIN Technology Research Institute) Mingyi Wang (QI-ANXIN Technology Research Institute) Ziquan Zhao (QI-ANXIN Technology Research Institute) Min Li (QI-ANXIN Technology Research Institute) Zhenyu Chen (QI-ANXIN Technology Research Institute) Bo Wu (Information Support Force Engineering University) Lingyun Ying (QI-ANXIN Technology Research Institute) |
| AuditPay: Anonymous Payments with Controlled Oversight | Elkana Tovey (Hebrew University) Yossi Gilad (Hebrew University) Aviv Zohar (Hebrew University) |
| Rogue: Updatable Matrix Lookup Arguments and Applications to Verifiable Databases | Christodoulos Pappas (Hong Kong University of Science and Technology) Zhuo Cai (Hong Kong University of Science and Technology) Dimitrios Papadopoulos (Hong Kong University of Science and Technology) |
| Timing Games in Responsive Consensus Protocols | Kaya Alpturer (Princeton University) Kushal Babel (Category Labs) Aditya Saraf (Cornell University; Cornell Tech) |
| Proving Circuit Functional Equivalence in Zero Knowledge | Sirui Shen (Centrum Wiskunde & Informatica) Zunchen Huang (Centrum Wiskunde & Informatica) Chenglu Jin (Centrum Wiskunde & Informatica) |
| 2PC Memory-Manipulating Programs with Constant Overhead | David Heath (University of Illinois Urbana-Champaign) |
| Good Cache, BAD Cache: Exploiting DNSSEC Validation Failures for DNS Cache Poisoning Attacks | Shiming Liu (Tsinghua University) Yunyi Zhang (Tsinghua University) Chaoyi Lu (Zhongguancun Laboratory) Baojun Liu (Tsinghua University) Shuhan Zhang (Tsinghua University) Donghong Sun (Tsinghua University) Yong Ma (Alibaba Group) Linjian Song (Alibaba Group) |
| MnemonicHack: Recovering the Master Seed from Bitcoin Hardware Wallets via Side-Channel Attacks | Jiwoo Baek (Korea University) Daehyeon Bae (Korea University) Gyusang Kim (Korea University) Gilsang Ahn (Korea University) Insup Lee (Korea University) Sujin Park (Korea University) Seokhie Hong (SmartM2M Co., Ltd) HeeSeok Kim (Korea University) |
| CameraBlinder: Blinding Wireless Security Cameras Using a Low-Power Laser | Yan He (University of Oklahoma) Guanchong Huang (University of Oklahoma) Yao Liu (University of South Florida) Song Fang (University of Oklahoma) |
| A Sound Translation from Tamarin to ProVerif: Enabling Comparative Analysis | Kevin Morio (CISPA Helmholtz Center for Information Security) Yavor Ivanov (CISPA Helmholtz Center for Information Security) Robert Künnemann (CISPA Helmholtz Center for Information Security) |
| MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction | Wenqi Zhang (Fudan University) Yulin Shen (Fudan University) Changyue Jiang (Fudan University) Jiarun Dai (Fudan University) Geng Hong (Fudan University) Xudong Pan (Fudan University) |
| Accelerating Multiparty Noise Generation Using Lookups | Fredrik Meisingseth (Graz University of Technology) Christian Rechberger (Graz University of Technology) Fabian Schmid (Graz University of Technology) |
| ACOFuzz: Memory-Error-Sensitive Fuzzing Driven by Address-Computation-Operand-Aware Feedback Mechanism | Yiru Zhao (Wuhan University) Aorui Zhang (Wuhan University) Xiaoke Wang (Tianjin University) Aoshuang Ye (Wuhan Textile University) Benxiao Tang (Wuhan Textile University) Jinxin Ma (Beijing University of Posts and Telecommunications) Lei Zhao (Wuhan University) Heqing Huang (City University of Hong Kong) |
| Secrets Everywhere: Auditing Memorization in Mobility Prediction Models | Anne Josiane Kouam (Inria & TU Berlin) Hristo Boyadzhiev (BIFOLD & TU Berlin) Konrad Rieck (BIFOLD & TU Berlin) |
| Efficient Private Filtering and Aggregation for Weighted Set Intersection via Oblivious Encrypted Weight Transfer | Xiaodong Wang (Tsinghua University) Shengzhe Meng (Tsinghua University) Zijie Lu (Xi'an Jiaotong-Liverpool University) Bei Liang (Beijing Institute of Mathematical Sciences and Applications) |
| The Illusion of Rust Safety: Detecting Modular Unsafe Functions with LLMs | Xiang Cheng (Georgia Institute of Technology) Fan Sang (Georgia Institute of Technology) Yibin Yang (University of Toronto and NTT Research) Hang Zhang (Indiana University) Sangdon Park (Pohang University of Science and Technology) Xiaokuan Zhang (George Mason University) Taesoo Kim (Georgia Institute of Technology and Microsoft) |
| KingsGuard: Enclave Data Protection Under Real-World TEE Vulnerabilities | Saltanat Firdous Allaqband (Indian Institute of Technology Madras) Deepanjali S (Indian Institute of Technology Madras) Rohit Srinivas R G (Indian Institute of Technology Madras) Devashish Gosain (Indian Institute of Technology Bombay) Chester Rebeiro (Indian Institute of Technology Madras) |
| LUNA+: More Succinct Post-Quantum ZK-SNARKs from Computational Privacy | Yuki Kume (Monash University) Ron Steinfeld (Monash University) Amin Sakzad (Monash University) Mert Yassi (Monash University) |
| Thresholdizing Standardized FALCON Signatures | Radhika Garg (Northwestern University) Daniel Escudero (TACEO) Antigoni Polychroniadou (JPMorgan AI Research) Akira Takahashi (JPMorgan AI Research) Xiao Wang (Northwestern University) |
| Piquant$varepsilon$: Private Quantile Estimation in the Two-Server Model | Hannah Keller (Max Planck Institute for Security and Privacy) Jacob Imola (University of Waterloo) Fabrizio Boninsegna (University of Padova) Rasmus Pagh (University of Copenhagen) Amrita Roy Chowdhury (University of Michigan) |
| Non-interactive Anonymous Tokens with Private Metadata Bit | Foteini Baldimtsi (George Mason University, Mysten Labs) Lucjan Hanzlik (CISPA Helmholtz Center for Information Security) Quan Nguyen (George Mason University) Aayush Yadav (George Mason University) |
| Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem | Jyotirmay Chauhan (University of Illinois Chicago) Kostas Solomos (Brandeis University) Mir Masood Ali (University of Illinois Chicago) Jason Polakis (University of Illinois Chicago) |
| Lether: Practical Post-Quantum Account-Based Private Blockchain Payments | Hongxiao Wang (The University of Hong Kong) Muhammed F. Esgin (Monash University) Ron Steinfeld (Monash University) Siu-Ming Yiu (The University of Hong Kong) |
| LightShark: Actively Secure Machine-Learning Inference Based on Lightweight Authenticated Distributed Comparison Function | Chenkai Zeng (Wuhan University) Qi Feng (Wuhan University) Debiao He (Wuhan University) Min Luo (Wuhan University) |
| LockSnoop: Eavesdropping Plain-text Keypad Smart Lock Passcode via Electromagnetic Side Channel | Bowei Zhang (Clemson University) Zhuoyang Wang (Clemson University) Chenxu Jiang (Clemson University) Gen Li (Clemson University) Ming Li (University of Texas at Arlington) Linke Guo (Clemson University) |
| Improved Garbled RAM via Garbled Merge | Can Liu (Tsinghua University) Lenny Liu (University of Illinois Urbana-Champaign) Ning Luo (University of Illinois Urbana-Champaign) David Heath (University of Illinois Urbana-Champaign) |
| Doubly Aggregatable Signatures | Georg Fuchsbauer (TU Wien) Pranav Garimidi (a16z Crypto Research) Joachim Neu (a16z Crypto Research) Guru-Vamsi Policharla (Commonware, Inc.) Max Resnick (Anza) Ertem Nusret Tas (a16z Crypto Research) |
| Universally Composable Adaptor Signatures | Paul Gerhart (TU Wien) Daniel Rausch (University of Stuttgart) Dominique Schroeder (TU Wien) |
| Compiler Provenance as a Service: Decoupled Identification for Composite Provenance and Operational Resilience | Han Gao (Purdue University) Antonio Bianchi (Purdue University) Z. Berkay Celik (Purdue University) Dave (Jing) Tian (Purdue University) |
| Insecurity Through Obscurity: Veiled Vulnerabilities in Closed-Source Contracts | Sen Yang (Yale University) Kaihua Qin (University of Warwick) Aviv Yaish (Yale University) Fan Zhang (Yale University) |
| PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration | Meng Wang (CISPA Helmholtz Center for Information Security) Yue Ma (University of Electronic Science and Technology of China) Majid Garoosi (CISPA Helmholtz Center for Information Security) Wenting Fan (Shanghai Jiao Tong University) Liwei Guo (University of Electronic Science and Technology of China) Jiangqiang Wang (Max Planck Institute for Security and Privacy) Ali Abbasi (CISPA Helmholtz Center for Information Security) |
| Hydra: A Security Analysis Framework for TCP via Auto-Scaling FSMs | Ao Wang (Southeast University) Xuewei Feng (Tsinghua University) Yuxiang Yang (Tsinghua University) Yinchao Zhang (Tsinghua University) Qi Li (Tsinghua University) Guang Cheng (Southeast University) Weiqiang Wang (Ant Group) Ke Xu (Tsinghua University) |
| Beyond the Buzzword: How do Professionals Understand and Translate Zero Trust? | Ananta Soneji (University of Nebraska at Omaha) Souradip Nath (Arizona State University) Moritz Schloegel (CISPA Helmholtz Center for Information Security) Yan Shoshitaishvili (Arizona State University) Gail-Joon Ahn (Arizona State University) Adam Doupe (Arizona State University) Carlos Rubio-Medrano (Texas A&M University - Corpus Christi) |
| Efficient Single-Round Obfuscation of Search and Result Patterns in Searchable Encryption | Tung Le (Virginia Tech) Thang Hoang (Virginia Tech) |
| Beyond Anonymity Sets: A Security Model for Distributed Shuffling in Adversarial Environments | Adrian Cinal (NASK National Research Institute) Oliwer Sobolewski (NASK National Research Institute) Gabriel Wechta (NASK National Research Institute) Filip Zagórski (University of Wroclaw) |
| Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy | Puning Zhao (Shenzhen Campus of Sun Yat-sen University) Zhikun Zhang (Zhejiang University) Shaowei Wang (Guangzhou University) Sheng Yue (Shenzhen Campus of Sun Yat-sen University) Bangzhou Xin (National Interdisciplinary Research Center of Engineering Physics) Tianhang Zheng (Zhejiang University) Pengfei Zhang (Anhui University of Science and Technology) Xiaochun Cao (Shenzhen Campus of Sun Yat-sen University) |
| The Billion Dollar Merkle Tree | Thomas Coratger (Ethereum Foundation) Dmitry Khovratovich (Ethereum Foundation) Bart Mennink (Maastricht University) Benedikt Wagner (Ethereum Foundation) |
| Robust Logical Foundations for Mechanizing Post-Quantum Cryptography in Squirrel | David Baelde (Univ Rennes, CNRS) Antoine Dallon (AMIAD) Stéphanie Delaune (Univ Rennes, CNRS) Charlie Jacomme (Université de Lorraine, CNRS, Inria) Adrien Koutsos (Inria) |
| 3PaaS: Privacy-Preserving Post-Compromise Security as a Service | Cas Cremers (CISPA Helmholtz Center for Information Security) Abhinav Nakarmi (University of Michigan) Aleksi Peltonen (University of Aberdeen) Eyal Ronen (Tel Aviv University) |
| Symbolic Protocol Verification modulo XOR in ProVerif | Vincent Cheval (University of Oxford) Stéphanie Delaune (Univ Rennes, CNRS) |
| Snatcher: Apple Find My Network Exposes Your Lost Devices To Strangers | Zhenyu Ren (The Hong Kong University of Science and Technology) Yanbo Zhang (The Hong Kong University of Science and Technology) Boya Liu (The Hong Kong University of Science and Technology) Mo Li (The Hong Kong University of Science and Technology) |
| An Iconic Heavy Hitters Algorithm Made Private | Rayne Holland (CSIRO) |
| Detecting and Measuring Client- and Server-Side Google Tag Manager and its Tags in 80K Websites | Gilles Mertens (Inria) Nataliia Bielova (Inria) Vincent Roca (Inria) Ahmed Bouhoula (ETH Zurich) Marouane Akassab (Inria) |
| VUPER: Verified ASN.1 UPER Parser | Xiaotian Zhou (The Pennsylvania State University) Kai Tu (The Pennsylvania State University) Ali Ranjbar (The Pennsylvania State University) Yilu Dong (The Pennsylvania State University) Gang Tan (The Pennsylvania State University) Syed Rafiul Hussain (The Pennsylvania State University) |
| An Extended Hierarchy of Security Notions for Threshold Signature Schemes and Automated Analysis of Protocols That Use Them | Cas Cremers (CISPA Helmholtz Center for Information Security) Aleksi Peltonen (University of Aberdeen) Mang Zhao (Wuhan University) |
| Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary | Xiaoling Zhang (Zhongguancun Laboratory) Jian Sun (Zhongguancun Laboratory) Dawei Wang (Zhongguancun Laboratory) Chongyu Wang (Zhongguancun Laboratory) Li Chen (Zhongguancun Laboratory) Zhaoteng Yan (Zhongguancun Laboratory) Peipei Liu (Zhongguancun Laboratory) Lixiao Zhang (Zhongguancun Laboratory) Dan Li (Tsinghua University) |
| Function Privatization in the Local Model | Yuting Liang (University of Toronto) Tian Shu (Hong Kong University of Science and Technology) Ke Yi (Hong Kong University of Science and Technology) |
| Forced Execution for Malware Protected by Commercial Virtualization Obfuscators | Yifei Zhan (Renmin University of China) Yukun Cui (Renmin University of China) Shuofeng Hao (Renmin University of China) Dongnan He (Renmin University of China) Wei You (Renmin University of China) Bin Liang (Renmin University of China) Jianjun Huang (Renmin University of China) |
| Assessing Privacy Compliance Awareness and Practices Among Mobile Third-party Library Developers | Fares F. Alharbi (Indiana University-Bloomington) Ece Gumusel (Rutgers University) Luyi Xing (University of Illinois Urbana-Champaign) Xiaojing Liao (University of Illinois Urbana-Champaign) |
| Low-Complexity Private Decision Tree Evaluation over Homomorphic Encryption | Dongjin Park (Chung-Ang University) Gyeongwon Cha (Chung-Ang University) Joon-Woo Lee (Chung-Ang University) |
| TACITA: Threshold Aggregation without Client Interaction | Varun Madathil (Yale University) Arthur Lazzaretti (Yale University) Zeyu Liu (Yale University) Charalampos Papamanthou (Yale University) |
| One Leak Away: How Pretrained Model Exposure Amplifies Jailbreak Risks in Finetuned LLMs | Yixin Tan (Institute of Science Tokyo) Yu Zhe (RIKEN Center for Advanced Intelligence Project) Rui Wen (Institute of Science Tokyo) Jun Sakuma (Institute of Science Tokyo) |
| Your Space is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs | Yacong Gu (Tsinghua University) Lingyun Ying (QI-ANXIN Technology Research Institute) Zidong Zhang (QI-ANXIN Technology Research Institute) Yingyuan Pu (QI-ANXIN Technology Research Institute) Xiaoxue Huang (QI-ANXIN Technology Research Institute) Jiawei Zhou (QI-ANXIN Technology Research Institute) Wenjie Zhu (QI-ANXIN Technology Research Institute) Donghong Sun (Tsinghua University) Haixin Duan (Quancheng Lab; Tsinghua University) |
| PathMark: Protecting Intellectual Property of Mixture-of-expert LLMs via Path Watermarks | Yudong Gao (The Hong Kong University of Science and Technology) Qingyue Wang (The Hong Kong University of Science and Technology) Yuanyuan Yuan (Tsinghua University) Ruixuan Huang (The Hong Kong University of Science and Technology) Linghan Chen (Adelaide University) Zimo Ji (The Hong Kong University of Science and Technology) Shuai Wang (Hong Kong University of Science and Technology) |
| dfence: Fine-Grained Speculation Barriers for Efficient and Effective Hardware-Software Protection in the Spectre Era | Davide Davoli (MPI-SP) Marton Bognar (KU Leuven) Lesly-Ann Daniel (EURECOM) Benjamin Gregoire (Inria) Frank Piessens (KU Leuven) Tamara Rezk (Inria) |
| Prefix Consensus For Censorship Resistant BFT | Zhuolun Xiang (Aptos Labs) Andrei Tonkikh (Aptos Labs) Alexander Spiegelman (Aptos Labs) |
| EdgeRefine: Privacy-Utility Balance for Graphs via Jaccard Sampling under Edge Differential Privacy | Wenxiu Ding (Xidian University) Muzhi Liu (Xidian University) Zheng Yan (Xidian University) Mingjun Wang (Xidian University) Yifan Zhao (Xidian University) Qiao Liu (Xidian University) |
| Overloading Ad Blockers: Exploiting Filtering Logic for Selective Denial of Service | Hyunjoon Lee (Korea Advanced Institute of Science and Technology) Suyoung Lee (Korea Advanced Institute of Science and Technology) Heiko Kiesel (Technical University of Darmstadt) Sooel Son (Korea Advanced Institute of Science and Technology) |
| On the Pitfalls of Modeling Individual Knowledge | Wojciech Ciszewski (University of Warsaw) Stefan Dziembowski (University of Warsaw) Tomasz Lizurej (NASK Institute) Marcin Mielniczuk (University of Warsaw) |
| Title | Author |
|---|---|
| File Notification Attacks: Templating and Exploiting Side-Channel Leakage from the File-Notification System on Linux, Windows, and macOS | Sudheendra Raghav Neela (Graz University of Technology) Xufan Zhao (Graz University of Technology) Jeanette Angelika Wultsch (Graz University of Technology) Hannes Weissteiner (Graz University of Technology) Florian Draschbacher (Graz University of Technology) Stefan Gast (Graz University of Technology) Daniel Gruss (Graz University of Technology) |
| Shoot the Honey, Cloak the Player: Towards Zero-Runtime-Overhead Proactive Defense and Detection for Visual Game Cheating | Jianing Wang (Shandong University) Chuqi Zhang (Independent Researcher) Yuancheng Jiang (National University of Singapore) Adil Ahmad (Arizona State University) Shanqing Guo (Shandong University) |
| Breaking the Gate: Detecting Invisible Authentication Slip-Through in NGINX Reverse Proxy | Aliakbar Sadeghi (Samsung Research America) Maryam Rostamipoor (Stony Brook University) Sai Chand Boyapati (Samsung Research America) Omar Chowdhury (Stony Brook University) |
| Privacy Leakage from a Thousand Words: Millipixel Location Recovery from Dot Maps | Yuntao Du (Purdue University) Tanishq Pauskar (Purdue University) Hao Wang (Purdue University) Jing Su (Indiana University) Ninghui Li (Purdue University) |
| 'Setting Up TLS Authentication Was Hell': A Usability Study of Client Certificate Authentication | Abubakar Sadiq Shittu (University of Tennessee, Knoxville) Clay Shubert (University of Tennessee, Knoxville) John Sadik (University of Tennessee, Knoxville) Scott Ruoti (University of Tennessee, Knoxville) |
| PaDEx: Addressing Mobile GPU MMIO Risks via Prohibition and Delayed Execution | Feifan Qian (Institute of Information Engineering, Chinese Academy of Sciences) Qihang Zhou (Institute of Information Engineering, Chinese Academy of Sciences) Nan Jiang (Institute of Information Engineering, Chinese Academy of Sciences) Yuanbo Zhao (Institute of Information Engineering, Chinese Academy of Sciences) Xiaolong Yan (Institute of Information Engineering, Chinese Academy of Sciences) Wenzhuo Cao (Institute of Information Engineering, Chinese Academy of Sciences) Shaowen Xu (Institute of Information Engineering, Chinese Academy of Sciences) Yong Liu (Qi An Xin Technology Group Inc.) Zhenyu Song (Institute of Information Engineering, Chinese Academy of Sciences) Xiaoqi Jia (Institute of Information Engineering, Chinese Academy of Sciences) Shengzhi Zhang (Boston University) |
| SteamFuzz: Boosting Firmware Fuzzing via Automatic Message Window Inference | Jorik van Nielen (University of Twente) Andreas Peter (University of Oldenburg) Andrea Continella (University of Twente) |
| Efficient Linkage-Based Compartmentalization on CHERI | Dapeng Gao (University of Cambridge) John Baldwin (Ararat River Consulting) Jessica Clarke (University of Cambridge) Nicholas C. Connolly (Arm Limited) Brooks Davis (Capabilities Limited) Franz A. Fuchs (University of Cambridge) Alfredo Mazzinghi (University of Cambridge) Daniel Moghimi (Google) Peter Rugg (University of Cambridge) Domagoj Stolfa (University of Cambridge) Konrad Witaszczyk (University of Cambridge) Simon W. Moore (University of Cambridge) Robert N. M. Watson (University of Cambridge) |
| SymSan: Mitigating Malware Embedding in Large Language Models via Parameter Space Symmetry | Ming Tan (Information Engineering University) Wei Li (Xidian University) Tao Hu (Information Engineering University) Qian Chen (Xidian University) Aodi Liu (Information Engineering University) Hailong Ma (Information Engineering University) |
| Investigating Novice Researchers' Perceptions of Research Privacy Within LLM-Assisted Workflows | Shuning Zhang (Tsinghua University) Changxi Wen (Tsinghua University) Eve He (University of Wisconsin–Madison) Ying Ma (The University of Melbourne) Robert Xiao (University of British Columbia) Xin Yi (Tsinghua University) Hewu Li (Tsinghua University) |
| Revisit Location Privacy Protection: A Service Failure Perspective | Shaowei Wang (Guangzhou University) Han Wu (University of Southampton) Yun Peng (Guangzhou University) Puning Zhao (Shenzhen Campus of Sun Yat-sen University) Wenqi Ren (Shenzhen Campus of Sun Yat-sen University) Changyu Dong (Guangzhou University) Jin Li (Guangzhou University) Jian Weng (Guangzhou University) |
| A Multi-Month Study of Git Commit Signing | Abubakar Sadiq Shittu (University of Tennessee, Knoxville) John Sadik (University of Tennessee, Knoxville) Scott Ruoti (University of Tennessee, Knoxville) |
| TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classification | Ze Chen (National University of Defense Technology) Qiming Yu (National University of Defense Technology) Zijia Song (National University of Defense Technology) Guozheng Yang (National University of Defense Technology) Wei Yan (National University of Defense Technology) |
| One Resource to Break Them All: Exploiting Malformed Resources for Permanent Denial-of-Service in Android | Sheng Cao (Huazhong University of Science and Technology) Hao Zhou (The Hong Kong Polytechnic University) Yanjie Zhao (Huazhong University of Science and Technology) Tianming Liu (Huazhong University of Science and Technology) Songzhou Shi (Guangdong Baiyun University) Haoyu Wang (Huazhong University of Science and Technology) |
| Post-Quantum Private Set Intersection for Small Sets | Junxin Liu (Oregon State University) Mike Rosulek (Oregon State University) Ni Trieu (Arizona State University) |
| A Graph-Based Framework for Extending Metric Differential Privacy Mechanisms | Ruiyao Liu (University of North Texas) Chenxi Qiu (University of North Texas) |
| Crossing the Streams: SSH Plaintext Recovery via a Common Compression Context in Multiplexed Channels | Fabian Bäumer (Ruhr University Bochum) Marcus Brinkmann (Ruhr University Bochum) |
| Understanding the Privacy-Preserving Potential of HTTP/2 Against Webpage Fingerprinting | Bogdan Constantin Cebere (CISPA Helmholtz Center for Information Security) Prateek Kumar (CISPA Helmholtz Center for Information Security) Sylvain Chatel (CISPA Helmholtz Center for Information Security) Wouter Lueks (CISPA Helmholtz Center for Information Security) Christian Rossow (CISPA Helmholtz Center for Information Security) |
| Dissecting Apple's Lockdown Mode: A Cross-Platform, Multi-Version Analysis | Marie Fischer (Hasso Plattner Institute, University of Potsdam) Jiska Classen (Hasso Plattner Institute, University of Potsdam) |
| More Efficient Secret-Shared Joins with Multiplicity via Oblivious Sort Expansion | Xiaoxin Du (Nankai University) Xiaojie Guo (Shanghai Qi Zhi Institute) Pinzhi Chen (Nankai University) Tong Li (Nankai University) Zheli Liu (Nankai University) |
| The Tragedy of Convenience: Cascading User-Data Leakage from SMS-delivered URLs | Muhammad Danish (University of New Mexico) Enrique Sobrados (University of New Mexico) Priya Kaushik (University of Arizona) Bhupendra Acharya (University of Louisiana at Lafayette) Muhammad Saad (Circle) Abdullah Mueen (University of New Mexico) Sazzadur Rahaman (University of Arizona) Afsah Anwar (University of New Mexico) |
| Snapshots of TEE-Based Encrypted Databases Leak Plaintext Histograms via Dendrochronology | Zachary Espiritu (MongoDB Research) |
| Tempora-Fusion: Time-Lock Puzzle with Efficient Verifiable Homomorphic Linear Combination | Aydin Abadi (Newcastle University) Jakub K. Szeląg (Newcastle University) |
| StickShield: Flexible Acoustic Metamaterial Defense for Securing Microphones Against Voice Attacks | Zhiyuan Ning (Northwest University) Zhanyong Tang (Northwest University) JiaYi Xing (Northwest University) Rui Hou (Institute of Information Engineering, CAS) Xiaojiang Chen (Northwest University) |
| A Mixed-Methods Analysis of Account Creation & Authentication Inaccessibility for Blind and Low Vision Users | Adryana Hutchinson (The George Washington University) Smirity Kaushik (The George Washington University) Matthias Fassl (The George Washington University) Adam J. Aviv (The George Washington University) |
| Rethinking Isolation in RPKI: Cross-Publication-Point Attacks on RPKI Validation | Qi Wang (Tsinghua University) Jianjun Chen (Tsinghua University) TaoFei Guo (Peking University) Minghao Zhang (Tsinghua University) Yuheng Zhang (Tsinghua University) Jingcheng Yang (Tsinghua University) |
| G-Fence: Secure, Efficient, and Differentially Private Graph Neural Network Training over Federated Graphs | Shuangqing Xu (Harbin Institute of Technology, Shenzhen) Yifeng Zheng (The Hong Kong Polytechnic University) Zhongyun Hua (Harbin Institute of Technology, Shenzhen) Haibo Hu (The Hong Kong Polytechnic University) |
| DualMS 2.0: Practical Lattice-Based Two-Round Fiat-Shamir Multi-Signature with Better Efficiency | Qiqi Lai (Shaanxi Normal University) Chongshen Chen (Shaanxi Normal University) Feng Hao Liu (Washington State University) Tianyu Zhao (Washington State University) Qi Wang (Shanghai Jiao Tong University) Zhedong Wang (Shanghai Jiao Tong University) |
| ROSETTA: Efficient and Accurate Privacy-Preserving LLM Decoding via Hybrid CKKS/TFHE Evaluation | Jiangrui Yu (Peking University) Baosheng Zhang (Xi'an Jiaotong University) Liang Kong (Ant Group) Lin Ding (Peking University) Yi Chen (Peking University) Ye Yu (Peking University) Mingzhe Zhang (Ant Group) Meng Li (Peking University) |
| Mind the Gap: Detecting Description-Execution Mismatch Attacks in DAO Governance | Bowen Cai (University of Minnesota) Nanzi Yang (Old Dominion University) Weiheng Bai (University of Minnesota) Youshui Lu (Xi'an Jiaotong University) Yajin Zhou (The Chinese University of Hong Kong) Kangjie Lu (University of Minnesota) |
| Watch and Crack: Password Inference from Smart-Glasses Video | Yoav Orenbach (Tel Aviv University) Avishai Wool (Tel Aviv University) |
| Automated Reasoning for Indistinguishability in the CCSA | Simon Jeanteur (TU Wien) Matteo Maffei (TU Wien) Laura Kovacs (TU Wien) Michael Rawson (University of Southampton) |
| LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training | Yuyang Gong (Nanyang Technological University) Zihao Wang (Nanyang Technological University) Jiawei Liu (Wuhan University) XiaoFeng Wang (Nanyang Technological University) |
| On the Same Track: Privacy Leaks in Electric Rail Transport via Magnetic Fields | Stefan Czybik (Berlin Institute for the Foundations of Learning and Data) Pia Hanfeld (Berlin Institute for the Foundations of Learning and Data) Konrad Rieck (Berlin Institute for the Foundations of Learning and Data) |
| Practice Makes (Im)Perfect: A Look Back at Benchmarking Practices for Microarchitectural Side-Channel Attacks | Iliana Fayolle (Univ. Lille, CNRS, Inria) Antoine Geimer (Univ. Lille, CNRS, Inria) Daniel De Almeida Braga (Univ. Rennes, CNRS) Clémentine Maurice (Univ. Lille, CNRS, Inria) |
| Automatically Learning Vulnerability Patterns for Scalable Static Analysis of Web Applications | Penghui Li (Columbia University) Songchen Yao (Columbia University) Josef Sarfati Korich (Columbia University) Changhua Luo (Independent Researcher) Jianjia Yu (Johns Hopkins University) Yinzhi Cao (Johns Hopkins University) Junfeng Yang (Columbia University) |
| PORTA: Systematic Discovery of Vulnerabilities in Identity Brokers | Zixu Zhou (University of Toronto) Xiangyu Guo (University of Toronto) Ilya Grishchenko (University of Toronto) David Lie (University of Toronto) |
| From Snapshot to Snooping: An Empirical Study on Geolocation Privacy Leakage in Large Vision Language Models | Yihe Zhou (City University of Hong Kong) Tao Ni (King Abdullah University of Science and Technology) Qingchuan Zhao (City University of Hong Kong) Cong Wang (City University of Hong Kong) |
| 'It Scams In The Family:' GenAI Voice Cloning Scams among Sighted and Families with Blind or Low Vision Members | Filipo Sharevski (DePaul University) Jennifer Vander Loop (DePaul University) |
| 'That's a Red Flag!': How Young Adult Instagram Users Assess Sexual Threats and Perceive Nudity Protection in Direct Messages | Anna Calmbach (CISPA Helmholtz Center for Information Security) Carolyn Guthoff (CISPA Helmholtz Center for Information Security) Matthias Fassl (The George Washington University) Katharina Krombholz (CISPA Helmholtz Center for Information Security) |
| Weaponizing QNAME Minimization: Infrastructure-Free DNS Amplification via Resolver Orchestration | Jianhao Li (Xi'an Jiaotong University) Jialong Zhang (Xi'an Jiaotong University) Jiawei Ding (Xi'an Jiaotong University) Jianfeng Li (Xi'an Jiaotong University) Ziqian Liu (China Telecom) Wei Wang (Xi'an Jiaotong University) Zhou Su (Xi'an Jiaotong University) Xiaobo Ma (Xi'an Jiaotong University) |
| One Proof to Rule Them All: Practical, Sublinear Verification for Actively Secure MPC on Z2k with Dishonest Majority and a Dealer | Andreas Brüggemann (Technical University of Darmstadt) Ariel Nof (Bar-Ilan University) Thomas Schneider (Technical University of Darmstadt) |
| Cleaning the NTP Pool: Detecting and Mitigating NTP-sourced IPv6 Scanning | Erik Rye (Johns Hopkins University) Robert Beverly (San Diego State University) |
| zkAgent: Verifiable LLM Agent Execution via One-Shot Transcript Proofs | Lizheng Wang (Shanghai Jiao Tong University) Hancheng Lou (Shanghai Jiao Tong University) Chongrong Li (Shanghai Jiao Tong University) Yu Yu (Shanghai Jiao Tong University) Yuncong Hu (Shanghai Jiao Tong University) |
| Adaptive Diffusion Freezing: Privacy-preserving Diffusion Models Against Membership Inference Attacks | Jialu Guo (Beihang University) Xiao Han (Beihang University) Junjie Wu (Beihang University) |
| Understanding Website Passkey Policies and User Communication | Karthik Ramakrishnan (Georgia Institute of Technology) Frank Li (Georgia Institute of Technology) |
| EXRPOSE: Runtime UI-based Attack Detection in WebXR | Chandrika Mukherjee (Purdue University) Aishwarya Devi Akila Pandian (Purdue University) Arjun Arunasalam (Florida International University) Jiasi Chen (University of Michigan) Z. Berkay Celik (Purdue University) Habiba Farrukh (University of California, Irvine) |
| LR-DSTC: Low-Rank Driven Secure Tensor Completion for Privacy-Preserving IoT Data Recovery | Jingya Huang (Hunan University) Xiaocan Li (Hunan University) Kun Xie (Hunan University) Jigang Wen (Hunan University of Science and Technology) Kenli Li (Hunan University) Gaogang Xie (Computer Network Information Center, CAS) |
| Efficient Fuzzy PSI under One-Sided Assumptions | Xinpeng Yang (Nanyang Technological University) Meng Hao (Singapore Management University) Yanxue Jia (Illinois Institute of Technology) Chenkai Weng (Arizona State University) Yonggang Wen (Nanyang Technological University) Tianwei Zhang (Nanyang Technological University) |
| Ark: Offchain Transaction Batching in Bitcoin | Pim Keer (TU Wien) Matteo Maffei (TU Wien) Marco Argentieri (Ark Labs) Andrew Camilleri (Ark Labs) Zeta Avarikioti (TU Wien) |
| Accountability in Certificate Transparency and Variants | Timo Treitz (Saarland University) Robert Künnemann (CISPA Helmholtz Center for Information Security) |
| Repairing ReDoS by Construction: Certified Algebraic Derivation for Language-Preserving Regex Transformation | Yecheng Sun (Institute of Information Engineering, Chinese Academy of Sciences) Yeting Li (Institute of Information Engineering, Chinese Academy of Sciences) Huina Chao (Institute of Information Engineering, Chinese Academy of Sciences) Zhiwu Xu (Shenzhen University) Lixiao Zheng (Huaqiao University) Qin Mai (Institute of Information Engineering, Chinese Academy of Sciences) Mengcheng Shi (Institute of Information Engineering, Chinese Academy of Sciences) Xinyi Wang (Institute of Information Engineering, Chinese Academy of Sciences) Hengyu Yang (Institute of Information Engineering, Chinese Academy of Sciences) Yang Xiao (Institute of Information Engineering, Chinese Academy of Sciences) Feng Li (Institute of Information Engineering, Chinese Academy of Sciences) Wei Huo (Institute of Information Engineering, Chinese Academy of Sciences) |
| Omniscience for the Masses: New Threats in the Metaverse's Democratized World Creation | Andrea Mengascini (CISPA Helmholtz Center for Information Security) Ryan Aurelio (CISPA Helmholtz Center for Information Security) Jason Polakis (University of Illinois Chicago) Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security) |
| CV2F*: Combining CryptoVerif and F* for Proving Security of Protocol Implementations | Bruno Blanchet (Inria) Aymeric Fromherz (Inria) Charlie Jacomme (Université de Lorraine, CNRS, Inria) Benjamin Lipp (Rosenpass e. V.) Emmanuel Mera (ENS Paris-Saclay) |
| LeakyTree: Cross-VM Bit-by-Bit Deduplicated Page Leakage via Linux Kernel Samepage Merging Internals | Ernesto Martinez Garcia (Graz University of Technology) Lukas Maar (Graz University of Technology) Martin Unterguggenberger (Graz University of Technology) Mathias Oberhuber (Graz University of Technology) Stefan Mangard (Graz University of Technology) |
| A First-Principles Evaluation of Graph-Based Network Intrusion Detection Systems | Rui Zhao (University of Virginia) Wajih UI Hassan (University of Virginia) |
| You Shall Not Pass into Ring-0! A User Privacy-Friendly Anti-Cheat Architecture for Personal Computers | Santosh Gokul Narayanan (Nokia of America Corporation) Giovanni Paladino (New York University) Chuqi Zhang (National University of Singapore) Sangho Lee (Microsoft Research) Zhenkai Liang (National University of Singapore) Adil Ahmad (Arizona State University) |
| DDRop: Active Memory Interposer Attacks on Confidential VMs by Dropping DDR5 Writes | Jesse De Meulemeester (KU Leuven) Stefan Gloor (ETH Zurich) Patrick Jattke (ETH Zurich) Daniel Moghimi (Google) David Oswald (Durham University) Martin Thompson (Durham University) Kaveh Razavi (ETH Zurich) Ingrid Verbauwhede (KU Leuven) Jo Van Bulck (KU Leuven) |
| MARS: Monotonic Authority for Rescue CPS under Stale Hazard Uncertainty | Boran Yang (Changchun University of Science and Technology) Jinqing Li (Changchun University of Science and Technology) Xiaoqiang Di (Changchun University of Science and Technology) Shihao Liu (Changchun University of Science and Technology) |
| BeaverDam: A Post-Quantum Threshold Key Recovery Protocol from a One-Time Threshold Oblivious Random Function | Benedikt Auerbach (PQShield) Shuichi Katsumata (PQShield) Kaoru Takemure (PQShield) Ida Tucker (PQShield) |
| Speeding Up Sum-Check Proving | Quang Dao (Carnegie Mellon University) Zachary DeStefano (NYU) Suyash Bagad (Shunya Labs) Yuval Domb (Ingonyama) Justin Thaler (Georgetown University and a16z crypto research) |
| Where Have All the Firewalls Gone? Security Consequences of Residential IPv6 Transition | Erik Rye (Johns Hopkins University) Dave Levin (University of Maryland) Robert Beverly (San Diego State University) |
| Bust a Shuffle! A Formal Privacy Analysis of Voting Protocols with Multi-Server Mix Nets | Alexandre Debant (Université de Lorraine, CNRS, Inria) Robert Künnemann (CISPA Helmholtz Center for Information Security) Johannes Müller (Independent researcher) |
| Recovering Process Variables from Industrial Network Traffic via Search-Based Optimization | Chuan Sheng (Shenyang Institute of Automation, Chinese Academy of Sciences) Shan Jiang (Swinburne University of Technology) Jianming Zhao (Shenyang Institute of Automation, Chinese Academy of Sciences) Yu Yao (Northeastern University) |
| Large-Scale Measurement and Real-World Mitigation of Web Browser Fingerprinting in the Wild | Tom Ritter (Mozilla Corporation) Fatih Kilic (University of Toronto) Frederik Braun (Mozilla Corporation) Elisa Luo (UC San Diego) Geoffrey M. Voelker (UC San Diego) Stefan Savage (UC San Diego) Christoph Kerschbaumer (Mozilla Corporation) |
| AVP-Inspect: Coordinated Cyber-Physical Testing for Privacy Analysis of COTS Apple Vision Pro Applications | Yichang Xiong (George Mason University) Vamsi Shankar Simhadri (George Mason University) Yue Xiao (William & Mary) Xiaokuan Zhang (George Mason University) |
| When Tracking Learns: Learning-Based Browser Fingerprinting Under Anti-Fingerprinting Defenses | Xu Lin (Washington State University) |
| SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills | Jiangrong Wu (Sun Yat-sen University) Yuhong Nan (Sun Yat-sen University) Yixi Lin (Sun Yat-sen University) Huaijin Wang (Shandong University) Yuming Xiao (Sun Yat-sen University) Shuai Wang (The Hong Kong University of Science and Technology) Zibin Zheng (Sun Yat-sen University) |
| From Fault to Oracle: Breaking Google Pixel TPU Hardware Memory Isolation via Trusted Deserialization Faults | Minghao Lin (University of Southern California) Guanxing Wen (Certified Kernel Tech LLC) Haoxuan Xu (University of Southern California) Yuzhou Fang (University of Southern California) Nanzi Yang (Old Dominion University) Xiaokuan Zhang (George Mason University) Yanan Guo (University of Rochester) Zhuo Zhang (Columbia University) Mengyuan Li (University of Southern California) |
| ArchProof: A Sound Output-Contribution Certificate for Dormant-Gate Path Backdoors in ONNX Models | Jin Xu (Tongji University) Miaomiao Zhang (Tongji University) Bowen Du (Tongji University) |
| DWBench: Holistic Evaluation of Watermark for Dataset Copyright Auditing | Xiao Ren (Zhejiang University) Xinyi Yu (Xi'an Jiaotong University) Linkang Du (Xi'an Jiaotong University) Min Chen (Vrije Universiteit Amsterdam) Yuanchao Shu (Zhejiang University) Zhou Su (Xi'an Jiaotong University) Yunjun Gao (Zhejiang University) Zhikun Zhang (Zhejiang University) |
| Efficient Branch-and-Bound Testing and Verification of zkVMs | Hideaki Takahashi (Columbia University) Suman Jana (Columbia University) Junfeng Yang (Columbia University) |
| Are Unreachable Nodes Truly Safe? Fully Eclipsing Monero's P2P Network! | Ruisheng Shi (Beijing University of Posts and Telecommunications) Jiaqi Zeng (Beijing University of Posts and Telecommunications) Lina Lan (Beijing University of Posts and Telecommunications) Shihan Zhang (Beijing University of Posts and Telecommunications) Bing Han (Beijing University of Posts and Telecommunications) Xiapu Luo (The Hong Kong Polytechnic University) Qishu Jin (Zhejiang University) Wenliang Du (Zhejiang University) Qin Wang (CSIRO) |
| Multimodal Resource-Exhaustion Attacks on Vision-Language Models via Joint Pixel-Prompt Optimization | Zhaoxiong Ni (Guangzhou University) Yatie Xiao (Guangzhou University) Chi-Man Pun (University of Macau) Fei Peng (Guangzhou University) Qingxiao Guan (Guangzhou University) Keke Tang (Guangzhou University) |
| Delegating Email Encryption to Gateways: Why Johnny Should Not | Andris Suter-Dörig (Swiss Federal Institute of Technology) Matteo Scarlata (Swiss Federal Institute of Technology) Kenneth Paterson (Swiss Federal Institute of Technology) |
| Thunderbolt: Fast Asynchronous Off-Chain Bitcoin Transfers | Hongbo Wen (University of California, Santa Barbara) Hanzhi Liu (University of California, Santa Barbara) Yanju Chen (University of California, San Diego) Jingyu Ke (Shanghai Jiao Tong University) Dahlia Malkhi (University of California, Santa Barbara) Yu Feng (University of California, Santa Barbara) |
| Evaluating Ongoing Access Attacks on the Web | Arkaprabha Bhattacharya (Cornell Tech) Rosanna Bellini (New York University) Thomas Ristenpart (University of Toronto) Nicola Dell (Cornell Tech) |
| SLAC: Access-Driven CPU-to-GPU Side-channel Attacks via System-Level Cache on Apple Silicon | Tianhong Xu (Northeastern University) Saion Kumar Roy (Northeastern University) Ruyi Ding (Louisiana State University) A. Adam Ding (Northeastern University) Yunsi Fei (Northeastern University) |
| Shadow Tokens: Uncovering the Broken Permission Revocation Vulnerability in Intelligent Connected Vehicles | Yanbang Sun (Tianjin University) Hebo Leng (QI-ANXIN) Qiang Hu (Tianjin University) Xiaofei Xie (Singapore Management University) Jiongchi Yu (Singapore Management University) Ruitao Feng (Southern Cross University) Guangzheng Yao (QI-ANXIN) Weijia Cai (QI-ANXIN) Quanzhou Wang (QI-ANXIN) Xiaohong Li (Tianjin University) Junjie Wang (Tianjin University) |
| Safeguarding LLM Agents against Long-Horizon Threats via Shadow Memory | Yuhui Wang (Stony Brook University) Tanqiu Jiang (Stony Brook University) Jiacheng Liang (Stony Brook University) Charles Fleming (Cisco Systems) Ting Wang (Stony Brook University) |
| FrontSpec: Uncovering and Characterizing Frontend Memory Predictors on Apple M4 Processors | Han Wang (Southern University of Science and Technology) Yuhao Hu (Institute of Computing Technology, CAS) Yusi Feng (Southern University of Science and Technology) Quancheng Wang (Wuhan University) Ke Xu (Wuhan University) Tang Ming (Wuhan University) Yun Chen (Hong Kong University of Science and Technology (Guangzhou)) Zhe Wang (Institute of Computing Technology, CAS) Chenggang Wu (Institute of Computing Technology, CAS) Yinqian Zhang (Southern University of Science and Technology) |
| NotaryMark: Multi-Bit Watermarking for Black-Box Dataset Usage Auditing in Text-to-Image Diffusion Models | Xinyi Yu (Xi'an Jiaotong University) Linkang Du (Xi'an Jiaotong University) Zhou Su (Xi'an Jiaotong University) Min Chen (Vrije Universiteit Amsterdam) Yuntao Wang (Xi'an Jiaotong University) Zhikun Zhang (Zhejiang University) |
| Governing AI Agent with Capability and Delegation Chain | Jiaqin Yan (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) |
| Data-strophy: When Your Integrity Goes Wild, So Does Your Data! | Ya-Nan Li (The University of Sydney) Yaqing Song (University of Electronic Science and Technology of China) Qiang Tang (The University of Sydney) Moti Yung (Google) Yuan Zhang (University of Electronic Science and Technology of China) |
| Your Synthetic Image Is a Confession: Trojaning Image-to-Image Generative Models for Private Input Reconstruction | Haolin Yuan (Johns Hopkins University) Alison Rebman (Johns Hopkins University) John Aucott (Johns Hopkins University) Yinzhi Cao (Johnss Hopkins University) |
| Secrecy in Squirrel and the Post-Compromise Security of a Ratchet | Clément Hérouard (Université de Lorraine, CNRS, Inria) Charlie Jacomme (Université de Lorraine, CNRS, Inria) Adrien Koutsos (Inria) Joseph Lallemand (CNRS, Univ. Rennes) |
| Cross User/App Network Attacks - Hijacking TCP Connections and DNS Cache Poisoning via a Malicious User/App | Tamir Shahar (Hebrew University) Amit Klein (Hebrew University) |
| Practical Silent Threshold Signatures and Silent Threshold Encryption for Dynamic Committees | Yifei He (Peking University) Zheng Zhou (Peking University) Yu Chen (Shandong University) Zhi Guan (Peking University) Zhong Chen (Peking University) |
| Meta-PBS: Compact High-Precision Programmable Bootstrapping | Shihe Ma (Tsinghua University) Tairong Huang (Tsinghua University) Anyu Wang (Tsinghua University) Changtong Xu (Ant Group) Tao Wei (Ant Group) Xiaoyun Wang (Tsinghua University) |
| PRISM: Efficient zkSNARKs for RNS-Based Homomorphic Encryption | Zhelei Zhou (Ant Group) Yun Li (Ant Group) Zhaomin Yang (Ant Group) Cheng Hong (Ant Group) Tao Wei (Ant Group) |
| Navigating the Latent Manifold: Proactive Concept Drift Adaptation for Resilient NIDS | Chao Zha (Zhejiang University) Zifeng Kang (Beijing University of Posts and Telecommunications) Tian Liu (Institute of Agricultural Equipment, Zhejiang Academy of Agricultural Sciences.) Dakun Shen (Zhejiang University) Ruyun Zhang (Shanghai Artificial Intelligence Laboratory) |
| LDBF: Deep Exploration of eBPF Runtime via LLM-Driven Program Generation and Adaptive Context Orchestration | Yinhao Hu (Huazhong University of Science and Technology) Kaiyan Mei (Huazhong University of Science and Technology) Zeyu Sun (Chinese Academy of Sciences) Quan Sun (Huazhong University of Science and Technology) Dongliang Mu (Huazhong University of Science and Technology) Yuan Li (Zhongguancun Laboratory) Chao Zhang (Tsinghua University) |
| Credit Without Debit: Formal Verification of Banking Payment Systems | Ali Hamza Malik (University of Massachusetts Amherst) Muhammad Taqi Raza (University of Massachusetts Amherst) |
| KEM-IND-CCA-Preserving Compilation of Jasmin's ML-KEM | Santiago Arranz-Olmos (MPI-SP) Gilles Barthe (MPI-SP) Lionel Blatter (MPI-SP) Benjamin Gregoire (Inria) Vincent Laporte (Inria) Paolo Torrini (Inria) |
| PoisonCap: Efficient Hierarchical Temporal Safety for CHERI | Yuecheng Wang (University of Cambridge) Jonathan Woodruff (University of Cambridge, Capabilities Limited) Alfredo Mazzinghi (University of Cambridge, Capabilities Limited) Peter Rugg (University of Cambridge, Capabilities Limited) Alexandre Joannou (University of Cambridge, Capabilities Limited) Samuel W. Stark (University of Cambridge) Robert N. M. Watson (University of Cambridge, Capabilities Limited) Simon W. Moore (University of Cambridge, Capabilities Limited) |
| ZK-eSIM: A Privacy-Centric Zero-Knowledge Approach for eSIM Provisioning | Liza Ahmad (University of Sheffield) Quan Shi (National University of Singapore) Joshua Haworth (University of Sheffield) Yilu Dong (Pennsylvania State University) Prosanta Gope (University of Sheffield) Behzad Abdolmaleki (University of Sheffield) Syed Rafiul Hussain (Pennsylvania State University) |
| Titan: Efficient Polynomial Commitments from IOPs over Groups | Chethan Kamath (IIT Bombay) Ravi Prakash (IIT Bombay) Samipa Samanta (IIT Bombay) Sruthi Sekar (IIT Bombay) Nitin Singh (IBM Research) |
| Trapped Handler: A Practical Performance Degradation Attack on NVIDIA vGPU via Preemption Manipulation | Cheng Gu (University of Rochester) Fatemeh Moradihaghighi (Clemson University) Daniel Genkin (Georgia Tech) Zhuo Li (Hydrox AI) Mengyuan Li (USC) Zhenkai Zhang (Clemson University) Yanan Guo (University of Rochester) |
| TriChord: Extension-Oriented Browser Fuzzing for Chromium | Huinian Yang (China Telecom Cloud Technology Co., Ltd.) Daoyuan Wu (Lingnan University) Qingyu Li (China Telecom Cloud Technology Co., Ltd.) Yiming Liu (China Telecom Cloud Technology Co., Ltd.) |
| An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks | Zhuoran Tan (University of Glasgow) Wenbo Guo (Nanyang Technological University) Jiewen Luo (Royal Holloway, University of London) Taylor Brierley (JUMPSEC Ltd) Jeremy Singer (University of Glasgow) Christos Anagnostopoulos (University of Glasgow) |
| Verifying Consensus Protocols from LLM-assisted TLA$^+$: A Case Study of Byzantine Reliable Broadcast | Shuhe Cao (Shandong University) Xin Wang (Shandong University) Chenxu Wang (Shandong University) Xiao Sui (Tsinghua University) Sisi Duan (Tsinghua University) |
| RESTGuardian: Automated Black-Box Fuzzing for RESTful API via Efficient Dependency Inference and Deep Vulnerability Detection | Yifan Guo (Beihang University) Na Wang (Beihang University) Yunjia Wang (QI-ANXIN Technology Research Institute) Zhenyu Chen (QI-ANXIN Technology Research Institute) Yang You (Beijing University of Posts and Telecommunications) Junsong Fu (Beijing University of Posts and Telecommunications) |
| The Deception Delta: Adversarial Evaluation of LLM-Based Smart Contract Bytecode Forensics | Timo Schefold (Landeskriminalamt Baden-Württemberg) |
| Evaluating Practical Enumeration and Blocking Attacks on the Snowflake Circumvention System | Linden Chen (University of California Santa Cruz) Ryan Sangha (University of California Santa Cruz) Cecylia Bocovich (Tor Project) Ram Sundara Raman (University of California Santa Cruz) |
| IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots | Oubo Ma (Zhejiang University) Ruixiao Lin (Zhejiang University) Jiahao Chen (Zhejiang University) Yuan Su (Zhejiang University) Yong Yang (Zhejiang University) Shouling Ji (Zhejiang University) |
| User Perceptions of Online Age Assurance Mechanisms in the U.S. | Junho Eum (The George Washington University) Jan Tolsdorf (Max Planck Institute for Security and Privacy (MPI-SP)) Adryana Hutchinson (The George Washington University) Smirity Kaushik (The George Washington University) Adam J. Aviv (The George Washington University) |
| Enforcing XoM on x86-64 via Strict Code and Data Separation | Hongtao Wu (Wuhan University) Zuquan Peng (Wuhan University) Ziheng Chai (Wuhan University) Mengfei Xie (Wuhan University) Yan Lin (Jinan University) Jianming Fu (Wuhan University) Guojun Peng (Wuhan University) |
| Hello Again: Exploiting Replay Protected Monotonic Counters to Brute-Force Windows Hello PINs | Christian Werling (Technische Universität Berlin) Matti Finder (Technische Universität Berlin) Hans Niklas Jacob (Technische Universität Berlin) Julian Prein (Technische Universität Berlin) Niclas Kühnapfel (Technische Universität Berlin) Jean-Pierre Seifert (Technische Universität Berlin) |
| BoardRunner: Automatic Firmware Rehosting Using High-Fidelity Compositional Device Models | Muhammad Hammad Bashir (The Pennsylvania State University) Michael Rooney (Purdue University) Colin Smith (The Pennsylvania State University) Dongyan Xu (Purdue University) Arslan Khan (The Pennsylvania State University) |
| DSS: Dynamic Semantic Steering for Robust Concept Erasure in Diffusion Models | Qinghui Gong (Southwest Jiaotong University) Zhengchun Zhou (Southwest Jiaotong University) Hua Meng (Southwest Jiaotong University) Yihuai Liang (Southwest Jiaotong University) Yuxuan Zhang (Southwest Jiaotong University) |
| Certifying Adversarial Robustness of Quantum Classifiers under Known-Readout Query Access | Ji Guan (Institute of Software, Chinese Academy of Sciences) Mingyu Huang (Arclight Quantum Computing Inc.) |
| Bridging the Cryptographic Transition: A Unified Framework for Post-Quantum Key Exchange | Benjamin Dowling (King's College London) Bhagya Wimalasiri (King's College London) |
| When Ad Networks Misbehave: Understanding Risks of Semi-Drive-By Splash Ads | Song Wu (Independent Researcher) Bo Wang (Independent Researcher) Yifan Zhang (San Diego State University) Yinfeng Cao (The Hong Kong Polytechnic University) Xueqiang Wang (University of Central Florida) |
| InnerChecker: Discovering Vulnerabilities in Underexplored Internal Services of IoT Firmware | Yeqi Mou (National University of Defense Technology) Runhao Liu (National University of Defense Technology) Bo Yu (National University of Defense Technology) Jiarun Dai (Fudan University) Yifu Hou (Fudan University) Wei Peng (National University of Defense Technology) Baosheng Wang (National University of Defense Technology) |
| Botnet Boasting: Investigating DDoS Power Proofs | Maarten Weyns (Delft University of Technology (TU Delft)) Georgios Smaragdakis (Delft University of Technology) Harm Griffioen (Delft University of Technology) |
| Parade: Unified and Data-Driven Prefix-AS Semantics for BGP Anomaly Detection | Yunze Wei (Tsinghua University) Xingang Shi (Tsinghua University) Minghao Zhang (Tsinghua University) Zhaozhen Wang (Tsinghua University) Qiang Ma (Zhongguancun Laboratory) Han Zhang (Tsinghua University) Yahui Li (Tsinghua University) Xia Yin (Tsinghua University) |
| Areopagus: Asynchronous Sharding Blockchain Tolerating Corrupted Shards with Optimized Overhead | Yizhong Liu (Beihang University) Andi Liu (Beihang University) Yuxuan Hu (Beihang University) Jin Dong (Beijing Academy of Blockchain and Edge Computing) Jianwei Liu (Beihang University) Boyu Zhao (Beihang University) Yuan Lu (A*STAR Institute for Infocomm Research) Zhuocheng Pan (Beihang University) Meikang Qiu (Augusta University) Dawei Li (Beihang University) Zhenyu Guan (Beihang University) |
| Meme Coin Factories: Uncovering Large-Scale Manipulations on pump.fun | Nicolas Szwajcok (Carnegie Mellon University, EPFL, ETH Zürich) Taro Tsuchiya (Carnegie Mellon University) Enze Liu (Carnegie Mellon University) Kyle Soska (Fullstack) Mathias Payer (EPFL) Nicolas Christin (Carnegie Mellon University) |
| Frequency-Domain Mixing Data Augmentation for Malicious Traffic Detection | Yuhao Yan (Beihang University) Bo Lang (Beihang University) Xiangyu Li (Beihang University) |
| Code-SeC: A Decoding-time Probing Method for Characterizing Secret Memorization in Code LLM | Yanyuan Chen (Peking University) Ruize Hui (University of Chinese Academy of Sciences) Chen Hou (University of Chinese Academy of Sciences) Meikang Qiu (Augusta University) |
| SkillCODER: Towards Auditing and Attribution of Copyright Infringement in LLM Agent Skills | Enhao Huang (Zhejiang University) Chunshu Xia (Zhejiang University) Yiming Li (Nanyang Technological University) Yuchen Yang (Beijing Chaitin Technology Co.,Ltd) Bingrun Yang (Zhejiang University) Zhan Qin (Zhejiang University) Dacheng Tao (Nanyang Technological University) Kui Ren (Zhejiang University) |
| High-throughput Verifiable Distributed OPRF from Gold PRF | Nan Cheng (University of St. Gallen) Yohei Watanabe (The University of Electro-Communications) Yugo Kasashima (The University of Electro-Communications) Ioannis Katis (University of St. Gallen) Aikaterini Mitrokotsa (University of St. Gallen) |
| CrossLink: Breaking Location Privacy by Linking Device Identifiers Across Protocols | Aneet Kumar Dutta (CISPA Helmholtz Center for Information Security) Mihirraj Dixit (Saarland University) Kevin Gni (CISPA Helmholtz Center for Information Security) Wouter Lueks (CISPA Helmholtz Center for Information Security) Mridula Singh (CISPA Helmholtz Center for Information Security) |
| Exploring the Complexities of Passkey Revocation | Anna Giacomello (CISPA Helmholtz Center for Information Security) Leona Lassak (Max Planck Institute for Security and Privacy) Jonas Hielscher (CISPA Helmholtz Center for Information Security) Maximilian Golla (CISPA Helmholtz Center for Information Security) |
| PersonaHate: A Scalable Persona-Based Data Synthesis Pipeline for Hate Speech Analysis | Xinyu Zhang (CISPA Helmholtz Center for Information Security) Ziqing Yang (CISPA Helmholtz Center for Information Security) Michael Backes (CISPA Helmholtz Center for Information Security) Yang Zhang (CISPA Helmholtz Center for Information Security) |
| Between Risk, Recognition, and Necessity: How Open-Source Project Maintainers Perceive and Navigate CVEs Through Reporting and Resolving Vulnerabilities | Jessy Ayala (University of California, Irvine) Steven Ngo (University of California, Irvine) Joshua Garcia (University of California, Irvine) |
| When Assessment Propagates Insecurity: How Inter-Organizational Supply Chain Security Assessment Decouples Awareness from Practice | Huancheng Hu (University of Potsdam) Hanna Schall (University of Potsdam) Chaewon Bak (University of Potsdam) Christian Doerr (University of Potsdam) |
| Keys on Doormats: Exposed API Credentials on the Web | Nurullah Demir (Stanford University) Yash Vekaria (University of California, Davis) Georgios Smaragdakis (Delft University of Technology) Zakir Durumeric (Stanford University) |
| From Binary to Bug: Generation-Based Fuzzing for macOS MIG Services via Constraint Recovery | Yi Fan (Huazhong University of Science and Technology) Ming Yuan (Zhongguancun Laboratory) Haoyi Liu (Huazhong University of Science and Technology) Ximo Li (Tsinghua University) Zhen Li (Huazhong University of Science and Technology) Deqing Zou (Huazhong University of Science and Technology) Chao Zhang (Tsinghua University) |
| When Apps Outlive Vendors: Security Implications of IoT Abandonware | Dayeon Kang (University of Massachusetts Amherst) Elvis Yeboah-Duako (University of Massachusetts Amherst) Sachin Thomas (University of Massachusetts Amherst) Pubali Datta (University of Massachusetts Amherst) |
| zkTransformer: Scalable Zero-Knowledge Proofs for LLM Inference via Einsum Arithmetization and Structured Exponentiation Lookups | Bing-Jyue Chen (University of Illinois Urbana-Champaign) Lilia Tang (University of Illinois Urbana-Champaign) Daniel Kang (University of Illinois Urbana-Champaign) |
| MamaBearZKP: A Holistic Co-design of Prime Fields and Proving Stacks for High-Throughput ZKP on Modern CPUs | Jipeng Zhang (National University of Singapore) Yanpei Guo (National University of Singapore) Tao Lu (National University of Singapore) Hao Cheng (Shandong University) Jiaheng Zhang (National University of Singapore) |
| Exploiting vulnerabilities at IXP route servers to perform stealth BGP hijacks | Gabby Rimlinger (Sorbonne Université) Joaquim Pereira (University of Waikato) Matthieu Gouel (nxthdr) Olivier Fourmaux (Sorbonne Université) Timur Friedman (Sorbonne Université) Pedro Marcos (FURG) Cristel Pelsser (UCLouvain) Ronaldo A. Ferreira (UFMS) Kevin Vermeulen (CNRS, Ecole Polytechnique) |
| PhantomTac: Hijacking Robotic Tactile Systems with Deploy-and-forget Tags | Binbin Zhang (Shanghai Jiao Tong University) Yifeng Zhang (Shanghai Jiao Tong University) Xiaomeng Chen (Shanghai Jiao Tong University) Dongyao Chen (Singapore Management University) |
| As Seasons Change: Temporal Feature Powers Malware Classification | Jianwen Tian (Singapore Management University) Debin Gao (Singapore Management University) Yongkang Chen (Academy of Military Sciences) Wei Kong (Zhejiang Sci-Tech University) David Lo (Singapore Management University) Haoyu Ma (Beijing Jiaotong University) Zhi Wang (Nankai University) |
| BTX and SimpleBTE: Efficient Batched Threshold Encryption | Amit Agarwal (Category Labs) Sourav Das (Category Labs) Babak Poorebrahim Gilkalaye (Category Labs) Guru-Vamsi Policharla (Commonware, Inc.) Peter Rindal (Category Labs) Victor Shoup (Category Labs) |
| Real Money, Fake Models: Deceptive Model Claims in Shadow APIs | Yage Zhang (CISPA Helmholtz Center for Information Security) Yukun Jiang (CISPA Helmholtz Center for Information Security) Zeyuan Chen (CISPA Helmholtz Center for Information Security) Michael Backes (CISPA Helmholtz Center for Information Security) Xinyue Shen (University of Waterloo) Yang Zhang (CISPA Helmholtz Center for Information Security) |
| A Large-scale Measurement of In-Page Prompt Injections Against LLM Web Agents | Soheil Khodayari (Independent Researcher) Xuenan Zhang (CISPA Helmholtz Center for Information Security) Bhupendra Acharya (University of Louisiana) Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security) |
| Long-Range Indirect Control-Flow Prediction in Stripped Binaries via Dual Virtual Hubs and Multi-Task Graph Learning | Kun Liu (Tulane University) Zhengming Ding (Tulane University) Chenke Luo (Tulane University) Tianyi Xu (Tulane University) Zizhan Zheng (Tulane University) Haotian Zhang (New Jersey Institute of Technology) Jiang Ming (Tulane University) |
| Automatic, Expressive, and Scalable Fuzzing with Stitching | Harrison Green (Carnegie Mellon University) Fraser Brown (Carnegie Mellon University) Claire Le Goues (Carnegie Mellon University) |
| BitVM3: Efficient Bitcoin Bridges via Garbled Circuits | Robin Linus Woll (Stanford University) Ioannis Alexopoulos (TU Wien) Lukas Aumayr (University of Edinburgh) Zeta Avarikioti (TU Wien) Matteo Maffei (TU Wien) David Tse (Stanford University) |
| New IND-CPA-D Attacks on BFV and BGV | Hyeongmin Choe (University of Luxembourg) Minsik Kang (Sejong University) Damien Stehlé (CryptoLab, Inc) |
| When Topology Betrays Privacy: Lattice-Based Reconstruction Attacks on Secure Aggregation in Decentralized Federated Learning | Wenrui Yu (Aalborg University) Changlong Ji (Institut Polytechnique de Paris) Johannes Bjerva (Aalborg University) Qiongxiu Li (Aalborg University) |
| PSDissect: A CFG-Guided, Semantics-Preserving Interactive Deobfuscation Framework for PowerShell Scripts | Yifeng Fu (Beijing Institute of Technology) Jingfeng Xue (Beijing Institute of Technology) Weijie Han (Beijing Municipal Medical Insurance Bureau) Yong Wang (Beijing Institute of Technology) Zhenyan Liu (Beijing Institute of Technology) Wenbiao Du (Beijing Institute of Technology) Zeyang Liu (Beijing Institute of Technology) |
| Abuse Reporting and Enforcement for Third Party Moderators in Private Messaging | Matthew Gregoire (University of North Carolina at Chapel Hill) Jade Keegan (University of North Carolina at Chapel Hill) Saba Eskandarian (University of North Carolina at Chapel Hill) |
| Dance with Noise: Safely Trade Minor Decryption Failures For More Compact KEMs with Applications to IKEv2 | Zidi Zhuang (Institute of Software, Chinese Academy of Sciences) Yuyang Xiao (Institute of Software, Chinese Academy of Sciences) Long Chen (Institute of Software, Chinese Academy of Sciences) Qiang Tang (The University of Sydney) Zhenfeng Zhang (Institute of Software, Chinese Academy of Sciences) |
| Finding FAULTs in Architectural Backdoors: Why Trigger Detection Fails Under Real-World Conditions | David Oygenblik (Georgia Institute of Technology) Teja Akella (Georgia Institute of Technology) Tanmay Gupta (Georgia Institute of Technology) Yizhi Huang (Georgia Institute of Technology) Brendan Saltaformaggio (Georgia Institute of Technology) |
| LoTRS: Practical Post-Quantum Structured Threshold Ring Signatures from Lattices | Nikai Jagganath (Monash University) Muhammed F. Esgin (Monash University) Ron Steinfeld (Monash University) Amin Sakzad (Monash University) Markku-Juhani O. Saarinen (Tampere University) Dongxi Liu (CSIRO) |
| Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries | Sander Wiebing (Vrije Universiteit Amsterdam) Yuhui Zhu (Scuola Superiore Sant'Anna) Alessandro Biondi (Scuola Superiore Sant'Anna) Cristiano Giuffrida (Vrije Universiteit Amsterdam) |
| Hoss: Fast Oblivious Semantic Search with Heterogeneous GPU-CPU-TEE Architecture | Jianzhang Du (Indiana University) Weijie Huang (Indiana University) Chenghong Wang (Indiana University) Nicolas Tsagareli (Binghamton University) Yukui Luo (Binghamton University) XiaoFeng Wang (Nanyang Technological University) Zhongshu Gu (IBM Research) |
| MemPoison: Bypassing Selective Memory Mechanisms to Plant Backdoors in LLM Agents | Hongtao Wang (North China Electric Power University) Se Yang (North China Electric Power University) Yu Chen (Tencent) Puzhuo Liu (Tsinghua University) |
| TriMatch: Detecting Linux Kernel Memory Bugs with 3D Object-Aware Symmetry Checking | Zilin Guan (Southeast University) Jianhao Xu (Southeast University) Dawei Feng (Southeast University) Kangjie Lu (University of Minnesota) Bing Mao (Nanjing University) Guang Cheng (Southeast University) |
| Lemur: Scalable Post-Quantum Synchronized Multi-Signatures | Yini Lin (Monash University) Muhammed F. Esgin (Monash University) Amin Sakzad (Monash University) Ron Steinfeld (Monash University) Markku-Juhani O. Saarinen (Tampere University) |
| On Identifying Sound Conditions for Frontrunning Resistance | Sebastian Holler (MPI-SP) Anna Piscitelli (Ruhr University Bochum) Jannik Albrecht (Ruhr University Bochum) Stephan Dübler (MPI-SP) Ghassan Karame (Ruhr University Bochum) Clara Schneidewind (MPI-SP) |
| Sublinear Risk-Limiting Audits from Direct Ballot Selection and Statistical Ballot Manifests | Benjamin Fuller (University of Connecticut) Abigail Harrison (Univeristy of Connecticut) Alexander Russell (University of Connecticut) |
| PrivAudit: A Dual-Lens Auditing Framework for Website Privacy Practices under the CCPA | Mohamed Moustafa Dawoud (University of California, Santa Cruz)
Riya Aggarwal (University of California Santa Cruz) Likith Rahul Krishnamurthy (University of California Santa Cruz) Ram Sundara Raman (University of California Santa Cruz) |
| NTPIR: Efficient Silent-Preprocessing PIR using NTRU | Zhihao Li (Ant Group) Cheng Hong (Ant Group) |
| Assessing Semantic Equivalence of Decompiled Code: Are Our Measures Adequate? | Hao Ren (University of Utah) Ruotong Yu (University of Utah) Jun Xu (University of Utah) |
| InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation | Jiachang Zhang (Zhejiang University) Min Chen (Vrije Universiteit Amsterdam) Xiao Ren (Zhejiang University) Zhenyong Zhang (Guizhou University) Yuanchao Shu (Zhejiang University) Yunjun Gao (Zhejiang University) Zhikun Zhang (Zhejiang University) |
| Understanding Users' Perceptions of Client-Side Modifications and Anti-Cheat Engines in Social XR | Iman Mohammadi (University of California, Irvine) Mutahar Ali (University of California, Irvine) Habiba Farrukh (University of California, Irvine) |
| PhantomChannel: A Parasitic Covert Channel via a Parsing-Boundary Blind Spot in BLE Link-Layer Traffic | Xu Zhang (Institute of Information Engineering, Chinese Academy of Sciences) Ming Zhou (Nanjing University of Aeronautics and Astronautics) Meng Zhang (Institute of Information Engineering, Chinese Academy of Sciences) Dong Wei (Institute of Information Engineering, Chinese Academy of Sciences) Haining Wang (Virginia Tech) Qiaoyu Zhang (Institute of Information Engineering, Chinese Academy of Sciences) |
| Least-Privilege Methodology for Anamorphic Encryption with Randomness-Recovery Trapdoors | Xuan Thanh Do (Institute of Cryptography Science and Technology) Giuseppe Persiano (University of Salerno) Duong Hieu Phan (Telecom Paris, Institut Polytechnique de Paris) Moti Yung (Google LLC and Columbia University) |
| From Payload to Plugin: Web-Scale Ecosystem Attribution of JavaScript Injection Campaigns | Ravindu De Silva (University of California, Santa Barbara) Nicholas Shao (University of California, Santa Barbara) Yigitcan Kaya (University of California, Santa Barbara) Mingxuan Yao (Georgia Institute of Technology) Yanick Fratantonio (Google) Luca Invernizzi (Google) Christopher Kruegel (University of California, Santa Barbara) Giovanni Vigna (University of California, Santa Barbara) |
| Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning | Shenao Yan (University of Connecticut) Shan Jin (Visa Research) Shimaa Ahmed (Visa Research) Sunpreet Singh Arora (Visa Research) Yiwei Cai (Visa Research) Yizhen Wang (Visa Research) Yuan Hong (University of Connecticut) |
| Uncovering Hidden Attack Surfaces in Web Applications via Semantic-Aware Black-Box Scanning | Fukun Mei (Tsinghua University) Peiyang Li (Tsinghua University) Miao Chen (Zhongguancun Laboratory) Beijie Hou (Tsinghua University) Ke Xu (Tsinghua University) Qi Li (Tsinghua University) |
| Enforcement of In-Kernel Stateful Security Policies via eBPF | Letterio Galletta (IMT School for Advanced Studies Lucca) |
| Coverage Illusion: Measuring Android TLS Instrumentation Gaps | Abhinav Saxena (University of Calgary) Joel Reardon (University of Calgary) |
| From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp | Moustafa Said (CISPA Helmholtz Center for Information Security) Aurora Naska (CISPA Helmholtz Center for Information Security) Kevin Morio (CISPA Helmholtz Center for Information Security) Robert Künnemann (CISPA Helmholtz Center for Information Security) |
| Truffle: Maliciously Secure Three-Party Shuffles with Applications to Parsing | Nidhish Bhimrajka (Silence Laboratories) Yashvanth Kondi (Silence Laboratories) Daniel Noble (Silence Laboratories) Bhavish Raj Gopal (Indian Institute of Science) |
| Batten the Hatches: Cybersecurity with Military Mariners | Ryan Von Brock (Georgia Institute of Technology) Anna Raymaker (Georgia Institute of Technology) Animesh Chhotaray (Georgia Institute of Technology) Frank Li (Georgia Institute of Technology) Saman Zonouz (Georgia Institute of Technology) Raheem Beyah (Georgia Institute of Technology) |
| Do Hackers Dream of Electric Teachers?: A Large-Scale, In-Situ Measurement of Cybersecurity Student Behaviors and Educational Performance with AI Tutors | Michael Tompkins (Arizona State University) Nihaarika Agarwal (Arizona State University) Ananta Soneji (Arizona State University) Robert Wasinger (Arizona State University) Connor Nelson (Arizona State University) Kevin Leach (Vanderbilt University) Rakibul Hasan (Arizona State University) Adam Doupé (Arizona State University) Daniel Votipka (Tufts University) Yan Shoshitaishvili (Arizona State University) Jaron Mink (Arizona State University) |
| Redefining Grey-Box Deobfuscation through Context-Aware Program Synthesis, and Application to MBAs | Vidal Attias (Université Paris-Saclay, CEA, List) Grégoire Menguy (Université Paris-Saclay, CEA, List) Nicolas Bellec (Université Paris-Saclay, CEA, List) Sébastien Bardin (CEA List & Université Paris-Saclay) Jean-Yves Marion (Université de Lorraine, CNRS) |
| Mind the Advisory Gap: Comparing Security Advisory and Patch Management Practices Across IoT and Non-IoT Vendors | Sandra Rivera Pérez (Delft University of Technology) Mathew Vermeer (Delft University of Technology) Savvas Zannettou (Delft University of Technology) Arwa Al Alsadi (Delft University of Technology) Sergio Ruiz-Villafranca (Universidad Politécnica de Madrid) Michel van Eeten (Delft University of Technology) Carlos Gañán (Delft University of Technology) |
| Tsuikami: Robust Cross-Channel Source Speaker Tracing Under Voice Conversion | Zhongming Ma (Zhejiang University) Hanlei Zhang (Zhejiang University) Shibo Wang (Zhejiang University) Yanjiao Chen (Zhejiang University) Yushi Cheng (Zhejiang University) Wenyuan Xu (Zhejiang University) |
| Large-Universe (Multi-Authority) ABE from LWE | Pratish Datta (NTT Research) Yannis Rouselakis (NTT Research) Junichi Tomida (NTT Research) Nikhil Vanjani (Carnegie Mellon University) |
| 'Tab, Tab, Bug': Security Pitfalls of Next Edit Suggestions in AI-Integrated IDEs | Yunlong Lyu (The University of Hong Kong) Yixuan Tang (McGill University) Peng Chen (Independent Researcher) Tian Dong (The University of Hong Kong) Xinyu Wang (Independent Researcher) Zhiqiang Dong (Independent Researcher) Hao Chen (The University of Hong Kong) |
| Beyond One-Size-Fits-All: Neural Networks for Differentially Private Tabular Data Synthesis | Kai Chen (University of Virginia) Chen Gong (University of Virginia) Tianhao Wang (University of Virginia) |
| StOMR: Stateful Oblivious Message Retrieval | Charles Gouert (NVIDIA) Keewoo Lee (Ethereum Foundation) Dimitris Mouris (Snap Inc.) Yiannis Tselekounis (Royal Holloway, University of London) Jean-Luc Watson (NVIDIA) |
| SEAL: Reinforcing Global Safety in Mixture-of-Experts through Shared Expert ALignment | Qingyu Meng (Vrije Universiteit Amsterdam) Yiwei Zha (Vrije Universiteit Amsterdam) Jiahuan Pei (Vrije Universiteit Amsterdam) Koen Hindriks (Vrije Universiteit Amsterdam) Herbert Bos (Vrije Universiteit Amsterdam) Min Chen (Vrije Universiteit Amsterdam) |
| PAPER: Privacy-Preserving Convolutional Neural Networks using Low-Degree Polynomial Approximations and Structural Optimizations on Leveled FHE | Eduardo Chielle (NYU Abu Dhabi) Manaar Alam (NYU Abu Dhabi) Jinting Liu (NYU Shanghai) Jovan Kascelan (NYU Abu Dhabi) Michail Maniatakos (NYU Abu Dhabi) |
| MAYA: A Short Shuffle Argument With Fast Verification | Thi Van Thao Doan (UCLouvain) Olivier Pereira (UCLouvain) Thomas Peters (UCLouvain) |
| It Takes a Forum: Resources & Stakeholders Sustaining the Online Synthetic Non-Consensual Intimate Image Creation Ecosystem | Bernardo B. P. Medeiros (University of Florida) Malvika Jadhav (University of Florida) Allison Lu (University of Florida) Tadayoshi Kohno (Georgetown University) Vincent Bindschaedler (University of Florida) Kevin R. B. Butler (University of Florida) |
| SubLogarithmic Linear Time SNARKs from Improved Sumcheck | Sikhar Patranabis (IBM Research) Nitin Singh (IBM Research) Sayani Sinha (IIT Kharagpur) |
| Detecting and Measuring gclid-Based Tracking on the Web | Huy Pham (The Graduate University for Advanced Studies) Kensuke Fukuda (National Institute of Informatics) Ha Dao (Max Planck Institute for Informatics) |
| Brewing Under Pressure: More Realistic Tor Flow Correlation Considering Low FPRs | Haeseung Jeon (Ewha Womans University) Yeonseo Cho (Ewha Womans University) Nate Mathews (Rochester Institute of Technology) Rob Jansen (U.S. Naval Research Laboratory) Marc Juarez (University of Edinburgh) Se Eun Oh (Ewha Womans University) |
| PURA: Provably Unbiased and Robust Multi-Bit Watermarking for AI-Generated Text Attribution | Yaofei Wang (Hefei University of Technology) Jinyang Guo (Hefei University of Technology) Shuchao Du (University of Chinese Academy of Sciences) Chao Wang (University of Science and Technology of China) Qiyi Yao (Bilkent University) Donghui Hu (Hefei University of Technology) Weiming Zhang (University of Science and Technology of China) Nenghai Yu (University of Science and Technology of China) Kejiang Chen (University of Science and Technology of China) |
| Simple and Concretely Efficient Hierarchical Doubly ORAM | Shun Takagi (LY Corporation) Marin Matsumoto (LY Corporation) Satoshi Hasegawa (LY Corporation) |
| Zero-Knowledge Proofs for Gradient Boosted Decision Trees | Jiacheng Gao (Nanjing University) Wenjie Qu (National University of Singapore) Yuan Zhang (Nanjing University) Sheng Zhong (Nanjing University) Jiaheng Zhang (National University of Singapore) |
| Understanding the Security Boundary of Obfuscation-based On-Device LLM Protection | Hanyi Zhou (Tsinghua University) Chenyang Li (Tsinghua University) Yuanzhe Pang (Tsinghua University) Ke Xu (Tsinghua University) Mingwei Xu (Tsinghua University) Zhuotao Liu (Tsinghua University) |
| (A)iSpy: Parasitic Trojans for Machine Learning Infrastructure | Habibur Rahaman (University of Florida) Qipan Xu (University of Tennessee) Zafaryab Haider (University of Maine) Prabuddha Chakraborty (University of Maine) Swarup Bhunia (University of Florida) Fnu Suya (University of Tennessee) |
| Boosting Query Recovery against Encrypted Databases: High-Accuracy and Efficient Inference Attacks Using Minimal Leakage | Jiaojiao Wu (Xidian University) Lei Zhang (Xidian University) Jianfeng Wang (Xidian University) Shi-Feng Sun (Shanghai Jiao Tong University) Xiaofeng Chen (Xidian University) |
| Distributed Key Generation for Efficient Threshold-CKKS | Seonhong Min (Seoul National University) Guillaume Hanrot (Cryptolab, Inc.) Jai Hyun Park (CryptoLab, Inc.) Alain Passelègue (CryptoLab, Inc.) Damien Stehlé (CryptoLab, Inc.) |
| NetSynergy: Mitigating Application-layer DDoS via Adaptive Access-Backbone Collaboration | Junchen Pan (Tsinghua University) Kunpeng He (Tsinghua University) Shengnan Liu (Tsinghua University) Menghao Zhang (Beihang University.) Hu Xie (Sino-Telecom Technology) Lei Zhang (Zhongguancun Laboratory) Yong Cui (Tsinghua University) |
| Less Effort, Shorter Proofs: Reinforcement Learning for Security Protocol Analysis in Tamarin | Matthias Cosler (CISPA Helmholtz Center for Information Security) Cas Cremers (CISPA Helmholtz Center for Information Security) Bernd Finkbeiner (CISPA Helmholtz Center for Information Security) Mohamed Ghanem (CISPA Helmholtz Center for Information Security) Niklas Medinger (CISPA Helmholtz Center for Information Security) |
| SCHERI: Provably Secure Speculation Under the Constant-Time Policy for CHERI | Shixin Song (Massachusetts Institute of Technology) Davide Davoli (MPI-SP) Elias Storme (KU Leuven) Marton Bognar (KU Leuven) Dominique Devriese (KU Leuven) Frank Piessens (KU Leuven) Tamara Rezk (Inria) |
| PrivEscalate: Measuring and Augmenting the Threat of LLM-Automated Linux Privilege Escalation | Yixuan Liu (Nanyang Technological University) Zilong Zhen (Nanyang Technological University) Yin Wu (Xi'an Jiaotong University) Yi Li (Nanyang Technological University) |
| TruePix: Fast and Memory-Efficient Zero-Knowledge Authentication for Images and Videos | Li Liu (Shandong University) Puwen Wei (Shandong University) Yunyan Zou (Shandong University) Zhuoran Ji (Shandong University) Yuncong Zhang (Shandong University) Jinhan You (Shandong University) Jingru Deng (Shandong University) Jiapeng Wang (Shandong University) Haibo Zhou (Huawei Technologies Co., Ltd.) |
| Efficient SNARK for Floating-Point Computation | Wenjie Qu (National University of Singapore) Zihao Zhang (National University of Singapore) Jiaheng Zhang (National University of Singapore) |
| MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities | Kyeongmin Kim (KAIST) Insu Yun (KAIST) |
| Duty-Free Bits: Projectivizing Garbling Schemes | Nakul Khambhati (University of California, Los Angeles) Anwesh Bhattacharya (University of Illinois, Urbana-Champaign) David Heath (University of Illinois, Urbana-Champaign) |
| HoneyCodes: Auditable Short-Code Authentication After Verifier Compromise | Matthew Green (Johns Hopkins University) Aditya Hegde (Johns Hopkins University) Dorian Liu (Johns Hopkins University) |
| How Children Assess Digital Safety Risk in Gaming Platforms: A Case Study of Roblox | Zinan Zhang (The Pennsylvania State University) Qiurong Song (The Pennsylvania State University) Xinning Gui (The Pennsylvania State University) Junnan Yu (The Hong Kong Polytechnic University) Sunhye Bai (University of Oregon) Yubo Kou (The Pennsylvania State University) |
| On the Privacy Risks Caused by Images in Academic Papers | Sze Yiu Chau (Simon Fraser University) Jianyu Lu (The Chinese University of Hong Kong) Kin Man Leung (University Canada West) Chi Fung Kwan (The Hong Kong Polytechnic University) Che Wei Tu (The Chinese University of Hong Kong) Tsz Ching Tsang (The Chinese University of Hong Kong) Xinzhong Zhang (The University of Hong Kong) Yee Chiu Chen (The Chinese University of Hong Kong) Zirui Kong (The Hong Kong Polytechnic University) Youqian Zhang (The Hong Kong Polytechnic University) |
| sPAR: (Somewhat) Practical Anonymous Router | Debajyoti Das (Lund University) Jeongeun Park (NTNU) Hyewon Sung (Ewha Womans University) |
| BEAST-MEV: Batched Threshold Encryption with Silent Setup for MEV prevention | Jan Bormet (Technische Universität Darmstadt) Arka Rai Choudhuri (zkBricks) Sebastian Faust (Technische Universität Darmstadt) Sanjam Garg (University of California, Berkeley) Hussien Othman (Technische Universität Darmstadt) Guru Vamsi Policharla (Commonware, Inc.) Ziyan Qu (Technische Universität Darmstadt) Mingyuan Wang (University of Delaware) |
| From Prompt to Pwn: Exploiting GPU Memory Errors During ML Inference | Jonas Roels (KU Leuven) Adriaan Jacobs (KU Leuven) Silviu Vlasceanu (Independent researcher) Mahmoud Ammar (Independent researcher) Stijn Volckaert (KU Leuven) |
| ''Shut Up and Let Me Enjoy My Otome': Understanding and Measuring the Toxicity in Otome Game Communities | Yage Zhang (CISPA Helmholtz Center for Information Security) Xinyue Shen (University of Waterloo) Yukun Jiang (CISPA Helmholtz Center for Information Security) Michael Backes (CISPA Helmholtz Center for Information Security) Yang Zhang (CISPA Helmholtz Center for Information Security) |
| Refinement-based Verification of Cryptographic Protocols with Quantitative Values | Itsaka Rakotonirina (Shielded Technologies) Javier Gomez-Martinez (IMDEA Software Institute) Aoxuan Li (IMDEA Software Institute) Pedro Moreno-Sanchez (IMDEA Software Institute) Clara Schneidewind (MPI-SP) |
| Communication-Efficient Private Join and Compute over Distributed Input Sets | Yunqing Sun (Northwestern University) Xinran Cai (Tsinghua University) Hanlin Liu (Northwestern University) Xiao Wang (Northwestern University) Wei Dong (Nanyang Technological University) |
| Towards Practical Privacy-Preserving SAT Solving | Gefei Tan (Northwestern University) Wenhao Zhang (Northwestern University) Timos Antonopoulos (Yale University) Ruzica Piskac (Yale University) Xiao Wang (Northwestern University) Ning Luo (UIUC) |
| Rethinking the Security of DP-SGD: A Corrected Analysis of Differentially Private Machine Learning | Wenhao Wang (Monash University) Shujie Cui (Monash University) Hui Cui (Monash University) Xingliang Yuan (The University of Melbourne) |
| A Toolkit for Succinct Lattice-Based Zero Knowledge Proofs | Beatrice Biasioli (IBM Research) Madalina Bolboceanu (IBM Research) Vadim Lyubashevsky (IBM Research) Antonio Merino-Gallardo (IBM Research) Michał Osadnik (Aalto University) Gregor Seiler (IBM Research) Patrick Steuer (IBM Research) |
| PackCNN: Adaptive Data Packing for BSGS-Based Privacy-Preserving Convolutional Neural Network Inference | Kanyu Ye (Shandong Univeristy) Haoping Yang (Shandong Univeristy) Honghui You (Shandong University) Yusi Chen (Shandong University) Lei Ju (Shandong University) Zhuoran Ji (Shandong University) |
| Multilayer Defense for Syscall Flooding Attacks on Audit Collection Systems | Sagar Mishra (STONY BROOK UNIVERSITY) Soundarya Venkatesh (NVIDIA) R. Sekar (STONY BROOK UNIVERSITY) |
| Grid Trouble in Paradise: Uncovering Vulnerable Distributed Energy Resources and Their Grid-Level Risks | Anna Raymaker (Georgia Institute of Technology) Samuel Talkington (Georgia Institute of Technology) Zeezoo Ryu (Georgia Institute of Technology) Richard Asiamah (Georgia Institute of Technology) Emad Abukhousa (Georgia Institute of Technology) Betelihem Ashebo (Georgia Institute of Technology) Animesh Chhotaray (Georgia Institute of Technology) Daniel K. Molzahn (Georgia Institute of Technology) Frank Li (Georgia Institute of Technology) Saman Zonouz (Georgia Institute of Technology) Raheem Beyah (Georgia Institute of Technology) |
| Formal Verification of Circuit-Soundness in zkWasm, a General Purpose zkVM | Vilhelm Sjöberg (CertiK) Roger Bai (CertiK) Hao Chen (CertiK) Xifeng Jin (CertiK) Zhaozhong Ni (NVIDIA) Sinka Gao (Delphinus Lab pty ltd) Ronghui Gu (Columbia University) Zhong Shao (Yale University) |
| Neon-HTLC: Collateral-Free HTLCs with Logarithmic Timeout | Sebastian Faust (Technische Universität Darmstadt) Noemi Glaeser (Technische Universität Darmstadt) Marius Hagemann (Technische Universität Darmstadt) Ziyan Qu (Technische Universität Darmstadt) |
| Jailbreaking via Activation Dilution: Neuron-Guided Adaptive Decomposition of Language Models | Jiahang Wang (Stevens Institute of Technology) Chenglong Fu (University of North Carolina at Charlotte) Xiaojiang Du (Stevens Institute of Technology) Bo Luo (The University of Kansas) |
| Wasp: Succinct Non-Interactive Zero-Knowledge Proofs from VOLE | Zhanpeng Guo (Ant Group) Zhelei Zhou (Ant Group) Yun Li (Ant Group) Chenkai Weng (Arizona State University) Cheng Hong (Ant Group) Tao Wei (Ant Group) |
| Structure-Aware CKKS Bootstrapping via L1-Regularized Polynomial Optimization | Zihui Gu (SUN YAT-SEN UNIVERSITY) Peijia Zheng (SUN YAT-SEN UNIVERSITY) Jiwu Huang (Shenzhen MSU-BIT University) Xiaochun Cao (Sun Yat-Sen University) |
| What Concepts Lie Within? Detecting and Suppressing Risky Content in Diffusion Transformers | Chenyu Zhang (Tianjin University) Lanjun Wang (Tianjin University) Yueyang Cheng (Tianjin University) Ruidong Chen (Tianjin University) Wenhui Li (Tianjin University) An-an Liu (Tianjin University) |
| SPFUZZ: Validating Secretly Patched Vulnerabilities by Patch Guided Fuzzing | Shiyan Peng (Fudan University) Yingbo Xu (Fudan University) Jiarun Dai (Fudan University) Yuchen Zhang (Beijing Normal–Hong Kong Baptist University) Yuan Zhang (Fudan University) Min Yang (Fudan University) |
| A Qualitative Study on Ethics Perspectives in Cryptography Research | Maria Hellenthal (CISPA Helmholtz Centre for Information Security) Thorsten Helfer (CISPA Helmholtz Center for Information Security) Doreen Riepel (CISPA Helmholtz Centre for Information Security) Annabelle Walle (CISPA Helmholtz Center for Information Security) Jannik Zeiser (CISPA Helmholtz Center for Information Security) Til Dralle (CISPA Helmholtz Center for Information Security) Sascha Fahl (CISPA Helmholtz Center for Information Security) |
| Criminology: Refined Techniques for Compression Side-Channel Attacks | Yuanming Song (ETH Zurich) Lenka Mareková (ETH Zurich) Kenneth G. Paterson (ETH Zurich) |
| Janus: Characterizing Bidirectional Privacy and Security Risks in LLM-Integrated Android Apps | Jiawei Guo (University at Buffalo) Zongze Li (University at Buffalo, SUNY) Haipeng Cai (University at Buffalo, SUNY) |
| TENNOR: Trustworthy Execution for Neural Networks through Obliviousness and Retrievals | Zifan Qu (George Mason University) Vasileios P. Kemerlis (Brown University) Giuseppe Ateniese (George Mason University) Evgenios M. Kornaropoulos (George Mason University) |
| Square Root of All Evil: The Dangers of Falcon's Superfluous Square Roots | Kaihara Hiroto (Kyoto University) Calvin Abou Haidar (NTT Social Informatics Laboratories) Mehdi Tibouchi (NTT Social Informatics Laboratories) Masayuki Abe (NTT Social Informatics Laboratories) |
| Does AI Amplify Online Hate? A Multi-Modal Measurement Study on 4chan's /pol/ | Bo Shao (CISPA Helmholtz Center for Information Security) Xinyue Shen (CISPA Helmholtz Center for Information Security) Yang Zhang (CISPA Helmholtz Center for Information Security) |
| You Get What You Sample: Evaluating Sampling Strategies for Web Security Measurements | Xuenan Zhang (CISPA Helmholtz Center for Information Security) Yuqing Yang (CISPA Helmholz Center for Information Security) Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security) |
| IoTProber: Internet-scale IoT Device Identification Based on Hierarchical Graph Retrieval-Augmented Generation | Hai Lin (Tsinghua University) Chenglong Li (Tsinghua University) Wenjian Zhang (Tsinghua University) Jiahai Yang (Tsinghua University) Zhiliang Wang (Tsinghua University) |
| VUnitFuzz: Decoupling PHP Sink Verification from Monolithic Execution for Taint-Style Vulnerability Detection | Youkun Shi (The Hong Kong Polytechnic University) Yuan Zhang (Fudan University) Tianhao Bai (Fudan University) Jiarun Dai (Fudan University) Fengyu Liu (Fudan University) Xiapu Luo (The Hong Kong Polytechnic University) |
| HAWK with Hint: Algebraic Key Recovery from Side-Channel Leakage | Byoungchan Chi (Korea University) Changmin Lee (Korea University) Inhun Lee (Korea University) |
| XSS-over-DoH: On the Adverse Side Effects of DoH on Web Security | Matthias Gierlings (Ruhr University Bochum) Lukas Knittel (Ruhr University Bochum) Jörg Schwenk (Ruhr University Bochum) Christian Mainka (University of Wuppertal) |
| CircumVolve: Automated Discovery of Censorship Evasion Strategies Using Large Language Models | Ali Zohaib (University of Massachusetts Amherst) Jackson Sippe (University of Colorado Boulder) Jade Sheffey (University of Massachusetts Amherst) Mingshi Wu (GFW Report) Eric Wustrow (University of Colorado Boulder) Amir Houmansadr (University of Massachusetts Amherst) |
| Robustness of Vision Language Models Against Split-Image Harmful Input Attacks | Md Rafi Ur Rashid (Pennsylvania State University) MD Sadik Hossain Shanto (Bangladesh University of Engineering and Technology) Vishnu Asutosh Dasu (Pennsylvania State University) Shagufta Mehnaz (Pennsylvania State University) |
| Authenticated Garbling with Tensor Gates | Nakul Khambhati (University of California, Los Angeles) Turan Vural (University of California, Los Angeles) David Heath (University of Illinois, Urbana-Champaign) Rafail Ostrovsky (University of California, Los Angeles) |
| Foot in the Door: Uncovering the Multi-Step Authorization Exploitation in Mobile Applications | Yizhe Shi (Fudan University) Zhemin Yang (Fudan University) Qiaodan Hou (Fudan University) Lukai Cui (Fudan University) Cheng Sheng (Fudan University) Xiaohan Zhang (Fudan University) Min Yang (Fudan University) |
| The MEV Trilemma | Mingzhe Zheng (The Hong Kong University of Science and Technology (Guangzhou)) |
| On Threshold Fully Homomorphic Encryption with Synchronized Decryptors | François Colin de Verdière (ENS de Lyon) Alain Passelègue (CryptoLab Inc.) Damien Stehlé (CryptoLab Inc.) |
| AutoSOUP: Safety-Oriented Unit Proof Generation for Memory-Safety Verification | Paschal Amusuo (Purdue University) Ricardo Calvo (Purdue University) Dharun Anandayuvaraj (Purdue University) Taylor Le Lievre (Columbia University) Kevin Kolyakov (University of Waterloo) Elijah Jorgensen (Purdue University) Aravind Machiry (Purdue University) James C Davis (Purdue University) |
| When Module Lattice Leaks: Horizontal Fusion Attacks on ML-DSA Implementation | Yuhan Zhao (Nanjing University of Science and Technology) Dalin He (Nanjing University of Science and Technology) Wei Cheng (Nanjing University of Science and Technology) Yuejun Liu (Nanjing University of Science and Technology) Jingdian Ming (Nanjing University of Science and Technology) Yongbin Zhou (Nanjing University of Science and Technology) |
| No One Cares About Privacy But You: Understanding Data Deletion Practices in the App-in-App Ecosystem | Yizhe Shi (Fudan University) Zhemin Yang (Fudan University) Houliang Wan (Fudan University) Chongxin Hu (Fudan University) |
| Characterizing and Detecting Bugs at the Interfaces of OpenBSD Privilege-Separated Programs | Shibo Ai (University of British Columbia) Shao Chen Zhang (University of British Columbia) Hugo Lefeuvre (University of British Columbia) Margo Seltzer (University of British Columbia) |
| MOSAIC: Masked Outsourcing of Secure AI Computations | James Hsin-yu Chiang (ETH Zurich) Sheila Zingg (ETH Zurich) Kari Kostiainen (ETH Zurich) Srdjan Capkun (ETH Zurich) |
| When Scammers Talk Back: Understanding Potentially Unwanted Calls via LLM-Based Interaction | Zhuoer Lyu (Arizona State University) Marzieh Bitaab (Amazon) Shuyi Huang (Arizona State University) Alireza Karimi (Arizona State University) William Robertson (Arizona State University) Zeming Yu (Arizona State University) Moritz Schloegel (CISPA Helmholtz Center for Information Security) Yan Shoshitaishvili (Arizona State University) Gail-Joon Ahn (Arizona State University) Ananta Soneji (University of Nebraska at Omaha) Ruoyu Wang (Arizona State University) Adam Doupé (Arizona State University) Tiffany Bao (Arizona State University) |
| Papers, Peons, and Power: The Challenges of Implementing Privacy Regulations in a Developing Country | Kenneth Thilakarathna (University of Kelaniya) Dilanga Harshani (University of Colombo) Nathan Malkin (New Jersey Institute of Technology) |
| Robust Distributed Arrays: Provably Secure Networking for Data Availability Sampling | Dankrad Feist (Tempo Labs) Gottfried Herold (Ethereum Foundation) Mark Simkin (Flashbots Ltd.) Benedikt Wagner (Ethereum Foundation) |
| Heavy-coin Committee Selection for the Decentralized Era | Yucheng Sun (National University of Singapore) Haifeng Yu (National University of Singapore) |
| Sound Debloating of Redundant Checks in Zero-Knowledge Machine-Learning Circuits | Zhantong Xue (Hong Kong University of Science and Technology) Pingchuan Ma (Zhejiang University of Technology) Zhaoyu Wang (Hong Kong University of Science and Technology) Yuguang Zhou (Hong Kong University of Science and Technology) Huaijin Wang (Shandong University) Shuai Wang (Hong Kong University of Science and Technology) |
| Comment and Control: Hijacking Agentic Workflows via Context-Grounded Evolution | Neil Fendley (Johns Hopkins University, Johns Hopkins Applied Physics Lab) Zhengyu Liu (Johns Hopkins University) Aonan Guan (Wyze Labs, Inc.) Jiacheng Zhong (Johns Hopkins University) Yinzhi Cao (Johns Hopkins University) |
| PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents | Qihang Cen (Tsinghua University) Tianshuo Cong (Shandong University) Da Song (Shandong University) Xinlei He (Wuhan University) Jiaxing Song (Tsinghua University) Ke Xu (Tsinghua University) Qi Li (Tsinghua University) |
| Lex: Turning Laws into Enforceable Security Policies | François Hublet (ETH Zürich) Jakob Merane (ETH Zürich) Jonas Degelo (ETH Zürich) Wei-En Hsieh (ETH Zürich) Srđan Krstić (University of Copenhagen) David Basin (ETH Zürich) |
| Schnorr Signatures and MuSig2 are Jointly Secure, Even in Deterministic Wallets | Renas Bacho (Ruhr University Bochum) Yanbo Chen (University of Ottawa) Poulami Das (Least Authority) Julian Loss (Ruhr University Bochum) Tim Ruffing (Blockstream Research) Benedikt Wagner (Ethereum Foundation) |
| TWIST: Private Tenant-Dedicated LLM Serving via Joint Model-Token Transformation | Qizhi Zhang (ByteDance) Yufei Chen (City University of Hong Kong) Yu Lin (ByteDance) Wenqiang Ruan (ByteDance) Quanwei Cai (ByteDance) Daode Zhang (ByteDance) Longxiang Wang (City University of Hong Kong) Jue Hong (ByteDance) Ye Wu (ByteDance) Cong Wang (City University of Hong Kong) |
| Beyond the Prank: The Hidden Expertise of TSS Scambaiters | Saleh Alsyefi (University of Bristol) Anish Chand (Louisiana State University) Matthew Edwards (University of Bristol) Phani Vadrevu (Louisiana State University) |
| AdLens: Efficient Detection of Deceptive Software Ads | Ritik Roongta (New York University) Marwan Adnan Darwish (Radboud University) Masoud Poorghaffar Aghdam (Radboud University) Rachel Greenstadt (New York University) Gunes Acar (Radboud University) |
| One Click to Leak: Characterizing the Real-World Usage and Threat Impact of MNO-based Single Sign-On Websites | Jiasheng Huang (Tsinghua University) Mingxuan Liu (Zhongguancun Laboratory) Pei Chen (Fudan University) Baojun Liu (Tsinghua University) Yiming Zhang (Tsinghua University) Geng Hong (Fudan University) Zhenrui Zhang (Baidu Inc) Hai Yang (Baidu Inc) Haixin Duan (Quancheng Lab) Hui Jiang (Tsinghua University) |
| Thinking Dangerously: How Reasoning Training Dilutes Safety in Language Models | Dongxin Guo (The University of Hong Kong) Jikun Wu (Brain Investing Limited) Siu Ming Yiu (The University of Hong Kong) |
| Divide and Conquer: Exposing SAST Rule Flaws via Realistic Variant Synthesis from Millions of Repositories | Zongze Jiang (Huazhong University of Science and Technology) Ming Wen (Huazhong University of Science and Technology) Zifan Xie (Chongqing University) Yuan Zhang (Fudan University) Deqing Zou (Huazhong University of Science and Technology) Hai Jin (Huazhong University of Science and Technology) |
| PatchAudit: Uncovering Faulty Security Patches and Lingering Zero-Days at Scale | Zhengsong Zhang (University at Buffalo, SUNY) Haipeng Cai (University at Buffalo, SUNY) |
| Single Medium, Multiple Perspectives: Exposing and Exploiting Semantic Gaps in AI Services' Media Preprocessing Pipelines | Yacong Gu (Tsinghua University) Xiangfan Wu (Ocean University of China) Lingyun Ying (QI-ANXIN Technology Research Institute) Yingyuan Pu (QI-ANXIN Technology Research Institute) Haipeng Qu (Ocean University of China) Jianjun Chen (Tsinghua University) Haixin Duan (Quancheng Lab) |
| Maliciously Secure Shuffled Distributed OPRF with Applications to Private Set Operations | Aron van Baarsen (Aarhus University) Aarushi Goel (Rutgers University) Lisa Kohl (CWI) Peihan Miao (Brown University) Phuoc Van Long Pham (Brown University) Peter Scholl (Aarhus University) Satvinder Singh (Purdue University) |
| Global-View Reasoning with LLMs for Real-World Vulnerability Detection | Xiaozhen Xu (Fudan University) Chaoran Tao (Fudan University) Guangliang Yang (Fudan University) Xinming Guo (Fudan University) Can Li (Fudan University) Yangshuo Bai (Fudan University) Yi Wang (Fudan University) |
| ContractGuard: Auditing Semantic Contracts of MCP Tools for Security Violations | Hengkai Ye (The Pennsylvania State University) Zhechang Zhang (The Pennsylvania State University) Ruibo Lu (The Pennsylvania State University) Jinyuan Jia (The Pennsylvania State University) Hong Hu (The Pennsylvania State University) |
| MChammer: A Systematic Characterization of CPU-Level Rowhammer Countermeasures on DDR5 Systems | Ingab Kang (University of Michigan) Christina Garman (Purdue University) Daniel Genkin (Georgia Tech) |
| Gone in 8 Seconds: Uncovering Malicious Bots Operating on Public Container Registries | Billy Tsouvalas (Stony Brook University) Nick Nikiforakis (Stony Brook University) |
| 'They don't care about this': A Systematic Study of TEE Build Reproducibility in the Wild | Annika Wilde (Ruhr University Bochum) Marco Gutfleisch (LMU Munich) Felix Reichmann (Ruhr University Bochum) Anirban Chakraborty (Max Planck Institute for Security and Privacy) Yuval Yarom (Ruhr University Bochum) M. Angela Sasse (Ruhr University Bochum) Ghassan Karame (Ruhr University Bochum) |
| MetaMancer: Practical Tool Selection Attacks against LLM Agents | Wenbin Zhai (The Hong Kong Polytechnic University) Yihao Liu (The Hong Kong Polytechnic University) Dong Wang (The Hong Kong Polytechnic University) Hao Chen (The University of Hong Kong) Bin Xiao (The Hong Kong Polytechnic University) |
| Logit Laundering: Evading Data-Use Auditing in Large Language Models | Ruihan Hu (Beijing University of Posts and Telecommunications) Wei Luo (Beijing University of Posts and Telecommunications) Yu-Ming Shang (Beijing University of Posts and Telecommunications) Jiakai Wang (Zhongguancun Laboratory) Chuxuan Zhang (Beijing University of Posts and Telecommunications) Mei Li (Beijing University of Posts and Telecommunications) Xi Zhang (Beijing University of Posts and Telecommunications) Meikang Qiu (Augusta University) |
| Investigating Planning Attacks against End-to-End Autonomous Driving | Ruoyu Song (Purdue University) Chenyi Wang (University of Arizona) Raymond Muller (Lawrence Livermore National Laboratory) Jean-Philippe Monteuuis (Qualcomm Technologies, Inc.) Ryan Gerdes (Virginia Tech) Jonathan Petit (Qualcomm Technologies, Inc.) Ming F. Li (University of Arizona) Antonio Bianchi (Purdue University) Z. Berkay Celik (Purdue University) |
| LogVOLE: Succinct and Efficient Chosen-Input VOLE for ZK and Beyond | Lucien K. L. Ng (Georgia Institute of Technology) Peter Rindal (Category Labs) Akash Shah (University of California, Los Angeles) |
| On the Communication Complexity of Sleepy Consensus | Qiang Tang (The University of Sydney) Yuchen Ye (The University of Sydney) |
| Adversarial Procurement in Blockchains | Maryam Bahrani (Ritual) Michael Neuder (Princeton University) S. Matthew Weinberg (Princeton University) |
| Identifying AI Web Scrapers Using Canary Tokens | Steven Seiden (Duke University) Triss Ren (University of Pittsburgh) Caroline Zhang (Duke University) Taein Kim (Duke University) Enze Liu (Carnegie Mellon University) Emily Wenger (Duke University) |
| PiMRef: Deducing Ever-evolving Spear-phishing Emails with Knowledge Base Invariants | Ruofan Liu (National University of Singapore) Yun Lin (Shanghai Jiao Tong University) Yuxin Wang (Shanghai Jiao Tong University) Xiwen Teoh (National University of Singapore) Zhenkai Liang (National University of Singapore) Gongshen Liu (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) Jin Song Dong (National University of Singapore) |
| Proof-of-Authorship for Diffusion-based AI Generated Content | De Zhang Lee (National University of Singapore) Han Fang (University of Science and Technology of China) Ee-Chien Chang (National University of Singapore) |
| THED: Threshold Dilithium from FHE | Jai Hyun Park (CryptoLab Inc.) Alain Passelègue (CryptoLab Inc.) Damien Stehlé (CryptoLab Inc.) |
| Mind the Heap: Preventing Capability Leakage Across CHERI Compartments | Seyedhamed Ghavamnia (Bloomberg) Maurice D. Hanisch (Caltech) Julien Vanegue (Bloomberg) |
| Attest the Whole, Verify Incrementally: Whole-Program Integrity via Lazy Verification in Trusted Execution Environments | Zhen Huang (Shanghai Jiao Tong University) Junhong Cheng (Shanghai Jiao Tong University) Yijia Ma (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Zhezhi He (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Mengmeng Zhou (Beijing Academy of Blockchain and Edge Computing, BAEC) Haojin Zhu (Shanghai Jiao Tong University) |
| Shorter VOLE-in-the-Head-based Signatures from Vector Semi-Commitment | Seongkwang Kim (Korea University) Byeonghak Lee (Samsung SDS) Mincheol Son (Korea Advanced Institute of Science and Technology) |
| Selective Fine-Tuning for Targeted and Robust Concept Unlearning | Mansi Mansi (Imperial College London) Avinash Kori (Imperial College London) Francesca Toni (Imperial College London) Soteris Demetriou (Imperial College London) |
| Talking to the Airgap: Exploiting Radio-Less Embedded Devices as Radio Receivers | Paul Staat (Ruhr University Bochum) Daniel Davidovich (Max Planck Institute for Security and Privacy) Christof Paar (Max Planck Institute for Security and Privacy) |
| DeepIvy: Toward Accelerator-Speed Secure Model Inference via CPU-Side TEEs | Kunbei Cai (University of Central Florida) Md Hafizul Islam Chowdhuryy (University of North Carolina at Charlotte) Wujie Wen (North Carolina State University) Fan Yao (University of Central Florida) |
| 5GDescrambler: Locating, Descrambling, and Decoding 5G Scheduling Information | Fritz Windisch (Karlsruhe Institute of Technology) Thorsten Strufe (Karlsruhe Institute of Technology) |
| From Stealthy Data Fabrication to Unsafe Driving: Realistic Scenario Attacks on Collaborative Perception | Qingzhao Zhang (University of Arizona) Runting Zhang (University of Michigan) Z. Morley Mao (University of Michigan) |
| 'Only This Time' Illusion: Exposing and Mitigating Stealth Location Tracking in Android's One-Time Permission Model | Shahriar Rahman Khan (Kent State University) Tariqul Islam (University of Maryland, Baltimore County) Raiful Hasan (Kent State University) |
| Edit-Neighboring Data Streams and Privacy under Continual Observation | Joel Daniel Andersson (Institute of Science and Technology Austria) Anamay Chaturvedi (Institute of Science and Technology Austria) Monika Henzinger (Institute of Science and Technology Austria) Roodabeh Safavi (Institute of Science and Technology Austria) |
| FHEMIST: A Maximum Independent Set Technique for Efficient Bootstrapping Reductions in FHE Evaluations | Animesh Singh (Indian Institute of Technology, Kharagpur) Ayantika Chatterjee (Indian Institute of Technology, Kharagpur) Anupam Chattopadhyay (Nanyang Technological University) Debdeep Mukhopadhyay (Indian Institute of Technology, Kharagpur) |
| Learning Less While Asking More: How LLM-Based Assistance Shapes Vulnerability Learning | Baojuan Wang (Drexel University) Yifan Yao (Drexel University) Yue Zhang (Shandong University) Zhibo Eric Sun (Drexel University) |
| ''People can change, and patterns can be broken'': Contextualizing Tradeoffs in Automated Decision-Making Systems | Rabeya Bosri (University of Alberta) Anna Harbluk Lorimer (University of Chicago) Afrida Hossain (University of Alberta) Vasisht Duddu (University of Waterloo) Bailey Kacsmar (University of Alberta) |
| Random Robust Secret Sharing with Perfect Privacy and its Applications | Mohammad Hassan Ameri (Purdue University) Jeremiah Blocki (Purdue University) |
| Mitigating Ciphertext Side-Channel Attacks against TEE-Shielded Neural Networks | Qianhui Dai (Shanghai Jiao Tong University) Zhen Huang (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Yinqian Zhang (Southern University of Science and Technology) Haojin Zhu (Shanghai Jiao Tong University) |
| Tricycle: Private Transformer Inference with Tricyclic Encodings | Lawrence Lim (UC Santa Barbara) Vikas Kalagi (UC Santa Barbara) Julia Novick (UC Santa Barbara) Jiaming Liu (UC Santa Barbara) Divyakant Agrawal (UC Santa Barbara) Amr El Abbadi (UC Santa Barbara) |
| Azkaban: A Zero-Knowledge Abstract Analysis for Neural Networks | Sankha Das (Georgia Institute of Technology) Lucien K. L. Ng (Georgia Institute of Technology) Yibin Yang (University of Toronto) Vladimir Kolesnikov (Georgia Institute of Technology) Teodora Baluta (Georgia Institute of Technology) |
| Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations | Rui Li (Singapore Management University) Wenrui Diao (Shandong University) Debin Gao (Singapore Management University) |