yusuke1997/dblp-id-title huggingface dataset:
The Age of Data: Pinpointing Guilty Bytes in Polymorphic Buffer Overflows on Heap or Stack
Towards Analyzing the Input Validation Vulnerabilities associated with Android System Services
Please Permit Me: Stateless Delegated Authorization in Mashups
Annual Computer Security Applications Conference, ACSAC 2024, Honolulu, HI, USA, December 9-13, 2024
DefWeb: Defending User Privacy against Cache-based Website Fingerprinting Attacks with Intelligent Noise Injection
Where we stand in multilevel security (MLS): requirements, approaches, issues, and lessons learned
Smart metering de-pseudonymization
Advanced Features for Enterprise-Wide Role-Based Access Control
T-DRE: a hardware trusted computing base for direct recording electronic vote machines
Designing Good Deceptions in Defense of Information Systems
Understanding the Threats of Trojaned Quantized Neural Network in Model Supply Chains
A General Dynamic Information Flow Tracking Framework for Security Applications
To Bell and back: developing a formal security policy model for a C 2 system
The chatty-sensor: a provably-covert channel in cyber physical systems
Annual Computer Security Applications Conference, ACSAC 2022, Austin, TX, USA, December 5-9, 2022
R+R: Revisiting Graph Matching Attacks on Privacy-Preserving Record Linkage
Tutorial Committee
ZeroDNS: Towards Better Zero Trust Security using DNS
Leave It to Weaver
Secure query processing in intelligent database management systems
Security concerns for distributed systems
Online Sketching of Network Flows for Real-Time Stepping-Stone Detection
ACSAC '21: Annual Computer Security Applications Conference, Virtual Event, USA, December 6 - 10, 2021
PinUP: Pinning User Files to Known Applications
Model Checking An Entire Linux Distribution for Security Violations
Dynamic Taint Analysis versus Obfuscated Self-Checking
PAVUDI: Patch-based Vulnerability Discovery using Machine Learning
Micro-Digital Money for Electronic Commerce
Control Flow and Code Integrity for COTS binaries: An Effective Defense Against Real-World ROP Attacks
Using Attribute Certificates with Mobile Policies in Electronic Commerce Applications
Application-Level Isolation Using Data Inconsistency Detection
VICI Virtual Machine Introspection for Cognitive Immunity
On the Implications of Spoofing and Jamming Aviation Datalink Applications
Implementing ACL-Based Policies in XACML
Transparent Encryption for External Storage Media with Key Management Adapted to Mobile Use
S2-CAN: Sufficiently Secure Controller Area Network
Speaker Biographies
Security pipeline interface (SPI)
On models for a trusted application system
Understanding the prevalence and use of alternative plans in malware with network games
Detecting organized eCommerce fraud using scalable categorical clustering
Efficient protection of kernel data structures via object partitioning
Leaky Autofill: An Empirical Study on the Privacy Threat of Password Managers' Autofill Functionality
Abusing cloud-based browsers for fun and profit
I Need this Back, Later!: An Exploration of Practical Secret Sharing
All your face are belong to us: breaking Facebook's social authentication
Behavioral Authentication of Server Flows
Morphence: Moving Target Defense Against Adversarial Examples
Poisoning Network Flow Classifiers
A Stateful Intrusion Detection System for World-Wide Web Servers
Towards an Infrastructure for MLS Distributed Computing
How to Securely Break into RBAC: The BTG-RBAC Model
Model inversion attacks against collaborative inference
Calculating Costs for Quality of Security Service
ELAR: extremely lightweight auditing and repairing for cloud security
A Survey to Guide Group Key Protocol Development
MemCloak: Practical Access Obfuscation for Untrusted Memory
Theft-resilient mobile wallets: transparently authenticating NFC users with tapping gesture biometrics
A Regulated Approach to Certificate Management
esign Choices For Symmetric Key Based Inter-Domain Authentication Protocols In Distributed Systems
PSP-Mal: Evading Malware Detection via Prioritized Experience-based Reinforcement Learning with Shapley Prior
Attack of the Knights: Non Uniform Cache Side Channel Attack
Strengthening Software Self-Checksumming via Self-Modifying Code
Delegate: A Proxy Based Architecture for Secure Website Access from an Untrusted Machine
SENSS Against Volumetric DDoS Attacks
Network management security
A Security Model for Military Message Systems: Retrospective
Efficient Minimum-Cost Network Hardening Via Exploit Dependency Graphs
TrueClick: automatically distinguishing trick banners from genuine download links
A Fly on the Wall - Exploiting Acoustic Side-Channels in Differential Pressure Sensors
You Only Perturb Once: Bypassing (Robust) Ad-Blockers Using Universal Adversarial Perturbations
DeepContract: Controllable Authorization of Deep Learning Models
Using Fortezza For Transparent File Encryption
DAIS: A Real-Time Data Attack Isolation System for Commercial Database Applications
The Devil's in The Details: Placing Decoy Routers in the Internet
Take It or Leave It: A Survey Study on Operating System Upgrade Practices
Crypto-Chain: A Relay Resilience Framework for Smart Vehicles
Sipster: Settling IOU Privately and Quickly with Smart Meters
ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer
Fielding multilevel security into command and control systems
Leveraging locality of reference for certificate revocation
Hiding in the Shadows: Empowering ARM for Stealthy Virtual Machine Introspection
MOSE: Live Migration Based On-the-Fly Software Emulation
A structured risk analysis approach to resolve the data protection and integrity issues for computer-aided acquisition logistics support (CALS)
Protecting COTS Binaries from Disclosure-guided Code Reuse Attacks
Ripples in the Pond: Transmitting Information through Grid Frequency Modulation
PDoT: private DNS-over-TLS with TEE support
Make Data Reliable: An Explanation-powered Cleaning on Malware Dataset Against Backdoor Poisoning Attacks
Is your computer being misused? A survey of current intrusion detection system technology
RAD: Reflector Attack Defense Using Message Authentication Codes
Do Social Disorders Facilitate Social Engineering?: A Case Study of Autism and Phishing Attacks
Interaction matters: a comprehensive analysis and a dataset of hybrid IoT/OT honeypots
An application of qualitative risk analysis to computer security for the commercial sector
Who is tweeting on Twitter: human, bot, or cyborg?
Uncovering network tarpits with degreaser
Differential Data Protection for Dynamic Distributed Application
Fair On-line Gambling
Obfuscation Revealed: Leveraging Electromagnetic Signals for Obfuscated Malware Classification
SERENIoT: Distributed Network Security Policy Management and Enforcement for Smart Homes
DeepTaster: Adversarial Perturbation-Based Fingerprinting to Identify Proprietary Dataset Use in Deep Neural Networks
Hierarchical group oriented key management method HGK
DPIFuzz: A Differential Fuzzing Framework to Detect DPI Elusion Strategies for QUIC
Iris: a scalable cloud file system with efficient integrity checks
Starlight: Interactive Link
Simple Assured Bastion Hosts
Mapping to Bits: Efficiently Detecting Type Confusion Errors
Operational requirements for multilevel security
TrueErase: per-file secure deletion for the storage data path
Practical Attack Graph Generation for Network Defense
VTPin: practical VTable hijacking protection for binaries
Constrained Concealment Attacks against Reconstruction-based Anomaly Detectors in Industrial Control Systems
A Multi-View Tool for Checking the Security Semantics of Router Configurations
Down to the bare metal: using processor features for binary analysis
Natural change in dynamic databases as a deterrent to compromise by trackers
Structuring for Strategic Cyber Defense: A Cyber Manhattan Project Blueprint
Access control and applications on trusted systems
Designing a trusted client-server distributed network
The socialbot network: when bots socialize for fame and money
SealClub: Computer-aided Paper Document Authentication
Breaking and Fixing Destructive Code Read Defenses
JaTE: Transparent and Efficient JavaScript Confinement
A Hardware-Independent Encryption Model for ATM Devices
Secure Anonymous Group Infrastructure for Common and Future Internet Applications
How to Automatically and Accurately Sandbox Microsoft IIS
Generalized vulnerability extrapolation using abstract syntax trees
A validated security policy modeling approach
Passwords To-Go: Investigating Multifaceted Challenges for Password Managers in the Android Ecosystem
Mixed-Mode Malware and Its Analysis
An Extensive Evaluation of the Internet's Open Proxies
The Emperor's New Autofill Framework: A Security Analysis of Autofill on iOS and Android
Security issues and Ada runtime support
Themes and Highlights of the New Security Paradigms Workshop 2002
A rigorous approach to determining objects
MProbe: Make the code probing meaningless
Scippa: system-centric IPC provenance on Android
Certified Copy? Understanding Security Risks of Wi-Fi Hotspot based Android Data Clone Services
Assessing Quality of Policy Properties in Verification of Access Control Policies
Private search in the real world
Gender-Preferential Text Mining of E-mail Discourse
Experimental Study with Real-world Data for Android App Security Analysis using Machine Learning
A multilevel security model for a distributed object-oriented system
Exploring the potential benefits of expanded rate limiting in Tor: slow and steady wins the race with Tortoise
FedCAP: Robust Federated Learning via Customized Aggregation and Personalization
Ex-Ray: Detection of History-Leaking Browser Extensions
Intrusion Detection Applying Machine Learning to Solaris Audit Data
FireDroid: hardening security in almost-stock Android
Providing security in a phone book database using triggers
Progressive processing of system-behavioral query
Verify Results of Network Intrusion Alerts Using Lightweight Protocol Analysis
Model Extraction Warning in MLaaS Paradigm
Restoring Unintended Model Learning by Error Correcting Code
Threshold and Generalized DSS Signatures without a Trusted Party
Accurate, Low Cost and Instrumentation-Free Security Audit Logging for Windows
Benchmarking multilevel secure database systems using the MITRE benchmark
Controlling Applets' Behavior in a Browser
Using logics to detect implementation-dependent flaws [cryptographic protocol design]
Complexity Measure of Encryption Keys Used for Securing Computer Networks
JShield: towards real-time and vulnerability-based detection of polluted drive-by download attacks
Reliable telemetry in white spaces using remote attestation
An IP Traceback Technique against Denial-of-Service Attacks
Exploring and mitigating privacy threats of HTML5 geolocation API
T-Edge: Trusted Heterogeneous Edge Computing
SCOBA: source code based attestation on custom software
Securing untrusted code via compiler-agnostic binary rewriting
Intellectual Property Protection in Additive Layer Manufacturing: Requirements for Secure Outsourcing
Representation of mental health application access policy in a monotonic model
SAM: Security Adaptation Manager
Software safety and security
A Heuristic Framework to Detect Concurrency Vulnerabilities
SecurSight: An Architecture for Secure Information Access
Collaborative Intrusion Detection System (CIDS): A Framework for Accurate and Efficient IDS
Anti-Phishing in Offense and Defense
Mitosis: Practically Scaling Permissioned Blockchains
There's a Hole in that Bucket!: A Large-scale Analysis of Misconfigured S3 Buckets
Migrating a commercial-off-the-shelf application to a multilevel secure environment
FIRM: capability-based inline mediation of Flash behaviors
DoSE: Deobfuscation based on Semantic Equivalence
The Authorization Service of Tivoli Policy Director
Protecting Personal Data: Can IT Security Management Standards Help?
Time to Rethink the Design of Qi Standard? Security and Privacy Vulnerability Analysis of Qi Wireless Charging
CERTS: a comparative evaluation method for risk management methodologies and tools
Dragonblood is Still Leaking: Practical Cache-based Side-Channel in the Wild
Introduction to Classic Papers
Poisoning Attacks to Graph-Based Recommender Systems
SIP shaker: software integrity protection composition
A Look Back at "Security Problems in the TCP/IP Protocol Suite"
The Evolution of System-Call Monitoring
RevARM: A Platform-Agnostic ARM Binary Rewriter for Security Applications
Information Flow Analysis of Component-Structured Applications
DECANTeR: DEteCtion of Anomalous outbouNd HTTP TRaffic by Passive Application Fingerprinting
Database Isolation and Filtering against Data Corruption Attacks
Using a Proxy X Server to Facilitate COTS Application Integration
Secure system composition: five practical initiatives
Specification issues of secure systems
A Framework for Organisational Control Principles
If A1 is the Answer, What was the Question? An Edgy Na?f's Retrospective on Promulgating the Trusted Computer Systems Evaluation Criteria
An Editor for Adaptive XML-Based Policy Management of IPsec
PSOS Revisited
Tapas: design, implementation, and usability evaluation of a password manager
Quantifying measurement quality and load distribution in Tor
Personal Privacy without Computational Obscurity: Rethinking Privacy Protection Strategies for Open Information Networks
Supporting Secure Canonical Upgrade Policies in Multilevel Secure Object Stores
Can We Leverage Predictive Uncertainty to Detect Dataset Shift and Adversarial Examples in Android Malware Detection?
ρFEM: Efficient Backward-edge Protection Using Reversed Forward-edge Mappings
FPValidator: Validating Type Equivalence of Function Pointers on the Fly
Transformer-Based Language Models for Software Vulnerability Detection
Using automatic speech recognition for attacking acoustic CAPTCHAs: the trade-off between usability and security
Exploitation and Mitigation of Authentication Schemes Based on Device-Public Information
A Network Access Control Mechanism Based on Behavior Profiles
Process execution controls as a mechanism to ensure consistency
DR.SGX: automated and adjustable side-channel protection for SGX using data location randomization
Improving intrusion detectors by crook-sourcing
Usability Meets Security -The Identity-Manager as Your Personal Security Assistant for the Internet
From Hindsight to Foresight: Enhancing Design Artifacts for Business Logic Flaw Discovery
No attack necessary: the surprising dynamics of SSL trust relationships
More Than Just Good Passwords? A Study on Usability and Security Perceptions of Risk-based Authentication
Detecting and Defending against Web-Server Fingerprinting
So You Think You Can Dance?
User-Centered Security: Stepping Up to the Grand Challenge
AppVeto: mobile application self-defense through resource access veto
Editorial: a view of cryptography in TCSEC products
Permission evolution in the Android ecosystem
Integrating cryptography in the trusted computing base
Observations on integrating multilevel secure components into system high distributed systems
Automatic Generation and Analysis of NIDS Attacks
10th Annual Computer Security Applications Conference, ACSAC 1994, 5-9 December, 1994 Orlando, FL, USA
Decentralized Authorization and Privacy-Enhanced Routing for Information-Centric Networks
Predicting Cyber Threats with Virtual Security Products
Detecting Policy Violations through Traffic Analysis
WebJail: least-privilege integration of third-party components in web mashups
Expressive power of the single-object typed access matrix model
Code shredding: byte-granular randomization of program layout for detecting code-reuse attacks
Covert and Side Channels Due to Processor Architecture
DRAGON: Deep Reinforcement Learning for Autonomous Grid Operation and Attack Detection
Malware Detection in Adversarial Settings: Exploiting Feature Evolutions and Confusions in Android Apps
Premadoma: an operational solution for DNS registries to prevent malicious domain registrations
DNS authentication as a service: preventing amplification attacks
OAuth 2.0 Redirect URI Validation Falls Short, Literally
No Leakage Without State Change: Repurposing Configurable CPU Exceptions to Prevent Microarchitectural Attacks
Improving robustness of DNS to software vulnerabilities
Droid-AntiRM: Taming Control Flow Anti-analysis to Support Automated Dynamic Analysis of Android Malware
Optimized Paillier's Cryptosystem with Fast Encryption and Decryption
Scalable and Secure Concurrent Evaluation of History-based Access Control Policies
Automatic Inference and Enforcement of Kernel Data Structure Invariants
A Practical Approach to Measuring Assurance
CPS: driving cyber-physical systems to unsafe operating conditions by timing DoS attacks on sensor signals
Access control by Boolean expression evaluation
SCR: A Practical Approach to Building a High Assurance COMSEC System
Enhancing Collaborative Spam Detection with Bloom Filters
Introducing Decryption Authority into PKI
Security Architecture Development and Results for a Distributed Modeling and Simulation System
Fine-Grained Information Flow Analysis and Enforcement in a Java Virtual Machine
MAVMM: Lightweight and Purpose Built VMM for Malware Analysis
ECFI: Asynchronous Control Flow Integrity for Programmable Logic Controllers
Set It and Forget It! Turnkey ECC for Instant Integration
Extending the Java Virtual Machine to Enforce Fine-Grained Security Policies in Mobile Devices
CAPS: Smoothly Transitioning to a More Resilient Web PKI
High-Fidelity Modeling of Computer Network Worms
ID-Based Cryptographic Schemes Using a Non-Interactive Public-Key Distribution System
A cautionary note on image downgrading
An Efficient Man-Machine Recognition Method Based On Mouse Trajectory Feature De-redundancy
Process Execution Controls: revisited
Annual Computer Security Applications Conference, ACSAC '13, New Orleans, LA, USA, December 9-13, 2013
Is Visualization Enough? Evaluating the Efficacy of MUD-Visualizer in Enabling Ease of Deployment for Manufacturer Usage Description (MUD)
FLEDGE: Ledger-based Federated Learning Resilient to Inference and Backdoor Attacks
TATTOOED: A Robust Deep Neural Network Watermarking Scheme based on Spread-Spectrum Channel Coding
Detecting rootkits with the RAI runtime application inventory
Open-Source Applications of TCPA Hardware
CPS: market analysis of attacks against demand response in the smart grid
Hot-hardening: getting more out of your security settings
Deploying and Monitoring DNS Security (DNSSEC)
Fifth Annual Computer Security Applications Conference, ACSAC 1989, 4-8 December, 1989, Westward Look Resort, Tucson, Arizona, USA
Common Criteria Activities and Alternative Assurance
Exploring usability effects of increasing security in click-based graphical passwords
Rocky: Replicating Block Devices for Tamper and Failure Resistant Edge-based Virtualized Desktop Infrastructure
Asymmetric Isolation
SecDATAVIEW: a secure big data workflow management system for heterogeneous computing environments
A Context-Aware Security Architecture for Emerging Applications
Subverting system authentication with context-aware, reactive virtual machine introspection
Centralized Security Labels in Decentralized P2P Networks
Verification of the security of a secure network component
Ethical Responsibilities and Legal Liabilities of Network Security Professionals
G-Free: defeating return-oriented programming through gadget-less binaries
A Module System for Isolating Untrusted Software Extensions
Privacy-Aware Biometrics: Design and Implementation of a Multimodal Verification System
MIND-IoT: Machine Intelligence and Data-Mining for IoT Threats
Detecting Exploit Code Execution in Loadable Kernel Modules
System-of-systems security engineering
Enabling Secure On-Line DNS Dynamic Update
Development of a multi level data generation application for GEMSOS
Effects of multilevel security on real-time applications
Detection of Anomalies in Electric Vehicle Charging Sessions
FASE: functionality-aware security enforcement
Towards Realistic Membership Inferences: The Case of Survey Data
Database design and MLS DBMSs: an unhappy alliance?
Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks
Forenscope: a framework for live forensics
Always up-to-date: scalable offline patching of VM images in a compute cloud
Security Analysis of the SAML Single Sign-on Browser/Artifact Profile
Policy-based Chameleon Hash for Blockchain Rewriting with Black-box Accountability
Understanding Complex Network Attack Graphs through Clustered Adjacency Matrices
Private Desktops and Shared Store
Privacy-Preserving Alert Correlation: A Concept Hierarchy Based Approach
Tracking Users across the Web via TLS Session Resumption
Proceedings of the 5th Program Protection and Reverse Engineering Workshop, PPREW@ACSAC, Los Angeles, CA, USA, December 8, 2015
Evaluation issues for an integrated 'INFOSEC' product
Formal specification and verification of control software for cryptographic equipment
Practical and secure dynamic searchable encryption via oblivious access on distributed data structure
Evaluation of a DPA-Resistant Prototype Chip
Cross-Site Framing Attacks
Security Against Compelled Disclosure
LOBO: Evaluation of Generalization Deficiencies in Twitter Bot Classifiers
BLOCK: a black-box approach for detection of state violation attacks towards web applications
VAMO: towards a fully automated malware clustering validity analysis
An implementation of access control using a salient feature of primes
A methodology for the use of single level RDBMS software in a multi-level secured system
AFLGuard: Byzantine-robust Asynchronous Federated Learning
On the Key Recovery of the Key Escrow System
Secure and Lightweight ECU Attestations for Resilient Over-the-Air Updates in Connected Vehicles
Breaking e-banking CAPTCHAs
Protecting Commodity Operating System Kernels from Vulnerable Device Drivers
Security constraint processing during multilevel secure database design
Securing PUFs via a Predictive Adversarial Machine Learning System by Modeling of Attackers
TCB subset architecture
FlexFilt: Towards Flexible Instruction Filtering for Security
Security Study of Service Worker Cross-Site Scripting
MACE: high-coverage and robust memory analysis for commodity operating systems
Adaptive encrypted traffic fingerprinting with bi-directional dependence
FirmAE: Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
Kernel and Shell-Based Applications Integrity Assurance
Architecture and Applications for a Distributed Embedded Firewall
Execution Trace-Driven Automated Attack Signature Generation
Reusable Components for Developing Security-Aware Application
It's the psychology stupid: how heuristics explain software vulnerabilities and how priming can illuminate developer's blind spots
TrustGraph: Trusted Graphics Subsystem for High Assurance Systems
Keeping Safe Rust Safe with Galeed
Vulnerabilities and Security Threats in Structured Overlay Networks: A Quantitative Analysis
Beyond the Perimeter: the Need for Early Detection of Denial of Service Attacks
DynaGuard: Armoring Canary-based Protections against Brute-force Attacks
Looking Back at the Bell-La Padula Model
JSand: complete client-side sandboxing of third-party JavaScript without browser modifications
VulCAN: Efficient Component Authentication and Software Isolation for Automotive Control Networks
Security Policy Enforcement at the File System Level in the Windows NT Operating System Family
RAPID: Real-Time Alert Investigation with Context-aware Prioritization for Efficient Threat Discovery
Improving the Efficiency of Capture-Resistant Biometric Authentication Based on Set Intersection
Thirty Years Later: Lessons from the Multics Security Evaluation
Tracking Darkports for Network Defense
Whisper: a unilateral defense against VoIP traffic re-identification attacks
Closing the Loophole: Rethinking Reconstruction Attacks in Federated Learning from a Privacy Standpoint
Themes and Highlights of the New Security Paradigms Workshop 2003
Eluding ML-based Adblockers With Actionable Adversarial Examples
STU-III-multilevel secure computer interface
Modeling of Multiple Agent based Cryptographic Key Recovery Protocol
A Novel Approach to On-Line Status Authentication of Public-Key Certificates