| Title | Author |
|---|---|
| Exploring the Exposure of IPv6 End-Host Networks | Hugo Hue (Georgia Institute of Technology) Abhishek Bhaskar (Georgia Institute of Technology) Amanda Hsu (Georgia Institute of Technology) Paul Pearce (University of California, Irvine) Frank Li (Georgia Institute of Technology) |
| The Trade-off Between Performance and Security: Exploring Vulnerabilities in DNS Task Queue Scheduling | Shiming Liu (Tsinghua University, BNRist) Yunyi Zhang (Tsinghua University) Ruixuan Li (Tsinghua University) Shiyao Guo (Tsinghua University) Baojun Liu (Tsinghua University) Donghong Sun (Tsinghua University) Yong Ma (Alibaba Cloud) Linjian Song (Alibaba Cloud) |
| Demystifying GhostTap: Breaking Android Tapjacking Defenses by Exploiting State Inconsistencies | Yanjie Zhao (Huazhong University of Science and Technology) Zhiyuan Yang (Huazhong University of Science and Technology) Weimin Cheng (Independent Researcher) Sheng Cao (Huazhong University of Science and Technology) Hao Zhou (The Hong Kong Polytechnic University) Haoyu Wang (Huazhong University of Science and Technology) |
| Breaking the Curse of Dimensionality: Fuzzy PSI without $O((\log\delta)^d)$ Overhead | Cong Zhang (Institute for Advanced Study, Tsinghua University) Yang Cao (School of Cyber Science and Technology, Shandong University) Yujie Bai (Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security) Shuaishuai Li (Zhongguancun Laboratory, Beijing, China) Juntong Lin (Shandong University) Yu Chen (Shandong University) Anyu Wang (Tsinghua University) Xiaoyun Wang (Tsinghua University) |
| iEnFlow: Endogenous Control-Flow Attacks via Conditional Branch Prediction on Apple Silicon | Kaiyuan Rong (Tsinghua University) Jiajie Chen (Tsinghua University) Junqi Fang (Tsinghua University, Zhongguancun Laboratory) Peng Qu (Tsinghua University) Hanyin Liu (Harbin Institute of Technology) Youhui Zhang (Tsinghua University, Zhongguancun Laboratory) Dapeng Ju (Tsinghua University, Zhongguancun Laboratory) Dongsheng Wang (Tsinghua University, Zhongguancun Laboratory) |
| TapSpy: Semantic Usage Analysis and Triangulated Risk Assessment of Session Replay in Mobile Apps | Jiawei Guo (University at Buffalo) Zongze Li (University at Buffalo) Haipeng Cai (University at Buffalo) |
| Time-Delayed Publicly Verifiable Quantum Computation with Classical Verifiers | Ameer Mohammed (Kuwait University) Aydin Abadi (Newcastle University) Jaffer Mahdi (Kuwait University) |
| Dependency Triad: A Metric to Quantify the Dependencies Between Attributes for Local Differential Privacy | Sandaru Jayawardana (The University of Sydney) Sennur Ulukus (University of Maryland, College Park) Ming Ding (Data61, CSIRO, Australia) Kanchana Thilakarathna (The University of Sydney) |
| Implementation Bugs as Attacks: Adversarial Neuron Fuzzing and Supply-Chain Backdoors | Zizhuang Deng (School of Cyber Science and Technology, Shandong University) Yiying Shan (School of Cyber Science and Technology, Shandong University) Sanchuan Chen (Auburn University) Guozhu Meng (Institute of Information Engineering, Chinese Academy of Sciences, China; School of Cyber Security, University of Chinese Academy of Sciences, China) Qingxin Wang (Institute of Information Engineering, Chinese Academy of Sciences, China; School of Cyber Security, University of Chinese Academy of Sciences, China) Xueqing Zhang (Auburn University) Tong Liu (Institute of Information Engineering, Chinese Academy of Sciences, China; School of Cyber Security, University of Chinese Academy of Sciences, China) |
| eBind: Privacy-Enhanced and eIDAS 2.0-Compliant Binding of Anonymous Credentials to Humans | Yang Yang (Singapore Management University) Guomin Yang (Singapore Management University) Yingjiu Li (University of Oregon) Minming Huang (Singapore Management University) David Basin (ETH Zurich) Hwee Hwa Pang (Singapore Management University) Robert H. Deng (Singapore Management University) |
| FirmCred: Detecting Authentication Bypass Vulnerabilities in Firmware from Credential Initialization Perspective | Ziqi Wei (Fudan University) Haoyu Xiao (Fudan University) Yuan Zhang (Fudan University) Chi Chen (Fudan University) Jiarun Dai (Fudan University) |
| Resilient Alerting Protocols for Blockchains | Marwa Mouallem (Technion) Lorenz Breidenbach (Chainlink Labs) Ittay Eyal (Technion) Ari Juels (Chainlink Labs, Cornell Tech, IC3) |
| DRIP: Defending Prompt Injection via Token-wise Representation Editing and Residual Fusion | Ruofan Liu (National University of Singapore) Yun Lin (Shanghai Jiao Tong University) Zhiyong Huang (National University of Singapore) Jin Song Dong (National University of Singapore) |
| FeatureFuzz: Treating Bug-prone Features as Core Primitives for Compiler Fuzzing | Xingbang He (Nanjing University) Yuanwei Chen (Nanjing University) Hao Wu (Nanjing University) Jikang Zhang (Institute of Dataspace, Hefei Comprehensive National Science Center) Zicheng Wang (Honor Device Co.,Ltd) Ligeng Chen (Honor Device Co., Ltd) Junjie Peng (Nanjing University) Haiyang Wei (Nanjing University) Yi Qian (Nanjing University) Tiantai Zhang (Nanjing University) Linzhang Wang (Nanjing University) Bing Mao (Nanjing University) |
| DynOP: Blow Away the Cobwebs in NX Bypassing with Dynamic-Source Gadget Oriented Programming | Hong Guo (National University of Defense Technology) Ruipeng Wang (National University of Defense Technology) Shiwen Ou (National University of Defense Technology) Songtao Yang (Zhongguancun Laboratory) Yu Chen (National University of Defense Technology) TaiYan Wang (National University of Defense Technology) Zexiang Zhang (National University of Defense Technology) Yuwei Li (National University of Defense Technology) Yang Li (National University of Defense Technology) Zulie Pan (National University of Defense Technology) |
| Walrus: An Efficient Decentralized Storage Network | George Danezis (Mysten Labs & University College London (UCL)) Giacomo Giuliari (Mysten Labs) Lefteris Kokoris-Kogias (MystenLabs) Markus Legner (Mysten Labs) Jean-Pierre Smith (Mysten Labs) Alberto Sonnino (Mysten Labs & University College London (UCL)) Karl Wüst (Mysten Labs) |
| PhantomSeal: Proactive Deepfakes Defense with Identity/Context Protection and Forensic Tracing | Liangqin Ren (University of Kansas) Zeyan Liu (University of Louisville) Ye Wang (University of Kansas) Yuxin Chen (University of Chicago) Fengjun Li (University of Kansas) Bo Luo (University of Kansas) |
| GDPRuler: A Trusted GDPR Monitor for Cloud Data Systems | Dimitrios Stavrakakis (TU Munich) Masanori Misono (TU Munich) Julian Pritzi (TU Munich) Harshavardhan Unnibhavi (TU Munich) Nuno Santos (INESC-ID / Instituto Superior Tecnico, University of Lisbon) Pramod Bhatotia (TU Munich) |
| NFSA: Non-Forward Secure Aggregation with One Server via Two Layer Secret Sharing | Yufei Zhou (Sun Yat-sen University) |
| A Formal Analysis of Signal’s Sparse Post-Quantum Ratchet Protocol and its Implementation | Karthikeyan Bhargavan (Cryspen) Maxime Buyse (Cryspen) Graeme Connell (Signal) Franziskus Kiefer (Cryspen) Rolfe Schmidt (Signal) |
| TurboRetry: Mitigating Large-Scale QUIC Handshake Floods with Off-the-shelf DPU Offloading | Jiahao Wu (ICT, CAS; UCAS) Heng Pan (Computer Network Information Center, Chinese Academy of Sciences) Kai Lv (Institute of Computing Technology, Chinese Academy of Sciences; University of Chinese Academy of Sciences.) Zhenyu Li (ICT, CAS) Yanbiao Li (CNIC CAS; UCAS, China) Gaogang Xie (CNIC CAS; UCAS, China) |
| GhostTac: Manipulating Tactile Sensors without Physical Contact | Kun Wang (Zhejiang University) Xuancun Lu (Zhejiang University) Ruochen Zhou (The Hong Kong University of Science and Technology) Kai Wang (Zhejiang University) Tongjun Ye (Zhejiang University) Yihao Shao (Zhejiang University) Chen Yan (Zhejiang University) Xiaoyu Ji (Zhejiang University) Wenyuan Xu (Zhejiang University) |
| Penetrating the Reality Wall: Long-Range and Through-Wall AR/VR Privacy Eavesdropping via Wireless Power Side Channel | Tao Ni (King Abdullah University of Science and Technology) Zehua Sun (National University of Singapore) Yihe Zhou (City University of Hong Kong) Yuefeng Du (City University of Hong Kong) Qingchuan Zhao (City University of Hong Kong) Cong Wang (City University of Hong Kong) |
| Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem | Jiahao Chen (Zhejiang University) Xing He (Zhejiang University) Yong Yang (Zhejiang University) Xinfeng Li (Nanyang Technological University) Chunyi Zhou (Zhejiang University) Junhao Li (Guangzhou University) Zhe Ma (Tianjin University) Tianyu Du (Zhejiang University) Shouling Ji (Zhejiang University) |
| A Single Glance Is Better Than Words: Vision-Guided Targeted Concept Erasing | Yuyang Zhang (Wuhan University) Yuxiang Sun (Wuhan University) Ke Liang (Wuhan University) Junlin Li (Wuhan University) Kangjie Chen (Nanyang Technological University) Run Wang (Wuhan University) |
| Mind the Gap: Action Rebinding Attacks against Android GUI Agents | Yi Qian (Nanjing University) Kunwei Qian (Nanjing University) Xingbang He (Nanjing University) Ligeng Chen (Honor Device Co., Ltd) Jikang Zhang (Institute of Dataspace, Hefei Comprehensive National Science Center) Tiantai Zhang (Nanjing University) Haiyang Wei (Nanjing University) Linzhang Wang (Nanjing University) Hao Wu (Nanjing University) Bing Mao (Nanjing University) |
| Private Direct Preference Optimization for LLM Alignment | Yangfan Jiang (National University of Singapore) Fei Wei (Alibaba Group) Ergute Bao (Mohamed bin Zayed University of Artificial Intelligence) Xiaokui Xiao (National University of Singapore) Yaliang Li (Alibaba Group) Bolin Ding (Alibaba Group) |
| Neurosymbolic Disassembly | Zhaoqi Xiao (University of California, Riverside) Yeqi Fu (National University of Singapore) Lambang Akbar Wijayadi (National University of Singapore) Zhenkai Liang (National University of Singapore) Heng Yin (University of California, Riverside) |
| Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning | Weitao Feng (Nanyang Technological University) Lixu Wang (Nanyang Technological University) Peizhuo Lv (Nanyang Technological University) Tianyi Wei (Nanyang Technological University) Jie Zhang (CFAR and IHPC, Agency for Science, Technology and Research (A*STAR), Singapore) Chongyang Gao (Northwestern University) Sinong Simon Zhan (Northwestern University) Wei Dong (Nanyang Technological University) |
| Diagnosing Programmable Data Plane Attacks with Provenance Observability | Dhiraj Saharia (Georgetown University) Ashish Gehani (SRI International) Vinod Yegneswaran (SRI International) Benjamin E. Ujcich (Georgetown University) |
| Designated-Verifier Dynamic zk-SNARKs with Applications to Dynamic Proofs of Index | Weijie Wang (Yale University) Charalampos Papamanthou (Yale University and Lagrange Labs) Shravan Srinivasan (Lagrange Labs) Dimitrios Papadopoulos (Hong Kong University of Science & Technology) |
| BABE: Verifying Proofs on Bitcoin Made 1000x Cheaper | Sanjam Garg (University of California, Berkeley and Exponential Science Foundation) Dimitris Kolonelos (UC Berkeley) Mikhail Sergeevitch (Babylon Labs) Srivatsan Sridhar (Byzantine Research) David Tse (Byzantine Research and Stanford University) |
| On the Limits of Consensus under Dynamic Availability and Reconfiguration | Javier Nieto (University of Illinois at Urbana-Champaign) Joachim Neu (a16z Crypto Research) Ling Ren (University of Illinois at Urbana-Champaign) |
| DisarmRAG: Stealthy Retriever Poisoning to Disable Self-Correction in Retrieval-Augmented Generation | Yanbo Dai (The Hong Kong University of Science and Technology) Zhenlan Ji (The Hong Kong University of Science and Technology) Zongjie Li (The Hong Kong University of Science and Technology) Kuan Li (The Hong Kong University of Science and Technology) Shuai Wang (The Hong Kong University of Science and Technology) |
| MMAligner: Safeguarding Multimodal Large Language Models through Representation Calibration | Shenyi Zhang (Wuhan University) Keyan Guo (University at Buffalo) Zihao Wang (Wuhan University) Xuebin Li (Wuhan University) Lingchen Zhao (Wuhan University) Hongxin Hu (University at Buffalo) Chao Shen (Xi'an Jiaotong University) Qian Wang (Wuhan University) |
| Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications | Yong Yang (Zhejiang University) Chong Fu (Zhengzhou University) Tong Zhang (Zhejiang University) Rui Zeng (Zhejiang University) Qingming Li (Zhejiang University) Tianyu Du (Zhejiang University) Zonghui Wang (Zhejiang University) Shouling Ji (Zhejiang University) Wenzhi Chen (Zhejiang University) |
| Mini-Programs, Mega-Problems: Unveiling OAuth-based Authentication Misuses in Mini-Programs via Dynamic Analysis | Zidong Zhang (Simon Fraser University; QI-ANXIN Research Institute.) Zhentao Xie (Shandong University) Lingyun Ying (QI-ANXIN Technology Research Institute) Qinsheng Hou (School of Computer Science, Shanghai Jiao Tong University) Yacong Gu (Tsinghua University; Tsinghua University-QI-ANXIN Group JCNS) Wenrui Diao (Shandong University) Jianliang Wu (Simon Fraser University) |
| CVE-Genie: An LLM-Based Multi-Agent Framework for Reproducing CVEs | Saad Ullah (Boston University) Praneeth Balasubramanian (University of California, Santa Barbara) Wenbo Guo (UC Santa Barbara) Amanda Burnett (Arizona State University) Hammond Pearce (UNSW Sydney) Christopher Kruegel (UC Santa Barbara) Giovanni Vigna (UC Santa Barbara) Gianluca Stringhini (Boston University) |
| NVBleed: Covert and Side-Channel Attacks on NVIDIA Multi-GPU Interconnect | Yicheng Zhang (UC Riverside) Ravan Nazaraliyev (University of California, Riverside) Sankha Baran Dutta (Brookhaven National Laboratory) Andres Marquez (Pacific Northwest Natl Labs) Kevin Barker (Pacific Northwest National Laboratory) Nael Abu-Ghazaleh (University of California, Riverside) |
| THESEUS: Smart Web Crawling via Resource-Guided Semantic Modeling | Yongheng Huang (SKLP, Institute of Computing Technology, CAS, China) Chenghang Shi (SKLP, Institute of Computing Technology, CAS, China) Wenxiao Yao (SKLP, Institute of Computing Technology, CAS, China) Jie Lu (Institute of Computing Technology, Chinese Academy of Sciences) Haofeng Li (Institute of Computing Technology of the Chinese Academy of Sciences, China) Youlong Chen (Institute of Computing Technology, Chinese Academy of Sciences) Dong Liu (Zhongguancun Laboratory) Mengna Ma (Zhongguancun Laboratory) Yong Liu (Zhongguancun Laboratory;Qianxin Technology Group Co., Ltd) Qinfen Hao (SKLP, Institute of Computing Technology, CAS; University of Chinese Academy of Sciences) Lian Li (Institute of Computing Technology at Chinese Academy of Sciences) |
| HysterAuth: A Robust and Frictionless Continuous Authentication Framework via Diffusion Augmentation and Hysteresis Decision | Junchao Ma (Institute of Information Engineering, Chinese Academy of Sciences, China) Kun Zhang (Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093) Haiqiang Li (Tianyi Telecom Terminal Co. Ltd.) Zeyu Li (Institute of Information Engineering, Chinese Academy of Sciences, China) Yanchang Feng (Institute of Information Engineering, Chinese Academy of Sciences, China) Xuefei Chen (Institute of Information Engineering, Chinese Academy of Sciences, China) Mingming Hu (Yellow River Henan Bureau, Zhengzhou 450004, China) Bibo Tu (Institute of Information Engineering, Chinese Academy of Sciences) |
| GoSe: Command-Line Option Sequence Generation with Runtime-Based Option Relationship Modeling for Security Testing | Zhineng Zhong (Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University) Hanqin Guan (Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University) Ding Li (Key Laboratory of High-Confidence Software Technologies (MOE), School of Computer Science, Peking University) |
| Angelfish: Leader, DAG, or Anywhere in Between | Qianyu Yu (HKUST(GZ)) Giuliano Losa (Stellar Development Foundation) Nibesh Shrestha (Supra Research) Xuechao Wang (HKUST(GZ)) |
| Opaque Shader: Dynamic Code Execution on GPUs via Explicit Graphics APIs | Hao Li (Shanghaitech University) Yihong Hang (Shanghaitech University) Yuan Xiao (ShanghaiTech University) Zhice Yang (ShanghaiTech University) |
| From Documentation to Zero-day Vulnerabilities: LLM-Driven Fuzzing of JavaScript Engines in PDF Readers | Suyue Guo (UC Santa Barbara) Stijn Pletinckx (UC Santa Barbara) Tianle Yu (UC Santa Barbara and Stanford University) Yigitcan Kaya (UC Santa Barbara) Saad Ullah (Boston University) Wenbo Guo (UC Santa Barbara) Christopher Kruegel (UC Santa Barbara) Giovanni Vigna (UC Santa Barbara and Broadcom) |
| Censorship Resistance vs Throughput in Multi-Proposer BFT Protocols | Fatima Elsheimy (Yale University) Ioannis Kaklamanis (Yale University, IC3) Charalampos Papamanthou (Yale University) Sarisht Wadhwa (Duke University) Fan Zhang (Yale University, IC3) |
| You Can't Talk Your Way Out of Cyber Extortion: An Empirical Study of Ransomware Negotiations | Tom Meurs (Dutch Police) Edward Cartwright (De Montfort University, Leicester) Anna Cartwright (Independent researcher) Harold Houba (VU University) Daniel W Woods (University of Edinburgh) |
| Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation | Zhibo Wang (Zhejiang University) Wenhui Zhang (Zhejiang University) Huiyu Xu (Zhejiang University) Zeqing He (Zhejiang University) Ziqi Zhu (Zhejiang University) Kui Ren (Zhejiang University) |
| MAKO: Refining Indirect-Call Targets with Type Relation Unfolding | Yibo Jin (The Hong Kong University of Science and Technology) Wei Chen (The Hong Kong University of Science and Technology) Bowen Zhang (The Hong Kong University of Science and Technology) Charles Zhang (The Hong Kong University of Science and Technology) |
| Private Signaling Secure Against Actively Corrupted Servers | Haotian Chu (Northwestern University) Xiao Wang (Northwestern University) Yanxue Jia (Illinois Institute of Technology) |
| Decoupled TFHE-type Functional Bootstrapping | Zhihao Li (Ant Digital Technologies, Ant Group) Xuan Shen (Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS; School of Cyber Security, UCAS) Xianhui Lu (Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS; School of Cyber Security, UCAS) Ruida Wang (Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS; School of Cyber Security, UCAS) Yuan Zhao (Ant Digital Technologies, Ant Group) Zhiwei Wang (Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS; School of Cyber Security, UCAS) |
| The SecureDrop Protocol: End-to-End Encrypted Whistleblowing for All | Giulio Berra (Freedom of the Press Foundation) Felix Linker (ETH Zurich) Luca Maier (ETH Zurich) Cory Francis Myers (Freedom of the Press Foundation) Kenneth G. Paterson (ETH Zurich) Rowen Shane (Freedom of the Press Foundation) Shannon Veitch (ETH Zurich) |
| Compiling Oblivious Schemes Against Coercion: The Anamorphic Construction | Xianglong Zhang (Huazhong University of Science and Technology) Wei Wang (Huazhong University of Science and Technology) Peng Xu (Huazhong University of Science and Technology) Laurence T. Yang (St. Francis Xavier University) Stjepan Picek (Radboud University and University of Zagreb) Kaitai Liang (University of Turku and TU Delft) |
| SlowPerception: Physical-World Latency Attack against Camera-based Perception in Autonomous Driving | Chen Ma (Xi'an Jiaotong University) Ningfei Wang (Independent Researcher) Zhengyu Zhao (Xi'an Jiaotong University) Qian Wang (Wuhan University) Qi Alfred Chen (University of California, Irvine) Chao Shen (Xi'an Jiaotong University) |
| DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration | Tian Dong (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Shaofeng Li (Southeast University) Guoxing Chen (Shanghai Jiao Tong University) Yuling Chen (Guizhou University) Zhen Liu (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) Hao Chen (The University of Hong Kong) |
| RT-MD: Host-Centric Real-Time Detection of Multi-Domain DNS Data Exfiltration | Pengfei Ren (University of Science and Technology of China) Lutong Chen (University of Science and Technology of China) Xuanbo Huang (Xi'an Jiaotong University) Jiankang Sun (University of Science and Technology of China) Huanjie Zhang (University of Science and Technology of China) Jian Li (University of Science and Technology of China) Kaiping Xue (University of Science and Technology of China) |
| RustGo: Fairly Directed Greybox Fuzzing for Enforcing Rust Memory Safety | Dongyeon Yu (Korea University) Jiun Min (Korea University) Yewan Na (UNIST) Mijung Kim (UNIST) Taegyu Kim (The Pennsylvania State University) Yuseok Jeon (Korea University) |
| DeepProve: Verifiable End-to-End Large Language Model Inference | Nicolas Gailly (Lagrange Labs) Ismael Hishon-Rezaizadeh (Lagrange Labs) Tianyi Liu (University of Illinois Urbana-Champaign and Lagrange Labs) Nicholas Mainardi (Lagrange Labs) Dimitrios Papadopoulos (Hong Kong University of Science & Technology) Charalampos Papamanthou (Yale University and Lagrange Labs) Christodoulos Pappas (Hong Kong University of Science & Technology and Lagrange Labs) Shravan Srinivasan (Lagrange Labs) Zack Youell (Lagrange Labs) Yupeng Zhang (University of Illinois Urbana-Champaign and Lagrange Labs) |
| Accio: Detecting Privilege Escalation Vulnerabilities in DBMSs via Minimum Privilege Set Calculation | Jingzhou Fu (Tsinghua University) Zongrui Peng (Tsinghua University) Jie Liang (Beihang University) Zhiyong Wu (Tsinghua University) Chi Zhang (Tsinghua University) Yu Jiang (Tsinghua University) |
| When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output | Shuoming Zhang (Institute of Computing Technology, Chinese Academy of Sciences) Jiacheng Zhao (Institute of Computing Technology, Chinese Academy of Sciences) Hanyuan Dong (Institute of Computing Technology, Chinese Academy of Sciences) Ruiyuan Xu (Institute of Computing Technology, Chinese Academy of Sciences) Zhicheng Li (Institute of Computing Technology, Chinese Academy of Sciences) Yangyu Zhang (Institute of Computing Technology, Chinese Academy of Sciences) Shuaijiang Li (Institute of Computing Technology) Yuan Wen (University of Aberdeen) Chunwei Xia (University of Leeds) Zheng Wang (University of Leeds) Xiaobing Feng (Institute of Computing Technology Chinese Academy of Sciences) Huimin Cui (Institute of Computing Technology, CAS) |
| Melior, Verifiable Mixed-Integer Programming via zkSNARKs | Wenjie Qu (National University of Singapore) Yanze Jiang (National University of Singapore) Yanpei Guo (National University of Singapore) Jiaheng Zhang (National University of Singapore) |
| VeriPRAC: Verifiable Formal Contracts for Secure Per Row Activation Counting | Ali Hajiabadi (ETH Zurich) Silvan Niederer (ETH Zurich) Kaveh Razavi (ETH Zurich) |
| Expose Your Disguise: Recovering Source Speaker Identity From Voice Conversion | Hanlei Zhang (Zhejiang University) Zhongming Ma (Zhejiang University) Mingyang Zhang (Ant Group) Tengfei Liu (Ant Group) Yushi Cheng (Zhejiang University) Yanjiao Chen (Zhejiang University) |
| Hitchhiking on Inherent Randomness: Diffusion-based Graph Generation under Differential Privacy | Renxuan Hou (The Hong Kong Polytechnic University) Qingqing Ye (The Hong Kong Polytechnic University) Lyu Xu (Nanyang Technological University) Xun Ran (The Hong Kong Polytechnic University (PolyU)) Haibo Hu (Hong Kong Polytechnic University) |
| Fundamental Limitations of Favorable Privacy–Utility Guarantees for DP-SGD | Murat Bilgehan Ertan (CWI Amsterdam) Marten van Dijk (CWI Amsterdam) |
| An Ounce of Prevention Is Worth a Pound of Cure: A Pre-filtering Framework to Against Asymmetric DoS in Group Authentication at the IoT Edge | Yizhao Zhou (Hangzhou Dianzi University) Qingxiang Xu (Hangzhou Dianzi University) Yingjie Xia (Hangzhou Dianzi University) |
| Braid: Sybil-Resistant Decentralized Identity with Trustless Key Recovery and Non-Transferable Anonymous Credentials | SONG Rui (Department of Computing, The Hong Kong Polytechnic University) ZHENG Tianyu (Department of Computing, The Hong Kong Polytechnic University) Shang Gao (the hong kong polytechnic university) Guyue Li (School of Cyber Science and Engineering, Southeast University) Xue Liu (McGill University) Bin Xiao (The Hong Kong Polytechnic Univ.) |
| MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks | Tailun Chen (Zhejiang University) Yu He (Zhejiang University) Yan Wang (Alibaba Group) Shuo Shao (Zhejiang University) Haolun Zheng (Zhejiang University) Zhihao Liu (Zhejiang University) Jinfeng Li (Alibaba Group) Zhizhen Qin (Amazon) Yuefeng Chen (Alibaba Group) Zhixuan Chu (Zhejiang University) Zhan Qin (Zhejiang University) Kui Ren (Zhejiang University) |
| The Rise and Fall of Google's Privacy Sandbox | Rachid Youssef Grib (Politecnico di Torino) Alberto Verna (Politecnico di Torino) Nikhil Jha (Politecnico di Torino) Martino Trevisan (Università degli Studi di Trieste) Marco Mellia (Politecnico di Torino) |
| Stop My Dancing! Understanding, Detecting and Attributing Motion-Aware Deepfake Videos | Fazhong Liu (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Tian Dong (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) |
| Mosaic: A Modular Framework for Private Fuzzy Heavy Hitters | Gayathri Garimella (Brown University) Peihan Miao (Brown University) Eileen Nolan (Brown University) Phuoc Van Long Pham (Brown University) Siddarth Sitaraman (Brown University) |
| PolyVoice: Exploiting Cluster-Level Vulnerabilities for One-to-Many Impersonation in Speaker Verification Systems | Yunjie Ge (Wuhan University) Jinlong Jiang (Wuhan University) Yuchen Liu (Wuhan University) Huayi Duan (The Hong Kong University of Science and Technology (Guangzhou)) Shenyi Zhang (Wuhan University) Lingchen Zhao (Wuhan University) Chao Shen (Xi'an Jiaotong University) Qian Wang (Wuhan University) |
| SpecStega: Provably Secure Linguistic Steganography Based on Speculative Sampling in Asymmetric Resource Scenarios | Jun Jiang (University of Science and Technology of China) Kejiang Chen (University of Science and Technology of China) Yuang Qi (University of Science and Technology of China) Jiawei Zhao (University of Science and Technology of China) Weiming Zhang (University of Science and Technology of China) Nenghai Yu (University of Science and Technology of China) |
| Relect: Single Secret Leader Election via FHE with Reduced Computation and Communication and Transparent Setup | Haofei Liang (Shanghai Jiao Tong University) Zeyu Liu (Yale University) Yunhao Wang (Yale University) Xiang Xie (Primus Labs) Yu Yu (Shanghai Jiao Tong University) Fan Zhang (Yale University, IC3) |
| Auditing Data Provenance in LLM Fine-tuning via Intrinsic Distributional Fingerprints | Zirui Huang (Nanjing University) Yunlong Mao (Nanjing University) Wei Tong (Nanjing University) Tingting Wu (China Mobile Research Institute) Xin Ge (China Mobile Research Institute) Sheng Zhong (Nanjing University) |
| BadTV: Unveiling Backdoor Threats in Third-Party Task Vectors | Chia-Yi Hsu (National Yang Ming Chiao Tung University) Yu-Lin Tsai (University of California, Berkeley) Zhe Yu (RIKEN AIP) Yan-Lun Chen (National Yang Ming Chiao Tung University) Chih-Hsun Lin (National Yang Ming Chiao Tung University) Chia-Mu Yu (National Yang Ming Chiao Tung University) Yang Zhang (CISPA Helmholtz Center for Information Security) Chun-Ying Huang (National Yang Ming Chiao Tung University) Jun Sakuma (Institute of Science Tokyo) |
| qedb: Expressive and Modular Verifiable Databases (without SNARKs) | Vincenzo Botta (Provably Technologies and Sapienza University of Rome) Simone Bottoni (Provably Technologies) Matteo Campanelli (Offchain Labs and University of Tartu) Emanuele Ragnoli (Provably Technologies and Warsaw University) Alberto Trombetta (Provably Technologies and Insubria University) |
| BACAgent: LLM-Powered Detection of Broken-Access-Control Vulnerabilities in Web Applications | Fengyu Liu (Fudan University) Yuan Zhang (Fudan University) Zheng Lou (Fudan University) Tian Chen (Fudan University) Youkun Shi (Fudan University) Jiarun Dai (Fudan University) Enhao Li (Fudan University) Guangyu Zhou (ByteDance Inc.) Zhongfu Su (ByteDance Inc.) Zequn Fang (ByteDance Inc.) |
| HEGIDE: A MIMD Oblivious Processor for Private Function Evaluation over CKKS | Jules Dumezy (Université Paris-Saclay, CEA-List) Nicolas Ye (Université Paris-Saclay, CEA-List) Pierre-Emmanuel Clet (Université Paris-Saclay, CEA-List) Olive Chakraborty (Université Paris-Saclay, CEA-List) Aymen Boudguiga (Université Paris-Saclay, CEA-List) |
| GALAS: Compact VOLE-in-the-Head Signatures from Subfield Compression | Guoxiao Liu (Tsinghua University) Yimeng Sun (Shandong University) Zhuoqing Peng (Tsinghua University) Chongxu Ren (Tsinghua University) Guowei Liu (Shandong University) Juntong Lin (Shandong University) Keting Jia (Tsinghua University) Meiqin Wang (Shandong University) |
| Finding and Exploiting Discrepancies in QR Code Payload Processing | Jianyu Lu (The Chinese University of Hong Kong) Yikang Chen (The Chinese University of Hong Kong) Wong Kin Ting (The Chinese University of Hong Kong) Xianbo Wang (The Chinese University of Hong Kong) Che Wei Tu (The Chinese University of Hong Kong) Mak Sui Ling Angela (The Chinese University of Hong Kong) Sze Yiu Chau (Simon Fraser University) |
| Asymmetric Grid Quorum Systems for Heterogeneous Processes | Michael Senn (University of Bern) Christian Cachin (University of Bern) |
| TANTRUM: Breaking the Heap Sandbox in JavaScript Engines via Protection Domain Fuzzing | Seunghyun Lee (Carnegie Mellon University) David Brumley (Carnegie Mellon University) |
| Exploiting Body-Coupled Leakage for Keystroke Inference on Smartphones | Yao Wang (Xidian University) An He (Xidian University) Xiaolong Li (Xidian University) Haibin Zhang (Xidian University) Tao Gu (Macquarie University) |
| Illusion of Depth: Revealing Hidden Stereo Vision Vulnerabilities in Depth Estimation | Hrushikesh Varma Bhupathiraju (University of Florida) Tetsu Ishizue (The University of Electro-Communications) Nicholas U. Costagliola (University of Florida) Ozora Sako (Keio University) Kentaro Yoshioka (Keio University) Takeshi Sugawara (The University of Electro-Communications) Sara Rampazzi (University of Florida) |
| Usability Compliance vs. Legal Compliance of Consent Withdrawal on the Web: An Expert Evaluation of 200 Websites | Sanju Ahuja (International Institute of Information Technology Bangalore) Gayatri Priyadarsini Kancherla (Indian Institute of Technology Gandhinagar) Cristiana Teixeira Santos (Utrecht University) Nataliia Bielova (Inria Centre at Université Côte d’Azur) Abhishek Bichhawat (Indian Institute of Technology Gandhinagar) |
| AuditVotes: Elevating Provable Defense for GNNs with Efficient Augmentation and Conditional Smoothing | Yuni Lai (The Hong Kong Polytechnic University) Yulin Zhu (Hong Kong Chu Hai College) Yixuan Sun (The Hong Kong Polytechnic University) Yulun Wu (National University of Defense Technology) Bin Xiao (The Hong Kong Polytechnic University) Gaolei Li (Shanghai Jiao Tong University) Jianhua Li (Shanghai Jiao Tong University) Qi Xie (Hubei University) Kai Zhou (The Hong Kong Polytechnic University) |
| New Designs of Multivariate-Polynomial Universal Hash Functions | Jean Paul Degabriele (Technology Innovation Institute) Jan Gilcher (Applied Cryptography Group, ETH Zurich, Zürich, Switzerland) Jérôme Govinden (Technology Innovation Institute) Kenneth G. Paterson (ETH Zurich) |
| What Does the Server See? Understanding Privacy Leakage from Large Language Models in Split Inference | Mingyuan Fan (East China Normal University) Yu Liu (East China Normal University) Fuyi Wang (RMIT University) Cen Chen (East China Normal University) |
| Designing an Automated Fact-Checking Pipeline for Recent Claims | Arshia Arya (University of California, San Diego) Gauthami Yenne (University of Illinois Urbana-Champaign, Georgia Institute of Technology) Deepak Kumar (University of California San Diego) |
| Kairos: Efficient High-Threshold Asynchronous Distributed Key Generation from Lightweight Cryptography | Xinxin Xing (Beihang University) Yizhong Liu (Beihang University) Zifan Li (Beihang University) Jianwei Liu (Beihang University) Yudi Yang (Beihang University) Yuan Lu (A*STAR Institute for Infocomm Research) Song Bian (Beihang University) Zhenyu Guan (Beihang University) Tianwei Zhang (Nanyang Technological University) |
| Models Trump Code: An Empirical Analysis of GDPR Compliance | Hoang Nguyen (ETH Zurich) Srdjan Krstic (ETH Zürich) David Basin (ETH Zurich) |
| Preprocessed Private Function Evaluation: Achieving Sublinear Online Complexity for Lookup Tables | Tanping Zhou (Engineering University of People’s Armed Police) Xiaoyi Wang (Institute of Software Chinese Academy of Sciences) Yi Qu (Institute of Software Chinese Academy of Sciences) Wenchao Liu (Engineering University of People’s Armed Police) Long Chen (Institute of Software Chinese Academy of Sciences) Zhenfeng Zhang (Institute of Software Chinese Academy of Sciences) |
| How to Back Up High-Value Secret Keys | Sanjam Garg (University of California, Berkeley and Exponential Science Foundation) Noemi Glaeser (None) Abhishek Jain (Johns Hopkins University) Mike Lodder (Lit Protocol) Hart Montgomery (Linux Foundation) |
| ReasoningBomb: A Stealthy Denial-of-Service Attack by Inducing Pathologically Long Reasoning in Large Reasoning Models | Xiaogeng Liu (Johns Hopkins University) Xinyan Wang (University of Wisconsin–Madison) Yechao Zhang (Nanyang Technological University) Sanjay Kariyappa (NVIDIA) Chong Xiang (NVIDIA) Muhao Chen (University of California, Davis) G. Edward Suh (Cornell University / NVIDIA) chaowei xiao (Johns Hopkins University) |
| Olingo: Threshold Lattice Signatures with DKG and Identifiable Abort | Kamil Doruk Gur (UMD) Patrick Hough (UniBwM) Jonathan Katz (Google) Caroline Sandsbråten (NTNU) Tjerand Silde (NTNU) |
| Poros: Secure and Highly Parallel Sharding Blockchain with Optimized Cross-Shard Transaction Processing | Zhuocheng Pan (Beihang University) Jianwei Liu (Beihang University) Andi Liu (Beihang University) Yuxuan Hu (Beihang University) Boyu Zhao (Beihang University) Zhenyu Guan (Beihang University) Gerui Wang (Beijing Academy of Blockchain and Edge Computing, Beijing, China) Mingchao Wan (Beijing Academy of Blockchain and Edge Computing) Yizhong Liu (Beihang University) |
| Anchor-DKG: Distributed Key Generation with Repeating Parties | Hanwen Feng (University of Sydney) Qiang Tang (The University of Sydney) Sri AravindaKrishnan Thyagarajan (University of Sydney) |
| PBFuzz: Agentic Directed Fuzzing for PoV Generation | Haochen Zeng (University of California, Riverside) Andrew Bao (University of Minnesota, Twin Cities) Jiajun Cheng (University of California, Riverside) Chengyu Song (University of California, Riverside) |
| N00B: Bounds Checking for the Masses | Adriaan Jacobs (DistriNet, KU Leuven) Carlo Ramponi (University of Trento) Jonas Roels (Distrinet, KU Leuven) Bruno Crispo (University of Trento) Silviu Vlasceanu (Huawei Research, Germany) Mahmoud Ammar (Huawei Research, Germany) Stijn Volckaert (DistriNet, KU Leuven) |
| Towards Effective and Stealthy Data Poisoning Attacks to Locally Differentially Private Triangle Counting Protocols | Xinyu Li (Xi'an Jiaotong University) Xuebin Ren (Xi'an Jiaotong University) Shusen Yang (Xi'an Jiaotong University) Cong Zhao (Xi'an Jiaotong University) |
| DP4SQL: Differentially Private SQL with Flexible Privacy Policies | Andrew Cascio (Duke University) KinChin Tong (Binghamton University) Daniel Kifer (Penn State University) Zeyu Ding (Binghamton University) Danfeng Zhang (Duke University) |
| Towards Scalable Fuzzy PSI via Efficient Fuzzy Matching | Meng Hao (Singapore Management University) Xinpeng Yang (Nanyang Technological University) Hanxiao Chen (University of Electronic Science and Technology of China) Tianwei Zhang (Nanyang Technological University) Haiyang Xue (Singapore Management University) Guomin Yang (Singapore Management University) Hongwei Li (University of Electronic Science and Technology of China) Robert H. Deng (School of Computing & Information Systems, Singapore Management University, Singapore) |
| Formal Security Analysis of the Olvid Messenger | Noemi Terzo (Max Planck Institute for Security and Privacy) Cas Cremers (CISPA Helmholtz Center for Information Security) Ruben Gonzalez (Neodyme AG) Peter Schwabe (MPI-SP & Radboud University) Yuval Yarom (Ruhr University Bochum) Zhiyuan Zhang (Max Planck Institute for Security and Privacy) |
| Head Unit at Risk: Cross-Domain Attacks via In-Vehicle Infotainment Systems | Yanbo Xu (Shanghai Jiao Tong University) Yan Meng (Shanghai Jiao Tong University) Guoxing Chen (Shanghai Jiao Tong University) Haojin Zhu (Shanghai Jiao Tong University) |
| ZEE200: Zero Knowledge for Everything and Everyone @ 200 KHz | Sunghyeon Jo (Georgia Institute of Technology) Vladimir Kolesnikov (Georgia Institute of Technology) Yibin Yang (NTT Research and University of Toronto) |
| Revisiting Shamir Secret Sharing for Threshold Fully Homomorphic Encryption | Jiseung Kim (Jeonbuk National University) Seunghu Kim (Chung-Ang University) Hyung Tae Lee (Chung-Ang University) |
| PHPBench: Automated Generation of Verifiable and Hierarchical Benchmarks for PHP Web Fuzzing | Youkun Shi (Fudan University and The Hong Kong Polytechnic University) Yuan Zhang (Fudan University) Lei Zhang (Fudan University) Jiarun Dai (Fudan University) Tianhao Bai (Fudan University) Fengyu Liu (Fudan University) Bocheng Xiang (Fudan University) Xiapu Luo (The Hong Kong Polytechnic University) Min Yang (Fudan University) |
| Effects of Explanations on Driver Situation Awareness Under Physical Adversarial Attacks in Automated Driving: A Driving Simulator Study | Rao Li (Pennsylvania State University) Jiazheng Gao (Pennsylvania State University) Yiqi Zhang (Pennsylvania State University) Aiping Xiong (Penn State University) |
| Turning Everyday Earphones into a Full-Duplex Speech Eavesdropping Platform via Zero-permission IMU | Ming Gao (Nanjing University of Posts and Telecommunications) Ayijiaken Amantai (Nanjing University of Posts and Telecommunications) Yichen Dai (Nanjing University of Posts and Telecommunications) Jia Lv (Nanjing University of Posts and Telecommunications) Kaiyan Cui (Nanjing University of Posts and Telecommunications) Jinsong Han (Zhejiang University) Minhao Cui (Seoul National University) Fu Xiao (Nanjing University of Posts and Telecommunications) |
| Casting the Net! Revisiting MasterFace Impersonation Attacks | Seunghun Paik (Hanyang University) Sunpill Kim (Hanyang University) Chanwoo Hwang (Hanyang University) Jae Hong Seo (Hanyang University) |
| Automated Side-Channel Analysis of Cryptographic Protocol Implementations | Faezeh Nasrabadi (CISPA Helmholtz Center for Information Security & Saarland University) Robert Künnemann (CISPA Helmholtz Center for Information Security) Hamed Nemati (Department of Computer Science, KTH Royal Institute of Technology) |
| Understanding and Preserving Safety in Fine-Tuned LLMs | Jiawen Zhang (Zhejiang University) Yangfan Hu (University of Wisconsin–Madison) Kejia Chen (Zhejiang University) Lipeng He (University of Waterloo) Jiachen Ma (Shanghai Artificial Intelligence Laboratory) Jian Lou (Sun Yat-sen University) Dan Li (Sun Yat-sen University) Jian Liu (Zhejiang University) Xiaohu Yang (Zhejiang University) Ruoxi Jia (Virginia Tech) |
| Reproducing Web Application Vulnerabilities with Patch-Guided Routing Inference and Sink Exploration | Youkun Shi (Fudan University and The Hong Kong Polytechnic University) Yuan Zhang (Fudan University) Feng Xue (Fudan University) Jiarun Dai (Fudan University) Lei Zhang (Fudan University) Fengyu Liu (Fudan University) Bocheng Xiang (Fudan University) Xiapu Luo (The Hong Kong Polytechnic University) |
| Don't Trust the AI Ecosystem: Analyzing Privacy Leakage in Compromised Open-Source Components | Jin-Seong Kim (Division of Software, Yonsei University) Han Ju LEE (Division of Software, Yonsei University) Seok-Won Hong (Division of Software, Yonsei University) Takeshi Takahashi (National Institute of Information and Communications Technology) Chansu Han (National Institute of Information and Communications Technology) Tomohiro Morikawa (University of Hyogo) Seok Hwan Choi (Yonsei University) |
| Mitigating Code Injection Attacks on Modern GPUs | Carlo Ramponi (University of Trento) Adriaan Jacobs (DistriNet, KU Leuven) Luigi Dell Eva (University of Trento) Stijn Volckaert (DistriNet, KU Leuven) Silviu Vlasceanu (Huawei Research, Germany) Mahmoud Ammar (Huawei Research) Bruno Crispo (University of Trento) |
| "We just went with what seemed the best supported": Lessons on Cryptographic Practices in Securing Microcontrollers from Embedded CTFs | Zheyuan Ma (University at Buffalo) Xi Tan (University of Colorado Colorado Springs) Gaoxiang Liu (University at Buffalo) Alex Eastman (University at Buffalo) Md Armanuzzaman (University of Texas at El Paso) Ziming Zhao (Northeastern University) |
| From Fix to Flaw: Understanding and Revealing Incomplete Patches for Link Following Vulnerabilities | Bocheng Xiang (Fudan University) Yuan Zhang (Fudan University) Hao Huang (Fudan university) Youkun Shi (Fudan University) |
| It’s About Time: Detecting Timing Side-Channel Vulnerabilities in High-Level Synthesis Designs | Denis Zuppiger (ETH Zurich) Katharina Ceesay-Seitz (ETH Zurich) Jiahui Xu (ETH Zurich) Lana Josipovic (ETH Zurich) Kaveh Razavi (ETH Zurich) |
| HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learning | Han Chen (University of Technology, Sydney) Hanchen Wang (University of Technology Sydney) Hongmei Chen (Yunnan University) Lu Qin (University of Technology Sydney) Wenjie Zhang (UNSW) Ying Zhang (University of Technology Sydney) |
| STMark: Watermarking Scalar and Textual Data Robustly Using Frequency Statistics | Jiongyang Ji (Xidian University) Yanguo Peng (Xidian University) Zhen Lv (Xidian University) Gengquan Guo (Xidian University) Hui Li (Xidian University) Jiangtao Cui (Xidian University) |
| MPCArbiter: Detect Numeric Error Vulnerabilities in MPC Implementations via Distribution-Aware Differential Oracle | Guopeng Lin (Fudan University) Zhengting Jin (Fudan University) Shuyu Chen (Fudan University) Jingwei Pu (Fudan University) Zheng Qu (Fudan University) Jiaheng Zhang (National University of Singapore) Weili Han (Fudan University) |
| PC^2: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models | Wonwoo Choi (ADD) Minjae Seo (ETRI) Minkyoo Song (KAIST) Hwanjo Heo (ETRI) Seungwon Shin (KAIST) Myoungsung You (University of Seoul) |
| eMicro: Real-Time Multi-Hop Access Control for Microservices with eBPF | Rizky Ramadhana Putra (Virginia Tech) Osama Bajaber (King Abdulaziz University) Saimon Amanuel Tsegai (Virginia Tech) Teryl Taylor (IBM Research) Frederico Araujo (IBM Research) Yuede Ji (The University of Texas at Arlington) Peng Gao (Virginia Tech) |
| Reflection, Education, Consistency: Towards Best Ethics Practices At Security And Privacy Conferences | Florian Hantke (CISPA Helmholtz Center for Information Security) Rafael Mrowczynski (CISPA Helmholtz Center for Information Security) Til Dralle (CISPA Helmholtz Center for Information Security) Ben Stock (CISPA Helmholtz Center for Information Security) |
| Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning | Zhenqian Zhu (Harbin Institute of Technology, Shenzhen) Yamin Hu (Harbin Institute of Technology, Shenzhen) Yujiang Liu (Harbin Institute of Technology, Shenzhen) Luping Wei (Harbin Institute of Technology, Shenzhen) Wenbo Hou (Harbin Institute of Technology, Shenzhen) Bin Li (Shenzhen University) Haodong Li (Shenzhen University) Wenjian Luo (Harbin Institute of Technology, Shenzhen) |
| UnifOMR: Oblivious Message Retrieval with Near-optimal Concrete Efficiency | Ben Fisch (Yale University) Zeyu Liu (Yale University) Eran Tromer (Boston University) Yunhao Wang (Yale University) |
| Blue Bubbles, Red Flags: Investigating Privacy Leakage in Apple iMessage | Viktor Garske (ISMK Institute for Secure Mobile Communications, University of Applied Sciences Stralsund) Swantje Lange (Hasso Plattner Institute, University of Potsdam) Gabriel Karl Gegenhuber (Interdisciplinary Transformation University Austria) David Schmidt (University of Vienna) Andreas Noack (ISMK Institute for Secure Mobile Communications, University of Applied Sciences Stralsund) Jiska Classen (Hasso Plattner Institute, University of Potsdam) |
| Thinking More, Harnessing Better: Automatic Harness Generation with Dataflow Aggregation and Workflow Decomposition | Xing Zhang (QI-ANXIN Technology Research Institute) Zikang Huang (Wuhan University; QI-ANXIN Technology Research Institute) Gang Yang (Information Support Force Engineering University) CongChong Wang (QI-ANXIN Technology Research Institute) Lu Liu (Shandong University; QI-ANXIN Technology Research Institute) Bin Yin (QI-ANXIN Technology Research Institute) Mingyi Wang (QI-ANXIN Technology Research Institute) Ziquan Zhao (QI-ANXIN Technology Research Institute) Min Li (QI-ANXIN Technology Research Institute) Zhenyu Chen (QI-ANXIN Technology Research Institute) Bo Wu (Information Support Force Engineering University) Lingyun Ying (QI-ANXIN Technology Research Institute) |
| AuditPay: Anonymous Payments with Controlled Oversight | Elkana Tovey (Hebrew University of Jerusalem) Aviv Zohar (Hebrew University of Jerusalem) Yossi Gilad (Hebrew University of Jerusalem) |
| Rogue: Updatable Matrix Lookup Arguments and Applications to Verifiable Databases | Christodoulos Pappas (The Hong Kong University of Science and Technology) Zhuo Cai (Hong Kong University of Science and Technology) Dimitrios Papadopoulos (Hong Kong University of Science & Technology) |
| Timing Games in Responsive Consensus Protocols | Kaya Alpturer (Princeton University) Kushal Babel (Category Labs) Aditya Saraf (Cornell University; Cornell Tech) |
| Proving Circuit Functional Equivalence in Zero Knowledge | Sirui Shen (Centrum Wiskunde & Informatica) Zunchen Huang (Centrum Wiskunde & Informatica) Chenglu Jin (Centrum Wiskunde & Informatica) |
| 2PC Memory-Manipulating Programs with Constant Overhead | David Heath (University of Illinois Urbana-Champaign) |
| Good Cache, BAD Cache: Exploiting DNSSEC Validation Failures for DNS Cache Poisoning Attacks | Shiming Liu (Tsinghua University, BNRist) Yunyi Zhang (Tsinghua University) Chaoyi Lu (Zhongguancun Laboratory) Baojun Liu (Tsinghua University) Shuhan Zhang (Tsinghua University) Donghong Sun (Tsinghua University) Yong Ma (Alibaba Group) Linjian Song (Alibaba Group) |
| MnemonicHack: Recovering the Master Seed from Bitcoin Hardware Wallets via Side-Channel Attacks | Jiwoo Baek (Korea University) Daehyeon Bae (Korea University) Gyusang Kim (Korea University) Gilsang Ahn (Korea University) Insup Lee (Korea University) Sujin Park (Korea University) Seokhie Hong (Korea University) HeeSeok Kim (Korea University) |
| CameraBlinder: Blinding Wireless Security Cameras Using a Low-Power Laser | Yan He (University of Oklahoma) Guanchong Huang (Co-first author) (University of Oklahoma) Yao Liu (University of South Florida) Song Fang (University of Oklahoma) |
| A Sound Translation from Tamarin to ProVerif: Enabling Comparative Analysis | Kevin Morio (CISPA Helmholtz Center for Information Security) Yavor Ivanov (CISPA Helmholtz Center for Information Security) Robert Künnemann (CISPA Helmholtz Center for Information Security) |
| MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction | Wenqi Zhang (Fudan University) Yulin Shen (Fudan University) Changyue Jiang (Fudan University) Jiarun Dai (Fudan University) Geng Hong (Fudan University, China) Xudong Pan (Fudan University) |
| Accelerating Multiparty Noise Generation Using Lookups | Fabian Schmid (Graz University of Technology) Fredrik Meisingseth (Graz University of Technology) Christian Rechberger (Graz University of Technology) |
| ACOFuzz: Memory-Error-Sensitive Fuzzing Driven by Address-Computation-Operand-Aware Feedback Mechanism | Yiru Zhao (Wuhan University) Aorui Zhang (Wuhan University) Xiaoke Wang (Wuhan University) Aoshuang Ye (Wuhan Textile University) Benxiao Tang (Wuhan Textile University) Jinxin Ma (School of Cyberspace Security, Beijing University of Posts and Telecommunications) Lei Zhao (Wuhan University) Heqing Huang (City University of Hong Kong) |
| Secrets Everywhere: Auditing Memorization in Mobility Prediction Models | Anne Josiane Kouam (Inria & TU Berlin) Hristo Boyadzhiev (BIFOLD & TU Berlin) Konrad Rieck (BIFOLD & TU Berlin) |
| Efficient Private Filtering and Aggregation for Weighted Set Intersection via Oblivious Encrypted Weight Transfer | Xiaodong Wang (Tsinghua University) Shengzhe Meng (Tsinghua University) Zijie Lu (Xi'an Jiaotong-Liverpool University) Bei Liang (Beijing Institute of Mathematical Sciences and Applications) |
| The Illusion of Rust Safety: Detecting Modular Unsafe Functions with LLMs | Xiang Cheng (Georgia Institute of Technology) Fan Sang (Georgia Institute of Technology) Yibin Yang (NTT Research and University of Toronto) Hang Zhang (Indiana University) Sangdon Park (Pohang University of Science and Technology) Xiaokuan Zhang (George Mason University) Taesoo Kim (Georgia Institute of Technology and Microsoft) |
| KingsGuard: Enclave Data Protection Under Real-World TEE Vulnerabilities | Saltanat Allaqband (Indian Institue of Technology Madras) Deepanjali S (Indian Institute of Technology Madras) Rohit Srinivas R G (Indian Institute of Technology Madras) Devashish Gosain (IIT Bombay) Chester Rebeiro (IIT Madras) |
| LUNA+: More Succinct Post-Quantum ZK-SNARKs from Computational Privacy | Yuki Kume (Monash University) Ron Steinfeld (Monash University) Amin Sakzad (Monash University) Mert Yassi (Monash University) |
| Thresholdizing Standardized FALCON Signatures | Radhika Garg (Northwestern University) Daniel Escudero (TACEO) Antigoni Polychroniadou (J.P. Morgan AI Research & AlgoCRYPT CoE) Akira Takahashi (J.P. Morgan AI Research & AlgoCRYPT CoE) Xiao Wang (Northwestern University) |
| Piquant$\varepsilon$: Private Quantile Estimation in the Two-Server Model | Hannah Keller (Aarhus University) Jacob Imola (BARC, University of Copenhagen) Fabrizio Boninsegna (University of Padova) Rasmus Pagh (BARC, University of Copenhagen) Amrita Roy Chowdhury (University of Michigan) |
| Non-interactive Anonymous Tokens with Private Metadata Bit | Foteini Baldimtsi (George Mason University, Mysten Labs) Lucjan Hanzlik (CISPA Helmholtz Center for Information Security) Quan Nguyen (George Mason University) Aayush Yadav (George Mason University) |
| Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem | Jyotirmay Chauhan (University of Illinois Chicago) Kostas Solomos (Brandeis University) Mir Masood Ali (University of Illinois Chicago) Jason Polakis (University of Illinois Chicago) |
| Lether: Practical Post-Quantum Account-Based Private Blockchain Payments | Hongxiao Wang (The University of Hong Kong) Muhammed F. Esgin (Monash University) Ron Steinfeld (Monash University) Siu-Ming Yiu (The University of Hong Kong, Hong Kong) |
| LightShark: Actively Secure Machine-Learning Inference Based on Lightweight Authenticated Distributed Comparison Function | Chenkai Zeng (Wuhan University) Qi Feng (Wuhan University) Debiao He (Wuhan University) Min Luo (Wuhan University) |
| LockSnoop: Eavesdropping Plain-text Keypad Smart Lock Passcode via Electromagnetic Side Channel | Bowei Zhang (Clemson University) Zhuoyang Wang (Clemson University) Chenxu Jiang (Clemson University) Gen Li (Clemson University) Ming Li (University of Texas at Arlington) Linke Guo (Clemson University) |
| Improved Garbled RAM via Garbled Merge | Can Liu (Tsinghua University) Lenny Liu (University of Illinois Urbana-Champaign) Ning Luo (UIUC) David Heath (University of Illinois Urbana-Champaign) |
| Doubly Aggregatable Signatures | Georg Fuchsbauer (TU Wien) Pranav Garimidi (a16z Crypto Research) Joachim Neu (a16z Crypto Research) Guru Vamsi Policharla (UC Berkeley) Max Resnick (Anza) Ertem Nusret Tas (a16z Crypto Research) |
| Universally Composable Adaptor Signatures | Paul Gerhart (TU Wien) Daniel Rausch (University of Stuttgart) Dominique Schroeder (TU Wien) |
| Compiler Provenance as a Service: Decoupled Identification for Composite Provenance and Operational Resilience | Han Gao (Purdue University) Antonio Bianchi (Purdue University) Z. Berkay Celik (Purdue University) Dave (Jing) Tian (Purdue University) |
| Insecurity Through Obscurity: Veiled Vulnerabilities in Closed-Source Contracts | Sen Yang (Yale University, IC3) Kaihua Qin (University of Warwick) Aviv Yaish (Yale University, IC3) Fan Zhang (Yale University, IC3) |
| PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration | Meng Wang (CISPA Helmholtz Center for Information Security) Yue Ma (University of Electronic Science and Technology) Majid Garoosi (CISPA Helmholtz Center for Information Security) Wenting Fan (Shanghai Jiao Tong University) Liwei Guo (University of Electronic Science and Technology) Jiangqiang Wang (Max Planck Institute for Security and Privacy) Ali Abbasi (CISPA Helmholtz Center for Information Security) |
| Hydra: A Security Analysis Framework for TCP via Auto-Scaling FSMs | Ao Wang (Southeast University) Xuewei Feng (Tsinghua university) Yuxiang Yang (Tsinghua University) Yinchao Zhang (Tsinghua University) Qi Li (Tsinghua University) Guang Cheng (Southeast University) Weiqiang Wang (Ant Group) Ke Xu (Tsinghua University) |
| Beyond the Buzzword: How do Professionals Understand and Translate Zero Trust? | Ananta Soneji (Arizona State University) Souradip Nath (Arizona State University) Moritz Schloegel (CISPA Helmholtz Center for Information Security) Yan Shoshitaishvili (Arizona State University) Gail-Joon Ahn (Arizona State University) Adam Doupe (Arizona State University) Carlos Rubio-Medrano (Texas A&M University - Corpus Christi) |
| Efficient Single-Round Obfuscation of Search and Result Patterns in Searchable Encryption | Tung Le (Virginia Tech) Thang Hoang (Virginia Tech) |
| Beyond Anonymity Sets: A Security Model for Distributed Shuffling in Adversarial Environments | Adrian Cinal (NASK National Research Institute) Oliwer Sobolewski (NASK National Research Institute) Gabriel Wechta (NASK National Research Institute) Filip Zagórski (University of Wroclaw) |
| Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy | Puning Zhao (Sun Yat-sen University) Zhikun Zhang (Zhejiang University) Shaowei Wang (Guangzhou University) Sheng Yue (Sun Yat-sen University) Bangzhou Xin (National Interdisciplinary Research Center of Engineering Physics) Tianhang Zheng (Zhejiang University) Pengfei Zhang (Anhui University of Science and Technology) Xiaochun Cao (Shenzhen Campus of Sun Yat-sen University) |
| The Billion Dollar Merkle Tree | Thomas Coratger (Ethereum Foundation) Dmitry Khovratovich (Ethereum Foundation) Bart Mennink (Maastricht University) Benedikt Wagner (Ethereum Foundation) |
| Robust Logical Foundations for Mechanizing Post-Quantum Cryptography in Squirrel | David Baelde (Univ Rennes, IRISA, CNRS) Antoine Dallon (AMIAD) Stéphanie Delaune (univ Rennes, IRISA, CNRS) Charlie Jacomme (Inria Nancy Grand-Est, Université de Lorraine, LORIA, France) Adrien Koutsos (Inria) |
| 3PaaS: Privacy-Preserving Post-Compromise Security as a Service | Cas Cremers (CISPA Helmholtz Center for Information Security) Abhinav Nakarmi (University of Michigan) Aleksi Peltonen (University of Aberdeen) Eyal Ronen (Tel Aviv University) |
| Symbolic Protocol Verification modulo XOR in ProVerif | Vincent Cheval (University of Oxford) Stéphanie Delaune (Univ Rennes, CNRS, IRISA) |
| Snatcher: Apple Find My Network Exposes Your Lost Devices To Strangers | Zhenyu Ren (The Hong Kong University of Science and Technology) Yanbo Zhang (The Hong Kong University of Science and Technology) Boya Liu (The Hong Kong University of Science and Technology) Mo Li (The Hong Kong University of Science and Technology) |
| An Iconic Heavy Hitters Algorithm Made Private | William Holland (CSIRO's Data61) |
| Detecting and Measuring Client- and Server-Side Google Tag Manager and its Tags in 80K Websites | Gilles Mertens (Inria Centre at University Grenoble-Alpes) Nataliia Bielova (Inria Centre at University Côte d’Azur) Vincent Roca (Inria Centre at University Grenoble-Alpes) Ahmed Bouhoula (ETH Zurich) Marouane Akassab (Inria Centre at University Grenoble-Alpes) |
| VUPER: Verified ASN.1 UPER Parser | Xiaotian Zhou (The Pennsylvania State University) Kai Tu (Pennsylvania State University) Ali Ranjbar (The Pennsylvania State University) Yilu Dong (The Pennsylvania State University) Gang Tan (Penn State) Syed Rafiul Hussain (Pennsylvania State University) |
| An Extended Hierarchy of Security Notions for Threshold Signature Schemes and Automated Analysis of Protocols That Use Them | Cas Cremers (CISPA Helmholtz Center for Information Security) Aleksi Peltonen (University of Aberdeen) Mang Zhao (Wuhan University) |
| Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary | Xiaoling Zhang (Zhongguancun Laboratory) Jian Sun (Zhongguancun Laboratory) Dawei Wang (Zhongguancun Laboratory) Chongyu Wang (Zhongguancun Laboratory) Li Chen (Zhongguancun Laboratory) zhaoteng yan (Zhongguancun Laboratory) peipei liu (Zhongguancun Laboratory) Lixiao Zhang (Harbin Institute of Technology) Dan Li (Tsinghua University) |
| Function Privatization in the Local Model | Yuting Liang (University of Toronto) Tian SHU (Hong Kong University of Science and Technology) Ke YI (Hong Kong University of Science and Technology) |
| Forced Execution for Malware Protected by Commercial Virtualization Obfuscators | Yifei Zhan (Renmin University of China) Yukun Cui (Renmin University of China) Shuofeng Hao (Renmin University of China) Dongnan He (Renmin University of China) Wei You (Renmin University of China) Bin Liang (Renmin University of China) Jianjun Huang (Renmin University of China) |
| Assessing Privacy Compliance Awareness and Practices Among Mobile Third-party Library Developers | Fares F. Alharbi (Indiana University-Bloomington) Ece Gumusel (Rutgers University/University of Illinois Urbana-Champaign) Luyi Xing (University of Illinois Urbana-Champaign) Xiaojing Liao (University of Illinois Urbana-Champaign) |
| Low-Complexity Private Decision Tree Evaluation over Homomorphic Encryption | Dongjin Park (Chung-Ang University) Gyeongwon Cha (Chung-Ang University) Joon-Woo Lee (Chung-Ang University) |
| TACITA: Threshold Aggregation without Client Interaction | Varun Madathil (Yale University) Charalampos Papamanthou (Yale University) Arthur Lazzaretti (Yale University) Zeyu Liu (Yale University) |
| One Leak Away: How Pretrained Model Exposure Amplifies Jailbreak Risks in Finetuned LLMs | Yixin Tan (Institue of Science Tokyo) Yu Zhe (RIKEN AIP) Rui Wen (Institute of Science Tokyo) Jun Sakuma (Institute of Science Tokyo) |
| Your Space is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs | Yacong Gu (Tsinghua University; Tsinghua University-QI-ANXIN Group JCN) Lingyun Ying (QI-ANXIN Technology Research Institute) Zidong Zhang (QI-ANXIN Technology Research Institute) Yingyuan Pu (Qi An Xin Technology Research Institute) Xiaoxue Huang (QI-ANXIN Technology Research Institute) Jiawei Zhou (QI-ANXIN Technology Research Institute) Wenjie Zhu (QI-ANXIN Technology Research Institute) Donghong Sun (Tsinghua University) Haixin Duan (Tsinghua University) |
| PathMark: Protecting Intellectual Property of Mixture-of-expert LLMs via Path Watermarks | Yudong Gao (the Hong Kong University of Science and Techlonogy) Qingyue Wang (the Hong Kong University of Science and Techlonogy) Yuanyuan Yuan (Tsinghua University) Ruixuan HUANG (The Hong Kong University of Science and Technology) Linghan Chen (Adelaide University) Zimo Ji (the Hong Kong University of Science and Techlonogy) Shuai Wang (Hong Kong University of Science and Technology) |
| dfence: Fine-Grained Speculation Barriers for Efficient and Effective Hardware-Software Protection in the Spectre Era | Davide Davoli (MPI-SP) Marton Bognar (DistriNet, KU Leuven) Lesly-Ann Daniel (EURECOM) Benjamin Gregoire (Inria Sophia-Antipolis) Frank Piessens (DistriNet, KU Leuven) Tamara Rezk (Inria) |
| Prefix Consensus For Censorship Resilient BFT | Zhuolun Xiang (Aptos Labs) Andrei Tonkikh (Aptos Labs) Alexander Spiegelman (Aptos Labs) |
| EdgeRefine: Privacy-Utility Balance for Graphs via Jaccard Sampling under Edge Differential Privacy | Wenxiu Ding (Xidian University, Xian, Shaanxi) Muzhi Liu (Xidian University, Xian, Shaanxi) Zheng Yan (Xidian University, Xian, Shaanxi) Mingjun Wang (Xidian University, Xian, Shaanxi) Yifan Zhao (Xidian University, Xian, Shaanxi) Qiao Liu (Xidian University, Xian, Shaanxi) |
| Overloading Ad Blockers: Exploiting Filtering Logic for Selective Denial of Service | Hyunjoon Lee (KAIST) Suyoung Lee (KAIST) Heiko Kiesel (Technical University of Darmstadt) Sooel Son (KAIST) |
| On the Pitfalls of Modeling Individual Knowledge | Wojciech Ciszewski (University of Warsaw) Stefan Dziembowski (University of Warsaw and IDEAS Institute) Tomasz Lizurej (NASK Institute) Marcin Mielniczuk (University of Warsaw) |