IEEE S&P 2023 Sessions

154 talks · 2023 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• 3DFed: Adaptive and Extensible Framework for Covert Backdoor Attack in Federated Learning 2023
• A Generic, Efficient, and Effortless Solver with Self-Supervised Learning for Breaking Text Captchas 2023
• A Real-World Hardware Trojan Detection Case Study Across Four Modern CMOS Technology Generations 2023
• A Security RISC: Microarchitectural Attacks on Hardware RISC-V CPUs 2023
• A Theory to Instruct Differentially-Private Learning via Clipping Bias Reduction 2023
• Accuracy-Privacy Trade-off in Deep Ensemble: A Membership Inference Perspective 2023
• Adaptive Risk-Limiting Comparison Audits 2023
• ADI: Adversarial Dominating Inputs in Vertical Federated Learning Systems 2023
• AEM: Facilitating Cross-Version Exploitability Assessment of Linux Kernel Vulnerabilities 2023
• AI-Guardian: Defeating Adversarial Attacks using Backdoors 2023
• Always Contribute Back: A Qualitative Study on Security Challenges of the Open Source Supply Chain 2023
• An Interview on the Security and Privacy Development Practices in Turkish Software Startups 2023
• Analyzing Leakage of Personally Identifiable Information in Language Models 2023
• Attitudes towards Client-Side Scanning for CSAM, Terrorism, Drug Trafficking, Drug Use, Tax Evasion 2023
• AUC: Accountable Universal Composability 2023
• BLEDiff : Scalable and Property-Agnostic Noncompliance Checking for BLE Implementations 2023
• BlindHub: Bitcoin-Compatible Privacy-Preserving Payment Channel Hubs Supporting Variable Amounts 2023
• Blue Is the New Black (Market): Privacy Leaks and Re-Victimization from Police-Auctioned Cellphones 2023
• Blue's Clues: Practical Discovery of Non-Discoverable Bluetooth Devices 2023
• Breaking Security-Critical Voice Authentication 2023
• Certifiably Robust Object Detection against Patch Hiding Attacks via Patch-agnostic Masking 2023
• Characterizing Everyday Misuse of Smart Home Devices 2023
• Characterizing the Limits of POV Acoustic Eavesdropping from Smartphone Cameras 2023
• Clockwork Finance: Automated Analysis of Economic Security in Smart Contracts 2023
• Confident Monte Carlo: Rigorous Analysis of Guessing Curves for Probabilistic Password Models 2023
• Continual Observation under User-level Differential Privacy 2023
• Continuous Intrusion: Characterizing the Security of Continuous Integration Services 2023
• CSI:Rowhammer - Cryptographic Security and Integrity against Rowhammer 2023
• D-DAE: Defense-Penetrating Model Extraction Attacks 2023
• Deep perceptual hashing algorithms with hidden dual purpose: client-side scanning facial recognition 2023
• Deepfake Text Detection: Limitations and Opportunities 2023
• DeHiREC: Detecting Hidden Voice Recorders via ADC Electromagnetic Radiation 2023
• DepthFake: Spoofing 3D Face Authentication with a 2D Photo 2023
• Design and Evaluation of Inclusive Email Security Indicators for People with Visual Impairments 2023
• Detection of Inconsistencies in Privacy Practices of Browser Extensions 2023
• DevIOus: Device-Driven Side-Channel Attacks on the IOMMU 2023
• Disassembling ARM Binaries by Lightweight Superset Instruction Interpretation and Graph Modeling 2023
• Discop: Provably Secure Steganography in Practice Based on “Distribution Copies” 2023
• Disguising Attacks with Explanation-Aware Backdoors 2023
• Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation 2023
• ELSA: Secure Aggregation for Federated Learning with Malicious Actors 2023
• Examining Zero-Shot Vulnerability Repair with Large Language Models 2023
• FedRecover: Recovering from Poisoning Attacks in Federated Learning using Historical Information 2023
• FIDO2, CTAP 2.1, and WebAuthn 2: Provable Security and Post-Quantum Instantiation 2023
• Finding Specification Blind Spots via Fuzz Testing 2023
• FLUTE: Fast and Secure Lookup Table Evaluations 2023
• From 5G Sniffing to Harvesting Leakages of Privacy-Preserving Messengers 2023
• GraphSPD: Graph-Based Security Patch Detection with Enriched Code Semantics 2023
• Half&Half: Demystifying Intel’s Directional Branch Predictors for Fast, Secure Partitioned Execution 2023
• Hide and Seek with Spectres: Efficient discovery of speculative vulnerabilities with random testing 2023
• High-Order Masking of Lattice Signatures in Quasilinear Time 2023
• How IoT Re-using Threatens Your Sensitive Data: Exploring the User-Data Disposal in Used IoT Devices 2023
• Improving Developers' Understanding of Regex Denial of Service Tools 2023
• ImU: Physical Impersonating Attack for Face Recognition System with Natural Style Changes 2023
• Inducing Wireless Chargers to Voice Out for Inaudible Command Attacks 2023
• Investigating Package Related Security Threats in Software Registries 2023
• IPvSeeYou: Exploiting Leaked Identifiers in IPv6 for Street-Level Geolocation 2023
• Is Cryptographic Deniability Sufficient? Non-Expert Perceptions of Deniability in Secure Messaging 2023
• It’s (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses 2023
• Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers 2023
• Jolt: Recovering TLS Signing Keys via Rowhammer Faults 2023
• LAMBRETTA: Learning to Rank for Twitter Soft Moderation 2023
• LazyTAP: On-Demand Data Minimization for Trigger-Action Applications 2023
• Less Is More: Refinement Proofs for Probabilistic Proofs 2023
• Leveraging Sandboxes for a Minimally Invasive Browser Fingerprinting Defense 2023
• Limits of I/O Based Ransomware Detection: An Imitation Based Attack 2023
• Locally Differentially Private Frequency Estimation Based on Convolution Framework 2023
• Low-Cost Privilege Separation with Compile Time Compartmentalization for Embedded Systems 2023
• Low-effort VR Headset User Authentication Using Head-reverberated Sounds with Replay Resistance 2023
• Man-in-the-Middle Attacks without Rogue AP: When WPAs Meet ICMP Redirects 2023
• MEGA: Malleable Encryption Goes Awry 2023
• Mew: Enabling Large-Scale and Dynamic Link-Flooding Defenses on Programmable Switches 2023
• mmEcho: A mmWave-based Acoustic Eavesdropping Method 2023
• mmSpoof: Resilient Spoofing of Automotive Millimeter-wave Radars using Reflect Array 2023
• MPCAuth: Multi-factor Authentication for Distributed-trust Systems 2023
• Multi-Round Single-Server Secure Aggregation with Applications to Private Federated Learning 2023
• No One Drinks From the Firehose: How Organizations Filter and Prioritize Vulnerability Information 2023
• Not Yet Another Digital ID: Privacy-preserving Humanitarian Aid Distribution 2023
• On Efficient, High-Fidelity and Blind Suppression of Backdoor Effects in Trojaned ML Models 2023
• On the (In)security of Peer-to-Peer Decentralized Machine Learning 2023
• On The Empirical Effectiveness of Unrealistic Adversarial Hardening Against Realistic Attacks 2023
• On the Evolution of (Hateful) Memes by Means of Multimodal Contrastive Learning 2023
• On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security 2023
• One Key to Rule Them All: Secure Group Pairing for Heterogeneous IoT Devices 2023
• OWL: Compositional Verification of Security Protocols via an Information-Flow Type System 2023
• PCspooF: Compromising the Safety of Time-Triggered Ethernet 2023
• Perceptions of Distributed Ledger Technology Key Management—Interviews with Finance Professionals 2023
• Practical Program Modularization with Type-Based Dependence Analysis 2023
• Practical Timing Side-Channel Attacks on Memory Compression 2023
• Practically-Exploitable Cryptographic Vulnerabilities in Matrix 2023
• Precise Detection of Kernel Data Races with Probabilistic Lockset Analysis 2023
• Private Access Control for Function Secret Sharing 2023
• Private Collaborative Data Cleaning via Non-Equi PSI 2023
• Private Eye: On the Limits of Textual Screen Peeking via Eyeglass Reflections in Video Conferencing 2023
• Protected or Porous: A Comparative Analysis of Threat Detection Capability of IoT Safeguards 2023
• Protecting Models Trained by Multi-party Learning with Differential Privacy 2023
• PublicCheck: Public Integrity Verification for Services of Run-time Deep Models 2023
• PyFET: Forensically Equivalent Transformation for Python Binary Decompilation 2023
• QueryX: Symbolic Query on Decompiled Code for Finding Bugs in COTS Binaries 2023
• RAB: Provable Robustness Against Backdoor Attacks 2023
• REDEEM MYSELF: Purifying Backdoors in Deep Learning Models using Self Attention Distillation 2023
• REGA: Scalable Rowhammer Mitigation with Refresh-Generating Activations 2023
• Rethinking Searchable Symmetric Encryption 2023
• RoFL: Robustness of Secure Federated Learning 2023
• RuleKeeper: GDPR-Aware Personal Data Compliance for Web Frameworks 2023
• Scalable and Privacy-Preserving Federated Principal Component Analysis 2023
• Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability 2023
• SCAPHY: Detecting Modern ICS Attacks by Correlating Behaviors in SCADA and PHYsical 2023
• Scatter and Split Securely: Defeating Cache Contention and Occupancy Attacks 2023
• SecureCells: A Secure Compartmentalized Architecture 2023
• Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya 2023
• ShadowNet: A Secure and Efficient On-device Model Inference System for Convolutional Neural Networks 2023
• Shedding Light on Inconsistencies in Grid Cybersecurity: Disconnects and Recommendations 2023
• Skilled or Gullible? Gender Stereotypes Related to Computer Security and Privacy 2023
• SNAP: Efficient Extraction of Private Properties with Poisoning 2023
• SoK: A Critical Evaluation of Efficient Website Fingerprinting Defenses 2023
• SoK: Anti-Facial Recognition Technology 2023
• SoK: Certified Robustness for Deep Neural Networks 2023
• SoK: Cryptographic Neural-Network Computation 2023
• SoK: Decentralized Finance (DeFi) Attacks 2023
• SoK: Distributed Randomness Beacons 2023
• SoK: History is a Vast Early Warning System: Auditing the Provenance of System Intrusions 2023
• SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning 2023
• SoK: Taxonomy of Attacks on Open-Source Software Supply Chains 2023
• Sound Verification of Security Protocols: From Design to Interoperable Implementations 2023
• Spectral-DP: Differentially Private Deep Learning through Spectral Perturbation and Filtering 2023
• SyzDescribe: Principled, Automated, Static Generation of Syscall Descriptions for Kernel Drivers 2023
• Teaching and Learning Cybersecurity and AI Ethics in High School 2023
• TEEzz: Fuzzing Trusted Applications on COTS Android Devices 2023
• TELEPATH: A Minecraft-based Covert Communication System 2023
• TeSec: Accurate Server-side Attack Investigation for Web Applications 2023
• The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web 2023
• Three-party Non-linear Computation without Preprocessing for Privacy-preserving Machine Learning 2023
• Threshold BBS+ Signatures for Distributed Anonymous Credential Issuance 2023
• Threshold Signatures in the Multiverse 2023
• Towards a Rigorous Statistical Analysis of Empirical Password Datasets 2023
• TrojanModel: A Practical Trojan Attack against Automatic Speech Recognition Systems 2023
• Typing High-Speed Cryptography against Spectre v1 2023
• Tyr: Finding Consensus Failure Bugs in Blockchain System with Behaviour Divergent Model 2023
• Uncovering User Interactions on Smartphones via Contactless Wireless Charging Side Channels 2023
• Understanding the (In)Security of Cross-side Face Verification Systems in Mobile Apps 2023
• Understanding the Security and Privacy Attitudes of Smart Home Users on Reddit 2023
• User Perceptions and Experiences with Smart Home Updates 2023
• UTOPIA: Automatic Generation of Fuzz Driver using Unit Tests 2023
• VIDEZZO: Dependency-aware Virtual Device Fuzzing 2023
• Volttack: Control IoT Devices by Manipulating Power Supply Voltage 2023
• Vulnerability Discovery for All: Experiences of Marginalization in Vulnerability Discovery 2023
• WarpAttack: Bypassing CFI through Compiler-Introduced Double-Fetches 2023
• WaVe: A Verifiably Secure WebAssembly Sandboxing Runtime 2023
• Weak Fiat-Shamir Attacks on Modern Proof Systems 2023
• WebSpec: Towards Machine-Checked Analysis of Browser Security Mechanisms 2023
• WeRLman: To Tackle Whale (Transactions), Go Deep (RL) 2023
• When and Why Do People Want Ad Targeting Explanations? Evidence from a Mixed-Methods Field Study 2023
• XFL: Naming Functions in Binaries with Extreme Multi-label Learning 2023