Main Conference Schedule

Monday

–

Technical Session #A
Session A1 ML
ML defenses

Room 1 · Nov. 16 · –

  • (A#777) Expose Your Disguise: Recovering Source Speaker Identity From Voice Conversion

    Hanlei Zhang (Zhejiang University), Zhongming Ma (Zhejiang University), Mingyang Zhang (Ant Group), Tengfei Liu (Ant Group), Yushi Cheng (Zhejiang University), Yanjiao Chen (Zhejiang University)

  • (A#3464) PathMark: Protecting Intellectual Property of Mixture-of-expert LLMs via Path Watermarks

    Yudong Gao (The Hong Kong University of Science and Technology), Qingyue Wang (The Hong Kong University of Science and Technology), Yuanyuan Yuan (Tsinghua University), Ruixuan Huang (The Hong Kong University of Science and Technology), Linghan Chen (Adelaide University), Zimo Ji (The Hong Kong University of Science and Technology), Shuai Wang (Hong Kong University of Science and Technology)

  • (B#2614) Tsuikami: Robust Cross-Channel Source Speaker Tracing Under Voice Conversion

    Zhongming Ma (Zhejiang University), Hanlei Zhang (Zhejiang University), Shibo Wang (Zhejiang University), Yanjiao Chen (Zhejiang University), Yushi Cheng (Zhejiang University), Wenyuan Xu (Zhejiang University)

  • (B#2765) SEAL: Reinforcing Global Safety in Mixture-of-Experts through Shared Expert ALignment

    Qingyu Meng (Vrije Universiteit Amsterdam), Yiwei Zha (Vrije Universiteit Amsterdam), Jiahuan Pei (Vrije Universiteit Amsterdam), Koen Hindriks (Vrije Universiteit Amsterdam), Herbert Bos (Vrije Universiteit Amsterdam), Min Chen (Vrije Universiteit Amsterdam)

Session A2 AC
Secure multiparty computation

Room 2 · Nov. 16 · –

  • (A#54) Breaking the Curse of Dimensionality: Fuzzy PSI without O((logδ)^d) Overhead

    Cong Zhang (Tsinghua University), Yang Cao (Shandong University), Yujie Bai (Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security), Shuaishuai Li (Zhongguancun Laboratory), Juntong Lin (Shandong University), Yu Chen (Shandong University), Anyu Wang (Tsinghua University), Xiaoyun Wang (Tsinghua University)

  • (A#1326) Towards Scalable Fuzzy PSI via Efficient Fuzzy Matching

    Meng Hao (Singapore Management University), Xinpeng Yang (Nanyang Technological University), Hanxiao Chen (University of Electronic Science and Technology of China), Tianwei Zhang (Nanyang Technological University), Haiyang Xue (Singapore Management University), Guomin Yang (Singapore Management University), Hongwei Li (University of Electronic Science and Technology of China), Robert H. Deng (Singapore Management University)

  • (B#567) Efficient Fuzzy PSI under One-Sided Assumptions

    Xinpeng Yang (Nanyang Technological University), Meng Hao (Singapore Management University), Yanxue Jia (Illinois Institute of Technology), Chenkai Weng (Arizona State University), Yonggang Wen (Nanyang Technological University), Tianwei Zhang (Nanyang Technological University)

  • (B#5468) Maliciously Secure Shuffled Distributed OPRF with Applications to Private Set Operations

    Aron van Baarsen (Aarhus University), Aarushi Goel (Rutgers University), Lisa Kohl (CWI), Peihan Miao (Brown University), Phuoc Van Long Pham (Brown University), Peter Scholl (Aarhus University), Satvinder Singh (Purdue University)

Session A3 SW
Trusted execution environments

Room 3 · Nov. 16 · –

  • (A#1939) KingsGuard: Enclave Data Protection Under Real-World TEE Vulnerabilities

    Saltanat Firdous Allaqband (Indian Institute of Technology Madras), Deepanjali S (Indian Institute of Technology Madras), Rohit Srinivas R G (Indian Institute of Technology Madras), Devashish Gosain (Indian Institute of Technology Bombay), Chester Rebeiro (Indian Institute of Technology Madras)

  • (B#56) PaDEx: Addressing Mobile GPU MMIO Risks via Prohibition and Delayed Execution

    Feifan Qian (Institute of Information Engineering, Chinese Academy of Sciences), Qihang Zhou (Institute of Information Engineering, Chinese Academy of Sciences), Nan Jiang (Institute of Information Engineering, Chinese Academy of Sciences), Yuanbo Zhao (Institute of Information Engineering, Chinese Academy of Sciences), Xiaolong Yan (Institute of Information Engineering, Chinese Academy of Sciences), Wenzhuo Cao (Institute of Information Engineering, Chinese Academy of Sciences), Shaowen Xu (Institute of Information Engineering, Chinese Academy of Sciences), Yong Liu (Qi An Xin Technology Group Inc.), Zhenyu Song (Institute of Information Engineering, Chinese Academy of Sciences), Xiaoqi Jia (Institute of Information Engineering, Chinese Academy of Sciences), Shengzhi Zhang (Boston University)

  • (B#2110) Hoss: Fast Oblivious Semantic Search with Heterogeneous GPU-CPU-TEE Architecture

    Jianzhang Du (Indiana University), Weijie Huang (Indiana University), Chenghong Wang (Indiana University), Nicolas Tsagareli (Binghamton University), Yukui Luo (Binghamton University), XiaoFeng Wang (Nanyang Technological University), Zhongshu Gu (IBM Research)

  • (B#6186) Attest the Whole, Verify Incrementally: Whole-Program Integrity via Lazy Verification in Trusted Execution Environments

    Zhen Huang (Shanghai Jiao Tong University), Junhong Cheng (Shanghai Jiao Tong University), Yijia Ma (Shanghai Jiao Tong University), Guoxing Chen (Shanghai Jiao Tong University), Zhezhi He (Shanghai Jiao Tong University), Yan Meng (Shanghai Jiao Tong University), Mengmeng Zhou (Beijing Academy of Blockchain and Edge Computing, BAEC), Haojin Zhu (Shanghai Jiao Tong University)

Session A4 SW
Program analysis

Room 4 · Nov. 16 · –

  • (A#666) MAKO: Refining Indirect-Call Targets with Type Relation Unfolding

    Yibo Jin (Hong Kong University of Science and Technology), Wei Chen (Hong Kong University of Science and Technology), Bowen Zhang (Hong Kong University of Science and Technology), Charles Zhang (Hong Kong University of Science and Technology)

  • (A#1938) The Illusion of Rust Safety: Detecting Modular Unsafe Functions with LLMs

    Xiang Cheng (Georgia Institute of Technology), Fan Sang (Georgia Institute of Technology), Yibin Yang (University of Toronto and NTT Research), Hang Zhang (Indiana University), Sangdon Park (Pohang University of Science and Technology), Xiaokuan Zhang (George Mason University), Taesoo Kim (Georgia Institute of Technology and Microsoft)

  • (B#5330) Divide and Conquer: Exposing SAST Rule Flaws via Realistic Variant Synthesis from Millions of Repositories

    Zongze Jiang (Huazhong University of Science and Technology), Ming Wen (Huazhong University of Science and Technology), Zifan Xie (Chongqing University), Yuan Zhang (Fudan University), Deqing Zou (Huazhong University of Science and Technology), Hai Jin (Huazhong University of Science and Technology)

  • (B#5645) ContractGuard: Auditing Semantic Contracts of MCP Tools for Security Violations

    Hengkai Ye (The Pennsylvania State University), Zhechang Zhang (The Pennsylvania State University), Ruibo Lu (The Pennsylvania State University), Jinyuan Jia (The Pennsylvania State University), Hong Hu (The Pennsylvania State University)

Session A5 USE
Security and privacy measurement

Room 5 · Nov. 16 · –

  • (B#626) Omniscience for the Masses: New Threats in the Metaverse's Democratized World Creation

    Andrea Mengascini (CISPA Helmholtz Center for Information Security), Ryan Aurelio (CISPA Helmholtz Center for Information Security), Jason Polakis (University of Illinois Chicago), Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security)

  • (B#1285) An Empirical Study of Observability Limits in Advanced Software Supply Chain Attacks

    Zhuoran Tan (University of Glasgow), Wenbo Guo (Nanyang Technological University), Jiewen Luo (Royal Holloway, University of London), Taylor Brierley (JUMPSEC Ltd), Jeremy Singer (University of Glasgow), Christos Anagnostopoulos (University of Glasgow)

  • (B#2826) It Takes a Forum: Resources & Stakeholders Sustaining the Online Synthetic Non-Consensual Intimate Image Creation Ecosystem

    Bernardo B. P. Medeiros (University of Florida), Malvika Jadhav (University of Florida), Allison Lu (University of Florida), Tadayoshi Kohno (Georgetown University), Vincent Bindschaedler (University of Florida), Kevin R. B. Butler (University of Florida)

  • (B#3501) ''Shut Up and Let Me Enjoy My Otome': Understanding and Measuring the Toxicity in Otome Game Communities

    Yage Zhang (CISPA Helmholtz Center for Information Security), Xinyue Shen (University of Waterloo), Yukun Jiang (CISPA Helmholtz Center for Information Security), Michael Backes (CISPA Helmholtz Center for Information Security), Yang Zhang (CISPA Helmholtz Center for Information Security)

Session A6 PA
Differential privacy

Room 6 · Nov. 16 · –

  • (A#784) Hitchhiking on Inherent Randomness: Diffusion-based Graph Generation under Differential Privacy

    Renxuan Hou (The Hong Kong Polytechnic University), Qingqing Ye (The Hong Kong Polytechnic University), Lyu Xu (Nanyang Technological University), Xun Ran (The Hong Kong Polytechnic University), Haibo Hu (The Hong Kong Polytechnic University)

  • (A#2916) An Iconic Heavy Hitters Algorithm Made Private

    Rayne Holland (CSIRO)

  • (A#3032) Function Privatization in the Local Model

    Yuting Liang (University of Toronto), Tian Shu (Hong Kong University of Science and Technology), Ke Yi (Hong Kong University of Science and Technology)

  • (B#7126) Edit-Neighboring Data Streams and Privacy under Continual Observation

    Joel Daniel Andersson (Institute of Science and Technology Austria), Anamay Chaturvedi (Institute of Science and Technology Austria), Monika Henzinger (Institute of Science and Technology Austria), Roodabeh Safavi (Institute of Science and Technology Austria)

Session A7 HW
Hardware security

Room 7 · Nov. 16 · –

  • (A#469) NVBleed: Covert and Side-Channel Attacks on NVIDIA Multi-GPU Interconnect

    Yicheng Zhang (University of California, Riverside), Ravan Nazaraliyev (University of California, Riverside), Sankha Baran Dutta (Brookhaven National Laboratory), Andres Marquez (Pacific Northwest National Laboratory), Kevin J. Barker (Pacific Northwest National Laboratory), Nael Abu-Ghazaleh (University of California, Riverside)

  • (A#1547) It's About Time: Detecting Timing Side-Channel Vulnerabilities in High-Level Synthesis Designs

    Denis Zuppiger (ETH Zurich), Katharina Ceesay-Seitz (ETH Zurich), Jiahui Xu (ETH Zurich), Lana Josipović (ETH Zurich), Kaveh Razavi (ETH Zurich)

  • (B#882) FrontSpec: Uncovering and Characterizing Frontend Memory Predictors on Apple M4 Processors

    Han Wang (Southern University of Science and Technology), Yuhao Hu (Institute of Computing Technology, CAS), Yusi Feng (Southern University of Science and Technology), Quancheng Wang (Wuhan University), Ke Xu (Wuhan University), Tang Ming (Wuhan University), Yun Chen (Hong Kong University of Science and Technology (Guangzhou)), Zhe Wang (Institute of Computing Technology, CAS), Chenggang Wu (Institute of Computing Technology, CAS), Yinqian Zhang (Southern University of Science and Technology)

  • (B#5691) MChammer: A Systematic Characterization of CPU-Level Rowhammer Countermeasures on DDR5 Systems

    Ingab Kang (University of Michigan), Christina Garman (Purdue University), Daniel Genkin (Georgia Tech)

Session A8 NET
DNS security

Room 8 · Nov. 16 · –

  • (A#16) The Trade-off Between Performance and Security: Exploring Vulnerabilities in DNS Task Queue Scheduling

    Shiming Liu (Tsinghua University), Yunyi Zhang (Tsinghua University), Ruixuan Li (Tsinghua University), Shiyao Guo (Tsinghua University), Baojun Liu (Tsinghua University), Donghong Sun (Tsinghua University), Yong Ma (Alibaba Group), Linjian Song (Alibaba Group)

  • (A#1760) Good Cache, BAD Cache: Exploiting DNSSEC Validation Failures for DNS Cache Poisoning Attacks

    Shiming Liu (Tsinghua University), Yunyi Zhang (Tsinghua University), Chaoyi Lu (Zhongguancun Laboratory), Baojun Liu (Tsinghua University), Shuhan Zhang (Tsinghua University), Donghong Sun (Tsinghua University), Yong Ma (Alibaba Group), Linjian Song (Alibaba Group)

  • (B#992) Cross User/App Network Attacks - Hijacking TCP Connections and DNS Cache Poisoning via a Malicious User/App

    Tamir Shahar (Hebrew University), Amit Klein (Hebrew University)

Session A9 FMPL
Formal analysis and verification

Room 9 · Nov. 16 · –

  • (A#2628) Robust Logical Foundations for Mechanizing Post-Quantum Cryptography in Squirrel

    David Baelde (Univ Rennes, CNRS), Antoine Dallon (AMIAD), Stéphanie Delaune (Univ Rennes, CNRS), Charlie Jacomme (Université de Lorraine, CNRS, Inria), Adrien Koutsos (Inria)

  • (A#2766) Symbolic Protocol Verification modulo XOR in ProVerif

    Vincent Cheval (University of Oxford), Stéphanie Delaune (Univ Rennes, CNRS)

  • (B#2465) From Specs to Apps: Verifying and Monitoring Models of Signal and WhatsApp

    Moustafa Said (CISPA Helmholtz Center for Information Security), Aurora Naska (CISPA Helmholtz Center for Information Security), Kevin Morio (CISPA Helmholtz Center for Information Security), Robert Künnemann (CISPA Helmholtz Center for Information Security)

  • (B#3083) Less Effort, Shorter Proofs: Reinforcement Learning for Security Protocol Analysis in Tamarin

    Matthias Cosler (CISPA Helmholtz Center for Information Security), Cas Cremers (CISPA Helmholtz Center for Information Security), Bernd Finkbeiner (CISPA Helmholtz Center for Information Security), Mohamed Ghanem (CISPA Helmholtz Center for Information Security), Niklas Medinger (CISPA Helmholtz Center for Information Security)

–

Technical Session #B
Session B1 ML
Privacy in machine learning

Room 1 · Nov. 16 · –

  • (A#787) Fundamental Limitations of Favorable Privacy–Utility Guarantees for DP-SGD

    Murat Bilgehan Ertan (Centrum Wiskunde & Informatica (CWI)), Marten van Dijk (Centrum Wiskunde & Informatica (CWI))

  • (A#1151) What Does the Server See- Understanding Privacy Leakage from Large Language Models in Split Inference

    Mingyuan Fan (East China Normal University), Yu Liu (East China Normal University), Fuyi Wang (RMIT University), Cen Chen (East China Normal University)

  • (A#1501) Don't Trust the AI Ecosystem: Analyzing Privacy Leakage in Compromised Open-Source Components

    Jin-Seong Kim (Yonsei University), Han-Ju Lee (Yonsei University), Seok-Won Hong (Yonsei University), Takeshi Takahashi (National Institute of Information and Communications Technology), Chansu Han (National Institute of Information and Communications Technology), Tomohiro Morikawa (University of Hyogo), Seok-Hwan Choi (Yonsei University)

  • (B#478) Adaptive Diffusion Freezing: Privacy-preserving Diffusion Models Against Membership Inference Attacks

    Jialu Guo (Beihang University), Xiao Han (Beihang University), Junjie Wu (Beihang University)

  • (B#2057) When Topology Betrays Privacy: Lattice-Based Reconstruction Attacks on Secure Aggregation in Decentralized Federated Learning

    Wenrui Yu (Aalborg University), Changlong Ji (Institut Polytechnique de Paris), Johannes Bjerva (Aalborg University), Qiongxiu Li (Aalborg University)

  • (B#4841) MOSAIC: Masked Outsourcing of Secure AI Computations

    James Hsin-yu Chiang (ETH Zurich), Sheila Zingg (ETH Zurich), Kari Kostiainen (ETH Zurich), Srdjan Capkun (ETH Zurich)

Session B2 AC
Zero-knowledge

Room 2 · Nov. 16 · –

  • (A#363) Designated-Verifier Dynamic zk-SNARKs with Applications to Dynamic Proofs of Index

    Weijie Wang (Yale University), Charalampos Papamanthou (Yale University), Shravan Srinivasan (Lagrange Labs), Dimitrios Papadopoulos (Hong Kong University of Science & Technology)

  • (A#1956) LUNA+: More Succinct Post-Quantum ZK-SNARKs from Computational Privacy

    Yuki Kume (Monash University), Ron Steinfeld (Monash University), Amin Sakzad (Monash University), Mert Yassi (Monash University)

  • (B#2798) MAYA: A Short Shuffle Argument With Fast Verification

    Thi Van Thao Doan (UCLouvain), Olivier Pereira (UCLouvain), Thomas Peters (UCLouvain)

  • (B#3126) TruePix: Fast and Memory-Efficient Zero-Knowledge Authentication for Images and Videos

    Li Liu (Shandong University), Puwen Wei (Shandong University), Yunyan Zou (Shandong University), Zhuoran Ji (Shandong University), Yuncong Zhang (Shandong University), Jinhan You (Shandong University), Jingru Deng (Shandong University), Jiapeng Wang (Shandong University), Haibo Zhou (Huawei Technologies Co., Ltd.)

  • (B#3620) A Toolkit for Succinct Lattice-Based Zero Knowledge Proofs

    Beatrice Biasioli (IBM Research), Madalina Bolboceanu (IBM Research), Vadim Lyubashevsky (IBM Research), Antonio Merino-Gallardo (IBM Research), Michał Osadnik (Aalto University), Gregor Seiler (IBM Research), Patrick Steuer (IBM Research)

  • (A#1332) ZEE200: Zero Knowledge for Everything and Everyone @ 200 KHz

    Sunghyeon Jo (Georgia Institute of Technology), Vladimir Kolesnikov (Georgia Institute of Technology), Yibin Yang (NTT Research)

Session B3 SW
Operating system and hypervisor security

Room 3 · Nov. 16 · –

  • (B#634) LeakyTree: Cross-VM Bit-by-Bit Deduplicated Page Leakage via Linux Kernel Samepage Merging Internals

    Ernesto Martinez Garcia (Graz University of Technology), Lukas Maar (Graz University of Technology), Martin Unterguggenberger (Graz University of Technology), Mathias Oberhuber (Graz University of Technology), Stefan Mangard (Graz University of Technology)

  • (B#645) You Shall Not Pass into Ring-0! A User Privacy-Friendly Anti-Cheat Architecture for Personal Computers

    Santosh Gokul Narayanan (Nokia of America Corporation), Giovanni Paladino (New York University), Chuqi Zhang (National University of Singapore), Sangho Lee (Microsoft Research), Zhenkai Liang (National University of Singapore), Adil Ahmad (Arizona State University)

  • (B#1104) LDBF: Deep Exploration of eBPF Runtime via LLM-Driven Program Generation and Adaptive Context Orchestration

    Yinhao Hu (Huazhong University of Science and Technology), Kaiyan Mei (Huazhong University of Science and Technology), Zeyu Sun (Chinese Academy of Sciences), Quan Sun (Huazhong University of Science and Technology), Dongliang Mu (Huazhong University of Science and Technology), Yuan Li (Zhongguancun Laboratory), Chao Zhang (Tsinghua University)

  • (B#1762) From Binary to Bug: Generation-Based Fuzzing for macOS MIG Services via Constraint Recovery

    Yi Fan (Huazhong University of Science and Technology), Ming Yuan (Zhongguancun Laboratory), Haoyi Liu (Huazhong University of Science and Technology), Ximo Li (Tsinghua University), Zhen Li (Huazhong University of Science and Technology), Deqing Zou (Huazhong University of Science and Technology), Chao Zhang (Tsinghua University)

  • (B#3199) MTEscape: Bypassing Asynchronous Kernel MTE via Conventional Memory Corruption Vulnerabilities

    Kyeongmin Kim (KAIST), Insu Yun (KAIST)

  • (B#3659) Multilayer Defense for Syscall Flooding Attacks on Audit Collection Systems

    Sagar Mishra (STONY BROOK UNIVERSITY), Soundarya Venkatesh (NVIDIA), R. Sekar (STONY BROOK UNIVERSITY)

Session B4 HW
Wireless and mobile security

Room 4 · Nov. 16 · –

  • (A#280) Penetrating the Reality Wall: Long-Range and Through-Wall AR/VR Privacy Eavesdropping via Wireless Power Side Channel

    Tao Ni (King Abdullah University of Science and Technology), Zehua Sun (National University of Singapore), Yihe Zhou (City University of Hong Kong), Yuefeng Du (City University of Hong Kong), Qingchuan Zhao (City University of Hong Kong), Cong Wang (City University of Hong Kong)

  • (A#1382) Turning Everyday Earphones into a Full-Duplex Speech Eavesdropping Platform via Zero-permission IMU

    Ming Gao (Nanjing University of Posts and Telecommunications), Ayijiaken Amantai (Nanjing University of Posts and Telecommunications), Yichen Dai (Nanjing University of Posts and Telecommunications), Jia Lv (Nanjing University of Posts and Telecommunications), Kaiyan Cui (Nanjing University of Posts and Telecommunications), Jinsong Han (Zhejiang University), Minhao Cui (Seoul National University), Fu Xiao (Nanjing University of Posts and Telecommunications)

  • (A#2090) LockSnoop: Eavesdropping Plain-text Keypad Smart Lock Passcode via Electromagnetic Side Channel

    Bowei Zhang (Clemson University), Zhuoyang Wang (Clemson University), Chenxu Jiang (Clemson University), Gen Li (Clemson University), Ming Li (University of Texas at Arlington), Linke Guo (Clemson University)

  • (A#2811) Snatcher: Apple Find My Network Exposes Your Lost Devices To Strangers

    Zhenyu Ren (The Hong Kong University of Science and Technology), Yanbo Zhang (The Hong Kong University of Science and Technology), Boya Liu (The Hong Kong University of Science and Technology), Mo Li (The Hong Kong University of Science and Technology)

  • (B#236) StickShield: Flexible Acoustic Metamaterial Defense for Securing Microphones Against Voice Attacks

    Zhiyuan Ning (Northwest University), Zhanyong Tang (Northwest University), JiaYi Xing (Northwest University), Rui Hou (Institute of Information Engineering, CAS), Xiaojiang Chen (Northwest University)

  • (B#6458) Talking to the Airgap: Exploiting Radio-Less Embedded Devices as Radio Receivers

    Paul Staat (Ruhr University Bochum), Daniel Davidovich (Max Planck Institute for Security and Privacy), Christof Paar (Max Planck Institute for Security and Privacy)

Session B5 USE
Security and privacy measurement

Room 5 · Nov. 16 · –

  • (A#110) TapSpy: Semantic Usage Analysis and Triangulated Risk Assessment of Session Replay in Mobile Apps

    Jiawei Guo (University at Buffalo, SUNY), Zongze Li (University at Buffalo, SUNY), Haipeng Cai (University at Buffalo, SUNY)

  • (B#1748) Keys on Doormats: Exposed API Credentials on the Web

    Nurullah Demir (Stanford University), Yash Vekaria (University of California, Davis), Georgios Smaragdakis (Delft University of Technology), Zakir Durumeric (Stanford University)

  • (B#2553) Mind the Advisory Gap: Comparing Security Advisory and Patch Management Practices Across IoT and Non-IoT Vendors

    Sandra Rivera Pérez (Delft University of Technology), Mathew Vermeer (Delft University of Technology), Savvas Zannettou (Delft University of Technology), Arwa Al Alsadi (Delft University of Technology), Sergio Ruiz-Villafranca (Universidad Politécnica de Madrid), Michel van Eeten (Delft University of Technology), Carlos Gañán (Delft University of Technology)

  • (B#3921) Janus: Characterizing Bidirectional Privacy and Security Risks in LLM-Integrated Android Apps

    Jiawei Guo (University at Buffalo), Zongze Li (University at Buffalo, SUNY), Haipeng Cai (University at Buffalo, SUNY)

  • (B#5410) PatchAudit: Uncovering Faulty Security Patches and Lingering Zero-Days at Scale

    Zhengsong Zhang (University at Buffalo, SUNY), Haipeng Cai (University at Buffalo, SUNY)

  • (B#5707) Gone in 8 Seconds: Uncovering Malicious Bots Operating on Public Container Registries

    Billy Tsouvalas (Stony Brook University), Nick Nikiforakis (Stony Brook University)

Session B6 PA
Attacks on privacy

Room 6 · Nov. 16 · –

  • (A#1993) Non-interactive Anonymous Tokens with Private Metadata Bit

    Foteini Baldimtsi (George Mason University, Mysten Labs), Lucjan Hanzlik (CISPA Helmholtz Center for Information Security), Quan Nguyen (George Mason University), Aayush Yadav (George Mason University)

  • (B#51) Privacy Leakage from a Thousand Words: Millipixel Location Recovery from Dot Maps

    Yuntao Du (Purdue University), Tanishq Pauskar (Purdue University), Hao Wang (Purdue University), Jing Su (Indiana University), Ninghui Li (Purdue University)

  • (B#372) On the Same Track: Privacy Leaks in Electric Rail Transport via Magnetic Fields

    Stefan Czybik (Berlin Institute for the Foundations of Learning and Data), Pia Hanfeld (Berlin Institute for the Foundations of Learning and Data), Konrad Rieck (Berlin Institute for the Foundations of Learning and Data)

  • (B#1322) Evaluating Practical Enumeration and Blocking Attacks on the Snowflake Circumvention System

    Linden Chen (University of California Santa Cruz), Ryan Sangha (University of California Santa Cruz), Cecylia Bocovich (Tor Project), Ram Sundara Raman (University of California Santa Cruz)

  • (B#1533) CrossLink: Breaking Location Privacy by Linking Device Identifiers Across Protocols

    Aneet Kumar Dutta (CISPA Helmholtz Center for Information Security), Mihirraj Dixit (Saarland University), Kevin Gni (CISPA Helmholtz Center for Information Security), Wouter Lueks (CISPA Helmholtz Center for Information Security), Mridula Singh (CISPA Helmholtz Center for Information Security)

  • (B#3005) Boosting Query Recovery against Encrypted Databases: High-Accuracy and Efficient Inference Attacks Using Minimal Leakage

    Jiaojiao Wu (Xidian University), Lei Zhang (Xidian University), Jianfeng Wang (Xidian University), Shi-Feng Sun (Shanghai Jiao Tong University), Xiaofeng Chen (Xidian University)

Session B8 NET
Network protocol analysis

Room 8 · Nov. 16 · –

  • (A#2990) VUPER: Verified ASN.1 UPER Parser

    Xiaotian Zhou (The Pennsylvania State University), Kai Tu (The Pennsylvania State University), Ali Ranjbar (The Pennsylvania State University), Yilu Dong (The Pennsylvania State University), Gang Tan (The Pennsylvania State University), Syed Rafiul Hussain (The Pennsylvania State University)

  • (B#687) MARS: Monotonic Authority for Rescue CPS under Stale Hazard Uncertainty

    Boran Yang (Changchun University of Science and Technology), Jinqing Li (Changchun University of Science and Technology), Xiaoqiang Di (Changchun University of Science and Technology), Shihao Liu (Changchun University of Science and Technology)

  • (B#741) Recovering Process Variables from Industrial Network Traffic via Search-Based Optimization

    Chuan Sheng (Shenyang Institute of Automation, Chinese Academy of Sciences), Shan Jiang (Swinburne University of Technology), Jianming Zhao (Shenyang Institute of Automation, Chinese Academy of Sciences), Yu Yao (Northeastern University)

  • (B#1105) Credit Without Debit: Formal Verification of Banking Payment Systems

    Ali Hamza Malik (University of Massachusetts Amherst), Muhammad Taqi Raza (University of Massachusetts Amherst)

  • (B#5258) One Click to Leak: Characterizing the Real-World Usage and Threat Impact of MNO-based Single Sign-On Websites

    Jiasheng Huang (Tsinghua University), Mingxuan Liu (Zhongguancun Laboratory), Pei Chen (Fudan University), Baojun Liu (Tsinghua University), Yiming Zhang (Tsinghua University), Geng Hong (Fudan University), Zhenrui Zhang (Baidu Inc), Hai Yang (Baidu Inc), Haixin Duan (Quancheng Lab), Hui Jiang (Tsinghua University)

  • (B#6521) 5GDescrambler: Locating, Descrambling, and Decoding 5G Scheduling Information

    Fritz Windisch (Karlsruhe Institute of Technology), Thorsten Strufe (Karlsruhe Institute of Technology)

Session B9 FMPL
Formal analysis and verification

Room 9 · Nov. 16 · –

  • (A#3563) dfence: Fine-Grained Speculation Barriers for Efficient and Effective Hardware-Software Protection in the Spectre Era

    Davide Davoli (MPI-SP), Marton Bognar (KU Leuven), Lesly-Ann Daniel (EURECOM), Benjamin Gregoire (Inria), Frank Piessens (KU Leuven), Tamara Rezk (Inria)

  • (B#1138) KEM-IND-CCA-Preserving Compilation of Jasmin's ML-KEM

    Santiago Arranz-Olmos (MPI-SP), Gilles Barthe (MPI-SP), Lionel Blatter (MPI-SP), Benjamin Gregoire (Inria), Vincent Laporte (Inria), Paolo Torrini (Inria)

  • (B#2155) On Identifying Sound Conditions for Frontrunning Resistance

    Sebastian Holler (MPI-SP), Anna Piscitelli (Ruhr University Bochum), Jannik Albrecht (Ruhr University Bochum), Stephan Dübler (MPI-SP), Ghassan Karame (Ruhr University Bochum), Clara Schneidewind (MPI-SP)

  • (B#3100) SCHERI: Provably Secure Speculation Under the Constant-Time Policy for CHERI

    Shixin Song (Massachusetts Institute of Technology), Davide Davoli (MPI-SP), Elias Storme (KU Leuven), Marton Bognar (KU Leuven), Dominique Devriese (KU Leuven), Frank Piessens (KU Leuven), Tamara Rezk (Inria)

  • (B#3579) Towards Practical Privacy-Preserving SAT Solving

    Gefei Tan (Northwestern University), Wenhao Zhang (Northwestern University), Timos Antonopoulos (Yale University), Ruzica Piskac (Yale University), Xiao Wang (Northwestern University), Ning Luo (UIUC)

  • (B#5024) Sound Debloating of Redundant Checks in Zero-Knowledge Machine-Learning Circuits

    Zhantong Xue (Hong Kong University of Science and Technology), Pingchuan Ma (Zhejiang University of Technology), Zhaoyu Wang (Hong Kong University of Science and Technology), Yuguang Zhou (Hong Kong University of Science and Technology), Huaijin Wang (Shandong University), Shuai Wang (Hong Kong University of Science and Technology)

–

Technical Session #C
Session C1 ML
ML attacks and defenses in generative AI

Room 1 · Nov. 16 · –

  • (A#281) Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem

    Jiahao Chen (Zhejiang University), Xing He (Zhejiang University), Yong Yang (Zhejiang University), Xinfeng Li (The Hong Kong Polytechnic University), Chunyi Zhou (Zhejiang University), Junhao Li (Zhejiang University), Zhe Ma (Tianjin University), Tianyu Du (Zhejiang University), Shouling Ji (Zhejiang University)

  • (A#291) A Single Glance Is Better Than Words: Vision-Guided Targeted Concept Erasing

    Yuyang Zhang (Wuhan University), Yuxiang Sun (Wuhan University), Ke Liang (Wuhan University), Junlin Li (Wuhan University), Kangjie Chen (Tianjin University), Run Wang (Wuhan University)

  • (A#397) MMAligner: Safeguarding Multimodal Large Language Models through Representation Calibration

    Shenyi Zhang (Wuhan University), Keyan Guo (University at Buffalo), Zihao Wang (Wuhan University), Xuebin Li (Wuhan University), Lingchen Zhao (Wuhan University), Hongxin Hu (University at Buffalo), Chao Shen (Xi'an Jiaotong University), Qian Wang (Wuhan University)

  • (A#651) Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluation

    Zhibo Wang (Zhejiang University), Wenhui Zhang (Zhejiang University), Huiyu Xu (Zhejiang University), Zeqing He (Zhejiang University), Ziqi Zhu (Zhejiang University), Kui Ren (Zhejiang University)

  • (A#1443) Understanding and Preserving Safety in Fine-Tuned LLMs

    Jiawen Zhang (Zhejiang University), Yangfan Hu (University of Wisconsin-Madison), Kejia Chen (Zhejiang University), Lipeng He (University of Waterloo), Jiachen Ma (Shanghai Artificial Intelligence Laboratory), Jian Lou (Sun Yat-sen University), Dan Li (Sun Yat-sen University), Jian Liu (Zhejiang University), Xiaohu Yang (Zhejiang University), Ruoxi Jia (Virginia Tech)

  • (B#1343) DSS: Dynamic Semantic Steering for Robust Concept Erasure in Diffusion Models

    Qinghui Gong (Southwest Jiaotong University), Zhengchun Zhou (Southwest Jiaotong University), Hua Meng (Southwest Jiaotong University), Yihuai Liang (Southwest Jiaotong University), Yuxuan Zhang (Southwest Jiaotong University)

  • (B#3831) What Concepts Lie Within? Detecting and Suppressing Risky Content in Diffusion Transformers

    Chenyu Zhang (Tianjin University), Lanjun Wang (Tianjin University), Yueyang Cheng (Tianjin University), Ruidong Chen (Tianjin University), Wenhui Li (Tianjin University), An-an Liu (Tianjin University)

  • (B#6039) Proof-of-Authorship for Diffusion-based AI Generated Content

    De Zhang Lee (National University of Singapore), Han Fang (University of Science and Technology of China), Ee-Chien Chang (National University of Singapore)

Session C2 AC
Threshold cryptography

Room 2 · Nov. 16 · –

  • (A#1166) Kairos: Efficient High-Threshold Asynchronous Distributed Key Generation from Lightweight Cryptography

    Xinxin Xing (Beihang University), Yizhong Liu (Beihang University), Zifan Li (Beihang University), Jianwei Liu (Beihang University), Yudi Yang (Beihang University), Yuan Lu (A*STAR IAIC), Song Bian (Beihang University), Zhenyu Guan (Beihang University), Tianwei Zhang (Nanyang Technological University)

  • (A#1271) Anchor-DKG: Distributed Key Generation with Repeating Parties

    Hanwen Feng (University of Canterbury), Qiang Tang (University of Sydney), Sri AravindaKrishnan Thyagarajan (University of Sydney)

  • (A#1354) Revisiting Shamir Secret Sharing for Threshold Fully Homomorphic Encryption

    Jiseung Kim (Jeonbuk National University), Seunghu Kim (Chung-Ang University), Hyung Tae Lee (Chung-Ang University)

  • (A#2135) Doubly Aggregatable Signatures

    Georg Fuchsbauer (TU Wien), Pranav Garimidi (a16z Crypto Research), Joachim Neu (a16z Crypto Research), Guru-Vamsi Policharla (Commonware, Inc.), Max Resnick (Anza), Ertem Nusret Tas (a16z Crypto Research)

  • (B#1035) Practical Silent Threshold Signatures and Silent Threshold Encryption for Dynamic Committees

    Yifei He (Peking University), Zheng Zhou (Peking University), Yu Chen (Shandong University), Zhi Guan (Peking University), Zhong Chen (Peking University)

  • (B#1932) BTX and SimpleBTE: Efficient Batched Threshold Encryption

    Amit Agarwal (Category Labs), Sourav Das (Category Labs), Babak Poorebrahim Gilkalaye (Category Labs), Guru-Vamsi Policharla (Commonware, Inc.), Peter Rindal (Category Labs), Victor Shoup (Category Labs)

  • (B#2148) Lemur: Scalable Post-Quantum Synchronized Multi-Signatures

    Yini Lin (Monash University), Muhammed F. Esgin (Monash University), Amin Sakzad (Monash University), Ron Steinfeld (Monash University), Markku-Juhani O. Saarinen (Tampere University)

  • (B#3449) BEAST-MEV: Batched Threshold Encryption with Silent Setup for MEV prevention

    Jan Bormet (Technische Universität Darmstadt), Arka Rai Choudhuri (zkBricks), Sebastian Faust (Technische Universität Darmstadt), Sanjam Garg (University of California, Berkeley), Hussien Othman (Technische Universität Darmstadt), Guru Vamsi Policharla (Commonware, Inc.), Ziyan Qu (Technische Universität Darmstadt), Mingyuan Wang (University of Delaware)

Session C3 SW
Fuzzing

Room 3 · Nov. 16 · –

  • (A#191) FeatureFuzz: Treating Bug-prone Features as Core Primitives for Compiler Fuzzing

    Xingbang He (Nanjing University), Yuanwei Chen (Nanjing University), Hao Wu (Nanjing University), Jikang Zhang (Institute of Dataspace, Hefei Comprehensive National Science Center), Zicheng Wang (Honor Device Co.,Ltd), Ligeng Chen (Honor Device Co., Ltd), Junjie Peng (Nanjing University), Haiyang Wei (Nanjing University), Yi Qian (Nanjing University), Tiantai Zhang (Nanjing University), Linzhang Wang (Nanjing University), Bing Mao (Nanjing University)

  • (A#597) From Documentation to Zero-day Vulnerabilities: LLM-Driven Fuzzing of JavaScript Engines in PDF Readers

    Suyue Guo (University of California, Santa Barbara), Stijn Pletinckx (University of California, Santa Barbara), Tianle Yu (University of California, Santa Barbara), Yigitcan Kaya (University of California, Santa Barbara), Saad Ullah (Boston University), Wenbo Guo (University of California, Santa Barbara), Christopher Kruegel (University of California, Santa Barbara), Giovanni Vigna (University of California, Santa Barbara)

  • (A#736) RustGo: Fairly Directed Greybox Fuzzing for Enforcing Rust Memory Safety

    Dongyeon Yu (Korea University), Jiun Min (Korea University), Yewan Na (Ulsan National Institute of Science and Technology), Mijung Kim (Ulsan National Institute of Science and Technology), Taegyu Kim (The Pennsylvania State University), Yuseok Jeon (Korea University)

  • (A#1083) TANTRUM: Breaking the Heap Sandbox in JavaScript Engines via Protection Domain Fuzzing

    Seunghyun Lee (Carnegie Mellon University), David Brumley (Carnegie Mellon University)

  • (A#1897) ACOFuzz: Memory-Error-Sensitive Fuzzing Driven by Address-Computation-Operand-Aware Feedback Mechanism

    Yiru Zhao (Wuhan University), Aorui Zhang (Wuhan University), Xiaoke Wang (Tianjin University), Aoshuang Ye (Wuhan Textile University), Benxiao Tang (Wuhan Textile University), Jinxin Ma (Beijing University of Posts and Telecommunications), Lei Zhao (Wuhan University), Heqing Huang (City University of Hong Kong)

  • (B#1266) TriChord: Extension-Oriented Browser Fuzzing for Chromium

    Huinian Yang (China Telecom Cloud Technology Co., Ltd.), Daoyuan Wu (Lingnan University), Qingyu Li (China Telecom Cloud Technology Co., Ltd.), Yiming Liu (China Telecom Cloud Technology Co., Ltd.)

  • (B#2037) Automatic, Expressive, and Scalable Fuzzing with Stitching

    Harrison Green (Carnegie Mellon University), Fraser Brown (Carnegie Mellon University), Claire Le Goues (Carnegie Mellon University)

  • (B#3846) SPFUZZ: Validating Secretly Patched Vulnerabilities by Patch Guided Fuzzing

    Shiyan Peng (Fudan University), Yingbo Xu (Fudan University), Jiarun Dai (Fudan University), Yuchen Zhang (Beijing Normal–Hong Kong Baptist University), Yuan Zhang (Fudan University), Min Yang (Fudan University)

Session C4 HW
Side-channel attacks and mitigation

Room 4 · Nov. 16 · –

  • (A#1084) Exploiting Body-Coupled Leakage for Keystroke Inference on Smartphones

    Yao Wang (Xidian University), An He (Xidian University), Xiaolong Li (Xidian University), Haibin Zhang (Xidian University), Tao Gu (Macquarie University)

  • (A#1765) MnemonicHack: Recovering the Master Seed from Bitcoin Hardware Wallets via Side-Channel Attacks

    Jiwoo Baek (Korea University), Daehyeon Bae (Korea University), Gyusang Kim (Korea University), Gilsang Ahn (Korea University), Insup Lee (Korea University), Sujin Park (Korea University), Seokhie Hong (SmartM2M Co., Ltd), HeeSeok Kim (Korea University)

  • (B#12) File Notification Attacks: Templating and Exploiting Side-Channel Leakage from the File-Notification System on Linux, Windows, and macOS

    Sudheendra Raghav Neela (Graz University of Technology), Xufan Zhao (Graz University of Technology), Jeanette Angelika Wultsch (Graz University of Technology), Hannes Weissteiner (Graz University of Technology), Florian Draschbacher (Graz University of Technology), Stefan Gast (Graz University of Technology), Daniel Gruss (Graz University of Technology)

  • (B#389) Practice Makes (Im)Perfect: A Look Back at Benchmarking Practices for Microarchitectural Side-Channel Attacks

    Iliana Fayolle (Univ. Lille, CNRS, Inria), Antoine Geimer (Univ. Lille, CNRS, Inria), Daniel De Almeida Braga (Univ. Rennes, CNRS), Clémentine Maurice (Univ. Lille, CNRS, Inria)

  • (B#3999) Square Root of All Evil: The Dangers of Falcon's Superfluous Square Roots

    Kaihara Hiroto (Kyoto University), Calvin Abou Haidar (NTT Social Informatics Laboratories), Mehdi Tibouchi (NTT Social Informatics Laboratories), Masayuki Abe (NTT Social Informatics Laboratories)

  • (B#4244) HAWK with Hint: Algebraic Key Recovery from Side-Channel Leakage

    Byoungchan Chi (Korea University), Changmin Lee (Korea University), Inhun Lee (Korea University)

  • (B#4740) When Module Lattice Leaks: Horizontal Fusion Attacks on ML-DSA Implementation

    Yuhan Zhao (Nanjing University of Science and Technology), Dalin He (Nanjing University of Science and Technology), Wei Cheng (Nanjing University of Science and Technology), Yuejun Liu (Nanjing University of Science and Technology), Jingdian Ming (Nanjing University of Science and Technology), Yongbin Zhou (Nanjing University of Science and Technology)

  • (B#7552) Mitigating Ciphertext Side-Channel Attacks against TEE-Shielded Neural Networks

    Qianhui Dai (Shanghai Jiao Tong University), Zhen Huang (Shanghai Jiao Tong University), Guoxing Chen (Shanghai Jiao Tong University), Yan Meng (Shanghai Jiao Tong University), Yinqian Zhang (Southern University of Science and Technology), Haojin Zhu (Shanghai Jiao Tong University)

Session C5 USE
Human computer interfaces (HCI)

Room 5 · Nov. 16 · –

  • (A#1376) Effects of Explanations on Driver Situation Awareness Under Physical Adversarial Attacks in Automated Driving: A Driving Simulator Study

    Rao Li (The Pennsylvania State University), Jiazheng Gao (The Pennsylvania State University), Yiqi Zhang (The Pennsylvania State University), Aiping Xiong (The Pennsylvania State University)

  • (B#255) A Mixed-Methods Analysis of Account Creation & Authentication Inaccessibility for Blind and Low Vision Users

    Adryana Hutchinson (The George Washington University), Smirity Kaushik (The George Washington University), Matthias Fassl (The George Washington University), Adam J. Aviv (The George Washington University)

  • (B#439) 'It Scams In The Family:' GenAI Voice Cloning Scams among Sighted and Families with Blind or Low Vision Members

    Filipo Sharevski (DePaul University), Jennifer Vander Loop (DePaul University)

  • (B#443) 'That's a Red Flag!': How Young Adult Instagram Users Assess Sexual Threats and Perceive Nudity Protection in Direct Messages

    Anna Calmbach (CISPA Helmholtz Center for Information Security), Carolyn Guthoff (CISPA Helmholtz Center for Information Security), Matthias Fassl (The George Washington University), Katharina Krombholz (CISPA Helmholtz Center for Information Security)

  • (B#863) Evaluating Ongoing Access Attacks on the Web

    Arkaprabha Bhattacharya (Cornell Tech), Rosanna Bellini (New York University), Thomas Ristenpart (University of Toronto), Nicola Dell (Cornell Tech)

  • (B#1329) User Perceptions of Online Age Assurance Mechanisms in the U.S.

    Junho Eum (The George Washington University), Jan Tolsdorf (Max Planck Institute for Security and Privacy (MPI-SP)), Adryana Hutchinson (The George Washington University), Smirity Kaushik (The George Washington University), Adam J. Aviv (The George Washington University)

  • (B#2507) Do Hackers Dream of Electric Teachers?: A Large-Scale, In-Situ Measurement of Cybersecurity Student Behaviors and Educational Performance with AI Tutors

    Michael Tompkins (Arizona State University), Nihaarika Agarwal (Arizona State University), Ananta Soneji (Arizona State University), Robert Wasinger (Arizona State University), Connor Nelson (Arizona State University), Kevin Leach (Vanderbilt University), Rakibul Hasan (Arizona State University), Adam Doupé (Arizona State University), Daniel Votipka (Tufts University), Yan Shoshitaishvili (Arizona State University), Jaron Mink (Arizona State University)

  • (B#5246) Beyond the Prank: The Hidden Expertise of TSS Scambaiters

    Saleh Alsyefi (University of Bristol), Anish Chand (Louisiana State University), Matthew Edwards (University of Bristol), Phani Vadrevu (Louisiana State University)

Session C6 PA
Differential privacy

Room 6 · Nov. 16 · –

  • (A#134) Dependency Triad: A Metric to Quantify the Dependencies Between Attributes for Local Differential Privacy

    Sandaru Jayawardana (The University of Sydney), Sennur Ulukus (University of Maryland), Ming Ding (CSIRO), Kanchana Thilakarathna (The University of Sydney)

  • (A#307) Private Direct Preference Optimization for LLM Alignment

    Yangfan Jiang (National University of Singapore), Fei Wei (Alibaba Group), Ergute Bao (Inria), Xiaokui Xiao (National University of Singapore), Yaliang Li (Alibaba Group), Bolin Ding (Alibaba Group)

  • (A#1308) Towards Effective and Stealthy Data Poisoning Attacks to Locally Differentially Private Triangle Counting Protocols

    Xinyu Li (Xi'an Jiaotong University), Xuebin Ren (Xi'an Jiaotong University), Shusen Yang (Xi'an Jiaotong University), Cong Zhao (Xi'an Jiaotong University)

  • (A#1985) Piquant$varepsilon$: Private Quantile Estimation in the Two-Server Model

    Hannah Keller (Max Planck Institute for Security and Privacy), Jacob Imola (University of Waterloo), Fabrizio Boninsegna (University of Padova), Rasmus Pagh (University of Copenhagen), Amrita Roy Chowdhury (University of Michigan)

  • (A#2510) Efficient Single-Round Obfuscation of Search and Result Patterns in Searchable Encryption

    Tung Le (Virginia Tech), Thang Hoang (Virginia Tech)

  • (A#2532) Robust Estimation of Sparse Numerical Vectors under Local Differential Privacy

    Puning Zhao (Shenzhen Campus of Sun Yat-sen University), Zhikun Zhang (Zhejiang University), Shaowei Wang (Guangzhou University), Sheng Yue (Shenzhen Campus of Sun Yat-sen University), Bangzhou Xin (National Interdisciplinary Research Center of Engineering Physics), Tianhang Zheng (Zhejiang University), Pengfei Zhang (Anhui University of Science and Technology), Xiaochun Cao (Shenzhen Campus of Sun Yat-sen University)

  • (B#89) Revisit Location Privacy Protection: A Service Failure Perspective

    Shaowei Wang (Guangzhou University), Han Wu (University of Southampton), Yun Peng (Guangzhou University), Puning Zhao (Shenzhen Campus of Sun Yat-sen University), Wenqi Ren (Shenzhen Campus of Sun Yat-sen University), Changyu Dong (Guangzhou University), Jin Li (Guangzhou University), Jian Weng (Guangzhou University)

  • (B#162) A Graph-Based Framework for Extending Metric Differential Privacy Mechanisms

    Ruiyao Liu (University of North Texas), Chenxi Qiu (University of North Texas)

Session C7 USE
User perceptions

Room 7 · Nov. 16 · –

  • (A#1524) 'We just went with what seemed the best supported': Lessons on Cryptographic Practices in Securing Microcontrollers from Embedded CTFs

    Zheyuan Ma (University at Buffalo), Xi Tan (University of Colorado Colorado Springs), Gaoxiang Liu (University at Buffalo), Alex Eastman (University at Buffalo), Md Armanuzzaman (University of Texas at El Paso), Ziming Zhao (Northeastern University)

  • (B#52) 'Setting Up TLS Authentication Was Hell': A Usability Study of Client Certificate Authentication

    Abubakar Sadiq Shittu (University of Tennessee, Knoxville), Clay Shubert (University of Tennessee, Knoxville), John Sadik (University of Tennessee, Knoxville), Scott Ruoti (University of Tennessee, Knoxville)

  • (B#86) Investigating Novice Researchers' Perceptions of Research Privacy Within LLM-Assisted Workflows

    Shuning Zhang (Tsinghua University), Changxi Wen (Tsinghua University), Eve He (University of Wisconsin–Madison), Ying Ma (The University of Melbourne), Robert Xiao (University of British Columbia), Xin Yi (Tsinghua University), Hewu Li (Tsinghua University)

  • (B#102) A Multi-Month Study of Git Commit Signing

    Abubakar Sadiq Shittu (University of Tennessee, Knoxville), John Sadik (University of Tennessee, Knoxville), Scott Ruoti (University of Tennessee, Knoxville)

  • (B#2340) Understanding Users' Perceptions of Client-Side Modifications and Anti-Cheat Engines in Social XR

    Iman Mohammadi (University of California, Irvine), Mutahar Ali (University of California, Irvine), Habiba Farrukh (University of California, Irvine)

  • (B#2506) Batten the Hatches: Cybersecurity with Military Mariners

    Ryan Von Brock (Georgia Institute of Technology), Anna Raymaker (Georgia Institute of Technology), Animesh Chhotaray (Georgia Institute of Technology), Frank Li (Georgia Institute of Technology), Saman Zonouz (Georgia Institute of Technology), Raheem Beyah (Georgia Institute of Technology)

  • (B#4846) Papers, Peons, and Power: The Challenges of Implementing Privacy Regulations in a Developing Country

    Kenneth Thilakarathna (University of Kelaniya), Dilanga Harshani (University of Colombo), Nathan Malkin (New Jersey Institute of Technology)

Session C8 NET
DoS/routing security

Room 8 · Nov. 16 · –

  • (A#269) TurboRetry: Mitigating Large-Scale QUIC Handshake Floods with Off-the-Shelf DPU Offloading

    Jiahao Wu (Institute of Computing Technology, Chinese Academy of Sciences), Heng Pan (Computer Network Information Center, Chinese Academy of Sciences), Kai Lv (Institute of Computing Technology, Chinese Academy of Sciences), Zhenyu Li (Institute of Computing Technology, Chinese Academy of Sciences), Yanbiao Li (Computer Network Information Center, Chinese Academy of Sciences), Gaogang Xie (Computer Network Information Center, Chinese Academy of Sciences)

  • (A#802) An Ounce of Prevention Is Worth a Pound of Cure: A Pre-filtering Framework to Against Asymmetric DoS in Group Authentication at the IoT Edge

    Yizhao Zhou (Hangzhou Dianzi University), Qingxiang Xu (Hangzhou Dianzi University), Yingjie Xia (Hangzhou Dianzi University)

  • (B#259) Rethinking Isolation in RPKI: Cross-Publication-Point Attacks on RPKI Validation

    Qi Wang (Tsinghua University), Jianjun Chen (Tsinghua University), TaoFei Guo (Peking University), Minghao Zhang (Tsinghua University), Yuheng Zhang (Tsinghua University), Jingcheng Yang (Tsinghua University)

  • (B#455) Weaponizing QNAME Minimization: Infrastructure-Free DNS Amplification via Resolver Orchestration

    Jianhao Li (Xi'an Jiaotong University), Jialong Zhang (Xi'an Jiaotong University), Jiawei Ding (Xi'an Jiaotong University), Jianfeng Li (Xi'an Jiaotong University), Ziqian Liu (China Telecom), Wei Wang (Xi'an Jiaotong University), Zhou Su (Xi'an Jiaotong University), Xiaobo Ma (Xi'an Jiaotong University)

  • (B#1394) Botnet Boasting: Investigating DDoS Power Proofs

    Maarten Weyns (Delft University of Technology (TU Delft)), Georgios Smaragdakis (Delft University of Technology), Harm Griffioen (Delft University of Technology)

  • (B#1396) Parade: Unified and Data-Driven Prefix-AS Semantics for BGP Anomaly Detection

    Yunze Wei (Tsinghua University), Xingang Shi (Tsinghua University), Minghao Zhang (Tsinghua University), Zhaozhen Wang (Tsinghua University), Qiang Ma (Zhongguancun Laboratory), Han Zhang (Tsinghua University), Yahui Li (Tsinghua University), Xia Yin (Tsinghua University)

  • (B#1887) Exploiting vulnerabilities at IXP route servers to perform stealth BGP hijacks

    Gabby Rimlinger (Sorbonne Université), Joaquim Pereira (University of Waikato), Matthieu Gouel (nxthdr), Olivier Fourmaux (Sorbonne Université), Timur Friedman (Sorbonne Université), Pedro Marcos (FURG), Cristel Pelsser (UCLouvain), Ronaldo A. Ferreira (UFMS), Kevin Vermeulen (CNRS, Ecole Polytechnique)

  • (B#3074) NetSynergy: Mitigating Application-layer DDoS via Adaptive Access-Backbone Collaboration

    Junchen Pan (Tsinghua University), Kunpeng He (Tsinghua University), Shengnan Liu (Tsinghua University), Menghao Zhang (Beihang University.), Hu Xie (Sino-Telecom Technology), Lei Zhang (Zhongguancun Laboratory), Yong Cui (Tsinghua University)

Session C9 FMPL
Protocol security

Room 9 · Nov. 16 · –

  • (A#253) A Formal Analysis of Signal's Sparse Post-Quantum Ratchet Protocol and its Implementation

    Karthikeyan Bhargavan (Cryspen), Maxime Buyse (Cryspen), Graeme Connell (Signal), Franziskus Kiefer (CE Labs), Rolfe Schmidt (Signal)

  • (A#1329) Formal Security Analysis of the Olvid Messenger

    Noemi Terzo (Max Planck Institute for Security and Privacy (MPI-SP)), Cas Cremers (CISPA Helmholtz Center for Information Security), Ruben Gonzalez (Neodyme AG), Peter Schwabe (Max Planck Institute for Security and Privacy (MPI-SP)), Yuval Yarom (Ruhr University Bochum), Zhiyuan Zhang (Max Planck Institute for Security and Privacy (MPI-SP))

  • (B#335) Automated Reasoning for Indistinguishability in the CCSA

    Simon Jeanteur (TU Wien), Matteo Maffei (TU Wien), Laura Kovacs (TU Wien), Michael Rawson (University of Southampton)

  • (B#724) Bust a Shuffle! A Formal Privacy Analysis of Voting Protocols with Multi-Server Mix Nets

    Alexandre Debant (Université de Lorraine, CNRS, Inria), Robert Künnemann (CISPA Helmholtz Center for Information Security), Johannes Müller (Independent researcher)

  • (B#952) Secrecy in Squirrel and the Post-Compromise Security of a Ratchet

    Clément Hérouard (Université de Lorraine, CNRS, Inria), Charlie Jacomme (Université de Lorraine, CNRS, Inria), Adrien Koutsos (Inria), Joseph Lallemand (CNRS, Univ. Rennes)

  • (B#3503) Refinement-based Verification of Cryptographic Protocols with Quantitative Values

    Itsaka Rakotonirina (Shielded Technologies), Javier Gomez-Martinez (IMDEA Software Institute), Aoxuan Li (IMDEA Software Institute), Pedro Moreno-Sanchez (IMDEA Software Institute), Clara Schneidewind (MPI-SP)

Tuesday

–

Technical Session #D
Session D1 ML
ML attacks

Room 1 · Nov. 17 · –

  • (A#752) When Grammar Guides the Attack: Uncovering Control-Plane Vulnerabilities in LLMs with Structured Output

    Shuoming Zhang (Institute of Computing Technology, Chinese Academy of Sciences), Jiacheng Zhao (Institute of Computing Technology, Chinese Academy of Sciences), Hanyuan Dong (Institute of Computing Technology, Chinese Academy of Sciences), Ruiyuan Xu (Institute of Computing Technology, Chinese Academy of Sciences), Zhicheng Li (Institute of Computing Technology, Chinese Academy of Sciences), Yangyu Zhang (Institute of Computing Technology, Chinese Academy of Sciences), Shuaijiang Li (Institute of Computing Technology, Chinese Academy of Sciences), Yuan Wen (University of Aberdeen), Chunwei Xia (University of Leeds), Zheng Wang (University of Leeds), Xiaobing Feng (Institute of Computing Technology, Chinese Academy of Sciences), Huimin Cui (Institute of Computing Technology, Chinese Academy of Sciences)

  • (A#881) PolyVoice: Exploiting Cluster-Level Vulnerabilities for One-to-Many Impersonation in Speaker Verification Systems

    Yunjie Ge (Wuhan University), Jinlong Jiang (Wuhan University), Yuchen Liu (Wuhan University), Huayi Duan (The Hong Kong University of Science and Technology (Guangzhou)), Shenyi Zhang (Wuhan University), Lingchen Zhao (Wuhan University), Chao Shen (Xi'an Jiaotong University), Qian Wang (Wuhan University)

  • (A#1428) Casting the Net! Revisiting MasterFace Impersonation Attacks

    Seunghun Paik (Hanyang University), Sunpill Kim (Sookmyung Women's University), Chanwoo Hwang (Hanyang University), Jae Hong Seo (Hanyang University)

  • (A#1593) PC^2: Politically Controversial Content Generation via Jailbreaking Attacks on GPT-based Text-to-Image Models

    Wonwoo Choi (ADD), Minjae Seo (ETRI), Minkyoo Song (KAIST), Hwanjo Heo (ETRI), Seungwon Shin (KAIST), Myoungsung You (University of Seoul)

  • (B#1308) The Deception Delta: Adversarial Evaluation of LLM-Based Smart Contract Bytecode Forensics

    Timo Schefold (Landeskriminalamt Baden-Württemberg)

  • (B#2092) Finding FAULTs in Architectural Backdoors: Why Trigger Detection Fails Under Real-World Conditions

    David Oygenblik (Georgia Institute of Technology), Teja Akella (Georgia Institute of Technology), Tanmay Gupta (Georgia Institute of Technology), Yizhi Huang (Georgia Institute of Technology), Brendan Saltaformaggio (Georgia Institute of Technology)

  • (B#2986) Understanding the Security Boundary of Obfuscation-based On-Device LLM Protection

    Hanyi Zhou (Tsinghua University), Chenyang Li (Tsinghua University), Yuanzhe Pang (Tsinghua University), Ke Xu (Tsinghua University), Mingwei Xu (Tsinghua University), Zhuotao Liu (Tsinghua University)

  • (B#4319) Robustness of Vision Language Models Against Split-Image Harmful Input Attacks

    Md Rafi Ur Rashid (Pennsylvania State University), MD Sadik Hossain Shanto (Bangladesh University of Engineering and Technology), Vishnu Asutosh Dasu (Pennsylvania State University), Shagufta Mehnaz (Pennsylvania State University)

Session D2 AC
Secure computation for ML or federated learning

Room 2 · Nov. 17 · –

  • (A#233) NFSA: Non-Forward Secure Aggregation with One Server via Two Layer Secret Sharing

    Yufei Zhou (Sun Yat-sen University)

  • (A#1189) Preprocessed Private Function Evaluation: Achieving Sublinear Online Complexity for Lookup Tables

    Tanping Zhou (Engineering University of People's Armed Police), Xiaoyi Wang (Institute of Software, Chinese Academy of Sciences), Yi Qu (Institute of Software, Chinese Academy of Sciences), Wenchao Liu (Engineering University of People's Armed Police), Long Chen (Institute of Software, Chinese Academy of Sciences), Zhenfeng Zhang (Institute of Software, Chinese Academy of Sciences)

  • (A#2042) LightShark: Actively Secure Machine-Learning Inference Based on Lightweight Authenticated Distributed Comparison Function

    Chenkai Zeng (Wuhan University), Qi Feng (Wuhan University), Debiao He (Wuhan University), Min Luo (Wuhan University)

  • (A#3279) Low-Complexity Private Decision Tree Evaluation over Homomorphic Encryption

    Dongjin Park (Chung-Ang University), Gyeongwon Cha (Chung-Ang University), Joon-Woo Lee (Chung-Ang University)

  • (A#3291) TACITA: Threshold Aggregation without Client Interaction

    Varun Madathil (Yale University), Arthur Lazzaretti (Yale University), Zeyu Liu (Yale University), Charalampos Papamanthou (Yale University)

  • (B#305) ROSETTA: Efficient and Accurate Privacy-Preserving LLM Decoding via Hybrid CKKS/TFHE Evaluation

    Jiangrui Yu (Peking University), Baosheng Zhang (Xi'an Jiaotong University), Liang Kong (Ant Group), Lin Ding (Peking University), Yi Chen (Peking University), Ye Yu (Peking University), Mingzhe Zhang (Ant Group), Meng Li (Peking University)

  • (B#3656) PackCNN: Adaptive Data Packing for BSGS-Based Privacy-Preserving Convolutional Neural Network Inference

    Kanyu Ye (Shandong Univeristy), Haoping Yang (Shandong Univeristy), Honghui You (Shandong University), Yusi Chen (Shandong University), Lei Ju (Shandong University), Zhuoran Ji (Shandong University)

  • (B#7568) Tricycle: Private Transformer Inference with Tricyclic Encodings

    Lawrence Lim (UC Santa Barbara), Vikas Kalagi (UC Santa Barbara), Julia Novick (UC Santa Barbara), Jiaming Liu (UC Santa Barbara), Divyakant Agrawal (UC Santa Barbara), Amr El Abbadi (UC Santa Barbara)

Session D3 SW
Vulnerability analysis

Room 3 · Nov. 17 · –

  • (A#27) Demystifying GhostTap: Breaking Android Tapjacking Defenses by Exploiting State Inconsistencies

    Yanjie Zhao (Huazhong University of Science and Technology), Zhiyuan Yang (Huazhong University of Science and Technology), Weimin Cheng (Independent Researcher), Sheng Cao (Huazhong University of Science and Technology), Hao Zhou (The Hong Kong Polytechnic University), Haoyu Wang (Huazhong University of Science and Technology)

  • (A#195) DynOP: Blow Away the Cobwebs in NX Bypassing with Dynamic-Source Gadget Oriented Programming

    Hong Guo (National University of Defense Technology), Ruipeng Wang (National University of Defense Technology), Shiwen Ou (National University of Defense Technology), Songtao Yang (Zhongguancun Laboratory), Yu Chen (National University of Defense Technology), TaiYan Wang (National University of Defense Technology), Zexiang Zhang (National University of Defense Technology), Yuwei Li (National University of Defense Technology), Yang Li (National University of Defense Technology), Zulie Pan (National University of Defense Technology)

  • (A#462) CVE-Genie: An LLM-Based Multi-Agent Framework for Reproducing CVEs

    Saad Ullah (Boston University), Praneeth Balasubramanian (University of California, Santa Barbara), Wenbo Guo (University of California, Santa Barbara), Amanda Burnett (Arizona State University), Hammond Pearce (University of New South Wales), Christopher Kruegel (University of California, Santa Barbara), Giovanni Vigna (University of California, Santa Barbara), Gianluca Stringhini (Boston University)

  • (A#1527) From Fix to Flaw: Understanding and Revealing Incomplete Patches for Link Following Vulnerabilities

    Bocheng Xiang (Fudan University), Yuan Zhang (Fudan University), Hao Huang (Fudan university), Youkun Shi (Fudan University)

  • (B#150) One Resource to Break Them All: Exploiting Malformed Resources for Permanent Denial-of-Service in Android

    Sheng Cao (Huazhong University of Science and Technology), Hao Zhou (The Hong Kong Polytechnic University), Yanjie Zhao (Huazhong University of Science and Technology), Tianming Liu (Huazhong University of Science and Technology), Songzhou Shi (Guangdong Baiyun University), Haoyu Wang (Huazhong University of Science and Technology)

  • (B#3497) From Prompt to Pwn: Exploiting GPU Memory Errors During ML Inference

    Jonas Roels (KU Leuven), Adriaan Jacobs (KU Leuven), Silviu Vlasceanu (Independent researcher), Mahmoud Ammar (Independent researcher), Stijn Volckaert (KU Leuven)

  • (B#4346) Foot in the Door: Uncovering the Multi-Step Authorization Exploitation in Mobile Applications

    Yizhe Shi (Fudan University), Zhemin Yang (Fudan University), Qiaodan Hou (Fudan University), Lukai Cui (Fudan University), Cheng Sheng (Fudan University), Xiaohan Zhang (Fudan University), Min Yang (Fudan University)

  • (B#8321) Lost in Migration: Exposing Android Framework Vulnerabilities in Parallel Java-Kotlin Implementations

    Rui Li (Singapore Management University), Wenrui Diao (Shandong University), Debin Gao (Singapore Management University)

Session D4 AC
Secure multiparty computation

Room 4 · Nov. 17 · –

  • (A#865) Mosaic: A Modular Framework for Private Fuzzy Heavy Hitters

    Gayathri Garimella (Brown University), Peihan Miao (Brown University), Eileen Nolan (Brown University), Phuoc Van Long Pham (Brown University), Siddarth Sitaraman (Brown University)

  • (A#1895) Accelerating Multiparty Noise Generation Using Lookups

    Fredrik Meisingseth (Graz University of Technology), Christian Rechberger (Graz University of Technology), Fabian Schmid (Graz University of Technology)

  • (A#1936) Efficient Private Filtering and Aggregation for Weighted Set Intersection via Oblivious Encrypted Weight Transfer

    Xiaodong Wang (Tsinghua University), Shengzhe Meng (Tsinghua University), Zijie Lu (Xi'an Jiaotong-Liverpool University), Bei Liang (Beijing Institute of Mathematical Sciences and Applications)

  • (B#232) Tempora-Fusion: Time-Lock Puzzle with Efficient Verifiable Homomorphic Linear Combination

    Aydin Abadi (Newcastle University), Jakub K. Szeląg (Newcastle University)

  • (B#1055) Meta-PBS: Compact High-Precision Programmable Bootstrapping

    Shihe Ma (Tsinghua University), Tairong Huang (Tsinghua University), Anyu Wang (Tsinghua University), Changtong Xu (Ant Group), Tao Wei (Ant Group), Xiaoyun Wang (Tsinghua University)

  • (B#3316) Duty-Free Bits: Projectivizing Garbling Schemes

    Nakul Khambhati (University of California, Los Angeles), Anwesh Bhattacharya (University of Illinois, Urbana-Champaign), David Heath (University of Illinois, Urbana-Champaign)

  • (B#3558) Communication-Efficient Private Join and Compute over Distributed Input Sets

    Yunqing Sun (Northwestern University), Xinran Cai (Tsinghua University), Hanlin Liu (Northwestern University), Xiao Wang (Northwestern University), Wei Dong (Nanyang Technological University)

  • (B#3792) Structure-Aware CKKS Bootstrapping via L1-Regularized Polynomial Optimization

    Zihui Gu (SUN YAT-SEN UNIVERSITY), Peijia Zheng (SUN YAT-SEN UNIVERSITY), Jiwu Huang (Shenzhen MSU-BIT University), Xiaochun Cao (Sun Yat-Sen University)

Session D5 USE
Security and privacy measurement

Room 5 · Nov. 17 · –

  • (A#1644) Blue Bubbles, Red Flags: Investigating Privacy Leakage in Apple iMessage

    Viktor E. Garske (University of Applied Sciences Stralsund), Swantje Lange (Hasso Plattner Institute, University of Potsdam), Gabriel K. Gegenhuber (Interdisciplinary Transformation University (IT:U)), David Schmidt (University of Vienna), Andreas Noack (University of Applied Sciences Stralsund), Jiska Classen (Hasso Plattner Institute, University of Potsdam)

  • (A#2983) Detecting and Measuring Client- and Server-Side Google Tag Manager and its Tags in 80K Websites

    Gilles Mertens (Inria), Nataliia Bielova (Inria), Vincent Roca (Inria), Ahmed Bouhoula (ETH Zurich), Marouane Akassab (Inria)

  • (B#203) Dissecting Apple's Lockdown Mode: A Cross-Platform, Multi-Version Analysis

    Marie Fischer (Hasso Plattner Institute, University of Potsdam), Jiska Classen (Hasso Plattner Institute, University of Potsdam)

  • (B#1384) When Ad Networks Misbehave: Understanding Risks of Semi-Drive-By Splash Ads

    Song Wu (Independent Researcher), Bo Wang (Independent Researcher), Yifan Zhang (San Diego State University), Yinfeng Cao (The Hong Kong Polytechnic University), Xueqiang Wang (University of Central Florida)

  • (B#1786) When Apps Outlive Vendors: Security Implications of IoT Abandonware

    Dayeon Kang (University of Massachusetts Amherst), Elvis Yeboah-Duako (University of Massachusetts Amherst), Sachin Thomas (University of Massachusetts Amherst), Pubali Datta (University of Massachusetts Amherst)

  • (B#2856) Detecting and Measuring gclid-Based Tracking on the Web

    Huy Pham (The Graduate University for Advanced Studies), Kensuke Fukuda (National Institute of Informatics), Ha Dao (Max Planck Institute for Informatics)

  • (B#3122) PrivEscalate: Measuring and Augmenting the Threat of LLM-Automated Linux Privilege Escalation

    Yixuan Liu (Nanyang Technological University), Zilong Zhen (Nanyang Technological University), Yin Wu (Xi'an Jiaotong University), Yi Li (Nanyang Technological University)

  • (B#3880) A Qualitative Study on Ethics Perspectives in Cryptography Research

    Maria Hellenthal (CISPA Helmholtz Centre for Information Security), Thorsten Helfer (CISPA Helmholtz Center for Information Security), Doreen Riepel (CISPA Helmholtz Centre for Information Security), Annabelle Walle (CISPA Helmholtz Center for Information Security), Jannik Zeiser (CISPA Helmholtz Center for Information Security), Til Dralle (CISPA Helmholtz Center for Information Security), Sascha Fahl (CISPA Helmholtz Center for Information Security)

Session D6 HW
Hardware security

Room 6 · Nov. 17 · –

  • (A#503) HysterAuth: A Robust and Frictionless Continuous Authentication Framework via Diffusion Augmentation and Hysteresis Decision

    Junchao Ma (Institute of Information Engineering, Chinese Academy of Sciences), Kun Zhang (Institute of Information Engineering, Chinese Academy of Sciences), Haiqiang Li (Tianyi Telecom Terminal Co. Ltd.), Zeyu Li (Institute of Information Engineering, Chinese Academy of Sciences), Yanchang Feng (Institute of Information Engineering, Chinese Academy of Sciences), Xuefei Chen (Institute of Information Engineering, Chinese Academy of Sciences), Mingming Hu (Yellow River Henan Bureau), Bibo Tu (Institute of Information Engineering, Chinese Academy of Sciences)

  • (A#760) VeriPRAC: Verifiable Formal Contracts for Secure Per Row Activation Counting

    Ali Hajiabadi (ETH Zurich), Silvan Niederer (ETH Zurich), Kaveh Razavi (ETH Zurich)

  • (A#1331) Head Unit at Risk: Cross-Domain Attacks via In-Vehicle Infotainment Systems

    Yanbo Xu (Shanghai Jiao Tong University), Yan Meng (Shanghai Jiao Tong University), Guoxing Chen (Shanghai Jiao Tong University), Haojin Zhu (Shanghai Jiao Tong University)

  • (A#1740) Proving Circuit Functional Equivalence in Zero Knowledge

    Sirui Shen (Centrum Wiskunde & Informatica), Zunchen Huang (Centrum Wiskunde & Informatica), Chenglu Jin (Centrum Wiskunde & Informatica)

  • (B#332) Watch and Crack: Password Inference from Smart-Glasses Video

    Yoav Orenbach (Tel Aviv University), Avishai Wool (Tel Aviv University)

  • (B#766) From Fault to Oracle: Breaking Google Pixel TPU Hardware Memory Isolation via Trusted Deserialization Faults

    Minghao Lin (University of Southern California), Guanxing Wen (Certified Kernel Tech LLC), Haoxuan Xu (University of Southern California), Yuzhou Fang (University of Southern California), Nanzi Yang (Old Dominion University), Xiaokuan Zhang (George Mason University), Yanan Guo (University of Rochester), Zhuo Zhang (Columbia University), Mengyuan Li (University of Southern California)

  • (B#867) Shadow Tokens: Uncovering the Broken Permission Revocation Vulnerability in Intelligent Connected Vehicles

    Yanbang Sun (Tianjin University), Hebo Leng (QI-ANXIN), Qiang Hu (Tianjin University), Xiaofei Xie (Singapore Management University), Jiongchi Yu (Singapore Management University), Ruitao Feng (Southern Cross University), Guangzheng Yao (QI-ANXIN), Weijia Cai (QI-ANXIN), Quanzhou Wang (QI-ANXIN), Xiaohong Li (Tianjin University), Junjie Wang (Tianjin University)

  • (B#1336) Hello Again: Exploiting Replay Protected Monotonic Counters to Brute-Force Windows Hello PINs

    Christian Werling (Technische Universität Berlin), Matti Finder (Technische Universität Berlin), Hans Niklas Jacob (Technische Universität Berlin), Julian Prein (Technische Universität Berlin), Niclas Kühnapfel (Technische Universität Berlin), Jean-Pierre Seifert (Technische Universität Berlin)

Session D8 BD
Network and distributed system security

Room 8 · Nov. 17 · –

  • (A#372) BABE: Verifying Proofs on Bitcoin Made 1000x Cheaper

    Sanjam Garg (University of California, Berkeley), Dimitris Kolonelos (University of California, Berkeley), Mikhail Sergeevitch (Babylon Labs), Srivatsan Sridhar (Byzantine Research), David Tse (Byzantine Research)

  • (A#835) Braid: Sybil-Resistant Decentralized Identity with Trustless Key Recovery and Non-Transferable Anonymous Credentials

    Rui Song (The Hong Kong Polytechnic University), Tianyu Zheng (The Hong Kong Polytechnic University), Shang Gao (The Hong Kong Polytechnic University), Guyue Li (Southeast University), Xue Liu (McGill University), Bin Xiao (The Hong Kong Polytechnic University)

  • (A#1694) AuditPay: Anonymous Payments with Controlled Oversight

    Elkana Tovey (Hebrew University), Yossi Gilad (Hebrew University), Aviv Zohar (Hebrew University)

  • (A#2028) Lether: Practical Post-Quantum Account-Based Private Blockchain Payments

    Hongxiao Wang (The University of Hong Kong), Muhammed F. Esgin (Monash University), Ron Steinfeld (Monash University), Siu-Ming Yiu (The University of Hong Kong)

  • (A#2516) Beyond Anonymity Sets: A Security Model for Distributed Shuffling in Adversarial Environments

    Adrian Cinal (NASK National Research Institute), Oliwer Sobolewski (NASK National Research Institute), Gabriel Wechta (NASK National Research Institute), Filip Zagórski (University of Wroclaw)

  • (A#2578) The Billion Dollar Merkle Tree

    Thomas Coratger (Ethereum Foundation), Dmitry Khovratovich (Ethereum Foundation), Bart Mennink (Maastricht University), Benedikt Wagner (Ethereum Foundation)

  • (B#858) Thunderbolt: Fast Asynchronous Off-Chain Bitcoin Transfers

    Hongbo Wen (University of California, Santa Barbara), Hanzhi Liu (University of California, Santa Barbara), Yanju Chen (University of California, San Diego), Jingyu Ke (Shanghai Jiao Tong University), Dahlia Malkhi (University of California, Santa Barbara), Yu Feng (University of California, Santa Barbara)

  • (B#2045) BitVM3: Efficient Bitcoin Bridges via Garbled Circuits

    Robin Linus Woll (Stanford University), Ioannis Alexopoulos (TU Wien), Lukas Aumayr (University of Edinburgh), Zeta Avarikioti (TU Wien), Matteo Maffei (TU Wien), David Tse (Stanford University)

Session D9 FMPL
Formal analysis and verification

Room 9 · Nov. 17 · –

  • (A#1434) Automated Side-Channel Analysis of Cryptographic Protocol Implementations

    Faezeh Nasrabadi (CISPA Helmholtz Center for Information Security), Robert Künnemann (CISPA Helmholtz Center for Information Security), Hamed Nemati (KTH Royal Institute of Technology)

  • (A#1869) A Sound Translation from Tamarin to ProVerif: Enabling Comparative Analysis

    Kevin Morio (CISPA Helmholtz Center for Information Security), Yavor Ivanov (CISPA Helmholtz Center for Information Security), Robert Künnemann (CISPA Helmholtz Center for Information Security)

  • (B#610) Accountability in Certificate Transparency and Variants

    Timo Treitz (Saarland University), Robert Künnemann (CISPA Helmholtz Center for Information Security)

  • (B#628) CV2F*: Combining CryptoVerif and F* for Proving Security of Protocol Implementations

    Bruno Blanchet (Inria), Aymeric Fromherz (Inria), Charlie Jacomme (Université de Lorraine, CNRS, Inria), Benjamin Lipp (Rosenpass e. V.), Emmanuel Mera (ENS Paris-Saclay)

  • (B#2417) Enforcement of In-Kernel Stateful Security Policies via eBPF

    Letterio Galletta (IMT School for Advanced Studies Lucca)

  • (B#3751) Formal Verification of Circuit-Soundness in zkWasm, a General Purpose zkVM

    Vilhelm Sjöberg (CertiK), Roger Bai (CertiK), Hao Chen (CertiK), Xifeng Jin (CertiK), Zhaozhong Ni (NVIDIA), Sinka Gao (Delphinus Lab pty ltd), Ronghui Gu (Columbia University), Zhong Shao (Yale University)

  • (B#5087) Lex: Turning Laws into Enforceable Security Policies

    François Hublet (ETH Zürich), Jakob Merane (ETH Zürich), Jonas Degelo (ETH Zürich), Wei-En Hsieh (ETH Zürich), Srđan Krstić (University of Copenhagen), David Basin (ETH Zürich)

–

Technical Session #E
Session E1 ML
ML attacks and defenses in natural language processing

Room 1 · Nov. 17 · –

  • (A#182) DRIP: Defending Prompt Injection via Token-wise Representation Editing and Residual Fusion

    Ruofan Liu (National University of Singapore), Yun Lin (Shanghai Jiao Tong University), Zhiyong Huang (National University of Singapore), Jin Song Dong (National University of Singapore)

  • (A#357) Token Buncher: Shielding LLMs from Harmful Reinforcement Learning Fine-Tuning

    Weitao Feng (Nanyang Technological University), Lixu Wang (Nanyang Technological University), Peizhuo Lv (Nanyang Technological University), Tianyi Wei (Nanyang Technological University), Jie Zhang (CFAR and IHPC, A*STAR), Chongyang Gao (Northwestern University), Sinong Simon Zhan (Northwestern University), Wei Dong (Nanyang Technological University)

  • (A#405) Understanding and Mitigating Prompt Leaking Attacks in Real-World LLM-Based Applications

    Yong Yang (Zhejiang University), Chong Fu (Zhengzhou University), Tong Zhang (Zhejiang University), Rui Zeng (Zhejiang University), Qingming Li (Zhejiang University), Tianyu Du (Zhejiang University), Zonghui Wang (Zhejiang University), Shouling Ji (Zhejiang University), Wenzhi Chen (Zhejiang University)

  • (A#1221) ReasoningBomb: A Stealthy Denial-of-Service Attack by Inducing Pathologically Long Reasoning in Large Reasoning Models

    Xiaogeng Liu (Johns Hopkins University), Xinyan Wang (University of Wisconsin–Madison), Yechao Zhang (Nanyang Technological University), Sanjay Kariyappa (NVIDIA Corporation), Chong Xiang (NVIDIA Corporation), Muhao Chen (University of California, Davis), G. Edward Suh (NVIDIA Corporation), Chaowei Xiao (Johns Hopkins University)

  • (A#3324) One Leak Away: How Pretrained Model Exposure Amplifies Jailbreak Risks in Finetuned LLMs

    Yixin Tan (Institute of Science Tokyo), Yu Zhe (RIKEN Center for Advanced Intelligence Project), Rui Wen (Institute of Science Tokyo), Jun Sakuma (Institute of Science Tokyo)

  • (B#839) Multimodal Resource-Exhaustion Attacks on Vision-Language Models via Joint Pixel-Prompt Optimization

    Zhaoxiong Ni (Guangzhou University), Yatie Xiao (Guangzhou University), Chi-Man Pun (University of Macau), Fei Peng (Guangzhou University), Qingxiao Guan (Guangzhou University), Keke Tang (Guangzhou University)

  • (B#3771) Jailbreaking via Activation Dilution: Neuron-Guided Adaptive Decomposition of Language Models

    Jiahang Wang (Stevens Institute of Technology), Chenglong Fu (University of North Carolina at Charlotte), Xiaojiang Du (Stevens Institute of Technology), Bo Luo (The University of Kansas)

  • (B#5757) Logit Laundering: Evading Data-Use Auditing in Large Language Models

    Ruihan Hu (Beijing University of Posts and Telecommunications), Wei Luo (Beijing University of Posts and Telecommunications), Yu-Ming Shang (Beijing University of Posts and Telecommunications), Jiakai Wang (Zhongguancun Laboratory), Chuxuan Zhang (Beijing University of Posts and Telecommunications), Mei Li (Beijing University of Posts and Telecommunications), Xi Zhang (Beijing University of Posts and Telecommunications), Meikang Qiu (Augusta University)

Session E2 AC
Threshold cryptography

Room 2 · Nov. 17 · –

  • (A#923) Relect: Single Secret Leader Election via FHE with Reduced Computation and Communication and Transparent Setup

    Haofei Liang (Shanghai Jiao Tong University), Zeyu Liu (Yale University), Yunhao Wang (Yale University), Xiang Xie (East China Normal University), Yu Yu (Shanghai Jiao Tong University), Fan Zhang (Yale University)

  • (A#1226) Olingo: Threshold Lattice Signatures with DKG and Identifiable Abort

    Kamil Doruk Gur (Norwegian University of Science and Technology), Patrick Hough (Universität der Bundeswehr München), Jonathan Katz (Google), Caroline Sandsbråten (Norwegian University of Science and Technology), Tjerand Silde (Norwegian University of Science and Technology)

  • (A#1982) Thresholdizing Standardized FALCON Signatures

    Radhika Garg (Northwestern University), Daniel Escudero (TACEO), Antigoni Polychroniadou (JPMorgan AI Research), Akira Takahashi (JPMorgan AI Research), Xiao Wang (Northwestern University)

  • (A#4758) On the Pitfalls of Modeling Individual Knowledge

    Wojciech Ciszewski (University of Warsaw), Stefan Dziembowski (University of Warsaw), Tomasz Lizurej (NASK Institute), Marcin Mielniczuk (University of Warsaw)

  • (B#697) BeaverDam: A Post-Quantum Threshold Key Recovery Protocol from a One-Time Threshold Oblivious Random Function

    Benedikt Auerbach (PQShield), Shuichi Katsumata (PQShield), Kaoru Takemure (PQShield), Ida Tucker (PQShield)

  • (B#1526) High-throughput Verifiable Distributed OPRF from Gold PRF

    Nan Cheng (University of St. Gallen), Yohei Watanabe (The University of Electro-Communications), Yugo Kasashima (The University of Electro-Communications), Ioannis Katis (University of St. Gallen), Aikaterini Mitrokotsa (University of St. Gallen)

  • (B#2093) LoTRS: Practical Post-Quantum Structured Threshold Ring Signatures from Lattices

    Nikai Jagganath (Monash University), Muhammed F. Esgin (Monash University), Ron Steinfeld (Monash University), Amin Sakzad (Monash University), Markku-Juhani O. Saarinen (Tampere University), Dongxi Liu (CSIRO)

  • (B#6089) THED: Threshold Dilithium from FHE

    Jai Hyun Park (CryptoLab Inc.), Alain Passelègue (CryptoLab Inc.), Damien Stehlé (CryptoLab Inc.)

Session E3 SW
Software hardening

Room 3 · Nov. 17 · –

  • (B#68) Efficient Linkage-Based Compartmentalization on CHERI

    Dapeng Gao (University of Cambridge), John Baldwin (Ararat River Consulting), Jessica Clarke (University of Cambridge), Nicholas C. Connolly (Arm Limited), Brooks Davis (Capabilities Limited), Franz A. Fuchs (University of Cambridge), Alfredo Mazzinghi (University of Cambridge), Daniel Moghimi (Google), Peter Rugg (University of Cambridge), Domagoj Stolfa (University of Cambridge), Konrad Witaszczyk (University of Cambridge), Simon W. Moore (University of Cambridge), Robert N. M. Watson (University of Cambridge)

  • (B#1152) PoisonCap: Efficient Hierarchical Temporal Safety for CHERI

    Yuecheng Wang (University of Cambridge), Jonathan Woodruff (University of Cambridge, Capabilities Limited), Alfredo Mazzinghi (University of Cambridge, Capabilities Limited), Peter Rugg (University of Cambridge, Capabilities Limited), Alexandre Joannou (University of Cambridge, Capabilities Limited), Samuel W. Stark (University of Cambridge), Robert N. M. Watson (University of Cambridge, Capabilities Limited), Simon W. Moore (University of Cambridge, Capabilities Limited)

  • (B#6102) Mind the Heap: Preventing Capability Leakage Across CHERI Compartments

    Seyedhamed Ghavamnia (Bloomberg), Maurice D. Hanisch (Caltech), Julien Vanegue (Bloomberg)

  • (A#207) PhantomSeal: Proactive Deepfakes Defense with Identity/Context Protection and Forensic Tracing

    Liangqin Ren (The University of Kansas), Zeyan Liu (University of Louisville), Ye Wang (The University of Kansas), Yuxin Chen (The University of Chicago), Fengjun Li (The University of Kansas), Bo Luo (The University of Kansas)

  • (A#1304) N00B: Bounds Checking for the Masses

    Adriaan Jacobs (KU Leuven), Carlo Ramponi (University of Trento), Jonas Roels (KU Leuven), Bruno Crispo (University of Trento), Silviu Vlasceanu (Huawei Research), Mahmoud Ammar (Huawei Research), Stijn Volckaert (KU Leuven)

  • (A#1518) Mitigating Code Injection Attacks on Modern GPUs

    Carlo Ramponi (University of Trento), Adriaan Jacobs (KU Leuven), Luigi Dell'Eva (University of Trento), Stijn Volckaert (KU Leuven), Silviu Vlasceanu (Huawei Research), Mahmoud Ammar (Huawei Research), Bruno Crispo (University of Trento)

  • (B#1333) Enforcing XoM on x86-64 via Strict Code and Data Separation

    Hongtao Wu (Wuhan University), Zuquan Peng (Wuhan University), Ziheng Chai (Wuhan University), Mengfei Xie (Wuhan University), Yan Lin (Jinan University), Jianming Fu (Wuhan University), Guojun Peng (Wuhan University)

  • (B#4819) Characterizing and Detecting Bugs at the Interfaces of OpenBSD Privilege-Separated Programs

    Shibo Ai (University of British Columbia), Shao Chen Zhang (University of British Columbia), Hugo Lefeuvre (University of British Columbia), Margo Seltzer (University of British Columbia)

Session E4 AC
Privacy

Room 4 · Nov. 17 · –

  • (A#702) Decoupled TFHE-type Functional Bootstrapping

    Zhihao Li (Ant Group), Xuan Shen (Institute of Information Engineering, CAS; UCAS), Xianhui Lu (Institute of Information Engineering, CAS; UCAS), Ruida Wang (Institute of Information Engineering, CAS; UCAS), Yuan Zhao (Ant Group), Zhiwei Wang (Institute of Information Engineering, CAS; UCAS)

  • (A#708) The SecureDrop Protocol: End-to-End Encrypted Whistleblowing for All

    Giulio Berra (Freedom of the Press Foundation), Felix Linker (ETH Zurich), Luca Maier (ETH Zurich), Cory Francis Myers (Freedom of the Press Foundation), Kenneth G. Paterson (ETH Zurich), Rowen Shane (Freedom of the Press Foundation), Shannon Veitch (ETH Zurich)

  • (B#2071) Abuse Reporting and Enforcement for Third Party Moderators in Private Messaging

    Matthew Gregoire (University of North Carolina at Chapel Hill), Jade Keegan (University of North Carolina at Chapel Hill), Saba Eskandarian (University of North Carolina at Chapel Hill)

  • (B#2219) NTPIR: Efficient Silent-Preprocessing PIR using NTRU

    Zhihao Li (Ant Group), Cheng Hong (Ant Group)

  • (B#2733) StOMR: Stateful Oblivious Message Retrieval

    Charles Gouert (NVIDIA), Keewoo Lee (Ethereum Foundation), Dimitris Mouris (Snap Inc.), Yiannis Tselekounis (Royal Holloway, University of London), Jean-Luc Watson (NVIDIA)

  • (B#2782) PAPER: Privacy-Preserving Convolutional Neural Networks using Low-Degree Polynomial Approximations and Structural Optimizations on Leveled FHE

    Eduardo Chielle (NYU Abu Dhabi), Manaar Alam (NYU Abu Dhabi), Jinting Liu (NYU Shanghai), Jovan Kascelan (NYU Abu Dhabi), Michail Maniatakos (NYU Abu Dhabi)

  • (B#3382) sPAR: (Somewhat) Practical Anonymous Router

    Debajyoti Das (Lund University), Jeongeun Park (NTNU), Hyewon Sung (Ewha Womans University)

Session E5 USE
Usable security and privacy

Room 5 · Nov. 17 · –

  • (A#641) You Can't Talk Your Way Out of Cyber Extortion: An Empirical Study of Ransomware Negotiations

    Tom Meurs (Dutch Police), Edward Cartwright (De Montfort University), Anna Cartwright (Independent researcher), Harold Houba (Vrije Universiteit University), Daniel W. Woods (University of Edinburgh)

  • (A#863) Stop My Dancing! Understanding, Detecting and Attributing Motion-Aware Deepfake Videos

    Fazhong Liu (Shanghai Jiao Tong University), Yan Meng (Shanghai Jiao Tong University), Tian Dong (Shanghai Jiao Tong University), Guoxing Chen (Shanghai Jiao Tong University), Haojin Zhu (Shanghai Jiao Tong University)

  • (B#1645) Between Risk, Recognition, and Necessity: How Open-Source Project Maintainers Perceive and Navigate CVEs Through Reporting and Resolving Vulnerabilities

    Jessy Ayala (University of California, Irvine), Steven Ngo (University of California, Irvine), Joshua Garcia (University of California, Irvine)

  • (B#2425) Coverage Illusion: Measuring Android TLS Instrumentation Gaps

    Abhinav Saxena (University of Calgary), Joel Reardon (University of Calgary)

  • (B#4807) No One Cares About Privacy But You: Understanding Data Deletion Practices in the App-in-App Ecosystem

    Yizhe Shi (Fudan University), Zhemin Yang (Fudan University), Houliang Wan (Fudan University), Chongxin Hu (Fudan University)

  • (B#5042) PriMobiBench: Characterizing Visual Privacy Leakage in VLM-Driven Mobile GUI Agents

    Qihang Cen (Tsinghua University), Tianshuo Cong (Shandong University), Da Song (Shandong University), Xinlei He (Wuhan University), Jiaxing Song (Tsinghua University), Ke Xu (Tsinghua University), Qi Li (Tsinghua University)

  • (B#5724) 'They don't care about this': A Systematic Study of TEE Build Reproducibility in the Wild

    Annika Wilde (Ruhr University Bochum), Marco Gutfleisch (LMU Munich), Felix Reichmann (Ruhr University Bochum), Anirban Chakraborty (Max Planck Institute for Security and Privacy), Yuval Yarom (Ruhr University Bochum), M. Angela Sasse (Ruhr University Bochum), Ghassan Karame (Ruhr University Bochum)

  • (B#6619) 'Only This Time' Illusion: Exposing and Mitigating Stealth Location Tracking in Android's One-Time Permission Model

    Shahriar Rahman Khan (Kent State University), Tariqul Islam (University of Maryland, Baltimore County), Raiful Hasan (Kent State University)

Session E6 HW
IoT and embedded system security

Room 6 · Nov. 17 · –

  • (A#177) FirmCred: Detecting Authentication Bypass Vulnerabilities in Firmware from Credential Initialization Perspective

    Ziqi Wei (Fudan University), Haoyu Xiao (Fudan University), Yuan Zhang (Fudan University), Chi Chen (Fudan University), Jiarun Dai (Fudan University)

  • (A#276) GhostTac: Manipulating Tactile Sensors without Physical Contact

    Kun Wang (Zhejiang University), Xuancun Lu (Zhejiang University), Ruochen Zhou (The Hong Kong University of Science and Technology), Kai Wang (Zhejiang University), Tongjun Ye (Zhejiang University), Yihao Shao (Zhejiang University), Chen Yan (Zhejiang University), Xiaoyu Ji (Zhejiang University), Wenyuan Xu (Zhejiang University)

  • (A#1782) CameraBlinder: Blinding Wireless Security Cameras Using a Low-Power Laser

    Yan He (University of Oklahoma), Guanchong Huang (University of Oklahoma), Yao Liu (University of South Florida), Song Fang (University of Oklahoma)

  • (B#1341) BoardRunner: Automatic Firmware Rehosting Using High-Fidelity Compositional Device Models

    Muhammad Hammad Bashir (The Pennsylvania State University), Michael Rooney (Purdue University), Colin Smith (The Pennsylvania State University), Dongyan Xu (Purdue University), Arslan Khan (The Pennsylvania State University)

  • (B#1385) InnerChecker: Discovering Vulnerabilities in Underexplored Internal Services of IoT Firmware

    Yeqi Mou (National University of Defense Technology), Runhao Liu (National University of Defense Technology), Bo Yu (National University of Defense Technology), Jiarun Dai (Fudan University), Yifu Hou (Fudan University), Wei Peng (National University of Defense Technology), Baosheng Wang (National University of Defense Technology)

  • (B#1913) PhantomTac: Hijacking Robotic Tactile Systems with Deploy-and-forget Tags

    Binbin Zhang (Shanghai Jiao Tong University), Yifeng Zhang (Shanghai Jiao Tong University), Xiaomeng Chen (Shanghai Jiao Tong University), Dongyao Chen (Singapore Management University)

  • (B#3736) Grid Trouble in Paradise: Uncovering Vulnerable Distributed Energy Resources and Their Grid-Level Risks

    Anna Raymaker (Georgia Institute of Technology), Samuel Talkington (Georgia Institute of Technology), Zeezoo Ryu (Georgia Institute of Technology), Richard Asiamah (Georgia Institute of Technology), Emad Abukhousa (Georgia Institute of Technology), Betelihem Ashebo (Georgia Institute of Technology), Animesh Chhotaray (Georgia Institute of Technology), Daniel K. Molzahn (Georgia Institute of Technology), Frank Li (Georgia Institute of Technology), Saman Zonouz (Georgia Institute of Technology), Raheem Beyah (Georgia Institute of Technology)

  • (B#4223) IoTProber: Internet-scale IoT Device Identification Based on Hierarchical Graph Retrieval-Augmented Generation

    Hai Lin (Tsinghua University), Chenglong Li (Tsinghua University), Wenjian Zhang (Tsinghua University), Jiahai Yang (Tsinghua University), Zhiliang Wang (Tsinghua University)

Session E8 NET
Network protocol analysis

Room 8 · Nov. 17 · –

  • (A#360) Diagnosing Programmable Data Plane Attacks with Provenance Observability

    Dhiraj Saharia (Georgetown University), Ashish Gehani (SRI International), Vinod Yegneswaran (SRI International), Benjamin E. Ujcich (Georgetown University)

  • (A#726) RT-MD: Host-Centric Real-Time Detection of Multi-Domain DNS Data Exfiltration

    Pengfei Ren (University of Science and Technology of China), Lutong Chen (University of Science and Technology of China), Xuanbo Huang (Xi'an Jiaotong University), Jiankang Sun (University of Science and Technology of China), Huanjie Zhang (University of Science and Technology of China), Jian Li (University of Science and Technology of China), Kaiping Xue (University of Science and Technology of China)

  • (A#1595) eMicro: Real-Time Multi-Hop Access Control for Microservices with eBPF

    Rizky Ramadhana Putra (Virginia Tech), Osama Bajaber (King Abdulaziz University), Saimon Amanuel Tsegai (Virginia Tech), Teryl Taylor (IBM Research), Frederico Araujo (IBM Research), Yuede Ji (UT Arlington), Peng Gao (Virginia Tech)

  • (A#2394) Hydra: A Security Analysis Framework for TCP via Auto-Scaling FSMs

    Ao Wang (Southeast University), Xuewei Feng (Tsinghua University), Yuxiang Yang (Tsinghua University), Yinchao Zhang (Tsinghua University), Qi Li (Tsinghua University), Guang Cheng (Southeast University), Weiqiang Wang (Ant Group), Ke Xu (Tsinghua University)

  • (B#183) Crossing the Streams: SSH Plaintext Recovery via a Common Compression Context in Multiplexed Channels

    Fabian Bäumer (Ruhr University Bochum), Marcus Brinkmann (Ruhr University Bochum)

  • (B#1171) ZK-eSIM: A Privacy-Centric Zero-Knowledge Approach for eSIM Provisioning

    Liza Ahmad (University of Sheffield), Quan Shi (National University of Singapore), Joshua Haworth (University of Sheffield), Yilu Dong (Pennsylvania State University), Prosanta Gope (University of Sheffield), Behzad Abdolmaleki (University of Sheffield), Syed Rafiul Hussain (Pennsylvania State University)

  • (B#2356) PhantomChannel: A Parasitic Covert Channel via a Parsing-Boundary Blind Spot in BLE Link-Layer Traffic

    Xu Zhang (Institute of Information Engineering, Chinese Academy of Sciences), Ming Zhou (Nanjing University of Aeronautics and Astronautics), Meng Zhang (Institute of Information Engineering, Chinese Academy of Sciences), Dong Wei (Institute of Information Engineering, Chinese Academy of Sciences), Haining Wang (Virginia Tech), Qiaoyu Zhang (Institute of Information Engineering, Chinese Academy of Sciences)

Session E9 WEB
Web application security

Room 9 · Nov. 17 · –

  • (A#1359) PHPBench: Automated Generation of Verifiable and Hierarchical Benchmarks for PHP Web Fuzzing

    Youkun Shi (Fudan University), Yuan Zhang (Fudan University), Lei Zhang (Fudan University), Jiarun Dai (Fudan University), Tianhao Bai (Fudan University), Fengyu Liu (Fudan University), Bocheng Xiang (Fudan University), Xiapu Luo (The Hong Kong Polytechnic University), Min Yang (Fudan University)

  • (B#530) EXRPOSE: Runtime UI-based Attack Detection in WebXR

    Chandrika Mukherjee (Purdue University), Aishwarya Devi Akila Pandian (Purdue University), Arjun Arunasalam (Florida International University), Jiasi Chen (University of Michigan), Z. Berkay Celik (Purdue University), Habiba Farrukh (University of California, Irvine)

  • (B#619) Repairing ReDoS by Construction: Certified Algebraic Derivation for Language-Preserving Regex Transformation

    Yecheng Sun (Institute of Information Engineering, Chinese Academy of Sciences), Yeting Li (Institute of Information Engineering, Chinese Academy of Sciences), Huina Chao (Institute of Information Engineering, Chinese Academy of Sciences), Zhiwu Xu (Shenzhen University), Lixiao Zheng (Huaqiao University), Qin Mai (Institute of Information Engineering, Chinese Academy of Sciences), Mengcheng Shi (Institute of Information Engineering, Chinese Academy of Sciences), Xinyi Wang (Institute of Information Engineering, Chinese Academy of Sciences), Hengyu Yang (Institute of Information Engineering, Chinese Academy of Sciences), Yang Xiao (Institute of Information Engineering, Chinese Academy of Sciences), Feng Li (Institute of Information Engineering, Chinese Academy of Sciences), Wei Huo (Institute of Information Engineering, Chinese Academy of Sciences)

  • (B#2004) A Large-scale Measurement of In-Page Prompt Injections Against LLM Web Agents

    Soheil Khodayari (Independent Researcher), Xuenan Zhang (CISPA Helmholtz Center for Information Security), Bhupendra Acharya (University of Louisiana), Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security)

  • (B#2379) From Payload to Plugin: Web-Scale Ecosystem Attribution of JavaScript Injection Campaigns

    Ravindu De Silva (University of California, Santa Barbara), Nicholas Shao (University of California, Santa Barbara), Yigitcan Kaya (University of California, Santa Barbara), Mingxuan Yao (Georgia Institute of Technology), Yanick Fratantonio (Google), Luca Invernizzi (Google), Christopher Kruegel (University of California, Santa Barbara), Giovanni Vigna (University of California, Santa Barbara)

  • (B#2416) Uncovering Hidden Attack Surfaces in Web Applications via Semantic-Aware Black-Box Scanning

    Fukun Mei (Tsinghua University), Peiyang Li (Tsinghua University), Miao Chen (Zhongguancun Laboratory), Beijie Hou (Tsinghua University), Ke Xu (Tsinghua University), Qi Li (Tsinghua University)

  • (B#4288) XSS-over-DoH: On the Adverse Side Effects of DoH on Web Security

    Matthias Gierlings (Ruhr University Bochum), Lukas Knittel (Ruhr University Bo­chum), Jörg Schwenk (Ruhr University Bochum), Christian Mainka (University of Wuppertal)

–

Technical Session #F
Session F1 ML
ML attacks and defenses in agentic AI

Room 1 · Nov. 17 · –

  • (A#296) Mind the Gap: Action Rebinding Attacks against Android GUI Agents

    Yi Qian (Nanjing University), Kunwei Qian (Nanjing University), Xingbang He (Nanjing University), Ligeng Chen (Honor Device Co., Ltd), Jikang Zhang (Institute of Dataspace, Hefei Comprehensive National Science Center), Tiantai Zhang (Nanjing University), Haiyang Wei (Nanjing University), Linzhang Wang (Nanjing University), Hao Wu (Nanjing University), Bing Mao (Nanjing University)

  • (B#875) Safeguarding LLM Agents against Long-Horizon Threats via Shadow Memory

    Yuhui Wang (Stony Brook University), Tanqiu Jiang (Stony Brook University), Jiacheng Liang (Stony Brook University), Charles Fleming (Cisco Systems), Ting Wang (Stony Brook University)

  • (B#1325) IntraGuard: Committee-Side Defenses Against Review Outsourcing to Commercial Chatbots

    Oubo Ma (Zhejiang University), Ruixiao Lin (Zhejiang University), Jiahao Chen (Zhejiang University), Yuan Su (Zhejiang University), Yong Yang (Zhejiang University), Shouling Ji (Zhejiang University)

  • (B#5744) MetaMancer: Practical Tool Selection Attacks against LLM Agents

    Wenbin Zhai (The Hong Kong Polytechnic University), Yihao Liu (The Hong Kong Polytechnic University), Dong Wang (The Hong Kong Polytechnic University), Hao Chen (The University of Hong Kong), Bin Xiao (The Hong Kong Polytechnic University)

Session F2 AC
Secure multiparty computation

Room 2 · Nov. 17 · –

  • (A#691) Private Signaling Secure Against Actively Corrupted Servers

    Haotian Chu (Northwestern University), Xiao Wang (Northwestern University), Yanxue Jia (Illinois Institute of Technology)

  • (A#1582) MPCArbiter: Detect Numeric Error Vulnerabilities in MPC Implementations via Distribution-Aware Differential Oracle

    Guopeng Lin (Fudan University), Zhengting Jin (Fudan University), Shuyu Chen (Fudan University), Jingwei Pu (Fudan University), Zheng Qu (Fudan University), Jiaheng Zhang (National University of Singapore), Weili Han (Fudan University)

  • (B#456) One Proof to Rule Them All: Practical, Sublinear Verification for Actively Secure MPC on Z2k with Dishonest Majority and a Dealer

    Andreas Brüggemann (Technical University of Darmstadt), Ariel Nof (Bar-Ilan University), Thomas Schneider (Technical University of Darmstadt)

  • (B#4337) Authenticated Garbling with Tensor Gates

    Nakul Khambhati (University of California, Los Angeles), Turan Vural (University of California, Los Angeles), David Heath (University of Illinois, Urbana-Champaign), Rafail Ostrovsky (University of California, Los Angeles)

Session F3 SW
ML for vulnerability discovery or analysis

Room 3 · Nov. 17 · –

  • (A#1297) PBFuzz: Agentic Directed Fuzzing for PoV Generation

    Haochen Zeng (University of California, Riverside), Andrew Bao (University of Minnesota, Twin Cities), Jiajun Cheng (University of California, Riverside), Chengyu Song (University of California, Riverside)

  • (A#1690) Thinking More, Harnessing Better: Automatic Harness Generation with Dataflow Aggregation and Workflow Decomposition

    Xing Zhang (QI-ANXIN Technology Research Institute), Zikang Huang (Wuhan University), Gang Yang (Information Support Force Engineering University), CongChong Wang (QI-ANXIN Technology Research Institute), Lu Liu (Shandong University), Bin Yin (QI-ANXIN Technology Research Institute), Mingyi Wang (QI-ANXIN Technology Research Institute), Ziquan Zhao (QI-ANXIN Technology Research Institute), Min Li (QI-ANXIN Technology Research Institute), Zhenyu Chen (QI-ANXIN Technology Research Institute), Bo Wu (Information Support Force Engineering University), Lingyun Ying (QI-ANXIN Technology Research Institute)

  • (B#5439) Single Medium, Multiple Perspectives: Exposing and Exploiting Semantic Gaps in AI Services' Media Preprocessing Pipelines

    Yacong Gu (Tsinghua University), Xiangfan Wu (Ocean University of China), Lingyun Ying (QI-ANXIN Technology Research Institute), Yingyuan Pu (QI-ANXIN Technology Research Institute), Haipeng Qu (Ocean University of China), Jianjun Chen (Tsinghua University), Haixin Duan (Quancheng Lab)

  • (B#5631) Global-View Reasoning with LLMs for Real-World Vulnerability Detection

    Xiaozhen Xu (Fudan University), Chaoran Tao (Fudan University), Guangliang Yang (Fudan University), Xinming Guo (Fudan University), Can Li (Fudan University), Yangshuo Bai (Fudan University), Yi Wang (Fudan University)

Session F4 AC
Symmetric cryptography

Room 4 · Nov. 17 · –

  • (A#1050) GALAS: Compact VOLE-in-the-Head Signatures from Subfield Compression

    Guoxiao Liu (Tsinghua University), Yimeng Sun (Shandong University), Zhuoqing Peng (Tsinghua University), Chongxu Ren (Tsinghua University), Guowei Liu (Shandong University), Juntong Lin (Shandong University), Keting Jia (Tsinghua University), Meiqin Wang (Shandong University)

  • (A#1135) New Designs of Multivariate-Polynomial Universal Hash Functions

    Jean Paul Degabriele (Technology Innovation Institute), Jan Gilcher (ETH Zurich), Jérôme Govinden (Technology Innovation Institute), Kenneth G. Paterson (ETH Zurich)

  • (B#3917) Criminology: Refined Techniques for Compression Side-Channel Attacks

    Yuanming Song (ETH Zurich), Lenka Mareková (ETH Zurich), Kenneth G. Paterson (ETH Zurich)

  • (B#6227) Shorter VOLE-in-the-Head-based Signatures from Vector Semi-Commitment

    Seongkwang Kim (Korea University), Byeonghak Lee (Samsung SDS), Mincheol Son (Korea Advanced Institute of Science and Technology)

Session F5 USE
Security and privacy measurement

Room 5 · Nov. 17 · –

  • (B#438) From Snapshot to Snooping: An Empirical Study on Geolocation Privacy Leakage in Large Vision Language Models

    Yihe Zhou (City University of Hong Kong), Tao Ni (King Abdullah University of Science and Technology), Qingchuan Zhao (City University of Hong Kong), Cong Wang (City University of Hong Kong)

  • (B#756) AVP-Inspect: Coordinated Cyber-Physical Testing for Privacy Analysis of COTS Apple Vision Pro Applications

    Yichang Xiong (George Mason University), Vamsi Shankar Simhadri (George Mason University), Yue Xiao (William & Mary), Xiaokuan Zhang (George Mason University)

  • (B#1603) PersonaHate: A Scalable Persona-Based Data Synthesis Pipeline for Hate Speech Analysis

    Xinyu Zhang (CISPA Helmholtz Center for Information Security), Ziqing Yang (CISPA Helmholtz Center for Information Security), Michael Backes (CISPA Helmholtz Center for Information Security), Yang Zhang (CISPA Helmholtz Center for Information Security)

  • (B#1952) Real Money, Fake Models: Deceptive Model Claims in Shadow APIs

    Yage Zhang (CISPA Helmholtz Center for Information Security), Yukun Jiang (CISPA Helmholtz Center for Information Security), Zeyuan Chen (CISPA Helmholtz Center for Information Security), Michael Backes (CISPA Helmholtz Center for Information Security), Xinyue Shen (University of Waterloo), Yang Zhang (CISPA Helmholtz Center for Information Security)

Session F6 HW
Autonomous vehicle security

Room 6 · Nov. 17 · –

  • (A#718) SlowPerception: Physical-World Latency Attack against Camera-based Perception in Autonomous Driving

    Chen Ma (Xi'an Jiaotong University), Ningfei Wang (Independent Researcher), Zhengyu Zhao (Xi'an Jiaotong University), Qian Wang (Wuhan University), Chao Shen (Xi'an Jiaotong University)

  • (A#1095) Illusion of Depth: Revealing Hidden Stereo Vision Vulnerabilities in Depth Estimation

    Sri Hrushikesh Varma Bhupathiraju (University of Florida), Tetsu Ishizue (The University of Electro-Communications), Nicholas U. Costagliola (University of Florida), Ozora Sako (Keio University), Kentaro Yoshioka (Keio University), Takeshi Sugawara (The University of Electro-Communications), Sara Rampazzi (University of Florida)

  • (B#5777) Investigating Planning Attacks against End-to-End Autonomous Driving

    Ruoyu Song (Purdue University), Chenyi Wang (University of Arizona), Raymond Muller (Lawrence Livermore National Laboratory), Jean-Philippe Monteuuis (Qualcomm Technologies, Inc.), Ryan Gerdes (Virginia Tech), Jonathan Petit (Qualcomm Technologies, Inc.), Ming F. Li (University of Arizona), Antonio Bianchi (Purdue University), Z. Berkay Celik (Purdue University)

  • (B#6545) From Stealthy Data Fabrication to Unsafe Driving: Realistic Scenario Attacks on Collaborative Perception

    Qingzhao Zhang (University of Arizona), Runting Zhang (University of Michigan), Z. Morley Mao (University of Michigan)

Session F8 NET
Network-based intrusion detection (incl. ML)

Room 8 · Nov. 17 · –

  • (B#133) TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classification

    Ze Chen (National University of Defense Technology), Qiming Yu (National University of Defense Technology), Zijia Song (National University of Defense Technology), Guozheng Yang (National University of Defense Technology), Wei Yan (National University of Defense Technology)

  • (B#640) A First-Principles Evaluation of Graph-Based Network Intrusion Detection Systems

    Rui Zhao (University of Virginia), Wajih UI Hassan (University of Virginia)

  • (B#1078) Navigating the Latent Manifold: Proactive Concept Drift Adaptation for Resilient NIDS

    Chao Zha (Zhejiang University), Zifeng Kang (Beijing University of Posts and Telecommunications), Tian Liu (Institute of Agricultural Equipment, Zhejiang Academy of Agricultural Sciences.), Dakun Shen (Zhejiang University), Ruyun Zhang (Shanghai Artificial Intelligence Laboratory)

  • (B#1456) Frequency-Domain Mixing Data Augmentation for Malicious Traffic Detection

    Yuhao Yan (Beihang University), Bo Lang (Beihang University), Xiangyu Li (Beihang University)

Session F9 WEB
Web application security

Room 9 · Nov. 17 · –

  • (A#1016) BACAgent: LLM-Powered Detection of Broken-Access-Control Vulnerabilities in Web Applications

    Fengyu Liu (Fudan University), Yuan Zhang (Fudan University), Zheng Lou (Fudan University), Tian Chen (Fudan University), Youkun Shi (Fudan University), Jiarun Dai (Fudan University), Enhao Li (Fudan University), Guangyu Zhou (ByteDance Inc.), Zhongfu Su (ByteDance Inc.), Zequn Fang (ByteDance Inc.)

  • (A#3360) Your Space is My Zone: Demystifying the Security Risks of AI-Powered Applications on Pre-Trained Model Hubs

    Yacong Gu (Tsinghua University), Lingyun Ying (QI-ANXIN Technology Research Institute), Zidong Zhang (QI-ANXIN Technology Research Institute), Yingyuan Pu (QI-ANXIN Technology Research Institute), Xiaoxue Huang (QI-ANXIN Technology Research Institute), Jiawei Zhou (QI-ANXIN Technology Research Institute), Wenjie Zhu (QI-ANXIN Technology Research Institute), Donghong Sun (Tsinghua University), Haixin Duan (Quancheng Lab; Tsinghua University)

  • (B#415) Automatically Learning Vulnerability Patterns for Scalable Static Analysis of Web Applications

    Penghui Li (Columbia University), Songchen Yao (Columbia University), Josef Sarfati Korich (Columbia University), Changhua Luo (Independent Researcher), Jianjia Yu (Johns Hopkins University), Yinzhi Cao (Johns Hopkins University), Junfeng Yang (Columbia University)

  • (B#4240) VUnitFuzz: Decoupling PHP Sink Verification from Monolithic Execution for Taint-Style Vulnerability Detection

    Youkun Shi (The Hong Kong Polytechnic University), Yuan Zhang (Fudan University), Tianhao Bai (Fudan University), Jiarun Dai (Fudan University), Fengyu Liu (Fudan University), Xiapu Luo (The Hong Kong Polytechnic University)

Wednesday

–

Technical Session #G
Session G1 ML
Poisoning attacks

Room 1 · Nov. 18 · –

  • (A#393) DisarmRAG: Stealthy Retriever Poisoning to Disable Self-Correction in Retrieval-Augmented Generation

    Yanbo Dai (The Hong Kong University of Science and Technology), Zhenlan Ji (Nara Institute of Science and Technology (NAIST)), Zongjie Li (The Hong Kong University of Science and Technology), Kuan Li (The Hong Kong University of Science and Technology), Shuai Wang (The Hong Kong University of Science and Technology)

  • (A#840) MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks

    Tailun Chen (Zhejiang University), Yu He (Zhejiang University), Yan Wang (Alibaba Group), Shuo Shao (Zhejiang University), Haolun Zheng (Zhejiang University), Zhihao Liu (Zhejiang University), Jinfeng Li (Alibaba Group), Zhizhen Qin (Amazon), Yuefeng Chen (Alibaba Group), Zhixuan Chu (Zhejiang University), Zhan Qin (Zhejiang University), Kui Ren (Zhejiang University)

  • (A#984) BadTV: Unveiling Backdoor Threats in Third-Party Task Vectors

    Chia-Yi Hsu (National Yang Ming Chiao Tung University), Yu-Lin Tsai (University of California, Berkeley), Zhe Yu (RIKEN Center for Advanced Intelligence Project), Yan-Lun Chen (National Yang Ming Chiao Tung University), Chih-Hsun Lin (National Chengchi University), Chia-Mu Yu (National Yang Ming Chiao Tung University), Yang Zhang (CISPA Helmholtz Center for Information Security), Chun-Ying Huang (National Yang Ming Chiao Tung University), Jun Sakuma (Institute of Science Tokyo)

  • (B#2111) MemPoison: Bypassing Selective Memory Mechanisms to Plant Backdoors in LLM Agents

    Hongtao Wang (North China Electric Power University), Se Yang (North China Electric Power University), Yu Chen (Tencent), Puzhuo Liu (Tsinghua University)

  • (B#2301) InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation

    Jiachang Zhang (Zhejiang University), Min Chen (Vrije Universiteit Amsterdam), Xiao Ren (Zhejiang University), Zhenyong Zhang (Guizhou University), Yuanchao Shu (Zhejiang University), Yunjun Gao (Zhejiang University), Zhikun Zhang (Zhejiang University)

  • (B#2401) Detecting Data Poisoning in Code Generation LLMs via Black-Box, Vulnerability-Oriented Scanning

    Shenao Yan (University of Connecticut), Shan Jin (Visa Research), Shimaa Ahmed (Visa Research), Sunpreet Singh Arora (Visa Research), Yiwei Cai (Visa Research), Yizhen Wang (Visa Research), Yuan Hong (University of Connecticut)

Session G2 AC
Protocol security

Room 2 · Nov. 18 · –

  • (A#1203) How to Back Up High-Value Secret Keys

    Sanjam Garg (University of California, Berkeley), Noemi Glaeser (Technical University of Darmstadt), Abhishek Jain (Johns Hopkins University), Michael Lodder (Tectonic Labs), Hart Montgomery (Linux Foundation)

  • (B#2048) New IND-CPA-D Attacks on BFV and BGV

    Hyeongmin Choe (University of Luxembourg), Minsik Kang (Sejong University), Damien Stehlé (CryptoLab, Inc)

  • (B#3042) Distributed Key Generation for Efficient Threshold-CKKS

    Seonhong Min (Seoul National University), Guillaume Hanrot (Cryptolab, Inc.), Jai Hyun Park (CryptoLab, Inc.), Alain Passelègue (CryptoLab, Inc.), Damien Stehlé (CryptoLab, Inc.)

  • (B#4584) On Threshold Fully Homomorphic Encryption with Synchronized Decryptors

    François Colin de Verdière (ENS de Lyon), Alain Passelègue (CryptoLab Inc.), Damien Stehlé (CryptoLab Inc.)

  • (B#5128) Schnorr Signatures and MuSig2 are Jointly Secure, Even in Deterministic Wallets

    Renas Bacho (Ruhr University Bochum), Yanbo Chen (University of Ottawa), Poulami Das (Least Authority), Julian Loss (Ruhr University Bochum), Tim Ruffing (Blockstream Research), Benedikt Wagner (Ethereum Foundation)

  • (B#7326) Random Robust Secret Sharing with Perfect Privacy and its Applications

    Mohammad Hassan Ameri (Purdue University), Jeremiah Blocki (Purdue University)

Session G3 SW
Malware analysis and firmware security

Room 3 · Nov. 18 · –

  • (A#1570) HYDRA: Proactive Android Malware Drift Adaptation via Hierarchical Graph Contrastive Learning

    Han Chen (University of Technology Sydney), Hanchen Wang (University of Technology Sydney), Hongmei Chen (Yunnan University), Lu Qin (University of Technology Sydney), Wenjie Zhang (University of New South Wales), Ying Zhang (University of Technology Sydney)

  • (B#29) Shoot the Honey, Cloak the Player: Towards Zero-Runtime-Overhead Proactive Defense and Detection for Visual Game Cheating

    Jianing Wang (Shandong University), Chuqi Zhang (Independent Researcher), Yuancheng Jiang (National University of Singapore), Adil Ahmad (Arizona State University), Shanqing Guo (Shandong University)

  • (B#60) SteamFuzz: Boosting Firmware Fuzzing via Automatic Message Window Inference

    Jorik van Nielen (University of Twente), Andreas Peter (University of Oldenburg), Andrea Continella (University of Twente)

  • (B#906) Governing AI Agent with Capability and Delegation Chain

    Jiaqin Yan (Shanghai Jiao Tong University), Guoxing Chen (Shanghai Jiao Tong University), Yan Meng (Shanghai Jiao Tong University), Haojin Zhu (Shanghai Jiao Tong University)

  • (B#1915) As Seasons Change: Temporal Feature Powers Malware Classification

    Jianwen Tian (Singapore Management University), Debin Gao (Singapore Management University), Yongkang Chen (Academy of Military Sciences), Wei Kong (Zhejiang Sci-Tech University), David Lo (Singapore Management University), Haoyu Ma (Beijing Jiaotong University), Zhi Wang (Nankai University)

  • (B#4698) AutoSOUP: Safety-Oriented Unit Proof Generation for Memory-Safety Verification

    Paschal Amusuo (Purdue University), Ricardo Calvo (Purdue University), Dharun Anandayuvaraj (Purdue University), Taylor Le Lievre (Columbia University), Kevin Kolyakov (University of Waterloo), Elijah Jorgensen (Purdue University), Aravind Machiry (Purdue University), James C Davis (Purdue University)

Session G4 AC
Zero-knowledge

Room 4 · Nov. 18 · –

  • (A#1012) qedb: Expressive and Modular Verifiable Databases (without SNARKs)

    Vincenzo Botta (Independent), Simone Bottoni (Provably Technologies), Matteo Campanelli (Offchain Labs), Emanuele Ragnoli (Provably Technologies), Alberto Trombetta (Università degli Studi dell'Insubria)

  • (A#1720) Rogue: Updatable Matrix Lookup Arguments and Applications to Verifiable Databases

    Christodoulos Pappas (Hong Kong University of Science and Technology), Zhuo Cai (Hong Kong University of Science and Technology), Dimitrios Papadopoulos (Hong Kong University of Science and Technology)

  • (B#1072) PRISM: Efficient zkSNARKs for RNS-Based Homomorphic Encryption

    Zhelei Zhou (Ant Group), Yun Li (Ant Group), Zhaomin Yang (Ant Group), Cheng Hong (Ant Group), Tao Wei (Ant Group)

  • (B#1182) Titan: Efficient Polynomial Commitments from IOPs over Groups

    Chethan Kamath (IIT Bombay), Ravi Prakash (IIT Bombay), Samipa Samanta (IIT Bombay), Sruthi Sekar (IIT Bombay), Nitin Singh (IBM Research)

  • (B#2844) SubLogarithmic Linear Time SNARKs from Improved Sumcheck

    Sikhar Patranabis (IBM Research), Nitin Singh (IBM Research), Sayani Sinha (IIT Kharagpur)

  • (B#3780) Wasp: Succinct Non-Interactive Zero-Knowledge Proofs from VOLE

    Zhanpeng Guo (Ant Group), Zhelei Zhou (Ant Group), Yun Li (Ant Group), Chenkai Weng (Arizona State University), Cheng Hong (Ant Group), Tao Wei (Ant Group)

Session G5 USE
Usable security and privacy

Room 5 · Nov. 18 · –

  • (A#1652) Reflection, Education, Consistency: Towards Best Ethics Practices At Security And Privacy Conferences

    Florian Hantke (CISPA Helmholtz Center for Information Security), Rafael Mrowczynski (CISPA Helmholtz Center for Information Security), Til Dralle (CISPA Helmholtz Center for Information Security), Ben Stock (CISPA Helmholtz Center for Information Security)

  • (A#2426) Beyond the Buzzword: How do Professionals Understand and Translate Zero Trust?

    Ananta Soneji (University of Nebraska at Omaha), Souradip Nath (Arizona State University), Moritz Schloegel (CISPA Helmholtz Center for Information Security), Yan Shoshitaishvili (Arizona State University), Gail-Joon Ahn (Arizona State University), Adam Doupe (Arizona State University), Carlos Rubio-Medrano (Texas A&M University - Corpus Christi)

  • (B#1577) Exploring the Complexities of Passkey Revocation

    Anna Giacomello (CISPA Helmholtz Center for Information Security), Leona Lassak (Max Planck Institute for Security and Privacy), Jonas Hielscher (CISPA Helmholtz Center for Information Security), Maximilian Golla (CISPA Helmholtz Center for Information Security)

  • (B#1666) When Assessment Propagates Insecurity: How Inter-Organizational Supply Chain Security Assessment Decouples Awareness from Practice

    Huancheng Hu (University of Potsdam), Hanna Schall (University of Potsdam), Chaewon Bak (University of Potsdam), Christian Doerr (University of Potsdam)

  • (B#3350) How Children Assess Digital Safety Risk in Gaming Platforms: A Case Study of Roblox

    Zinan Zhang (The Pennsylvania State University), Qiurong Song (The Pennsylvania State University), Xinning Gui (The Pennsylvania State University), Junnan Yu (The Hong Kong Polytechnic University), Sunhye Bai (University of Oregon), Yubo Kou (The Pennsylvania State University)

  • (B#7292) ''People can change, and patterns can be broken'': Contextualizing Tradeoffs in Automated Decision-Making Systems

    Rabeya Bosri (University of Alberta), Anna Harbluk Lorimer (University of Chicago), Afrida Hossain (University of Alberta), Vasisht Duddu (University of Waterloo), Bailey Kacsmar (University of Alberta)

Session G6 PA
Privacy in machine learning

Room 6 · Nov. 18 · –

  • (A#4446) EdgeRefine: Privacy-Utility Balance for Graphs via Jaccard Sampling under Edge Differential Privacy

    Wenxiu Ding (Xidian University), Muzhi Liu (Xidian University), Zheng Yan (Xidian University), Mingjun Wang (Xidian University), Yifan Zhao (Xidian University), Qiao Liu (Xidian University)

  • (B#265) G-Fence: Secure, Efficient, and Differentially Private Graph Neural Network Training over Federated Graphs

    Shuangqing Xu (Harbin Institute of Technology, Shenzhen), Yifeng Zheng (The Hong Kong Polytechnic University), Zhongyun Hua (Harbin Institute of Technology, Shenzhen), Haibo Hu (The Hong Kong Polytechnic University)

  • (B#788) DWBench: Holistic Evaluation of Watermark for Dataset Copyright Auditing

    Xiao Ren (Zhejiang University), Xinyi Yu (Xi'an Jiaotong University), Linkang Du (Xi'an Jiaotong University), Min Chen (Vrije Universiteit Amsterdam), Yuanchao Shu (Zhejiang University), Zhou Su (Xi'an Jiaotong University), Yunjun Gao (Zhejiang University), Zhikun Zhang (Zhejiang University)

  • (B#904) NotaryMark: Multi-Bit Watermarking for Black-Box Dataset Usage Auditing in Text-to-Image Diffusion Models

    Xinyi Yu (Xi'an Jiaotong University), Linkang Du (Xi'an Jiaotong University), Zhou Su (Xi'an Jiaotong University), Min Chen (Vrije Universiteit Amsterdam), Yuntao Wang (Xi'an Jiaotong University), Zhikun Zhang (Zhejiang University)

  • (B#2720) Beyond One-Size-Fits-All: Neural Networks for Differentially Private Tabular Data Synthesis

    Kai Chen (University of Virginia), Chen Gong (University of Virginia), Tianhao Wang (University of Virginia)

  • (B#3616) Rethinking the Security of DP-SGD: A Corrected Analysis of Differentially Private Machine Learning

    Wenhao Wang (Monash University), Shujie Cui (Monash University), Hui Cui (Monash University), Xingliang Yuan (The University of Melbourne)

Session G8 BD
Consensus protocols

Room 8 · Nov. 18 · –

  • (A#378) On the Limits of Consensus under Dynamic Availability and Reconfiguration

    Javier Nieto (University of Illinois Urbana-Champaign), Joachim Neu (a16z Crypto Research), Ling Ren (University of Illinois Urbana-Champaign)

  • (A#580) Angelfish: Leader, DAG, or Anywhere in Between

    Qianyu Yu (The Hong Kong University of Science and Technology (Guangzhou)), Giuliano Losa (Stellar Development Foundation), Nibesh Shrestha (Supra Research), Xuechao Wang (The Hong Kong University of Science and Technology (Guangzhou))

  • (A#1249) Poros: Secure and Highly Parallel Sharding Blockchain with Optimized Cross-Shard Transaction Processing

    Zhuocheng Pan (Beihang University), Jianwei Liu (Beihang University), Andi Liu (Beihang University), Yuxuan Hu (Beihang University), Boyu Zhao (Beihang University), Zhenyu Guan (Beihang University), Gerui Wang (Beijing Academy of Blockchain and Edge Computing), Mingchao Wan (Beijing Academy of Blockchain and Edge Computing), Yizhong Liu (Beihang University)

  • (A#3579) Prefix Consensus For Censorship Resistant BFT

    Zhuolun Xiang (Aptos Labs), Andrei Tonkikh (Aptos Labs), Alexander Spiegelman (Aptos Labs)

  • (B#1416) Areopagus: Asynchronous Sharding Blockchain Tolerating Corrupted Shards with Optimized Overhead

    Yizhong Liu (Beihang University), Andi Liu (Beihang University), Yuxuan Hu (Beihang University), Jin Dong (Beijing Academy of Blockchain and Edge Computing), Jianwei Liu (Beihang University), Boyu Zhao (Beihang University), Yuan Lu (A*STAR Institute for Infocomm Research), Zhuocheng Pan (Beihang University), Meikang Qiu (Augusta University), Dawei Li (Beihang University), Zhenyu Guan (Beihang University)

  • (B#5823) On the Communication Complexity of Sleepy Consensus

    Qiang Tang (The University of Sydney), Yuchen Ye (The University of Sydney)

Session G9 WEB
Security for web services

Room 9 · Nov. 18 · –

  • (A#1496) Reproducing Web Application Vulnerabilities with Patch-Guided Routing Inference and Sink Exploration

    Youkun Shi (Fudan University), Yuan Zhang (Fudan University), Feng Xue (Fudan University), Jiarun Dai (Fudan University), Lei Zhang (Fudan University), Fengyu Liu (Fudan University), Bocheng Xiang (Fudan University), Xiapu Luo (The Hong Kong Polytechnic University)

  • (A#4614) Overloading Ad Blockers: Exploiting Filtering Logic for Selective Denial of Service

    Hyunjoon Lee (Korea Advanced Institute of Science and Technology), Suyoung Lee (Korea Advanced Institute of Science and Technology), Heiko Kiesel (Technical University of Darmstadt), Sooel Son (Korea Advanced Institute of Science and Technology)

  • (B#40) Breaking the Gate: Detecting Invisible Authentication Slip-Through in NGINX Reverse Proxy

    Aliakbar Sadeghi (Samsung Research America), Maryam Rostamipoor (Stony Brook University), Sai Chand Boyapati (Samsung Research America), Omar Chowdhury (Stony Brook University)

  • (B#431) PORTA: Systematic Discovery of Vulnerabilities in Identity Brokers

    Zixu Zhou (University of Toronto), Xiangyu Guo (University of Toronto), Ilya Grishchenko (University of Toronto), David Lie (University of Toronto)

  • (B#1297) RESTGuardian: Automated Black-Box Fuzzing for RESTful API via Efficient Dependency Inference and Deep Vulnerability Detection

    Yifan Guo (Beihang University), Na Wang (Beihang University), Yunjia Wang (QI-ANXIN Technology Research Institute), Zhenyu Chen (QI-ANXIN Technology Research Institute), Yang You (Beijing University of Posts and Telecommunications), Junsong Fu (Beijing University of Posts and Telecommunications)

  • (B#5040) Comment and Control: Hijacking Agentic Workflows via Context-Grounded Evolution

    Neil Fendley (Johns Hopkins University, Johns Hopkins Applied Physics Lab), Zhengyu Liu (Johns Hopkins University), Aonan Guan (Wyze Labs, Inc.), Jiacheng Zhong (Johns Hopkins University), Yinzhi Cao (Johns Hopkins University)

–

Technical Session #H
Session H1 ML
Backdoor/trojaning attacks

Room 1 · Nov. 18 · –

  • (A#1126) AuditVotes: Elevating Provable Defense for GNNs with Efficient Augmentation and Conditional Smoothing

    Yuni Lai (Xidian University), Yulin Zhu (Hong Kong Chu Hai College), Yixuan Sun (The Hong Kong Polytechnic University), Yulun Wu (National University of Defense Technology), Bin Xiao (The Hong Kong Polytechnic University), Gaolei Li (Shanghai Jiao Tong University), Jianhua Li (Shanghai Jiao Tong University), Qi Xie (Hubei University), Kai Zhou (The Hong Kong Polytechnic University)

  • (A#1659) Rethinking Backdoor Adversarial Unlearning through the Lens of Catastrophic Forgetting in Continual Learning

    Zhenqian Zhu (Harbin Institute of Technology, Shenzhen), Yamin Hu (Harbin Institute of Technology, Shenzhen), Yujiang Liu (Harbin Institute of Technology, Shenzhen), Luping Wei (Harbin Institute of Technology, Shenzhen), Wenbo Hou (Harbin Institute of Technology, Shenzhen), Bin Li (Shenzhen University), Haodong Li (Shenzhen University), Wenjian Luo (Harbin Institute of Technology, Shenzhen)

  • (B#71) SymSan: Mitigating Malware Embedding in Large Language Models via Parameter Space Symmetry

    Ming Tan (Information Engineering University), Wei Li (Xidian University), Tao Hu (Information Engineering University), Qian Chen (Xidian University), Aodi Liu (Information Engineering University), Hailong Ma (Information Engineering University)

  • (B#361) LocalAlign: Enabling Generalizable Prompt Injection Defense via Generation of Near-Target Adversarial Examples for Alignment Training

    Yuyang Gong (Nanyang Technological University), Zihao Wang (Nanyang Technological University), Jiawei Liu (Wuhan University), XiaoFeng Wang (Nanyang Technological University)

  • (B#781) ArchProof: A Sound Output-Contribution Certificate for Dormant-Gate Path Backdoors in ONNX Models

    Jin Xu (Tongji University), Miaomiao Zhang (Tongji University), Bowen Du (Tongji University)

  • (B#1369) Certifying Adversarial Robustness of Quantum Classifiers under Known-Readout Query Access

    Ji Guan (Institute of Software, Chinese Academy of Sciences), Mingyu Huang (Arclight Quantum Computing Inc.)

  • (B#1493) Code-SeC: A Decoding-time Probing Method for Characterizing Secret Memorization in Code LLM

    Yanyuan Chen (Peking University), Ruize Hui (University of Chinese Academy of Sciences), Chen Hou (University of Chinese Academy of Sciences), Meikang Qiu (Augusta University)

  • (B#2996) (A)iSpy: Parasitic Trojans for Machine Learning Infrastructure

    Habibur Rahaman (University of Florida), Qipan Xu (University of Tennessee), Zafaryab Haider (University of Maine), Prabuddha Chakraborty (University of Maine), Swarup Bhunia (University of Florida), Fnu Suya (University of Tennessee)

Session H2 AC
Zero-knowledge

Room 2 · Nov. 18 · –

  • (A#742) DeepProve: Verifiable End-to-End Large Language Model Inference

    Nicolas Gailly (Lagrange Labs), Ismael Hishon-Rezaizadeh (Lagrange Labs), Tianyi Liu (University of Illinois Urbana-Champaign), Nicholas Mainardi (Lagrange Labs), Dimitrios Papadopoulos (Hong Kong University of Science & Technology), Charalampos Papamanthou (Yale University), Christodoulos Pappas (Hong Kong University of Science & Technology), Shravan Srinivasan (Lagrange Labs), Zack Youell (Lagrange Labs), Yupeng Zhang (University of Illinois Urbana-Champaign)

  • (A#753) Melior, Verifiable Mixed-Integer Programming via zkSNARKs

    Wenjie Qu (National University of Singapore), Yanze Jiang (National University of Singapore), Yanpei Guo (National University of Singapore), Jiaheng Zhang (National University of Singapore)

  • (B#472) zkAgent: Verifiable LLM Agent Execution via One-Shot Transcript Proofs

    Lizheng Wang (Shanghai Jiao Tong University), Hancheng Lou (Shanghai Jiao Tong University), Chongrong Li (Shanghai Jiao Tong University), Yu Yu (Shanghai Jiao Tong University), Yuncong Hu (Shanghai Jiao Tong University)

  • (B#704) Speeding Up Sum-Check Proving

    Quang Dao (Carnegie Mellon University), Zachary DeStefano (NYU), Suyash Bagad (Shunya Labs), Yuval Domb (Ingonyama), Justin Thaler (Georgetown University and a16z crypto research)

  • (B#1842) MamaBearZKP: A Holistic Co-design of Prime Fields and Proving Stacks for High-Throughput ZKP on Modern CPUs

    Jipeng Zhang (National University of Singapore), Yanpei Guo (National University of Singapore), Tao Lu (National University of Singapore), Hao Cheng (Shandong University), Jiaheng Zhang (National University of Singapore)

  • (B#2967) Zero-Knowledge Proofs for Gradient Boosted Decision Trees

    Jiacheng Gao (Nanjing University), Wenjie Qu (National University of Singapore), Yuan Zhang (Nanjing University), Sheng Zhong (Nanjing University), Jiaheng Zhang (National University of Singapore)

  • (B#3194) Efficient SNARK for Floating-Point Computation

    Wenjie Qu (National University of Singapore), Zihao Zhang (National University of Singapore), Jiaheng Zhang (National University of Singapore)

  • (B#5800) LogVOLE: Succinct and Efficient Chosen-Input VOLE for ZK and Beyond

    Lucien K. L. Ng (Georgia Institute of Technology), Peter Rindal (Category Labs), Akash Shah (University of California, Los Angeles)

Session H3 SW
Software testing

Room 3 · Nov. 18 · –

  • (A#161) Implementation Bugs as Attacks: Adversarial Neuron Fuzzing and Supply-Chain Backdoors

    Zizhuang Deng (Shandong University), Yiying Shan (Shandong University), Sanchuan Chen (Auburn University), Guozhu Meng (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences), Qingxin Wang (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences), Xueqing Zhang (Auburn University), Tong Liu (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences)

  • (A#569) GoSe: Command-Line Option Sequence Generation with Runtime-Based Option Relationship Modeling for Security Testing

    Zhineng Zhong (Peking University), Hanqin Guan (Peking University), Ding Li (Peking University)

  • (A#594) Opaque Shader: Dynamic Code Execution on GPUs via Explicit Graphics APIs

    Hao Li (ShanghaiTech University), Yihong Hang (ShanghaiTech University), Yuan Xiao (ShanghaiTech University), Zhice Yang (ShanghaiTech University)

  • (A#745) Accio: Detecting Privilege Escalation Vulnerabilities in DBMSs via Minimum Privilege Set Calculation

    Jingzhou Fu (Tsinghua University), Zongrui Peng (Tsinghua University), Jie Liang (Beihang University), Zhiyong Wu (Tsinghua University), Chi Zhang (Tsinghua University), Yu Jiang (Tsinghua University)

  • (A#1581) STMark: Watermarking Scalar and Textual Data Robustly Using Frequency Statistics

    Jiongyang Ji (Xidian University), Yanguo Peng (Xidian University), Zhen Lv (Xi'an International Studies University), Gengquan Guo (Xidian University), Hui Li (Xidian University), Jiangtao Cui (Xidian University)

  • (B#762) SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills

    Jiangrong Wu (Sun Yat-sen University), Yuhong Nan (Sun Yat-sen University), Yixi Lin (Sun Yat-sen University), Huaijin Wang (Shandong University), Yuming Xiao (Sun Yat-sen University), Shuai Wang (The Hong Kong University of Science and Technology), Zibin Zheng (Sun Yat-sen University)

  • (B#837) Efficient Branch-and-Bound Testing and Verification of zkVMs

    Hideaki Takahashi (Columbia University), Suman Jana (Columbia University), Junfeng Yang (Columbia University)

  • (B#2146) TriMatch: Detecting Linux Kernel Memory Bugs with 3D Object-Aware Symmetry Checking

    Zilin Guan (Southeast University), Jianhao Xu (Southeast University), Dawei Feng (Southeast University), Kangjie Lu (University of Minnesota), Bing Mao (Nanjing University), Guang Cheng (Southeast University)

Session H4 AC
Post-quantum security

Room 4 · Nov. 18 · –

  • (A#131) Time-Delayed Publicly Verifiable Quantum Computation with Classical Verifiers

    Ameer Mohammed (Kuwait University), Aydin Abadi (Newcastle University), Jaffer Mahdi (Kuwait Oil Company)

  • (B#159) Post-Quantum Private Set Intersection for Small Sets

    Junxin Liu (Oregon State University), Mike Rosulek (Oregon State University), Ni Trieu (Arizona State University)

  • (B#303) DualMS 2.0: Practical Lattice-Based Two-Round Fiat-Shamir Multi-Signature with Better Efficiency

    Qiqi Lai (Shaanxi Normal University), Chongshen Chen (Shaanxi Normal University), Feng Hao Liu (Washington State University), Tianyu Zhao (Washington State University), Qi Wang (Shanghai Jiao Tong University), Zhedong Wang (Shanghai Jiao Tong University)

  • (B#1376) Bridging the Cryptographic Transition: A Unified Framework for Post-Quantum Key Exchange

    Benjamin Dowling (King's College London), Bhagya Wimalasiri (King's College London)

  • (B#2078) Dance with Noise: Safely Trade Minor Decryption Failures For More Compact KEMs with Applications to IKEv2

    Zidi Zhuang (Institute of Software, Chinese Academy of Sciences), Yuyang Xiao (Institute of Software, Chinese Academy of Sciences), Long Chen (Institute of Software, Chinese Academy of Sciences), Qiang Tang (The University of Sydney), Zhenfeng Zhang (Institute of Software, Chinese Academy of Sciences)

  • (B#2375) Least-Privilege Methodology for Anamorphic Encryption with Randomness-Recovery Trapdoors

    Xuan Thanh Do (Institute of Cryptography Science and Technology), Giuseppe Persiano (University of Salerno), Duong Hieu Phan (Telecom Paris, Institut Polytechnique de Paris), Moti Yung (Google LLC and Columbia University)

  • (B#2642) Large-Universe (Multi-Authority) ABE from LWE

    Pratish Datta (NTT Research), Yannis Rouselakis (NTT Research), Junichi Tomida (NTT Research), Nikhil Vanjani (Carnegie Mellon University)

  • (B#7263) FHEMIST: A Maximum Independent Set Technique for Efficient Bootstrapping Reductions in FHE Evaluations

    Animesh Singh (Indian Institute of Technology, Kharagpur), Ayantika Chatterjee (Indian Institute of Technology, Kharagpur), Anupam Chattopadhyay (Nanyang Technological University), Debdeep Mukhopadhyay (Indian Institute of Technology, Kharagpur)

Session H5 USE
Usability measurement

Room 5 · Nov. 18 · –

  • (A#1105) Usability Compliance vs. Legal Compliance of Consent Withdrawal on the Web: An Expert Evaluation of 200 Websites

    Sanju Ahuja (International Institute of Information Technology Bangalore), Gayatri Priyadarsini Kancherla (Indian Institute of Technology Gandhinagar), Cristiana Santos (Utrecht University), Nataliia Bielova (Inria), Abhishek Bichhawat (Indian Institute of Technology Gandhinagar)

  • (A#1160) Designing an Automated Fact-Checking Pipeline for Recent Claims

    Arshia Arya (University of California, San Diego), Gauthami Yenne (University of Illinois Urbana-Champaign), Deepak Kumar (University of California San Diego)

  • (B#519) Understanding Website Passkey Policies and User Communication

    Karthik Ramakrishnan (Georgia Institute of Technology), Frank Li (Georgia Institute of Technology)

  • (B#2210) PrivAudit: A Dual-Lens Auditing Framework for Website Privacy Practices under the CCPA

    Mohamed Moustafa Dawoud (University of California, Santa Cruz), Riya Aggarwal (University of California Santa Cruz), Likith Rahul Krishnamurthy (University of California Santa Cruz), Ram Sundara Raman (University of California Santa Cruz)

  • (B#2688) 'Tab, Tab, Bug': Security Pitfalls of Next Edit Suggestions in AI-Integrated IDEs

    Yunlong Lyu (The University of Hong Kong), Yixuan Tang (McGill University), Peng Chen (Independent Researcher), Tian Dong (The University of Hong Kong), Xinyu Wang (Independent Researcher), Zhiqiang Dong (Independent Researcher), Hao Chen (The University of Hong Kong)

  • (B#4003) Does AI Amplify Online Hate? A Multi-Modal Measurement Study on 4chan's /pol/

    Bo Shao (CISPA Helmholtz Center for Information Security), Xinyue Shen (CISPA Helmholtz Center for Information Security), Yang Zhang (CISPA Helmholtz Center for Information Security)

  • (B#4843) When Scammers Talk Back: Understanding Potentially Unwanted Calls via LLM-Based Interaction

    Zhuoer Lyu (Arizona State University), Marzieh Bitaab (Amazon), Shuyi Huang (Arizona State University), Alireza Karimi (Arizona State University), William Robertson (Arizona State University), Zeming Yu (Arizona State University), Moritz Schloegel (CISPA Helmholtz Center for Information Security), Yan Shoshitaishvili (Arizona State University), Gail-Joon Ahn (Arizona State University), Ananta Soneji (University of Nebraska at Omaha), Ruoyu Wang (Arizona State University), Adam Doupé (Arizona State University), Tiffany Bao (Arizona State University)

  • (B#7270) Learning Less While Asking More: How LLM-Based Assistance Shapes Vulnerability Learning

    Baojuan Wang (Drexel University), Yifan Yao (Drexel University), Yue Zhang (Shandong University), Zhibo Eric Sun (Drexel University)

Session H6 PA
Privacy in machine learning

Room 6 · Nov. 18 · –

  • (A#922) SpecStega: Provably Secure Linguistic Steganography Based on Speculative Sampling in Asymmetric Resource Scenarios

    Jun Jiang (University of Science and Technology of China), Kejiang Chen (University of Science and Technology of China), Yuang Qi (University of Science and Technology of China), Jiawei Zhao (University of Science and Technology of China), Weiming Zhang (University of Science and Technology of China), Nenghai Yu (University of Science and Technology of China)

  • (A#1316) DP4SQL: Differentially Private SQL with Flexible Privacy Policies

    Andrew Cascio (Duke University), KinChin Tong (Binghamton University), Daniel Kifer (The Pennsylvania State University), Zeyu Ding (Binghamton University), Danfeng Zhang (Duke University)

  • (A#1899) Secrets Everywhere: Auditing Memorization in Mobility Prediction Models

    Anne Josiane Kouam (Inria & TU Berlin), Hristo Boyadzhiev (BIFOLD & TU Berlin), Konrad Rieck (BIFOLD & TU Berlin)

  • (B#543) LR-DSTC: Low-Rank Driven Secure Tensor Completion for Privacy-Preserving IoT Data Recovery

    Jingya Huang (Hunan University), Xiaocan Li (Hunan University), Kun Xie (Hunan University), Jigang Wen (Hunan University of Science and Technology), Kenli Li (Hunan University), Gaogang Xie (Computer Network Information Center, CAS)

  • (B#949) Your Synthetic Image Is a Confession: Trojaning Image-to-Image Generative Models for Private Input Reconstruction

    Haolin Yuan (Johns Hopkins University), Alison Rebman (Johns Hopkins University), John Aucott (Johns Hopkins University), Yinzhi Cao (Johnss Hopkins University)

  • (B#3936) TENNOR: Trustworthy Execution for Neural Networks through Obliviousness and Retrievals

    Zifan Qu (George Mason University), Vasileios P. Kemerlis (Brown University), Giuseppe Ateniese (George Mason University), Evgenios M. Kornaropoulos (George Mason University)

  • (B#4310) CircumVolve: Automated Discovery of Censorship Evasion Strategies Using Large Language Models

    Ali Zohaib (University of Massachusetts Amherst), Jackson Sippe (University of Colorado Boulder), Jade Sheffey (University of Massachusetts Amherst), Mingshi Wu (GFW Report), Eric Wustrow (University of Colorado Boulder), Amir Houmansadr (University of Massachusetts Amherst)

  • (B#5177) TWIST: Private Tenant-Dedicated LLM Serving via Joint Model-Token Transformation

    Qizhi Zhang (ByteDance), Yufei Chen (City University of Hong Kong), Yu Lin (ByteDance), Wenqiang Ruan (ByteDance), Quanwei Cai (ByteDance), Daode Zhang (ByteDance), Longxiang Wang (City University of Hong Kong), Jue Hong (ByteDance), Ye Wu (ByteDance), Cong Wang (City University of Hong Kong)

Session H7 HW
Attacks and defenses

Room 7 · Nov. 18 · –

  • (A#55) iEnFlow: Endogenous Control-Flow Attacks via Conditional Branch Prediction on Apple Silicon

    Kaiyuan Rong (Tsinghua University), Jiajie Chen (Tsinghua University), Junqi Fang (Tsinghua University), Peng Qu (Tsinghua University), Hanyin Liu (Harbin Institute of Technology), Youhui Zhang (Tsinghua University), Dapeng Ju (Tsinghua University), Dongsheng Wang (Tsinghua University)

  • (B#658) DDRop: Active Memory Interposer Attacks on Confidential VMs by Dropping DDR5 Writes

    Jesse De Meulemeester (KU Leuven), Stefan Gloor (ETH Zurich), Patrick Jattke (ETH Zurich), Daniel Moghimi (Google), David Oswald (Durham University), Martin Thompson (Durham University), Kaveh Razavi (ETH Zurich), Ingrid Verbauwhede (KU Leuven), Jo Van Bulck (KU Leuven)

  • (B#864) SLAC: Access-Driven CPU-to-GPU Side-channel Attacks via System-Level Cache on Apple Silicon

    Tianhong Xu (Northeastern University), Saion Kumar Roy (Northeastern University), Ruyi Ding (Louisiana State University), A. Adam Ding (Northeastern University), Yunsi Fei (Northeastern University)

  • (B#1241) GPUThor: Amplifying Rowhammer Attacks via Non-Uniform Patterns to Exploit ECC-Protected GPUs

    Chris S. Lin (University of Toronto), Joyce Qu (University of Toronto), Aditya Rajeev (University of Toronto), Gururaj Saileshwar (University of Toronto)

  • (B#1253) Trapped Handler: A Practical Performance Degradation Attack on NVIDIA vGPU via Preemption Manipulation

    Cheng Gu (University of Rochester), Fatemeh Moradihaghighi (Clemson University), Daniel Genkin (Georgia Tech), Zhuo Li (Hydrox AI), Mengyuan Li (USC), Zhenkai Zhang (Clemson University), Yanan Guo (University of Rochester)

  • (B#2100) Branch Target Reuse: Practical Spectre-v2 Attacks in JIT Engines via Stale Branch Prediction Entries

    Sander Wiebing (Vrije Universiteit Amsterdam), Yuhui Zhu (Scuola Superiore Sant'Anna), Alessandro Biondi (Scuola Superiore Sant'Anna), Cristiano Giuffrida (Vrije Universiteit Amsterdam)

  • (B#6504) DeepIvy: Toward Accelerator-Speed Secure Model Inference via CPU-Side TEEs

    Kunbei Cai (University of Central Florida), Md Hafizul Islam Chowdhuryy (University of North Carolina at Charlotte), Wujie Wen (North Carolina State University), Fan Yao (University of Central Florida)

Session H8 BD
Network and distributed system security

Room 8 · Nov. 18 · –

  • (A#202) Walrus: An Efficient Decentralized Storage Network

    George Danezis (Mysten Labs), Giacomo Giuliari (Mysten Labs), Lefteris Kokoris Kogias (Mysten Labs), Markus Legner (Mysten Labs), Jean-Pierre Smith (Mysten Labs), Alberto Sonnino (Mysten Labs), Karl Wüst (Mysten Labs)

  • (A#1059) Asymmetric Grid Quorum Systems for Heterogeneous Processes

    Michael Senn (University of Bern), Christian Cachin (University of Bern)

  • (A#1732) Timing Games in Responsive Consensus Protocols

    Kaya Alpturer (Princeton University), Kushal Babel (Category Labs), Aditya Saraf (Cornell University; Cornell Tech)

  • (B#838) Are Unreachable Nodes Truly Safe? Fully Eclipsing Monero's P2P Network!

    Ruisheng Shi (Beijing University of Posts and Telecommunications), Jiaqi Zeng (Beijing University of Posts and Telecommunications), Lina Lan (Beijing University of Posts and Telecommunications), Shihan Zhang (Beijing University of Posts and Telecommunications), Bing Han (Beijing University of Posts and Telecommunications), Xiapu Luo (The Hong Kong Polytechnic University), Qishu Jin (Zhejiang University), Wenliang Du (Zhejiang University), Qin Wang (CSIRO)

  • (B#1296) Verifying Consensus Protocols from LLM-assisted TLA$^+$: A Case Study of Byzantine Reliable Broadcast

    Shuhe Cao (Shandong University), Xin Wang (Shandong University), Chenxu Wang (Shandong University), Xiao Sui (Tsinghua University), Sisi Duan (Tsinghua University)

  • (B#4920) Robust Distributed Arrays: Provably Secure Networking for Data Availability Sampling

    Dankrad Feist (Tempo Labs), Gottfried Herold (Ethereum Foundation), Mark Simkin (Flashbots Ltd.), Benedikt Wagner (Ethereum Foundation)

  • (B#4993) Heavy-coin Committee Selection for the Decentralized Era

    Yucheng Sun (National University of Singapore), Haifeng Yu (National University of Singapore)

  • (B#5933) Adversarial Procurement in Blockchains

    Maryam Bahrani (Ritual), Michael Neuder (Princeton University), S. Matthew Weinberg (Princeton University)

Session H9 WEB
Measurements

Room 9 · Nov. 18 · –

  • (A#428) Mini-Programs, Mega-Problems: Unveiling OAuth-based Authentication Misuses in Mini-Programs via Dynamic Analysis

    Zidong Zhang (Simon Fraser University), Zhentao Xie (Shandong University), Lingyun Ying (QI-ANXIN Technology Research Institute), Qinsheng Hou (Shanghai Jiao Tong University), Yacong Gu (Tsinghua University), Wenrui Diao (Shandong University), Jianliang Wu (Simon Fraser University)

  • (A#495) Theseus: Smart Web Crawling via Resource-Guided Semantic Modeling

    Yongheng Huang (Institute of Computing Technology, CAS), Chenghang Shi (Institute of Computing Technology, CAS), Wenxiao Yao (Institute of Computing Technology, CAS), Jie Lu (Institute of Computing Technology, CAS), Haofeng Li (Institute of Computing Technology, CAS), Youlong Chen (Institute of Computing Technology, CAS), Dong Liu (Zhongguancun Laboratory), Mengna Ma (Zhongguancun Laboratory), Yong Liu (Zhongguancun Laboratory), Qinfen Hao (Institute of Computing Technology, CAS), Lian Li (Institute of Computing Technology, CAS)

  • (A#1054) Finding and Exploiting Discrepancies in QR Code Payload Processing

    Jianyu Lu (The Chinese University of Hong Kong), Yikang Chen (The Chinese University of Hong Kong), Wong Kin Ting (The Chinese University of Hong Kong), Xianbo Wang (The Chinese University of Hong Kong), Che Wei Tu (The Chinese University of Hong Kong), Mak Sui Ling Angela (The Chinese University of Hong Kong), Sze Yiu Chau (Simon Fraser University)

  • (A#2345) PyFEX: Uncovering Evasive Python-based Threats via Resilient and Exhaustive Path Exploration

    Meng Wang (CISPA Helmholtz Center for Information Security), Yue Ma (University of Electronic Science and Technology of China), Majid Garoosi (CISPA Helmholtz Center for Information Security), Wenting Fan (Shanghai Jiao Tong University), Liwei Guo (University of Electronic Science and Technology of China), Jiangqiang Wang (Max Planck Institute for Security and Privacy), Ali Abbasi (CISPA Helmholtz Center for Information Security)

  • (B#212) The Tragedy of Convenience: Cascading User-Data Leakage from SMS-delivered URLs

    Muhammad Danish (University of New Mexico), Enrique Sobrados (University of New Mexico), Priya Kaushik (University of Arizona), Bhupendra Acharya (University of Louisiana at Lafayette), Muhammad Saad (Circle), Abdullah Mueen (University of New Mexico), Sazzadur Rahaman (University of Arizona), Afsah Anwar (University of New Mexico)

  • (B#759) When Tracking Learns: Learning-Based Browser Fingerprinting Under Anti-Fingerprinting Defenses

    Xu Lin (Washington State University)

  • (B#4135) You Get What You Sample: Evaluating Sampling Strategies for Web Security Measurements

    Xuenan Zhang (CISPA Helmholtz Center for Information Security), Yuqing Yang (CISPA Helmholz Center for Information Security), Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security)

  • (B#6031) PiMRef: Deducing Ever-evolving Spear-phishing Emails with Knowledge Base Invariants

    Ruofan Liu (National University of Singapore), Yun Lin (Shanghai Jiao Tong University), Yuxin Wang (Shanghai Jiao Tong University), Xiwen Teoh (National University of Singapore), Zhenkai Liang (National University of Singapore), Gongshen Liu (Shanghai Jiao Tong University), Haojin Zhu (Shanghai Jiao Tong University), Jin Song Dong (National University of Singapore)

–

Technical Session #I
Session I1 ML
Accountability, interpretability, and transparency of ML

Room 1 · Nov. 18 · –

  • (A#722) DIPBox: A Multi-scale Testing Framework for Tracking Dataset Regeneration

    Tian Dong (Shanghai Jiao Tong University), Yan Meng (Shanghai Jiao Tong University), Shaofeng Li (Southeast University), Guoxing Chen (Shanghai Jiao Tong University), Yuling Chen (Guizhou University), Zhen Liu (Shanghai Jiao Tong University), Haojin Zhu (Shanghai Jiao Tong University), Hao Chen (The University of Hong Kong)

  • (A#971) Auditing Data Provenance in LLM Fine-tuning via Intrinsic Distributional Fingerprints

    Zirui Huang (Nanjing University), Yunlong Mao (Nanjing University), Wei Tong (Nanjing University), Tingting Wu (China Mobile Research Institute), Xin Ge (China Mobile Research Institute), Sheng Zhong (Nanjing University)

  • (A#1890) MirrorGuard: Toward Secure Computer-Use Agents via Simulation-to-Real Reasoning Correction

    Wenqi Zhang (Fudan University), Yulin Shen (Fudan University), Changyue Jiang (Fudan University), Jiarun Dai (Fudan University), Geng Hong (Fudan University), Xudong Pan (Fudan University)

  • (B#1498) SkillCODER: Towards Auditing and Attribution of Copyright Infringement in LLM Agent Skills

    Enhao Huang (Zhejiang University), Chunshu Xia (Zhejiang University), Yiming Li (Nanyang Technological University), Yuchen Yang (Beijing Chaitin Technology Co.,Ltd), Bingrun Yang (Zhejiang University), Zhan Qin (Zhejiang University), Dacheng Tao (Nanyang Technological University), Kui Ren (Zhejiang University)

  • (B#2943) PURA: Provably Unbiased and Robust Multi-Bit Watermarking for AI-Generated Text Attribution

    Yaofei Wang (Hefei University of Technology), Jinyang Guo (Hefei University of Technology), Shuchao Du (University of Chinese Academy of Sciences), Chao Wang (University of Science and Technology of China), Qiyi Yao (Bilkent University), Donghui Hu (Hefei University of Technology), Weiming Zhang (University of Science and Technology of China), Nenghai Yu (University of Science and Technology of China), Kejiang Chen (University of Science and Technology of China)

  • (B#5316) Thinking Dangerously: How Reasoning Training Dilutes Safety in Language Models

    Dongxin Guo (The University of Hong Kong), Jikun Wu (Brain Investing Limited), Siu Ming Yiu (The University of Hong Kong)

  • (B#6403) Selective Fine-Tuning for Targeted and Robust Concept Unlearning

    Mansi Mansi (Imperial College London), Avinash Kori (Imperial College London), Francesca Toni (Imperial College London), Soteris Demetriou (Imperial College London)

  • (B#7574) Azkaban: A Zero-Knowledge Abstract Analysis for Neural Networks

    Sankha Das (Georgia Institute of Technology), Lucien K. L. Ng (Georgia Institute of Technology), Yibin Yang (University of Toronto), Vladimir Kolesnikov (Georgia Institute of Technology), Teodora Baluta (Georgia Institute of Technology)

Session I2 AC
Protocol security

Room 2 · Nov. 18 · –

  • (A#2693) 3PaaS: Privacy-Preserving Post-Compromise Security as a Service

    Cas Cremers (CISPA Helmholtz Center for Information Security), Abhinav Nakarmi (University of Michigan), Aleksi Peltonen (University of Aberdeen), Eyal Ronen (Tel Aviv University)

  • (A#3002) An Extended Hierarchy of Security Notions for Threshold Signature Schemes and Automated Analysis of Protocols That Use Them

    Cas Cremers (CISPA Helmholtz Center for Information Security), Aleksi Peltonen (University of Aberdeen), Mang Zhao (Wuhan University)

  • (B#225) Snapshots of TEE-Based Encrypted Databases Leak Plaintext Histograms via Dendrochronology

    Zachary Espiritu (MongoDB Research)

  • (B#855) Delegating Email Encryption to Gateways: Why Johnny Should Not

    Andris Suter-Dörig (Swiss Federal Institute of Technology), Matteo Scarlata (Swiss Federal Institute of Technology), Kenneth Paterson (Swiss Federal Institute of Technology)

  • (B#939) Data-strophy: When Your Integrity Goes Wild, So Does Your Data!

    Ya-Nan Li (The University of Sydney), Yaqing Song (University of Electronic Science and Technology of China), Qiang Tang (The University of Sydney), Moti Yung (Google), Yuan Zhang (University of Electronic Science and Technology of China)

  • (B#1800) zkTransformer: Scalable Zero-Knowledge Proofs for LLM Inference via Einsum Arithmetization and Structured Exponentiation Lookups

    Bing-Jyue Chen (University of Illinois Urbana-Champaign), Lilia Tang (University of Illinois Urbana-Champaign), Daniel Kang (University of Illinois Urbana-Champaign)

  • (B#2199) Sublinear Risk-Limiting Audits from Direct Ballot Selection and Statistical Ballot Manifests

    Benjamin Fuller (University of Connecticut), Abigail Harrison (Univeristy of Connecticut), Alexander Russell (University of Connecticut)

  • (B#3331) HoneyCodes: Auditable Short-Code Authentication After Verifier Compromise

    Matthew Green (Johns Hopkins University), Aditya Hegde (Johns Hopkins University), Dorian Liu (Johns Hopkins University)

Session I3 SW
Reverse engineering

Room 3 · Nov. 18 · –

  • (A#319) Neurosymbolic Disassembly

    Zhaoqi Xiao (University of California, Riverside), Yeqi Fu (National University of Singapore), Lambang Akbar Wijayadi (National University of Singapore), Zhenkai Liang (National University of Singapore), Heng Yin (University of California, Riverside)

  • (A#2261) Compiler Provenance as a Service: Decoupled Identification for Composite Provenance and Operational Resilience

    Han Gao (Purdue University), Antonio Bianchi (Purdue University), Z. Berkay Celik (Purdue University), Dave (Jing) Tian (Purdue University)

  • (A#3015) Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary

    Xiaoling Zhang (Zhongguancun Laboratory), Jian Sun (Zhongguancun Laboratory), Dawei Wang (Zhongguancun Laboratory), Chongyu Wang (Zhongguancun Laboratory), Li Chen (Zhongguancun Laboratory), Zhaoteng Yan (Zhongguancun Laboratory), Peipei Liu (Zhongguancun Laboratory), Lixiao Zhang (Zhongguancun Laboratory), Dan Li (Tsinghua University)

  • (A#3086) Forced Execution for Malware Protected by Commercial Virtualization Obfuscators

    Yifei Zhan (Renmin University of China), Yukun Cui (Renmin University of China), Shuofeng Hao (Renmin University of China), Dongnan He (Renmin University of China), Wei You (Renmin University of China), Bin Liang (Renmin University of China), Jianjun Huang (Renmin University of China)

  • (B#2005) Long-Range Indirect Control-Flow Prediction in Stripped Binaries via Dual Virtual Hubs and Multi-Task Graph Learning

    Kun Liu (Tulane University), Zhengming Ding (Tulane University), Chenke Luo (Tulane University), Tianyi Xu (Tulane University), Zizhan Zheng (Tulane University), Haotian Zhang (New Jersey Institute of Technology), Jiang Ming (Tulane University)

  • (B#2059) PSDissect: A CFG-Guided, Semantics-Preserving Interactive Deobfuscation Framework for PowerShell Scripts

    Yifeng Fu (Beijing Institute of Technology), Jingfeng Xue (Beijing Institute of Technology), Weijie Han (Beijing Municipal Medical Insurance Bureau), Yong Wang (Beijing Institute of Technology), Zhenyan Liu (Beijing Institute of Technology), Wenbiao Du (Beijing Institute of Technology), Zeyang Liu (Beijing Institute of Technology)

  • (B#2229) Assessing Semantic Equivalence of Decompiled Code: Are Our Measures Adequate?

    Hao Ren (University of Utah), Ruotong Yu (University of Utah), Jun Xu (University of Utah)

  • (B#2514) Redefining Grey-Box Deobfuscation through Context-Aware Program Synthesis, and Application to MBAs

    Vidal Attias (Université Paris-Saclay, CEA, List), Grégoire Menguy (Université Paris-Saclay, CEA, List), Nicolas Bellec (Université Paris-Saclay, CEA, List), Sébastien Bardin (CEA List & Université Paris-Saclay), Jean-Yves Marion (Université de Lorraine, CNRS)

Session I4 AC
Oblivious algorithms and data structures

Room 4 · Nov. 18 · –

  • (A#710) Compiling Oblivious Schemes Against Coercion: The Anamorphic Construction

    Xianglong Zhang (Huazhong University of Science and Technology), Wei Wang (Huazhong University of Science and Technology), Peng Xu (Huazhong University of Science and Technology), Laurence T. Yang (Zhengzhou University), Stjepan Picek (University of Zagreb), Kaitai Liang (University of Turku)

  • (A#1024) HEGIDE: A MIMD Oblivious Processor for Private Function Evaluation over CKKS

    Jules Dumezy (Université Paris-Saclay, CEA-List), Nicolas Ye (Université Paris-Saclay, CEA-List), Pierre-Emmanuel Clet (Université Paris-Saclay, CEA-List), Olive Chakraborty (Université Paris-Saclay, CEA-List), Aymen Boudguiga (Université Paris-Saclay, CEA-List)

  • (A#1668) UnifOMR: Oblivious Message Retrieval with Near-optimal Concrete Efficiency

    Ben Fisch (Yale University), Zeyu Liu (Yale University), Eran Tromer (Boston University), Yunhao Wang (Yale University)

  • (A#1751) 2PC Memory-Manipulating Programs with Constant Overhead

    David Heath (University of Illinois Urbana-Champaign)

  • (A#2115) Improved Garbled RAM via Garbled Merge

    Can Liu (Tsinghua University), Lenny Liu (University of Illinois Urbana-Champaign), Ning Luo (University of Illinois Urbana-Champaign), David Heath (University of Illinois Urbana-Champaign)

  • (B#210) More Efficient Secret-Shared Joins with Multiplicity via Oblivious Sort Expansion

    Xiaoxin Du (Nankai University), Xiaojie Guo (Shanghai Qi Zhi Institute), Pinzhi Chen (Nankai University), Tong Li (Nankai University), Zheli Liu (Nankai University)

  • (B#2466) Truffle: Maliciously Secure Three-Party Shuffles with Applications to Parsing

    Nidhish Bhimrajka (Silence Laboratories), Yashvanth Kondi (Silence Laboratories), Daniel Noble (Silence Laboratories), Bhavish Raj Gopal (Indian Institute of Science)

  • (B#2958) Simple and Concretely Efficient Hierarchical Doubly ORAM

    Shun Takagi (LY Corporation), Marin Matsumoto (LY Corporation), Satoshi Hasegawa (LY Corporation)

Session I5 USE
Security and privacy measurement

Room 5 · Nov. 18 · –

  • (A#3) Exploring the Exposure of IPv6 End-Host Networks

    Hugo Hue (Georgia Institute of Technology), Abhishek Bhaskar (Georgia Institute of Technology), Amanda Hsu (Georgia Institute of Technology), Paul Pearce (University of California, Irvine), Frank Li (Georgia Institute of Technology)

  • (A#855) The Rise and Fall of Google's Privacy Sandbox

    Rachid Youssef Grib (Politecnico di Torino), Alberto Verna (Politecnico di Torino), Nikhil Jha (Politecnico di Torino), Martino Trevisan (University of Trieste), Marco Mellia (Politecnico di Torino)

  • (A#1997) Exploring Privacy Leakage and Data Disclosure Violations in the MacOS Application Ecosystem

    Jyotirmay Chauhan (University of Illinois Chicago), Kostas Solomos (Brandeis University), Mir Masood Ali (University of Illinois Chicago), Jason Polakis (University of Illinois Chicago)

  • (B#466) Cleaning the NTP Pool: Detecting and Mitigating NTP-sourced IPv6 Scanning

    Erik Rye (Johns Hopkins University), Robert Beverly (San Diego State University)

  • (B#717) Where Have All the Firewalls Gone? Security Consequences of Residential IPv6 Transition

    Erik Rye (Johns Hopkins University), Dave Levin (University of Maryland), Robert Beverly (San Diego State University)

  • (B#1431) Meme Coin Factories: Uncovering Large-Scale Manipulations on pump.fun

    Nicolas Szwajcok (Carnegie Mellon University, EPFL, ETH Zürich), Taro Tsuchiya (Carnegie Mellon University), Enze Liu (Carnegie Mellon University), Kyle Soska (Fullstack), Mathias Payer (EPFL), Nicolas Christin (Carnegie Mellon University)

  • (B#5250) AdLens: Efficient Detection of Deceptive Software Ads

    Ritik Roongta (New York University), Marwan Adnan Darwish (Radboud University), Masoud Poorghaffar Aghdam (Radboud University), Rachel Greenstadt (New York University), Gunes Acar (Radboud University)

  • (B#5959) Identifying AI Web Scrapers Using Canary Tokens

    Steven Seiden (Duke University), Triss Ren (University of Pittsburgh), Caroline Zhang (Duke University), Taein Kim (Duke University), Enze Liu (Carnegie Mellon University), Emily Wenger (Duke University)

Session I6 PA
Web privacy

Room 6 · Nov. 18 · –

  • (A#165) eBind: Privacy-Enhanced and eIDAS 2.0-Compliant Binding of Anonymous Credentials to Humans

    Yang Yang (Singapore Management University), Guomin Yang (Singapore Management University), Yingjiu Li (University of Oregon), Minming Huang (Singapore Management University), David Basin (ETH Zurich), Hwee Hwa Pang (Singapore Management University), Robert H. Deng (Singapore Management University)

  • (A#209) GDPRuler: A Trusted GDPR Monitor for Cloud Data Systems

    Dimitrios Stavrakakis (TU Munich), Masanori Misono (TU Munich), Julian Pritzi (TU Munich), Harshavardhan Unnibhavi (TU Munich), Nuno Santos (INESC-ID / Instituto Superior Tecnico, University of Lisbon), Pramod Bhatotia (TU Munich)

  • (A#1178) Models Trump Code: An Empirical Analysis of GDPR Compliance

    Hoàng Nguyễn (ETH Zurich), Srđan Krstić (ETH Zurich), David Basin (ETH Zurich)

  • (A#3181) Assessing Privacy Compliance Awareness and Practices Among Mobile Third-party Library Developers

    Fares F. Alharbi (Indiana University-Bloomington), Ece Gumusel (Rutgers University), Luyi Xing (University of Illinois Urbana-Champaign), Xiaojing Liao (University of Illinois Urbana-Champaign)

  • (B#193) Understanding the Privacy-Preserving Potential of HTTP/2 Against Webpage Fingerprinting

    Bogdan Constantin Cebere (CISPA Helmholtz Center for Information Security), Prateek Kumar (CISPA Helmholtz Center for Information Security), Sylvain Chatel (CISPA Helmholtz Center for Information Security), Wouter Lueks (CISPA Helmholtz Center for Information Security), Christian Rossow (CISPA Helmholtz Center for Information Security)

  • (B#750) Large-Scale Measurement and Real-World Mitigation of Web Browser Fingerprinting in the Wild

    Tom Ritter (Mozilla Corporation), Fatih Kilic (University of Toronto), Frederik Braun (Mozilla Corporation), Elisa Luo (UC San Diego), Geoffrey M. Voelker (UC San Diego), Stefan Savage (UC San Diego), Christoph Kerschbaumer (Mozilla Corporation)

  • (B#2903) Brewing Under Pressure: More Realistic Tor Flow Correlation Considering Low FPRs

    Haeseung Jeon (Ewha Womans University), Yeonseo Cho (Ewha Womans University), Nate Mathews (Rochester Institute of Technology), Rob Jansen (U.S. Naval Research Laboratory), Marc Juarez (University of Edinburgh), Se Eun Oh (Ewha Womans University)

  • (B#3360) On the Privacy Risks Caused by Images in Academic Papers

    Sze Yiu Chau (Simon Fraser University), Jianyu Lu (The Chinese University of Hong Kong), Kin Man Leung (University Canada West), Chi Fung Kwan (The Hong Kong Polytechnic University), Che Wei Tu (The Chinese University of Hong Kong), Tsz Ching Tsang (The Chinese University of Hong Kong), Xinzhong Zhang (The University of Hong Kong), Yee Chiu Chen (The Chinese University of Hong Kong), Zirui Kong (The Hong Kong Polytechnic University), Youqian Zhang (The Hong Kong Polytechnic University)

Session I8 BD
Smart contracts and applications

Room 8 · Nov. 18 · –

  • (A#178) Resilient Alerting Protocols for Blockchains

    Marwa Mouallem (Technion), Lorenz Breidenbach (Chainlink Labs), Ittay Eyal (Technion), Ari Juels (Chainlink Labs)

  • (A#602) Censorship Resistance vs Throughput in Multi-Proposer BFT Protocols

    Fatima Elsheimy (Yale University), Ioannis Kaklamanis (Yale University), Charalampos Papamanthou (Yale University), Sarisht Wadhwa (Duke University), Fan Zhang (Yale University)

  • (A#2144) Universally Composable Adaptor Signatures

    Paul Gerhart (TU Wien), Daniel Rausch (University of Stuttgart), Dominique Schroeder (TU Wien)

  • (A#2273) Insecurity Through Obscurity: Veiled Vulnerabilities in Closed-Source Contracts

    Sen Yang (Yale University), Kaihua Qin (University of Warwick), Aviv Yaish (Yale University), Fan Zhang (Yale University)

  • (B#315) Mind the Gap: Detecting Description-Execution Mismatch Attacks in DAO Governance

    Bowen Cai (University of Minnesota), Nanzi Yang (Old Dominion University), Weiheng Bai (University of Minnesota), Youshui Lu (Xi'an Jiaotong University), Yajin Zhou (The Chinese University of Hong Kong), Kangjie Lu (University of Minnesota)

  • (B#591) Ark: Offchain Transaction Batching in Bitcoin

    Pim Keer (TU Wien), Matteo Maffei (TU Wien), Marco Argentieri (Ark Labs), Andrew Camilleri (Ark Labs), Zeta Avarikioti (TU Wien)

  • (B#3767) Neon-HTLC: Collateral-Free HTLCs with Logarithmic Timeout

    Sebastian Faust (Technische Universität Darmstadt), Noemi Glaeser (Technische Universität Darmstadt), Marius Hagemann (Technische Universität Darmstadt), Ziyan Qu (Technische Universität Darmstadt)

  • (B#4391) The MEV Trilemma

    Mingzhe Zheng (The Hong Kong University of Science and Technology (Guangzhou))

Back to top ↑