When AIOps Become "AI Oops": Subverting LLM-driven IT Operations via Telemetry Manipulation
Dario Pasquini, Evgenios M. Kornaropoulos, Giuseppe Ateniese, Omer Akgul, Athanasios Theocharis, Petros Efstathopoulos
USENIX SECURITY 2026
Cycle 1 Accepted Papers
The 165 accepted papers are organized into the 10 official top-level USENIX Security CFP categories. Each paper appears once, under the category that best matches its primary security contribution.
System Security
9 papersHydrangea: Optimistic Two-Round Partial Synchrony with Improved Fault Resilience
Nibesh Shrestha, Aniket Kate, Kartik Nayak
DMGuard: Safeguarding Kernels from Physical-Page Use-After-Free Vulnerabilities
Juhee Kim, Jaeyoung Chung, Dae R. Jeong, Byoungyoung Lee
Side-Channel Attacks on Open vSwitch
Daewoo Kim, Sihang Liu
kSFS: Repurposing a Microkernel-like Interface for Fast and Secure In-Kernel Linux File Systems
Dinglan Peng, Pedro Fonseca
vCause: Efficient and Verifiable Causality Analysis for Cloud-based Endpoint Auditing
Qiyang Song, Qihang Zhou, Xiaoqi Jia, Zhenyu Song, Wenbo Jiang, Heqing Huang, Yong Liu, Dan Meng
KernelRCA: Facilitating Root Cause Analysis of Memory Corruptions in Linux Kernel with Contextual Causality Chain
Kangzheng Gu, Yifan Zhang, Yuan Zhang, Min Yang
From Texts to Rules: Generating Sigma Rules with Large Language Models from Cyber Threat Reports
Yongxin Cai, Jing Qiu, Qingming Li, Du Cheng, Lei Chen
Static Detection of TOCTOU Bugs Caused by Kernel Races
Gui-Dong Han, Jia-Ju Bai, Qiu-Ji Chen, Jiqiang Lu
Network Security
13 papersHop: A Modern Transport and Remote Access Protocol
Paul Flammarion, George Hosono, Wilson Nguyen, Laura Bauman, Daniel Rebelsky, Gerry Wan, David Adrian, Zakir Durumeric
Opossum Attack: Application Layer Desynchronization using Opportunistic TLS
Robert Merget, Nurullah Erinola, Marcel Maehren, Lukas Knittel, Sven Hebrok, Marcus Brinkmann, Juraj Somorovsky, Jörg Schwenk
From Mirai to Gorilla: Deep Dive into a Long-Lasting DDoS-for-Hire Botnet
Maarten Weyns, Dario Ferrero, Stefan Op de Beek, Daniel Wagner, Georgios Smaragdakis, Harm Griffioen
Invariant-Guided Logical Testing of Open RAN Controllers
Tianchang Yang, Ali Ranjbar, Gang Tan, Syed Rafiul Hussain
Analyzing the WebRTC Ecosystem and Breaking Authentication in DTLS-SRTP
Martin Bach, Vukašin Karadžić, Lukas Knittel, Robert Merget, Jean Paul Degabriele
DNS Cache Poisoning Like it’s 2006
Omer Ben-Simhon, Amit Klein
DaLens: Charting DNS Self-Amplification Threats at Large
Liwen Xu, Zechao Cai, Huayi Duan, Adrian Perrig
Tracegram: Framing Trace-Level Traffic Analysis with Temporally-Aware Multiple Instance Learning
Jian Qu, Yuchen Zhang, Jialong Zhang, Jianfeng Li, Xiaobo Ma
WAVED: Principled Identification of Off-Path Exploitable Weak Verifications within the TCP/IP Protocol Suite
Yizhou Zhao, Xuewei Feng, Min Li, Ke Xu
Sliding into the Flight Deck's DMs: Practical Message Attacks on CPDLC
Mehdi Ziazi, Khalid Aleem, Harshad Sathaye, Martin Strohmeier
Semantics Over Syntax: Uncovering Pre-Authentication 5G Baseband Vulnerabilities
Qiqing Huang, Xingyu Wang, Wanda Guo, Guofei Gu, Hongxin Hu
Estimating the Amount of Script-generated Traffic in a Mixture
Cormac Herley
E2E-AKMA: An End-to-End Secure and Privacy-Enhancing AKMA Protocol Against the Anchor Function Compromise
Yueming Li, Long Chen, Qianwen Gao, Zhenfeng Zhang
Security and Privacy for Web, Mobile, and Emerging Technologies
17 papersXGuardian: Towards Generalized, Explainable and More Effective Server-side Anti-cheat in First-Person Shooter Games
Jiayi Zhang, Chenxin Sun, Chenxiong Qian
A Midsummer Meme's Dream: Investigating Market Manipulations in the Meme Coin Ecosystem
Alberto Maria Mongardini, Alessandro Mei
Missing, Present and Conflicting: A Large Scale Analysis of IoT Update Information in the EU Market
Swaathi Vetrivel, Michel van Eeten, Carlos H. Gañán
VIPER Strike: Defeating Visual Reasoning CAPTCHAs via Structured Vision–Language Inference
Minfeng Qi, Dongyang He, Qin Wang, Lefeng Zhang
Logos: Robust Sharding Blockchain With Fast Processing and Optimal Cross-Shard Overhead
Yizhong Liu, Boyu Zhao, Yuxuan Hu, Haojun Tan, Feiang Ran, Andi Liu, Zhuocheng Pan, Yuan Lu, Song Bian, Jianwei Liu, Zhenyu Guan
SoK: PHILTER: Uncovering Security and Functional Gaps in AI-based Phishing Website Detection Literature via an LLM-based Reasoning Framework
Mahbub Alam, Muhammad Lutfor Rahman, Sonjoy Kumar Paul, Amy W. Hays, Aftab Hussain, Md Imanul Huq, Nitesh Saxena
Revealing the Dark Side of Smart Accounts: An Empirical Study of EIP-7702 Incurred Risks in Blockchain Ecosystem
Mingyuan Huang, Han Liu, Shuo Yang, Daoyuan Wu, Shuai Wang
FIRA: Enabling Automatic Forensic Investigation of Unmanned Aerial Vehicles
Yizhi Huang, David Oygenblik, Runze Zhang, Mingxuan Yao, Muhammad Ibrahim, Burak Sahin, Haichuan Xu, Saman Zonouz, Brendan Saltaformaggio
The State of Passkeys: Studying the Adoption and Security of Passkeys on the Web
Louis Jannett, Andreas Mayer, Maximilian Westers, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
Lost in Blockchain Address Misuse: Hidden Cross-Platform Risks and Their Security Impact
Zhenzhe Shao, Jiashuo Zhang, Zihao Li, Daoyuan Wu, Chong Chen, Yiming Shen, Lingfeng Bao, Yanlin Wang, Jiachi Chen
Turn Your Face Into An Attack Surface: Screen Attack Using Facial Reflections in Video Conferencing
Yong Huang, Yanzhao Lu, Mingyang Chen, En Zhang, Jiazi Li, Wanqing Tu
Design and Implementation of a Physical Implant Attack on the Boeing 737
Author list under embargo.
BADControl: Backdoor Attacks Against Control Systems
Luis Burbano, Hampei Sasahara, Ruoyu Song, Z. Berkay Celik, Alvaro A. Cardenas
TAT: Attesting Trajectory Integrity of Industrial Robotic Arms
Chengtao Yao, Chengcheng Zhao, Peng Cheng, Jiming Chen
When Fun Turns Toxic: A First Look at Aggressive Advertising in Mini-games
Pei Chen, Geng Hong, Yicheng Qin, Huazhe Wang, Mengying Wu, Min Yang, Ziru Zhao, Yuanpeng Zhu, Tao Su
Cracks in the Walled Garden: Dissecting the Gray-Market of Unauthorized iOS App Distribution via Ad Hoc Sideloading
Yijing Liu, Yiming Zhang, Baojun Liu, Haixin Duan
WILD Attack: Stealthy Undermining of Wi-Fi-Based Geolocation Through Remote Crowdsourced Data Injection
Changjia Zhu, Xiao Han, Parush Gera, Zhuo Lu, Tempestt Neal, Yao Liu
Software Security
15 papersBond: Constraint-Directed Fuzzing for Automated Validation of Taint Analysis Results in Linux-based IoT Firmware
Jiaqian Peng, Puzhuo Liu, Kai Cheng, Zhaoteng Yan, Jie Liu, Chengnian Sun, Hongsong Zhu
Cutting the Gordian Knot: Detecting Malicious PyPI Packages via a Knowledge-Mining Framework
Wenbo Guo, Chengwei Liu, Ming Kang, Yiran Zhang, Jiahui Wu, Zhengzi Xu, Vinay Sachidananda, Yang Liu
CuSafe: Capturing Memory Corruption on NVIDIA GPUs
Hongyi Lu, Fengwei Zhang, Zhenkai Zhang, Shuai Wang, Yanan Guo
PANGOLIN: Fuzzing Multilingual IoT Firmware with LLM-Driven Code Analysis
Zhipeng Jia, Xiaokang Yin, Shuitao Gan, Chao Zhang, Hangtian Liu, Jiangan Ji, Enzhou Song, Ruijie Cai, Jinglei Tan, Shengli Liu
Patch-Guided Vulnerability Detection: Extracting Java API Security Rules via Attack–Defense Cross-Analysis
Bofei Chen, Shuang Liao, Lei Zhang, Chibin Zhang, Mathias Payer, Yuan Zhang
The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again
Tong Liu, Guozhu Meng, Peng Zhou, Zizhuang Deng, Shuaiyin Yao, Kai Chen
Trustworthy and Confidential SBOM Exchange
Eman Abu Ishgair, Chinenye Okafor, Marcela S. Melara, Santiago Torres-Arias
Arguzz: Testing zkVMs for Soundness and Completeness Bugs
Christoph Hochrainer, Valentin Wüstholz, Maria Christakis
CombiSan: Unifying Software Sanitizers for Comprehensive Fuzzing
Matteo Marini, Floris Gorter, Daniele Cono D'Elia, Cristiano Giuffrida
FirmReBugger: A Benchmark Framework for Monolithic Firmware Fuzzers
Mathew Duong, Michael Chesser, Guy Farrelly, Surya Nepal, Damith C. Ranasinghe
OS-Sanitizer: System-wide Latent Defect Inference in Linux Applications
Addison Crump, Sahil Sihag, Florian Bauckholt, Keno Hassler, Thorsten Holz
SafeFFI: Efficient Sanitization at the Boundary Between Safe and Unsafe Code in Rust and Mixed-Language Applications
Oliver Braunsdorf, Tim Lange, Konrad Hohentanner, Julian Horsch, Johannes Kinder
When Updates Backfire: A Black-Box Security Analysis of Desktop Software Update Mechanisms
Jie Wan, Pengcheng Xia, Haoyu Wang
VeCT: Secure and Efficient Constant-Time Code Rewriting with Vector Extensions
Qisheng Jiang, Danfeng Zhang
Khost: KVM-based Near Native MCU Firmware Rehosting
Chunlin Wang, Yicheng Yang, Yuan Zhang, Haoyu Xiao, Yifan Zhang, Jiarun Dai
Security of ML
21 papersJailbreakScope: Interpreting Jailbreak Mechanism through Representation and Circuit Analyses
Zeqing He, Zhibo Wang, Zhixuan Chu, Huiyu Xu, Wenhui Zhang, Qinglong Wang, Rui Zheng
The Prompt Stealing Fallacy: Rethinking Metrics, Attacks, and Defenses
Zehang Deng, Haoyang Li, Wanlun Ma, Ruoxi Sun, Derui Wang, Minhui Xue, Haibo Hu, Sheng Wen, Yang Xiang
VSG-Safe: Spotting NSFW Video through Cross-Frame Evidence
Yuyang Zhang, Xudong Jiang, Yuxuan Song, Yuxiang Sun, Yihao Huang, Run Wang, Shundi Xiao, Lina Wang
On Evaluating the Robustness of Large Vision-Language Models via Untargeted Modality Alignment Breaking Adversarial Attack
Zhichao Li, Hongshan Yang, Zhibo Wang, Huiyu Xu, Junhong Lai, Yaopeng Wang, Kui Ren, Chun Chen
MASLeak: Investigating and Exposing Intellectual Property Leakage Vulnerabilities in Multi-Agent Systems
Liwen Wang, Wenxuan Wang, Shuai Wang, Zongjie Li, Zhenlan Ji, Zongyi Lyu, Daoyuan Wu, Shing-Chi Cheung
Attacks on Approximate Caches in Text-to-Image Diffusion Models
Desen Sun, Shuncheng Jie, Sihang Liu
A Distortion-minimization Watermarking Framework for Large Language Models: Larger Capacity, Stronger Robustness and Higher Quality
Liming Zhai, Xuezhou Shang, Liyun Zhang, Po Hu
Identifying Provenance of Generative Text-to-Image Models
Anna Yoo Jeong Ha, Wenxin Ding, Stanley Wu, Shawn Shan, Haitao Zheng, Ben Y. Zhao
SoK: Attack and Defense Landscape of Agentic AI Systems
Juhee Kim, Wenbo Guo, Dawn Song
Lethe: Purifying Backdoored Large Language Models with Knowledge Dilution
Chen Chen, Yuchen Sun, Jiaxin Gao, Xueluan Gong, Qian Wang, Ziyao Liu, Yongsen Zheng, Kwok-Yan Lam
When Memory Becomes a Vulnerability: Towards Multi-turn Jailbreak Attacks against Text-to-Image Generation Systems
Shiqian Zhao, Jiayang Liu, Yiming Li, Runyi Hu, Xiaojun Jia, Wenshu Fan, Xiaobao Wu, Xinfeng Li, Jie Zhang, Wei Dong, Tianwei Zhang, Luu Anh Tuan
Fend for Yourself! Backdoor Purification in Federated Graph Learning with an Evolving Knowledge Anchor
Chengcheng Zhu, Yunlong Mao, Jiale Zhang, Bosen Rao, Sheng Zhong
Sirens' Whisper: Inaudible Near-Ultrasonic Jailbreaks of Speech-Driven LLMs
Zijian Ling, Pingyi Hu, Xiuyong Gao, Xiaojing Ma, Man Zhou, Jun Feng, Songfeng Lu, Dongmei Zhang, Bin Benjamin Zhu
Autonomy Comes with Costs: Detecting Denial-of-Service Vulnerabilities Caused by Resource Abusing in LLM-based Agents
Jiaqi Luo, Jiarun Dai, Fengyu Liu, Songyang Peng, Youkun Shi, Tong Bu, Geng Hong, Xudong Pan, Yuan Zhang
Overcoming the Retrieval Barrier: Indirect Prompt Injection in the Wild for LLM Systems
Hongyan Chang, Ergute Bao, Xinjian Luo, Ting Yu
Sy-FAR: Symmetry-based Fair Adversarial Robustness
Haneen Najjar, Eyal Ronen, Mahmood Sharif
GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs
Lichao Wu, Sasha Behrouzi, Mohamadreza Rostami, Stjepan Picek, Ahmad-Reza Sadeghi
TopFeaRe: Locating Critical State of Adversarial Resilience for Graphs Regarding Topology-Feature Entanglement
Xinxin Fan, Wenxiong Chen, Quanliang Jing, Chi Lin, Shaoye Luo, Wenbo Song, Yunfeng Lu
Attesting Model Lineage by Consisted Knowledge Evolution with Fine-Tuning Trajectory
Zhuoyi Shang, Jiasen Li, Pengzhen Chen, Yanwei Liu, Xiaoyan Gu, Weiping Wang
Adversarial Patch EXterminator: Zero-Shot and Patch-Agnostic Defense Framework Against Adversarial Patch Attacks
Jiayimei Wang, Tao Ni, Guowen Xu, Qingchuan Zhao, Cong Wang
Quantifying Large Language Model Attacks Through the Lens of Model Cognition
Xiuming Liu, Chaoxiang He, Xuanran Yu, Jichen Chai, Feiyue Xu, Sheng Hang, Hanqing Hu, Bin Benjamin Zhu, Hongsheng Hu, Shi-Feng Sun, Dawu Gu, Shuo Wang
Privacy of ML
14 papersMembership Inference Attacks on Tokenizers of Large Language Models
Meng Tong, Yuntao Du, Kejiang Chen, Weiming Zhang, Ninghui Li
Imitative Membership Inference Attack
Yuntao Du, Yuetian Chen, Hanshen Xiao, Bruno Ribeiro, Ninghui Li
SMASH: Scalable Maliciously Secure Hybrid Multi-party Computation Framework for Privacy-Preserving Large Language Models
Yunlv Lv, Rui Zhang, Zhiyuan Zhang, Ziyi Wan, Lanxue Zhang, Minhui Xue, Jiangtao Li, Yanan Cao
From Easy to Hard++: Promoting Differentially Private Image Synthesis Through Spatial-Frequency Curriculum
Chen GONG, Kecen Li, Zinan Lin, Tianhao Wang
United We Defend: Collaborative Membership Inference Defenses in Federated Learning
Li Bai, Junxu Liu, Sen Zhang, Xinwei Zhang, Qingqing Ye, Haibo Hu
RBOOT: Accelerating Homomorphic Neural Network Inference by Fusing ReLU within Bootstrapping
Zhaomin Yang, Chao Niu, Benqiang Wei, Zhicong Huang, Cheng Hong, Tao Wei
Window-based Membership Inference Attacks Against Fine-tuned Large Language Models
Yuetian Chen, Yuntao Du, Kaiyuan Zhang, Ashish Kundu, Charles Fleming, Bruno Ribeiro, Ninghui Li
Network-Level Prompt and Trait Leakage in Local Research Agents
Hyejun Jeong, Mohammadreza Teymoorianfard, Abhinav Kumar, Amir Houmansadr, Eugene Bagdasarian
NOIR: Privacy-Preserving Generation of Code with Open-Source LLMs
Khoa Nguyen, Khiem Ton, NhatHai Phan, Issa Khalil, Khang Tran, Cristian Borcea, Ruoming Jin, Abdallah Khreishah, My T. Thai
Can we estimate privacy vulnerability of individual records? Towards Mitigating Attribute Inference Attacks on ML Models
Ehsanul Kabir, Najrin Sultana, Ninghui Li, Shagufta Mehnaz
CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage
Na Li, Yansong Gao, Hongsheng Hu, Boyu Kuang, Anmin Fu
VidLeaks: Membership Inference Attacks Against Text-to-Video Models
Li Wang, Wenyu Chen, Ning Yu, Zheng Li, Shanqing Guo
Inference Attacks Against Graph Generative Diffusion Models
Xiuling Wang, Xin Huang, Guibo Luo, Jianliang Xu
Cracking Federated Privacy: Initialization-Resilient Gradient Inversion with Fine-Grained Reconstruction
Kaiming Zhu, Jinsheng Yang, Siyang Guo, Huaqian Qin, Taiyu Wang, Junbo Wang, Yuhong Nan, Zibin Zheng
Privacy and Anonymity
21 papersHeli: Heavy-Light Private Aggregation
Ryan Lehmkuhl, Henry Corrigan-Gibbs, Emma Dauterman, David J. Wu
Interpolation-Based Optimization for Enforcing lp-Norm Metric Differential Privacy in Continuous and Fine-Grained Domains
Chenxi Qiu
Breaking Widely Deployed Perceptual Hash Functions: Black-Box Collisions in Apple NeuralHash and Microsoft PhotoDNA
Diane Leblanc-Albarel, Bart Preneel
LPG: Raise Your Location Privacy Game in Direct-to-Cell LEO Satellite Networks
Quan Shi, Liying Wang, Prosanta Gope, Qi Liang, Haowen Wang, Qirui Liu, Chenren Xu, Shangguang Wang, Qing Li, Biplab Sikdar
PrivacyShield: Relaying BLE Beacons to Counter Unsolicited Tracking
Florian Hofhammer, Daniele Antonioli, Mathias Payer
Residual-PAC Privacy: Automatic Privacy Control Beyond the Gaussian Barrier
Tao Zhang, Yevgeniy Vorobeychik
Vεrity: Verifiable Local Differential Privacy
James Bell-Clark, Adrià Gascón, Baiyu Li, Mariana Raykova, Amrita Roy Chowdhury
SophOMR: Improved Oblivious Message Retrieval from SIMD-Aware Homomorphic Compression
Keewoo Lee, Yongdong Yeo
Security and Privacy Analysis of Tile's Location Tracking Protocol
Akshaya Kumar, Anna Raymaker, Michael A. Specter
Streaming Function Secret Sharing and Its Applications
Xiangfu Song, Jianli Bai, Ye Dong, Yijian Liu, Yu Zhang, Xianhui Lu, Tianwei Zhang
Nudge: A Private Recommendations Engine
Alexandra Henzinger, Emma Dauterman, Henry Corrigan-Gibbs, Dan Boneh
Anonymous Tokens with Designated-Reader Metadata Bit
Aisha Tu, Meng Jia, Kun He, Jing Chen, Ruiying Du
B-Privacy: Defining and Enforcing Privacy in Weighted Voting
Samuel Breckenridge, Dani Vilardell, Andrés Fábrega, Amy Zhao, Patrick McCorry, Ari Juels
Distributed Synthesis of Differentially Private Tabular Datasets
Yucheng Fu, Tianyao Gu, Elaine Shi, Tianhao Wang
InstantOMR: Oblivious Message Retrieval with Low Latency and Optimal Parallelizability
Haofei Liang, Zeyu Liu, Eran Tromer, Xiang Xie, Yu Yu
ZipPIR: High-throughput Single-server PIR without Client-side Storage
Rasoul Akhavan Mahdavi, Abdulrahman Diaa, Florian Kerschbaum
Provable Secure Steganography Based on Adaptive Dynamic Sampling
Kaiyi Pang, Minhao Bai
Differential Trust: Dynamic Multi-Authority Anonymous Credentials with Epoch-Weighted Updates
Chen Li, Jianting Ning, Xiulong Liu, Yulin Liu
Bridges to Self: Silent Web-to-App Tracking on Mobile via Localhost
Tim Vlummens, Aniketh Girish, Nipuna Weerasekara, Frederik Zuiderveen Borgesius, Gunes Acar, Narseo Vallina-Rodriguez
The Adverse Effects of Omitting Records in Differential Privacy: How Sampling and Suppression Degrade the Privacy–Utility Tradeoff
Àlex Miranda-Pascual, Javier Parra-Arnau, Thorsten Strufe
SONIC: Concurrent Oblivious RAM & Data Structures for Low-Latency and High-Throughput
Nihal Talur, Ioannis Demertzis
Human Aspects
12 papers"Your imaging may be stone-cold normal, but if they look sick, they’re going to get admitted": An Investigation of Clinicians’ Perceptions of Impact & Likelihood of Security Failures
Ronald E. Thompson III, Hamza Khalid, Hilary Fisher, Rhea Votipka, Daniel Votipka
A Large-Scale Study of Personalized Phishing using Large Language Models
Stefan Czybik, Anne Josiane Kouam, Peter Heubl, Jan Magnus Nold, Konrad Rieck
Assessing LLM Response Quality in the Context of Technology-Facilitated Abuse
Vijay Prakash, Majed Almansoori, Donghan Hu, Rahul Chatterjee, Danny Yuxing Huang
Stayin' Alive: How Global Stolen Data Markets Thrive on Telegram
Tina Marjanov, Taro Tsuchiya, Konstantinos Ioannidis, Jack Hughes, Nicolas Christin, Alice Hutchings
Inconsistent, Incomplete, and Insecure: A Survey of Account Security Interfaces
Arkaprabha Bhattacharya, Alaa Daffalla, Kevin Lee, Rosanna Bellini, Nicola Dell, Thomas Ristenpart
Love, Lies, and Language Models: Investigating AI's Role in Romance-Baiting Scams
Gilad Gressel, Rahul Pankajakshan, Shir Rozenfeld, Ling Li, Ivan Franceschini, Krishnashree Achuthan, Yisroel Mirsky
"Abuse Risks are Often Inherent to Product Features": Exploring AI Vendors' Bug Bounty and Responsible Disclosure Policies
Yangheran Piao, Jingjie Li, Daniel W. Woods
You Know Why, but Still Rely: The Impact of Explainable AI on Trust, Task Load, and Performance in Cybersecurity Decision-Making
Neele Roch, Hannah Sievers, Noé Zufferey, Verena Zimmermann
"Oh, what people would do with my knife?'' Navigating the Dual-Use Dilemma in PoC Exploit Development, Disclosure, and Community Dynamics
Arwa Al Alsadi, Lorenz Kustosch, Lamya Alowain, Michel Van Eeten, Carlos H. Gañán
Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore
Kelechi G. Kalu, Sofia Okorafor, Tanmay Singla, Sophie Chen, Santiago Torres-Arias, James C. Davis
Digital Risks and Coping Practices among Roblox Game Creators
Qiurong Song, Rie Helene (Lindy) Hernandez, Xinning Gui, Yubo Kou
Chameleon Channels: Measuring YouTube Accounts Repurposed for Deception and Profit
Alejandro Cuevas, Manoel Horta Ribeiro, Nicolas Christin
Hardware Security
17 papersHAMLOCK: HArdware-Model LOgically Combined attacK
Sanskar Amgain, Daniel Lobo, Atri Chatterjee, Swarup Bhunia, Fnu Suya
UncoreBleed: AEX-Free, High-Resolution, and Low-Noise Side-Channel Attacks on SGX Enclaved Execution
Decheng Chen, Zhi Zhang, Zhenkai Zhang, Xin Zhang, Yansong Gao, Yi Zou
M-Step: A Single-Stepping Framework for Side-Channel Analysis on TrustZone-M
Cristiano Rodrigues, Marton Bognar, Sandro Pinto, Jo Van Bulck
MULCOTAINT: Towards Efficient Multi-tag Dynamic Taint Analysis via Hardware/Software Co-design
Bing Qi, Yi Yang, Xiangkun Jia, Zhengpin Qian, Huafeng Huang, Purui Su
Behind Bars: A Side-Channel Attack on NVIDIA MIG Cache Partitioning Using Memory Barriers
Cheng Gu, Reese Levine, Zhenkai Zhang, Tyler Sorensen, Yanan Guo
TrojPix: Electromagnetic Covert Channels via Imperceptible Pixel Modulation
Guoming Zhang, Huiting Zhang, Zhenwei Lu, Heqiang Fu, Xin Gao, Riccardo Spolaor, Yetong Cao, Yanni Yang, Pengfei Hu
Jailbreaking the AMD Secure Processor: Enabling Live Analysis of SEV-SNP's Undocumented Security Boundaries
Author list under embargo.
TIMESLICE-SANDWICH: A GPU Side-Channel Attack Exploiting Time-Sliced Scheduling
Hodong Kim, Gyeongsup Lim, Seunghee Shin, Youngjoo Shin, Junbeom Hur
StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU's Stack Engine
Ruiyi Zhang, Tristan Hornetz, Daniel Weber, Fabian Thomas, Michael Schwarz
InstrSem: Automatically and Generically Inferring Semantics of (Undocumented) CPU Instructions
Lorenz Hetterich, Fabian Thomas, Tristan Hornetz, Michael Schwarz
Loongleak: Architectural Cross-Privilege-Boundary Data Leakage on LoongArch CPUs
Lorenz Hetterich, Tristan Hornetz, Fabian Thomas, Michael Schwarz
Silicon Heist: (Ransom) Attacks for Cloud FPGAs via Privilege Escalation
Simon Klix, Felix Hahn, Maik Ender, Nils Albartus, Christof Paar, Russell Tessier
PROBE+DETECT+MITIGATE (PDM): Enabling Cloud Tenants to Self-Defend against Microarchitectural Attacks
Arash Daneshmand, Hugo Kermabon-Bobinnec, Lingyu Wang, Makan Pourzandi, Suryadipta Majumdar, Yosr Jarraya
ARM MTE Performance in Practice
Taehyun Noh, Yingchen Wang, Tal Garfinkel, Mahesh Madhav, Daniel Moghimi, Mattan Erez, Shravan Narayan
SoK: Security of Cyber-physical Systems Under Intentional Electromagnetic Interference Attacks
Qinhong Jiang, Yan Long, Youqian Zhang, Chen Yan, Xiaoyu Ji, Xiapu Luo, Kevin Fu, Jiannong Cao, Wenyuan Xu
FABRICKED: Misconfiguring Infinity Fabric to Break AMD SEV-SNP
Benedict Schlüter, Christoph Wech, Shweta Shinde
Memclave: Secure In-Memory Enclave for Untrusted Hosts
Amit Choudhari, Fabian van Rissenbeck, Christian Rossow
Applications of Cryptography
26 papersSecure Protocol Composition under Dynamic Corruption: Scaling Up Symbolic Analysis for Real-World Security Properties
Cas Cremers, Erik Pallas, Aleksi Peltonen
Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers
Matteo Scarlata, Giovanni Torrisi, Matilda Backendal, Kenneth G. Paterson
Distributed Vector Commitments and Their Applications
Rui Gao, Huaqun Wang, Zhiguo Wan, Yuncong Hu
End-to-End Encrypted Collaborative Documents
Christian Knabenhans, Zayd Maradni, Carmela Troncoso
FABS: Fast Attribute-Based Signatures
Liqun Chen, Long Meng, Yalan Wang, Nada El Kassem, Christopher JP Newton, Yangguang Tian, Jodie Knapp, Constantin Cătălin Drăgan, Daniel Gardham, Mark Manulis
Assumption-Free Fuzzy PSI via Predicate Encryption
Erik-Oliver Blass, Guevara Noubir
Shred-to-Shine Metamorphosis of (Distributed) Polynomial Commitments
Weihan Li, Zongyang Zhang, Sherman S. M. Chow, Yanpei Guo, Boyuan Gao, Xuyang Song, Yi Deng, Jianwei Liu
Unbalanced Fuzzy Private Set Intersection for L_infinity Distance: Achieving Sublinear Communication with Large Set Size
Shengzhe Meng, Xiaodong Wang, Xv Zhou, Bei Liang
mmCipher: Batching Post-Quantum Public Key Encryption Made Bandwidth-Optimal
Hongxiao Wang, Ron Steinfeld, Markku-Juhani O. Saarinen, Muhammed F. Esgin, Siu-Ming Yiu
Garuda and Pari: Faster and Smaller SNARKs via Equifficient Polynomial Commitments
Michel Dellepere, Pratyush Mishra, Alireza Shirzad
Transparent Dictionaries from Polynomial Commitments
Hossein Hafezi, Alireza Shirzad, Benedikt Bünz, Joseph Bonneau
Efficient Threshold ML-DSA
Sofía Celi, Rafael del Pino, Thomas Espitau, Guilhem Niot, Thomas Prest
PICS: Private Intersection over Committed (and reusable) Sets
Aarushi Goel, Peihan Miao, Phuoc Van Long Pham, Satvinder Singh
Bridging Usability and Performance: A Tensor Compiler for Autovectorizing Homomorphic Encryption
Edward Chen, Fraser Brown, Wenting Zheng
Shadowfax: Hybrid Security and Deniability for AKEMs
Phillip Gajland, Vincent Hwang, Jonas Janneck
Leveraging Cryptographic Simulator Synthesis for Formally Verifying the FOO E-Voting Protocol
David Baelde, Adrien Koutsos, Justine Sauvage
Bridging Bitcoin to Second Layers via BitVM2
Robin Linus Woll, Lukas Aumayr, Zeta Avarikioti, Matteo Maffei, Andrea Pelosi, Orfeas Stefanos Thyfronitis Litos, Christos Stefo, David Tse, Alexei Zamyatin
DDR-SSE: Duplicated Retrieval of Documents for System-wide Secure Searchable Symmetric Encryption
Zichen Gui, Simon-Philipp Merz, Kenneth G. Paterson, Sikhar Patranabis
Concretely Efficient Blind Signatures Based on VOLE-in-the-Head Proofs and the MAYO Trapdoor
Carsten Baum, Marvin Beckmann, Ward Beullens, Shibam Mukherjee, Christian Rechberger
Scribe: Low-memory SNARKs via Read-Write Streaming
Anubhav Baweja, Pratyush Mishra, Tushar Mopuri, Karan Newatia, Steve Wang
Libra: Pattern-Scheduling Co-Optimization for Cross-Scheme FHE Code Generation over GPGPU
Song Bian, Yintai Sun, Zian Zhao, Haowen Pan, Mingzhe Zhang, Zhenyu Guan
Efficient and High-Accuracy Secure Two-Party Protocols for a Class of Functions with Real-number Inputs
Hao Guo, Zhaoqian Liu, Liqiang Peng, Shuaishuai Li, Ximing Fu, Weiran Liu, Lin Qu
Unlocking the True Potential of Decryption Failure Oracles: A Hybrid Adaptive-LDPC Attack on ML-KEM Using Imperfect Oracles
Qian Guo, Denis Nabokov, Thomas Johansson
Ajax: Fast Threshold Fully Homomorphic Encryption without Noise Flooding
Zhenkai Hu, Haofei Liang, Xiao Wang, Xiang Xie, Kang Yang, Yu Yu, Wenhao Zhang
BatchBoot: Fast Batched Bootstrapping for TFHE scheme and Practical Applications
Zhihao Li, Hongyu Wang, Yuan Zhao, Lichun Li, Zhiwei Wang, Jiaxing He, Changzheng Wei, Ying Yan, Lifeng Guo
Quorus: Efficient, Scalable Threshold ML-DSA Signatures from MPC
Alexander Bienstock, Leo de Castro, Daniel Escudero, Antigoni Polychroniadou, Akira Takahashi