#usenixsecurity — Public Fediverse posts

The second to last trifecta of #HackerSummerCamp, here is the #DCG201 2024 guide for @usenixassociation, @soups & @wootsecurity: https://defcon201.medium.com/hacker-summer-camp-2024-guides-part-sixteen-usenix-security-trifecta-2024-c0e80833eb2d

#usenix #usenix2024 #usenixsecurity #soups #soups2024 #woot #w00t @defcon @philly2600 @bsidesphilly

I had the pleasure to contribute to Lukas Maar's #USENIX2024 paper "SLUBStick".
SLUBStick elevates limited heap vulnerabilities within the #Linux kernel to arbitrary memory read-and-write primitives, leveraging a timing side channel.
Thanks to Lukas Maar, Martin Unterguggenberger, Mathias Oberhuber and Stefan Mangard for this great opportunity!
Congratulations to Lukas Maar for driving the paper to acceptance at USENIX Security!

You can read the full paper here: https://stefangast.eu/papers/slubstick.pdf

#SLUBStick #Kernel #Linux #KernelSecurity #sidechannel #usenixsecurity #usenixsec

I had the pleasure to contribute to Lukas Maar's #USENIX2024 paper "SLUBStick".
SLUBStick elevates limited heap vulnerabilities within the #Linux kernel to arbitrary memory read-and-write primitives, leveraging a timing side channel.
Thanks to Lukas Maar, Martin Unterguggenberger, Mathias Oberhuber and Stefan Mangard for this great opportunity!
Congratulations to Lukas Maar for driving the paper to acceptance at USENIX Security!

You can read the full paper here: https://stefangast.eu/papers/slubstick.pdf

#SLUBStick #Kernel #Linux #KernelSecurity #sidechannel #usenixsecurity #usenixsec

I had the pleasure to contribute to Lukas Maar's #USENIX2024 paper "SLUBStick".
SLUBStick elevates limited heap vulnerabilities within the #Linux kernel to arbitrary memory read-and-write primitives, leveraging a timing side channel.
Thanks to Lukas Maar, Martin Unterguggenberger, Mathias Oberhuber and Stefan Mangard for this great opportunity!
Congratulations to Lukas Maar for driving the paper to acceptance at USENIX Security!

You can read the full paper here: https://stefangast.eu/papers/slubstick.pdf

#SLUBStick #Kernel #Linux #KernelSecurity #sidechannel #usenixsecurity #usenixsec

I had the pleasure to contribute to Lukas Maar's #USENIX2024 paper "SLUBStick".
SLUBStick elevates limited heap vulnerabilities within the #Linux kernel to arbitrary memory read-and-write primitives, leveraging a timing side channel.
Thanks to Lukas Maar, Martin Unterguggenberger, Mathias Oberhuber and Stefan Mangard for this great opportunity!
Congratulations to Lukas Maar for driving the paper to acceptance at USENIX Security!

You can read the full paper here: https://stefangast.eu/papers/slubstick.pdf

#SLUBStick #Kernel #Linux #KernelSecurity #sidechannel #usenixsecurity #usenixsec

I had the pleasure to contribute to Lukas Maar's #USENIX2024 paper "SLUBStick".
SLUBStick elevates limited heap vulnerabilities within the #Linux kernel to arbitrary memory read-and-write primitives, leveraging a timing side channel.
Thanks to Lukas Maar, Martin Unterguggenberger, Mathias Oberhuber and Stefan Mangard for this great opportunity!
Congratulations to Lukas Maar for driving the paper to acceptance at USENIX Security!

You can read the full paper here: https://stefangast.eu/papers/slubstick.pdf

#SLUBStick #Kernel #Linux #KernelSecurity #sidechannel #usenixsecurity #usenixsec

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

Also looking forward to present #SnailLoad at #USENIX2024.
(3/3)

#usenixsecurity #usenixsec #usenixsecurity

I had the pleasure to contribute to the #USENIX2024 paper "Divide and Surrender", recovering the full secret key from the reference implementation of the HQC Key Encapsulation Mechanism, exploiting a timing side channel arising from non-constant-time modulo operations.
Thanks to Robin Leander Schröder and Qian Guo for this opportunity and congratulations to Robin Leander Schröder for getting his first paper accepted at USENIX Security!

You can read the full paper here: https://stefangast.eu/papers/divide_and_surrender.pdf

#divideandsurrender #hqc #sidechannel #postquantumcrypto #usenixsecurity

USENIX Security ’23 – Controlled Data Races In Enclaves: Attacks And Detection – Source: securityboulevard.com https://ciso2ciso.com/usenix-security-23-controlled-data-races-in-enclaves-attacks-and-detection-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #SecurityConferences #CyberSecurityNews #SecurityBoulevard #USENIXSecurity’23 #USENIX

USENIX Security ’23 – Reusable Enclaves For Confidential Serverless Computing – Source: securityboulevard.com https://ciso2ciso.com/usenix-security-23-reusable-enclaves-for-confidential-serverless-computing-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #SecurityConferences #CyberSecurityNews #SecurityBoulevard #USENIXSecurity’23 #USENIX

USENIX Security ’23 – It’s All In Your Head(Set): Side-Channel Attacks On AR/VR Systems – Source: securityboulevard.com https://ciso2ciso.com/usenix-security-23-its-all-in-your-headset-side-channel-attacks-on-ar-vr-systems-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #SecurityConferences #CyberSecurityNews #SecurityBoulevard #USENIXSecurity’23 #USENIX

USENIX Security ’23 – Don’t be Dense: Efficient Keyword PIR for Sparse Databases – Distinguished Paper Award Winner – Source: securityboulevard.com https://ciso2ciso.com/usenix-security-23-dont-be-dense-efficient-keyword-pir-for-sparse-databases-distinguished-paper-award-winner-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #SecurityConferences #CyberSecurityNews #SecurityBoulevard #USENIXSecurity’23 #USENIX

USENIX Security ’23 – Authenticated Private Information Retrieval – Source: securityboulevard.com https://ciso2ciso.com/usenix-security-23-authenticated-private-information-retrieval-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #SecurityConferences #CyberSecurityNews #SecurityBoulevard #USENIXSecurity’23 #USENIX

USENIX Security ’23 – SMACK: Semantically Meaningful Adversarial Audio Attack – Source: securityboulevard.com https://ciso2ciso.com/usenix-security-23-smack-semantically-meaningful-adversarial-audio-attack-source-securityboulevard-com/ #rssfeedpostgeneratorecho #SecurityBloggersNetwork #SecurityConferences #CyberSecurityNews #SecurityBoulevard #USENIXSecurity’23 #USENIX

📢 Our work on automated discovery of memory safety vulnerabilities in Deep Learning (DL) frameworks has been accepted at USENIX Security
2023! Joint work with Neophytos Christou, Di Jin, Vaggelis Atlidakis, and Baishakhi Ray (Columbia) | https://arxiv.org/abs/2209.14921 | https://gitlab.com/brown-ssl/ivysyn | 39 CVEs 😎 🤘 💣 | #ivysyn #brownssl #usenixsecurity #usesec23