AsiaCCS 2024 论文录用列表

AsiaCCS 作为目前亚洲地区顶级的安全会议，吸引了全球学者的关注和参与，2024年共收到 588 篇论文(2021:362; 2020:308; 2019:258；2018:310)，录用了 129 篇论文(2021:70; 2020:67; 2019:58; 2018:62)，录用率为 21.94% (2021:19.34%; 2020:21.75%; 2019:22.48%; 2018:20%)。国内高校入围众多，南京邮电大学、南开大学、华为欧洲研究中心、香港大学、上海复旦微电子集团、中科院信工所、翼支付、北京邮电大学、南方科技大学等。小编将一些跟自己相关的论文标记出来供大家查阅，所有录用论文标题如下，所有论文全文均可以通过底部的(原文链接)直接下载：

Session 1: Network Security

Towards Robust Domain Generation Algorithm Classification

Arthur Drichel, Marc Meyer, Ulrike Meyer (RWTH Aachen University)

Kirin: Hitting the Internet with Distributed BGP Announcements

Lars Prehn (Max Planck Institute for Informatics); Pawel Foremski (IITiS PAN / DomainTools); Oliver Gasser (IPinfo / Max Planck Institute for Informatics)

X-Ray-TLS: Transparent Decryption of TLS Sessions by Extracting Session Keys from Memory

Florent Moriconi (EURECOM, Amadeus); Olivier Levillain (Samovar, Télécom SudParis, Institut Polytechnique de Paris); Aurélien Francillon, Raphael Troncy (EURECOM)

Semantic Ranking for Automated Adversarial Technique Annotation in Security Text

Udesh Kumarasinghe (University of Colombo); Ahmed Lekssays, Husrev Taha Sencar, Sabri Boughorbel (Qatar Computing Research Institute); Charitha Elvitigala (C2SI); Preslav Nakov (MBZUAI)

Exposed by Default: A Security Analysis of Home Router Default Settings

Junjian Ye (Nanjing University of Posts and Telecommunications); Xavier de Carné de Carnavalet (The Hong Kong Polytechnic University); Lianying Zhao (Carleton University); Mengyuan Zhang (Vrije Universiteit Amsterdam); Lifa Wu, Wei Zhang (Nanjing University of Posts and Telecommunications)

Look What’s There! Utilizing the Internet’s Existing Data for Censorship Circumvention with OPPRESSION

Sebastian Zillien (Worms University of Applied Sciences); Tobias Schmidbauer (Nuremberg Institute of Technology); Mario Kubek (Georgia State University); Joerg Keller (FernUniversität in Hagen); Steffen Wendzel (Worms University of Applied Sciences/FernUniversität in Hagen)

Decoding the MITRE Engenuity ATT&CK Enterprise Evaluation: An Analysis of EDR Performance in Real-World Environments

Xiangmin Shen (Northwestern University); Zhenyuan Li (Zhejiang University); Graham Burleigh, Lingzhi Wang, Yan Chen (Northwestern University)

C2Miner: Tricking IoT Malware into Revealing Live Command & Control Servers

Ali Davanian, Michail Faloutsos (University of California Riverside); Martina Lindorfer (TU Wien)

Session 2: Side Channels

Generic and Automated Drive-by GPU Cache Attacks from the Browser

Lukas Giner, Roland Czerny, Christoph Gruber, Fabian Rauscher, Andreas Kogler (Graz University of Technology); Daniel De Almeida Braga (University of Rennes, CNRS, IRISA); Daniel Gruss (Graz University of Technology)

Cloud-Based Machine Learning Models as Covert Communication Channels

Torsten Krauß, Jasper Stang, Alexandra Dmitrienko (University of Würzburg)

WebGPU-SPY: Finding Fingerprints in the Sandbox through GPU Cache Attacks

Ethan Ferguson, Adam Wilson, Hoda Naghibijouybari (Binghamton University)

SoK: Can We Really Detect Cache Side-Channel Attacks by Monitoring Performance Counters?

William Kosasih (University of Adelaide); Yusi Feng (Institute of Information Engineering, Chinese Academy of Sciences; University of Chinese Academy of Sciences); Chitchanok Chuengsatiansup (The University of Melbourne); Yuval Yarom (Ruhr University Bochum); Ziyuan Zhu (Institute of Information Engineering, Chinese Academy of Sciences)

Non-Fusion Based Coherent Cache Randomization Using Cross-Domain Accesses

Kartik Ramkrishnan (University Of Minnesota); Stephen McCamant, Antonia Zhai (University of Minnesota); Pen Chung Yew (University of Minnesota at Twin Cities)

Beyond Over-Protection: A Targeted Approach to Spectre Mitigation and Performance Optimization

Tiziano Marinaro (CISPA Helmholtz Center for Information Security and Saarland University); Pablo Buiras, Andreas Lindner, Roberto Guanciale, Hamed Nemati (KTH Royal Institute of Technology)

Switchpoline: A Software Mitigation for Spectre-BTB and Spectre-BHB on ARMv8

Markus Bauer, Lorenz Hetterich, Michael Schwarz, Christian Rossow (CISPA Helmholtz Center for Information Security)

ABBY: Automating leakage modelling for side-channel analysis

Omid Bazangani, Alexandre Iooss, Ileana Buhan, Lejla Batina (Radboud University)

Session 3: Privacy-Preserving Protocols

Privacy-Preserving Popularity-Based Deduplication against Malicious Behaviors of the Cloud

Xiaowei Ge, Guanxiong Ha (College of Cyber Science, Nankai University); Chunfu Jia (Nankai University); Zhen Su (College of Cyber Science, Nankai University)

Nomadic: Normalising Maliciously-Secure Distance with Cosine Similarity for Two-Party Biometric Authentication

Nan Cheng (University of St. Gallen); Melek Önen (EURECOM); Aikaterini Mitrokotsa (University of St. Gallen); Oubaïda Chouchane, Massimiliano Todisco (EURECOM); Alberto Ibarrondo (Copper.co)

SiGBDT: Large-Scale Gradient Boosting Decision Tree Training via Function Secret Sharing

Yufan Jiang, Fei Mei, Tianxiang Dai, Yong Li (Huawei European Research Center)

zkMatrix: Batched Short Proof for Committed Matrix Multiplication

Mingshu Cong (The University of Hong Kong); Tsz Hon Yuen (Monash University); Siu-Ming Yiu (The University of Hong Kong)

Efficient Privacy-Preserving Approximation of the Kidney Exchange Problem

Malte Breuer, Ulrike Meyer (RWTH Aachen University); Susanne Wetzel (Stevens Institute of Technology)

Honest Majority Multiparty Computation over Rings with Constant Online Communication

Minghua Zhao (Shanghai Fudan Microelectronics Group Company Limited)

Ratel: MPC-extensions for Smart Contracts

Yunqi Li, Kyle Soska (University of Illinois at Urbana-Champaign); Zhen Huang (Shanghai Jiao Tong University); Sylvain Bellemare (The Initiative for CryptoCurrencies and Contracts); Mikerah Quintyne-Collins (HashCloack Inc.); Lun Wang (Google); Xiaoyuan Liu, Dawn Song (University of California, Berkeley); Andrew Miller (University of Illinois at Urbana-Champaign)

Session 4: Wireless and Mobile Security

Physical-Layer Public Key Encryption Through Massive MIMO

Senlin Liu, Tong Gao, Yijian Liu, Xianhui Lu (Institute of Information Engineering, CAS, University of Chinese Academy of Sciences)

Battle of Wits: To What Extent Can Fraudsters Disguise Their Tracks in International bypass Fraud?

Anne Josiane Kouam (TU Berlin); Aline Carneiro Viana (INRIA); Alain Tchana (Grenoble INP)

Unmasking the Veiled: A Comprehensive Analysis of Android Evasive Malware

Antonio Ruggia (University of Genova); Dario Nisi, Savino Dambra (EURECOM); Alessio Merlo (CASD – School for Advanced Defense Studies); Davide Balzarotti, Simone Aonzo (EURECOM)

TriSAS: Toward Dependable Inter-SAS Coordination with Auditability

Shanghao Shi (Virginia Tech); Yang Xiao (University of Kentucky); Changlai Du, Yi Shi (Virginia Tech); Chonggang Wang, Robert Gazda (InterDigital); Y. Thomas Hou, Eric Burger, Luiz DaSilva, Wenjing Lou (Virginia Tech)

Key Establishment for Secure Asymmetric Cross-Technology Communication

Wei Wang (Saint Louis University); Xin Liu (The Ohio State University); Zicheng Chi (Cleveland State University); Stuart Ray (Saint Louis University); Ting Zhu (The Ohio State University)

Session 5: Hardware Security

Secure Data-Binding in FPGA-based Hardware Architectures utilizing PUFs

Florian Frank, Martin Schmid, Felix Klement (University of Passau); Purushothaman Palani (Virginia Tech); Andreas Weber, Elif Bilge Kavun (University of Passau); Wenjie Xiong (Virginia Tech); Tolga Arul, Stefan Katzenbeisser (University of Passau)

SoK: Rowhammer on Commodity Operating Systems

Zhi Zhang (The University of Western Australia); Decheng Chen, Jiahao Qi (School of Microelectronics, South China University of Technology, China); Yueqiang Cheng (NIO); Shijie Jiang, Yiyang Lin (School of Microelectronics, South China University of Technology, China); Yansong Gao, Surya Nepal (CSIRO’s Data61); Yi Zou (School of Microelectronics, South China University of Technology, China); Jiliang Zhang (College of Integrated Circuits, Hunan University, China); Yang Xiang (School of Software and Electrical Engineering, Swinburne University of Technology, Australia)

SRAM Imprinting for System Protection and Differentiation

Jubayer Mahmod, Matthew Hicks (Virginia Tech)

Mayhem: Targeted Corruption of Register and Stack Variables

Andrew Adiletta, M. Caner Tol, Yarkın Doröz, Berk Sunar (Worcester Polytechnic Institute)

On The Effect of Replacement Policies on The Security of Randomized Cache Architectures

Moritz Peters (Horst Görtz Institute for IT-Security, Ruhr University Bochum); Nicolas Gaudin (UMR 6285, Lab-STICC, Univ. Bretagne-Sud, Lorient, France); Jan Philipp Thoma (Horst Görtz Institute for IT-Security, Ruhr University Bochum); Vianney Lapôtre (UMR 6285, Lab-STICC, Univ. Bretagne-Sud, Lorient, France); Pascal Cotret (UMR 6285, Lab-STICC, ENSTA Bretagne, Brest, France); Guy Gogniat (UMR 6285, Lab-STICC, Univ. Bretagne-Sud, Lorient, France); Tim Güneysu (Ruhr University Bochum, Bochum, DFKI GmbH, Bremen)

PowSpectre: Powering Up Speculation Attacks with TSX-based Replay

Md Hafizul Islam Chowdhuryy (University of Central Florida); Zhenkai Zhang (Clemson University); Fan Yao (University of Central Florida)

Session 6: Post Quantum

HQsFL: A Novel Training Strategy for Constructing High-performance and Quantum-safe Federated Learning

Bo Yu, Huajie Shen, Qian Xu, Wei He, Wankui Mao, Qing Zhang (Bestpay Co., Ltd.); Fan Zhang (Zhejiang University)

Efficient Post-Quantum Secure Deterministic Threshold Wallets from Isogenies

Poulami Das (CISPA Helmholtz Center for Information Security); Andreas Erwig (Technical University of Darmstadt); Michael Meyer (University of Regensburg); Patrick Struck (University of Konstanz)

REPQC: Reverse Engineering and Backdooring Hardware Accelerators for Post-quantum Cryptography

Samuel Pagliarini (Carnegie Mellon University/Tallinn University of Technology); Aikata Aikata (Institute of Applied Information Processing and Communications, Graz University of Technology); Malik Imran (Tallinn University of Technology); Sujoy Sinha Roy (Institute of Applied Information Processing and Communications, Graz University of Technology)

Pairwise and Parallel: Enhancing the Key Mismatch Attacks on Kyber and Beyond

Mingyao Shao (Institute of Information Engineering, CAS & School of Cyber Security, UCAS); Yuejun Liu (School of Cyber Science and Engineering, NJUST ); Yongbin Zhou (School of Cyber Science and Engineering, NJUST & Institute of Information Enginee, CAS & School of Cyber Security, UCAS)

SoK: CryptographicEstimators – a Software Library for Cryptographic Hardness Estimation

Andre Esser, Javier Verbel, Floyd Zweydinger, Emanuele Bellini (Technology Innovation Institute)

OPRFs from Isogenies: Designs and Analysis

Lena Heimberger, Tobias Hennerbichler (Graz University of Technology); Fredrik Meisingseth (Graz University of Technology and Know-Center); Sebastian Ramacher (AIT Austrian Institute of Technology); Christian Rechberger (Graz University of Technology)

Session 7: Measurements

External Attack-Surface of Modern Organizations

Nethanel Gelernter (IONIX ); Haya Schulmann (Goethe-Universität Frankfurt); Michael Waid- ner (Fraunhofer SIT and TU Darmstadt)

Cryptography in the Wild: An Empirical Analysis of Vulnerabilities in Cryptographic Libraries

Jenny Blessing (University of Cambridge); Michael Specter (Georgia Institute of Technology); Daniel J. Weitzner (MIT )

Username Squatting on Online Social Networks: A Study on X

Anastasios Lepipas, Anastasia Borovykh, Soteris Demetriou (Imperial College London)

Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry

Rana Pourmohamad, Steven Wirsz, Adam Oest, Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Adam Doupé, Rida A. Bazzi (Arizona State University)

Session 8: IoT and Voice Assistants

Command Hijacking on Voice-Controlled IoT in Amazon Alexa Platform

Wenbo Ding (University at Buffalo); Song Liao, Long Cheng (Clemson University); Xianghang Mi (University of Science and Technology of China); Ziming Zhao, Hongxin Hu (University at Buffalo)

WhisperVoiceTrace: A Comprehensive Analysis of Voice Command Fingerprinting

Hyojin Kim, Minji Jo, Jiwoo Hong, Hosung Kang (Ewha Womans University); Nate Mathews (Rochester Institute of Technology); Se Eun Oh (Ewha Womans University)

SpotOn: Adversarially Robust Keyword Spotting on Resource-Constrained IoT Platforms

Mehreen Jabbeen, Vireshwar Kumar (Indian Institute of Technology, Delhi); Rijurekha Sen (IIT Delhi)

OASIS: An Intrusion Detection System Embedded in Bluetooth Low Energy Controllers

Romain Cayre (EURECOM); Vincent Nicomette, Guillaume Auriol, Mohamed Kaâniche (LAAS-CNRS); Aurélien Francillon (EURECOM)

Session 9: Formal Methods

A Formal Analysis of Data Distribution Service Security

Binghan Wang, Hui Li, Jingjing Guan (Beijing University of Posts and Telecommunications, Beijing, China)

Formal Verification and Solutions for Estonian E-Voting

Sevdenur Baloglu, Sergiu Bursuc, Sjouke Mauw, Jun Pang (University of Luxembourg)

Camel: E2E Verifiable Instant Runoff Voting without Tallying Authorities

Luke Harrison, Samiran Bag, Feng Hao (University of Warwick)

Segment-Based Formal Verification of WiFi Fragmentation and Power Save Mode

Zilin Shen, Imtiaz Karim, Elisa Bertino (Purdue University)

Session 10: Web Security

FakeX: A Framework for Detecting Fake Reviews of Browser Extensions

Eric Olsson, Benjamin Eriksson (Chalmers University of Technology); Pablo Picazo-Sanchez (Chalmers University of Technology, Halmstad University); Lukas Andersson, Andrei Sabelfeld (Chalmers University of Technology)

What is in the Chrome Web Store

Sheryl Hsu, Manda Tran (Stanford University); Aurore Fass (Stanford University, CISPA Helmholtz Center for Information Security)

Sync-Millibottleneck Attack on Microservices Cloud Architecture

Xuhang Gu, Qingyang Wang (Louisiana State University); Qiben Yan (Michigan State University); Jianshu Liu (Louisiana State University); Calton Pu (Georgia Tech)

Towards Understanding and Improving Security-Relevant Web Application Logging

Merve Sahin, Noemi Daniele (SAP Security Research)

RootFree Attacks: Exploiting Mobile Platform’s Super Apps From Desktop

Chao Wang (The Ohio State University); Yue Zhang (Drexel University); Zhiqiang Lin (The Ohio State University)

Who’s Breaking the Rules? Studying Conformance to the HTTP Specifications and its Security Impact

Jannis Rautenstrauch, Ben Stock (CISPA Helmholtz Center for Information Security)

Beneath the Phishing Scripts: A Script-Level Analysis of Phishing Kits and Their Impact on Real-World Phishing Websites

Woonghee Lee, Junbeom Hur (Korea University); Doowon Kim (University of Tennessee, Knoxville)

BinAdapter: Leveraging Continual Learning for Inferring Function Symbol Names in a Binary

Nozima Murodova, Hyungjoon Koo (Sungkyunkwan University)

Session 11: Cyber-Physical Systems

The SA4P Framework: Sensing and Actuation as a Privilege

Piet De Vaere (ETH Zürich); Felix Stöger, Adrian Perrig (ETH Zürich); Gene Tsudik (UCI )

ConFIDe: A PWM-Driven Control-Fused Intrusion Detection System for Hardware Security in Unmanned Aerial Vehicles

Muneeba Asif (Florida International University); Ahmad Mohammad (Middle Tennessee State University); Mohammad Ashiqur Rahman, Kemal Akkaya (Florida International University)

Catch me if you can: Covert Information Leakage from Drones using MAVLink Protocol

Maryna Veksler, Kemal Akkaya, Selcuk Uluagac (Florida International University)

Diagnosis-guided Attack Recovery for Securing Robotic Vehicles from Sensor Deception Attacks

Pritam Dash (University of British Columbia); Guanpeng Li (University of Iowa); Mehdi Karimibiuki, Karthik Pattabiraman (University of British Columbia)

FAKEPCD: Fake Point Cloud Detection via Source Attribution

Yiting Qu, Zhikun Zhang (CISPA Helmholtz Center for Information Security); Yun Shen (Netapp); Michael Backes, Yang Zhang (CISPA Helmholtz Center for Information Security)

On Practicality of Using ARM TrustZone Trusted Execution Environment for Securing Programmable Logic Controllers

Zhiang Li (National University of Singapore); Daisuke Mashima, Wen Shei Ong, Ertem Esiner (Illinois ARCS); Zbigniew Kalbarczyk (University of Illinois at Urbana-Champaign); Ee-Chien Chang (School of Computing, NUS)

Madtls: Fine-grained Middlebox-aware End-to-end Security for Industrial Communication

Eric Wagner (Fraunhofer FKIE & RWTH Aachen University); David Heye (RWTH Aachen University & Fraunhofer FKIE); Martin Serror (Fraunhofer FKIE); Ike Kunze, Klaus Wehrle (RWTH Aachen University); Martin Henze (RWTH Aachen University & Fraunhofer FKIE)

Uncovering Covert Attacks on EV Charging Infrastructure: How OCPP Backend Vulnerabilities Could Compromise Your System

Khaled Sarieddine, Mohammad Ali Sayed (Concordia University); Sadegh Torabi (George Mason University); Ribal Attallah, Danial Jafarigiv (Hydro-Quebec Research Institute); Chadi Assi (Concordia University); Mourad Debbabi (Security Research Centre, Concordia University, Quebec, Canada)

Session 12: Crypto and Privacy

Exploiting Data Redundancy in CKKS Encoding for High-Speed Homomorphic Encryption

Amir Sabbagh Molahosseini (Queen’s University Belfast); Hans Vandierendonck (Queen’s University of Belfast)

Efficient Unbalanced Quorum PSI from Homomorphic Encryption

Xinpeng Yang, Liang Cai, Yinghao Wang, Keting Yin, Lu Sun (Zhejiang University); Jingwei Hu (Nanyang Technological University)

SweetPAKE: Key exchange with decoy passwords

Afonso Arriaga (SnT, University of Luxembourg); Peter Y.A. Ryan (SnT, Univeristy of Luxembourg); Marjan Skrobot (SnT, University of Luxembourg)

MOSAIC: A Prune-and-Assemble Approach for Efficient Model Pruning in Privacy-Preserving Deep Learning

Yifei Cai (Old Dominion University); Qiao Zhang (Chongqing University); Rui Ning, Chunsheng Xin (Old Dominion University); Hongyi Wu (University of Arizona)

LightPIR: Single-Server PIR via FHE without Gaussian Noise

Han Xia, Mingsheng Wang (Key Laboratory of Cyberspace Security Defense, Institute of Information Engineering, CAS; School of Cyber Security, University of Chinese Academy of Sciences)

Reconstructing Chameleon Hash: Full Security and the Multi-Party Setting

Kwan Yin Chan (The University of Hong Kong); Liqun Chen, Yangguang Tian (University of Surrey); Tsz Hon Yuen (Monash University)

Skye: An Expanding PRF based Fast KDF and its Applications

Amit Singh Bhati (COSIC, KU Leuven); Antonín Dufka (Masaryk University); Elena Andreeva (Technical University of Vienna); Arnab Roy (University of Innsbruck); Bart Preneel (COSIC, KU Leuven)

Publishing Common Neighbors Histograms of Social Networks under Edge Differential Privacy

Chaojie Lv (University of Science and Technology of China); Xiaokui Xiao (NUS); Lan Zhang (University of Science and Technology of China); Ting Yu (Qatar Computing Research Institute)

Session 13: Software Security

Cross-Language Differential Testing of JSON Parsers

Jonas Möller, Felix Weißberg, Lukas Pirch, Thorsten Eisenhofer, Konrad Rieck (Technische Universität Berlin)

VFCFinder: Pairing Security Advisories and Patches

Trevor Dunlap, Elizabeth Lin, William Enck, Bradley Reaves (North Carolina State University)

On the Role of Pre-trained Embeddings in Binary Code Analysis

Alwin Maier, Felix Weißberg, Konrad Rieck (TU Berlin)

ISLAB: Immutable Memory Management Metadata for Commodity Operating System Kernels

Marius Momeu, Fabian Kilger, Christopher Roemheld, Simon Schnückel (Technical University of Munich); Sergej Proskurin (BedRock Systems); Michalis Polychronakis (Stony Brook University); Vasileios P. Kemerlis (Brown University)

DMTI: Accelerating Memory Error Detection in Precompiled C/C++ Binaries with ARM Memory Tagging Extension

Andreas Hager-Clukas (University of Applied Sciences Munich); Konrad Hohentanner (Fraunhofer AISEC)

BinGo: Identifying Security Patches in Binary Code with Graph Representation Learning

Xu He, Shu Wang (George Mason University); Pengbin Feng (Xidian University); Xinda Wang (The University of Texas at Dallas); Shiyu Sun (George Mason University); Qi Li (Tsinghua University); Kun Sun (George Mason University)

Beyond the Edges of Kernel Control-Flow Hijacking Protection with HEK-CFI

Lukas Maar, Pascal Nasahl, Stefan Mangard (Graz University of Technology, Graz)

Session 14: Machine Learning

Model Extraction Attacks Revisited

Jiacheng Liang (Stony Brook University); Ren Pang (Penn State University); Changjiang Li, Ting Wang (Stony Brook University)

A Generative Framework for Low-Cost Result Validation of Machine Learning-as-a-Service Inference

Abhinav Kumar (Saint Louis University); Miguel A. Guirao Aguilera (New Mexico State University); Reza Tourani (Saint Louis University); Satyajayant Misra (New Mexico State University)

VLIA: Navigating Shadows with Proximity for Highly Accurate Visited Location Inference Attack against Federated Recommendation Models

Thirasara Ariyarathna (University of New South Wales); Meisam Mohammady (Iowa State University of Science and Technology, Iowa, The USA); Hye-Young Paik, Salil S. Kanhere (University of New South Wales)

Self-Supervised Fine-Tuning of Automatic Speech Recognition Systems against Signal Processing Attacks

Oshan Jayawardena, Dilmi Caldera, Sandani Jayawardena, Avishka Sandeepa (University of Moratuwa); Vincent Bindschaedler (University of Florida); Subodha Charles (University of Moratuwa)

Mitigating Distributed Backdoor Attack in Federated Learning Through Mode Connectivity

Kane Walter (UNSW, Sydney, Australia); Meisam Mohammady (Iowa State University of Science and Technology, Iowa, The USA); Surya Nepal (Data61, CSIRO); Salil S. Kanhere (UNSW, Sydney, Australia)

An Investigation into Misuse of Java Security APIs by Large Language Models

Zahra Mousavi (CREST – The Centre for Research on Engineering Software Technologies, University of Adelaide, Cyber Security Cooperative Research Centre, CSIRO/Data61, Australia); Chadni Islam (Queensland University of Technology); Kristen Moore, Alsharif Abuadbba (CSIRO’s Data61, Australia); M. Ali Babar (CREST – The Centre for Research on Engineering Software Technologies, University of Adelaide)

Multi-Turn Hidden Backdoor in Large Language Model-powered Chatbot Models

Bocheng Chen (Michigan State University); Nikolay Ivanov (Rowan University); Guangjing Wang, Qiben Yan (Michigan State University)

PARL: Poisoning Attacks Against Reinforcement Learning-based Recommender Systems

Linkang Du, Quan Yuan (Zhejiang University); Min Chen (CISPA Helmholtz Center for Information Security); Mingyang Sun, Peng Cheng, Jiming Chen, Zhikun Zhang (Zhejiang University)

Session 15: Distributed and Decentralized Systems

An Empirical Study of Consensus Protocols’ DoS Resilience

Giacomo Giuliari (ETH Zürich & Mysten Labs); Alberto Sonnino (Mysten Labs & University College London (UCL)); Marc Frei (ETH Zürich); Fabio Streun (Anapaya Systems); Lefteris Kokoris-Kogias (Mysten Labs & IST Austria); Adrian Perrig (ETH Zürich & Mysten Labs)

SilentProof: Anonymous Authentication with Blockchain-Backed Offloading

Jamal H. Mosakheil, Kan Yang (The University of Memphis)

Revocable TACO: Revocable Threshold based Anonymous Credentials over Blockchains

Kanchan Bisht, Neel Yogendra Kansagra, Reisha Ali, Mohammed Sayeed Shaik, Maria Francis, Kotaro Kataoka (IIT Hyderabad)

SecPLF: Secure Protocols for Loanable Funds against Oracle Manipulation Attacks

Sanidhay Arora, Yingjiu Li (University of Oregon); Yebo Feng (Nanyang Technological University); Jiahua Xu (UCL)

zkLogis: Scalable, Privacy-Enhanced, and Traceable Logistics on Public Blockchain

Jongho Kim, Junhee Lee, Hyunok Oh (Hanyang University); Jihye Kim (Kookmin University)

CapsuleFormer: A Capsule and Transformer combined model for Decentralized Application encrypted traffic classification

Xiang Zhou, Xi Xiao (Shenzhen International Graduate School, Tsinghua University, China); Qing Li (Peng Cheng Laboratory); Bin Zhang (Pengcheng Laboratory); Guangwu Hu (School of Computer Science, Shenzhen Institute of Information Technology,Shenzhen, China); Xiapu Luo (The Hong Kong Polytechnic University); Tianwei Zhang (Nanyang Technological University)

BlindShuffler: Universal and Trustless Mixing for Confidential Transactions

Chenke Wang, Zhonghui Ge, Yu Long (Shanghai Jiao Tong University); Xian Xu (East China University of Science and Technology); Shi-Feng Sun, Dawu Gu (Shanghai Jiao Tong University)

PEPPER: Privacy-prEserving, auditable, and fair Payment based resource discovery at the PERvasive edge

Emrah Sariboz (New Mexico State University); Reza Tourani (Saint Louis University); Roopa Vishwanathan, Satyajayant Misra (New Mexico State University)

Session 16: Fuzzing

Make out like a (Multi-Armed) Bandit: Improving the Odds of Fuzzer Seed Scheduling with T-Scheduler

Simon Luo (The University of New South Wales); Adrian Herrera (Australian National Univeristy); Paul Quirk, Michael Chase (DSTG); Damith C. Ranasinghe (University of Adelaide); Salil S Kanhere (The University of New South Wales)

SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer

Gwangmu Lee, Duo Xu (EPFL); Solmaz Salimi (Sharif University of Technology); Byoungyoung Lee (Seoul National University); Mathias Payer (EPFL)

Fuzzing API Error Handling Behaviors using Coverage Guided Fault Injection

Shashank Sharma, Sai Ritvik Tanksalkar, Sourag Cherupattamoolayil, Aravind Machiry (Purdue University)

AIMFuzz: Automated Function-Level In-Memory Fuzzing on Binaries

TaeWook Kim, Seokhyun Hong, Yeongpil Cho (Hanyang University)

What All the PHUZZ Is About: A Coverage-guided Fuzzer for Finding Vulnerabilities in PHP Web Applications

Sebastian Neef, Lorenz Kleissner, Jean-Pierre Seifert (Technische Universität Berlin)

SoK: Where to Fuzz? Assessing Target Selection Methods in Directed Fuzzing

Felix Weissberg, Jonas Möller (Technische Universität Berlin); Tom Ganz, Erik Imgrund (SAP Security Research); Lukas Pirch (Technische Universität Berlin); Lukas Seidel (Binarly); Moritz Schloegel (CISPA Helmholtz Center for Information Security); Thorsten Eisenhofer, Konrad Rieck (Technische Universität Berlin)

Session 17: Trusted Execution Environments and Enclaves

ESem: To Harden Process Synchronization for Servers

Zhanbo Wang (Research Institute of Trustworthy Autonomous Systems, Southern University of Science and Technology, China, and Peng Cheng Laboratory, China); Jiaxin Zhan (Research Institute of Trustworthy Autonomous Systems, Southern University of Science and Technology, China, and Department of Computer Science and Engineering, Southern University of Science and Technology, China); Xuhua Ding (Singapore Management University); Fengwei Zhang (Department of Computer Science and Engineering, Southern University of Science and Technology, China, and Research Institute of Trustworthy Autonomous Systems, Southern University of Science and Technology, China); Ning Hu (Peng Cheng Laboratory, China)

TeeFilter: High-Assurance Network Filtering Engine for High-End IoT and Edge Devices based on TEEs

Jonas Röckl, Nils Bernsdorf (FAU Erlangen-Nürnberg); Tilo Müller (Hof University of Applied Sciences)

Building Your Own Trusted Execution Environments Using FPGA

MD Armanuzzaman (University at Buffalo); Ahmad-Reza Sadeghi (Technische Universität Darmstadt); Ziming Zhao (University at Buffalo)

SoK: Understanding Design Choices and Pitfalls of Trusted Execution Environments

Mengyuan Li, Yuheng Yang (Massachusetts Institute of Technology); Guoxing Chen (Shanghai Jiao Tong University); Mengjia Yan (Massachusetts Institute of Technology); Yinqian Zhang (Southern University of Science and Technology)

MultiTEE: Distributing Trusted Execution Environments

Simon Ott, Benjamin Orthen, Alexander Weidinger, Julian Horsch (Fraunhofer AISEC); Vijayanand Nayani, Jan-Erik Ekberg (Huawei Technologies)

(In)visible Privacy Indicator: Security Analysis of Privacy Indicator on Android Devices

Yurak Choe (Sungkyunkwan University); Hyungseok Yu, Taeho Kim, Shinjae Lee (Samsung Electronics); Hojoon Lee, Hyoungshick Kim (Sungkyunkwan University)

Session 18: ORAM and Searchable Encryption

Single Round-trip Hierarchical ORAM via Succinct Indices

William Holland (CSIRO’s data61); Olga Ohrimenko (The University of Melbourne); Anthony Wirth (the University of Melbourne)

CryptGraph: An Efficient Privacy-Enhancing Solution for Accurate Shortest Path Retrieval in Cloud Environments

Fuyi Wang (Deakin University); Zekai Chen (Fuzhou University); Lei Pan (Deakin University); Leo Yu Zhang (Griffith University); Jianying Zhou (Singapore University of Technology and Design)

Menhir: An Oblivious Database with Protection against Access and Volume Pattern Leakage

Leonie Reichert, Gowri R Chandran (Technical University of Darmstadt); Phillipp Schoppmann (Google); Thomas Schneider, Björn Scheuermann (Technical University of Darmstadt)

Tokenised Multi-client Provisioning for Dynamic Searchable Encryption with Forward and Backward Privacy

Arnab Bag (Indian Institute of Technology Kharagpur); Sikhar Patranabis (IBM Research India); Debdeep Mukhopadhyay (Department of Computer Science and Engineering, IIT Kharagpur)

ALLOSAUR: Accumulator with Low-Latency Oblivious Sublinear Anonymous credential Updates with Revocations

Samuel Jaques (University of Waterloo); Hart Montgomery (The Linux Foundation); Michael Lodder

DISCO: Dynamic Searchable Encryption with Constant State

Xiangfu Song (National University of Singapore); Yu Zheng (Chinese University of Hong Kong); Jianli Bai (University of Auckland); Changyu Dong (Guangzhou University); Zheli Liu (Nankai University); Ee-Chien Chang (National University of Singapore)

Session 19: Usability

The Catcher in the Eye: Recognizing Users by their Blinks

Ryo Iijima (National Institute of Advanced Industrial Science and Technology, Waseda University); Tatsuya Takehisa (National Institute of Information and Communications Technology); Tetsushi Ohki (Shizuoka University, RIKEN AIP); Tatsuya Mori (Waseda University, NICT, RIKEN AIP)

From User Insights to Actionable Metrics: A User-Focused Evaluation of Privacy-Preserving Browser Extensions

Ritik Roongta, Rachel Greenstadt (New York University)

Charting the Path to SBOM Adoption: A Business Stakeholder-Centric Approach

Berend Kloeg (Northwave Cyber Security); Aaron Yi Ding (TU Delft); Sjoerd Pellegrom (Northwave Cyber Security); Yury Zhauniarovich (TU Delft)

SoK: False Information, Bots and Malicious Campaigns: Demystifying Elements of Social Media Manipulations

Mohammad Majid Akhtar, Rahat Masood (University of New South Wales); Muhammad Ikram (Macquarie University); Salil S Kanhere (UNSW, Sydney, Australia)

Session 20: Authentication and Signatures

Delegating FIDO Credentials Using Single-use ECDSA Signatures

Wei-Zhu Yeoh, Lucjan Hanzlik, Oliver Valta (CISPA Helmholtz Center for Information Security)

Quantum-Safe Account Recovery for WebAuthn

Douglas Stebila, Spencer Wilson (University of Waterloo)

Byzantine Fault-Tolerant Aggregate Signatures

Quentin Kniep, Roger Wattenhofer (ETH Zürich)

Unstoppable Wallets: Chain-assisted Threshold ECDSA and its Applications

Guy Zyskind (MIT ); Avishay Yanai (unaffiliated); Alex Pentland (MIT)

Session 21: Payment Channel Networks and Ticket Payments

Auroch: Auction-Based Multipath Routing for Payment Channel Networks

Mohammed Ababneh, Kartick Kolachala, Roopa Vishwanathan (New Mexico State University)

SPRITE: Secure and Private Routing in Payment Channel Networks

Gaurav Panwar, Roopa Vishwanathan, George Torres, Satyajayant Misra (New Mexico State University)

RACED: Routing in Payment Channel Networks Using Distributed Hash Tables

Kartick Kolachala, Mohammed Ababneh, Roopa Vishwanathan (New Mexico State University)

Transferable, Auditable and Anonymous Ticketing Protocol

Pascal Lafourcade, Dhekra Mahmoud, Gael Marcadet (Université Clermont-Auvergne, CNRS, Clermont-Auvergne-INP, LIMOS); Charles Olivier-Anclin (be ys Pay and Université Clermont-Auvergne, CNRS, Clermont-Auvergne-INP, LIMOS and LIFO, Université d’Orléans, INSA Centre Val de Loire)

https://asiaccs2024.sutd.edu.sg/

历年会议

安全学术圈招募队友-ing

有兴趣加入学术圈的请联系secdr#qq.com

长亭百川云 - 文章详情

长亭百川云