yusuke1997/dblp-id-title huggingface dataset:
I Always Feel Like Somebody's Sensing Me! A Framework to Detect, Identify, and Localize Clandestine Wireless Sensors
Debloating Software through Piece-Wise Compilation and Loading
Towards Quantification of Network-Based Information Leaks via HTTP
Protocol State Fuzzing of TLS Implementations
Is It a Trap? A Large-scale Empirical Study And Comprehensive Assessment of Online Automated Privacy Policy Generators for Mobile Apps
Evaluating the Contextual Integrity of Privacy Regulation: Parents' IoT Toy Privacy Norms Versus COPPA
Fast and Precise Sanitizer Analysis with BEK
PolyCruise: A Cross-Language Dynamic Information Flow Analysis
Evaluating Malware Mitigation by Android Market Operators
An Analysis of Write-in Marks on Optical Scan Ballots
FIRM-AFL: High-Throughput Greybox Fuzzing of IoT Firmware via Augmented Process Emulation
FormatGuard: Automatic Protection From printf Format String Vulnerabilities
Ad-Hoc Secure Two-Party Computation on Mobile Devices using Hardware Tokens
Approximation Enforced Execution of Untrusted Linux Kernel Extensions
Helping Users Automatically Find and Manage Sensitive, Expendable Files in Cloud Storage
Killing the Myth of Cisco IOS Diversity: Recent Advances in Reliable Shellcode Design
PIR-Tor: Scalable Anonymous Communication Using Private Information Retrieval
StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks
Finding Metadata Inconsistencies in Distributed File Systems via Cross-Node Operation Modeling
Generative Intrusion Detection and Prevention on Data Stream
A Simple Active Attack Against TCP
ATLAS: A Sequence-based Learning Approach for Attack Investigation
What IF Is Not Enough? Fixing Null Pointer Dereference With Contextual Check
Fp-Scanner: The Privacy Implications of Browser Fingerprint Inconsistencies
Exposing iClass Key Diversification
Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation
Binoculars: Contention-Based Side-Channel Attacks Exploiting the Page Walker
Students Who Don't Understand Information Flow Should Be Eaten: An Experience Paper
xBook: Redesigning Privacy Control in Social Networking Platforms
A Large Scale Study of the Ethereum Arbitrage Ecosystem
Binary Obfuscation Using Signals
SAPIC+: protocol verifiers of the world, unite!
A Crack in the Bark: Leveraging Public Knowledge to Remove Tree-Ring Watermarks
CIPHERLEAKS: Breaking Constant-time Cryptography on AMD SEV via the Ciphertext Side Channel
On Bridging the Gap between Control Flow Integrity and Attestation Schemes
PatchCleanser: Certifiably Robust Defense against Adversarial Patches for Any Image Classifier
RIDAS: Real-time identification of attack sources on controller area networks
SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes
QSYM : A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing
McSee: Evaluating Advanced Rowhammer Attacks and Defenses via Automated DRAM Traffic Analysis
Snapping Snap Sync: Practical Attacks on Go Ethereum Synchronising Nodes
DScope: A Cloud-Native Internet Telescope
Research Challenges for the Security of Control Systems
The Role of Professional Product Reviewers in Evaluating Security and Privacy
Tragedy of Anticommons in Digital Right Management of Medical Records
Extracting Training Data from Diffusion Models
High Accuracy and High Fidelity Extraction of Neural Networks
An Empirical Security Study of the Native Code in the JDK
THEMIS: Towards Practical Intellectual Property Protection for Post-Deployment On-Device Deep Learning Models
Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack
Absence Makes the Heart Grow Fonder: New Directions for Implantable Medical Device Security
SpectrEM: Exploiting Electromagnetic Emanations During Transient Execution
Insulin Pump System Security
DDRace: Finding Concurrency UAF Vulnerabilities in Linux Drivers with Directed Fuzzing
PhishDecloaker: Detecting CAPTCHA-cloaked Phishing Websites via Hybrid Vision-based Interactive Models
FlowFence: Practical Data Protection for Emerging IoT Application Frameworks
LinKRID: Vetting Imbalance Reference Counting in Linux kernel with Symbolic Execution
DELF: Safeguarding deletion correctness in Online Social Networks
On the Virtues of Information Security in the UK Climate Movement
FANS: Fuzzing Android Native System Services via Automated Interface Analysis
Embedded Firmware Diversity for Smart Electric Meters
That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Browser-Based Password Managers
Measuring and Analyzing DoS Flooding Experiments
Learning Normality is Enough: A Software-based Mitigation against Inaudible Voice Attacks
On the Security Risks of AutoML
Demon in the Variant: Statistical Analysis of DNNs for Robust Backdoor Contamination Detection
How Great is the Great Firewall? Measuring China's DNS Censorship
It's all in your head(set): Side-channel attacks on AR/VR systems
The Imitation Game: Exploring Brand Impersonation Attacks on Social Media Platforms
Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks
Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing
Locally Differentially Private Protocols for Frequency Estimation
Egg Hunt in Tesla Infotainment: A First Look at Reverse Engineering of Qt Binaries
Inferring Phishing Intention via Webpage Appearance and Dynamics: A Deep Vision Based Approach
Generating Representative Video Teleconferencing Traffic
Privacy in Epigenetics: Temporal Linkability of MicroRNA Expression Profiles
Understanding iOS-based Crowdturfing Through Hidden UI Analysis
Panalyst: Privacy-Aware Remote Error Analysis on Commodity Software
A Mixed-Methods Study of Open-Source Software Maintainers On Vulnerability Management and Platform Security Features
Prime Match: A Privacy-Preserving Inventory Matching System
MINER: A Hybrid Data-Driven Approach for REST API Fuzzing
Metrics, Economics, and Shared Risk at the National Scale
VRASED: A Verified Hardware/Software Co-Design for Remote Attestation
HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation
(M)WAIT for It: Bridging the Gap between Microarchitectural and Architectural Side Channels
Linux Security Modules: General Security Support for the Linux Kernel
Towards Practical Tools for Side Channel Aware Software Engineering: 'Grey Box' Modelling for Instruction Leakages
Content-Type: multipart/oracle - Tapping into Format Oracles in Email End-to-End Encryption
A Large-Scale Analysis of the Security of Embedded Firmwares
Unleashing the Power of Type-Based Call Graph Construction by Using Regional Pointer Information
Fuzzing BusyBox: Leveraging LLM and Crash Reuse for Embedded Bug Unearthing
ACAI: Protecting Accelerator Execution with Arm Confidential Computing Architecture
Design and Implementation of an Isolated Sandbox with Mimetic Internet Used to Analyze Malwares
Whiskey, Weed, and Wukan on the World Wide Web: On Measuring Censors' Resources and Motivations
Live Lesson: Lowering the Barriers to Capture The Flag Administration and Participation
SoK: The Good, The Bad, and The Unbalanced: Measuring Structural Limitations of Deepfake Media Datasets
FlowCog: Context-aware Semantics Extraction and Analysis of Information Flow Leaks in Android Apps
The Virtual Power System Testbed and Inter-Testbed Integration
Indirector: High-Precision Branch Target Injection Attacks Exploiting the Indirect Branch Predictor
ENG25519: Faster TLS 1.3 handshake using optimized X25519 and Ed25519
No Plan Survives Contact: Experience with Cybercrime Measurement
Security Analysis of the Diebold AccuVote-TS Voting Machine
A Data-Driven Reflection on 36 Years of Security and Privacy Research
FreeWill: Automatically Diagnosing Use-after-free Bugs via Reference Miscounting Detection on Binaries
DeepEclipse: How to Break White-Box DNN-Watermarking Schemes
An Observational Investigation of Reverse Engineers' Processes
"Belt and suspenders" or "just red tape"?: Investigating Early Artifacts and User Perceptions of IoT App Security Certification
Exploring User Mental Models of End-to-End Encrypted Communication Tools
ATTention Please! An Investigation of the App Tracking Transparency Permission
Voting-Bloc Entropy: A New Metric for DAO Decentralization
Making Them Ask and Answer: Jailbreaking Large Language Models in Few Queries via Disguise and Reconstruction
Regulator: Dynamic Analysis to Detect ReDoS
Toward the Detection of Polyglot Files
Humans vs. Machines in Malware Classification
SoK: Neural Network Extraction Through Physical Side Channels
IDAPro for IoT Malware analysis?
Evaluating the Long-term Effects of Parameters on the Characteristics of the Tranco Top Sites Ranking
Defeating Encrypted and Deniable File Systems: TrueCrypt v5.1a and the Case of the Tattling OS and Applications
Adapting Security Warnings to Counter Online Disinformation
Problem Areas for the IP Security Protocols
Transparent ROP Exploit Mitigation Using Indirect Branch Tracing
GRIMOIRE: Synthesizing Structure while Fuzzing
An Industry Interview Study of Software Signing for Supply Chain Security
TapDance: End-to-Middle Anticensorship without Flow Blocking
Less Defined Knowledge and More True Alarms: Reference-based Phishing Detection without a Pre-defined Reference List
Slitheen++: Stealth TLS-based Decoy Routing
DICE*: A Formally Verified Implementation of DICE Measured Boot
Faster Yet Safer: Logging System Via Fixed-Key Blockcipher
XONN: XNOR-based Oblivious Deep Neural Network Inference
GPUHammer: Rowhammer Attacks on GPU Memories are Practical
A Multi-level Fidelity Microgrid Testbed Model for Cybersecurity Experimentation
Analyzing Integrity Protection in the SELinux Example Policy
Scalable Access Control for Distributed Object Systems
Extending Prerendered-Interface Voting Software to Support Accessibility and Other Ballot Features
Design and Implementation of a Cyber Physical Testbed for Security Training
Seeing the Forest for the Trees: Understanding Security Hazards in the 3GPP Ecosystem through Intelligent Analysis on Change Requests
Controlled Data Races in Enclaves: Attacks and Detection
Disrupting Continuity of Apple's Wireless Ecosystem Security: New Tracking, DoS, and MitM Attacks on iOS and macOS Through Bluetooth Low Energy, AWDL, and Wi-Fi
OCTANE (Open Car Testbed and Network Experiments): Bringing Cyber-Physical Security Research to Researchers and Students
JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals
Tady: A Neural Disassembler without Structural Constraint Violations
VeriSign CZAG: Privacy Leak in X.509 Certificates
Securing Embedded User Interfaces: Android and Beyond
Cache Template Attacks: Automating Attacks on Inclusive Last-Level Caches
"Please don't send that bot anything": A Mixed-methods Study of Personal Impersonation Attacks Targeting Digital Payments on Social Media
TLBlur: Compiler-Assisted Automated Hardening against Controlled Channels on Off-the-Shelf Intel SGX Platforms
"What Keeps People Secure is That They Met The Security Team": Deconstructing Drivers And Goals of Organizational Security Awareness
Data Mining Approaches for Intrusion Detection
DVa: Extracting Victims and Abuse Vectors from Android Accessibility Malware
Careless Retention and Management: Understanding and Detecting Data Retention Denial-of-Service Vulnerabilities in Java Web Containers
Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation
Secure Internet Voting on Limited Devices with Anonymized DSA Public Keys
Once is Never Enough: Foundations for Sound Statistical Inference in Tor Network Experimentation
CellularLint: A Systematic Approach to Identify Inconsistent Behavior in Cellular Network Specifications
An Empirical Study of Vulnerability Rewards Programs
How to Own the Internet in Your Spare Time
Multiview: Finding Blind Spots in Access-Deny Issues Diagnosis
Pool-Party: Exploiting Browser Resource Pools for Web Tracking
PKU Pitfalls: Attacks on PKU-based Memory Isolation Systems
Tracing Transactions Across Cryptocurrency Ledgers
FuzzGen: Automatic Fuzzer Generation
Arcanum: Detecting and Evaluating the Privacy Risks of Browser Extensions on Web Pages and Web Content
The Impostor Among US(B): Off-Path Injection Attacks on USB Communications
Measuring Cyber Essentials Security Policies
ZOZZLE: Fast and Precise In-Browser JavaScript Malware Detection
MundoFuzz: Hypervisor Fuzzing with Statistical Coverage Testing and Grammar Inference
PISTIS: Trusted Computing Architecture for Low-end Embedded Systems
Measurement and Classification of Humans and Bots in Internet Chat
Using Bowel Sounds to Create a Forensically-aware Insulin Pump System
Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages
Backdooring Bias (B^2) into Stable Diffusion Models
Automated Cookie Notice Analysis and Enforcement
Take This Personally: Pollution Attacks on Personalized Services
Unlocking the Power of Differentially Private Zeroth-order Optimization for Fine-tuning LLMs
Bare-Handed Electronic Voting with Pre-processing
Downfall: Exploiting Speculative Data Gathering
Devices That Tell on You: Privacy Trends in Consumer Ubiquitous Computing
Dirty Jobs: The Role of Freelance Labor in Web Service Abuse
Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into an Apple AirTag Without Root Privileges
Operator-Assisted Tabulation of Optical Scan Ballots
Efficient Unbalanced Private Set Intersection Cardinality and User-friendly Privacy-preserving Contact Tracing
ASM: A Programmable Interface for Extending Android Security
KOOBE: Towards Facilitating Exploit Generation of Kernel Out-Of-Bounds Write Vulnerabilities
Formal verification of the PQXDH Post-Quantum key agreement protocol for end-to-end secure messaging
Practical Health Information Exchange using a Personally Controlled Health Record
Remote Keylogging Attacks in Multi-user VR Applications
Measuring Pay-per-Install: The Commoditization of Malware Distribution
SoK: Automated TTP Extraction from CTI Reports - Are We There Yet?
The Broken Shield: Measuring Revocation Effectiveness in the Windows Code-Signing PKI
Strategies and Perceived Risks of Sending Sensitive Documents
Who Does the Autopsy? Criminal Implications of Implantable Medical Devices
A Placement Vulnerability Study in Multi-Tenant Public Clouds
Protecting Confidential Data on Personal Computers with Storage Capsules
Graph Backdoor
Context Matters: Accurately Measuring the Efficacy of Denial-of-Service Mitigations
The Pythia PRF Service
Fast RS-IOP Multivariate Polynomial Commitments and Verifiable Secret Sharing
QCSD: A QUIC Client-Side Website-Fingerprinting Defence Framework
Dos and Don'ts of Machine Learning in Computer Security
Security and Privacy Perceptions of Third-Party Application Access for Google Accounts
Sharing More and Checking Less: Leveraging Common Input Keywords to Detect Bugs in Embedded Systems
Identifying Cache-Based Side Channels through Secret-Augmented Abstract Interpretation
Distributed Private Aggregation in Graph Neural Networks
Regulating Smart Device Support Periods: User Expectations and the European Cyber Resilience Act
The OK Is Not Enough: A Large Scale Study of Consent Dialogs in Smartphone Applications
Fairplay - Secure Two-Party Computation System
in-toto: Providing farm-to-table guarantees for bits and bytes
One-off Disclosure Control by Heterogeneous Generalization
Where to Recruit for Security Development Studies: Comparing Six Software Developer Samples
On the Effective Prevention of TLS Man-in-the-Middle Attacks in Web Applications
AIRS: Explanation for Deep Reinforcement Learning based Security Applications
PTW: Pivotal Tuning Watermarking for Pre-Trained Image Generators
Abuse-Resistant Location Tracking: Balancing Privacy and Safety in the Offline Finding Ecosystem
Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities
Your Shield is My Sword: A Persistent Denial-of-Service Attack via the Reuse of Unvalidated Caches in DNSSEC Validation
My ZIP isn't your ZIP: Identifying and Exploiting Semantic Gaps Between ZIP Parsers
Towards Privacy and Security in Private Clouds: A Representative Survey on the Prevalence of Private Hosting and Administrator Characteristics
Take Two Software Updates and See Me in the Morning: The Case for Software Security Evaluations of Medical Devices
Unique Identification of 50, 000+ Virtual Reality Users from Head & Hand Motion Data
Poseidon: A New Hash Function for Zero-Knowledge Proof Systems
Discovering Flaws in Security-Focused Static Analysis Tools for Android using Systematic Mutation
Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities
Scheduler-based Defenses against Cross-VM Side-channels
Mirror, Mirror, On the Wall: What are we Teaching Them All? Characterising the Focus of Cybersecurity Curricular Frameworks
Fine Grained Dataflow Tracking with Proximal Gradients
Optimized Invariant Representation of Network Traffic for Detecting Unseen Malware Variants
Lalaine: Measuring and Characterizing Non-Compliance of Apple Privacy Labels
MVP: Detecting Vulnerabilities using Patch-Enhanced Vulnerability Signatures
"It's not my responsibility to write them": An Empirical Study of Software Product Managers and Security Requirements
PATROL: Provable Defense against Adversarial Policy in Two-player Games
Securing Frame Communication in Browsers
CO3: Concolic Co-execution for Firmware
Universal Cross-app Attacks: Exploiting and Securing OAuth 2.0 in Integration Platforms
Antigone: A Flexible Framework for Secure Group Communication
PlatPal: Detecting Malicious Documents with Platform Diversity
AudioMarkNet: Audio Watermarking for Deepfake Speech Detection
Cloudy with a Chance of Breach: Forecasting Cyber Security Incidents
TRust: A Compilation Framework for In-process Isolation to Protect Safe Rust against Untrusted Code
Efficient Ranking, Order Statistics, and Sorting under CKKS
Save what must be saved: Secure context switching with Sailor
Rethinking System Audit Architectures for High Event Coverage and Synchronous Log Availability
24th USENIX Security Symposium, USENIX Security 15, Washington, D.C., USA, August 12-14, 2015
TRex: Practical Type Reconstruction for Binary Code
Automated Large-Scale Analysis of Cookie Notice Compliance
Mitigating Injection Attacks against E2EE Applications via View-Based Partitioning
"No, I Can't Be a Security Personnel on Your Phone": Security and Privacy Threats From Sharing Infrastructure in Rural Ghana
A Highly Immersive Approach to Teaching Reverse Engineering
HybCache: Hybrid Side-Channel-Resilient Caches for Trusted Execution Environments
Automatically Detecting Error Handling Bugs Using Error Specifications
Control Flow Integrity for COTS Binaries
Detecting and Evading Censorship-in-Depth: A Case Study of Iran's Protocol Whitelister
Towards Automatic Detection and Exploitation of Java Web Application Vulnerabilities via Concolic Execution guided by Cross-thread Object Manipulation
GhostPost: Seamless Restoration of Censored Social Media Posts
Uncontained: Uncovering Container Confusion in the Linux Kernel
CellIFT: Leveraging Cells for Scalable and Precise Dynamic Information Flow Tracking in RTL
Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services
Driving 2FA Adoption at Scale: Optimizing Two-Factor Authentication Notification Design Patterns
Blind Bernoulli Trials: A Noninteractive Protocol For Hidden-Weight Coin Flips
Looking from the Mirror: Evaluating IoT Device Security through Mobile Companion Apps
A Bayesian Approach to Privacy Enforcement in Smartphones
X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in Cryptographic Libraries using Crafted X.509 Certificates
ExperimenTor: A Testbed for Safe and Realistic Tor Experimentation
Proceedings of the 12th USENIX Security Symposium, Washington, D.C., USA, August 4-8, 2003
Synthetic Artifact Auditing: Tracing LLM-Generated Synthetic Data Usage in Downstream Applications
Examining Consumer Reviews to Understand Security and Privacy Issues in the Market of Smart Home Devices
Powering Privacy: On the Energy Demand and Feasibility of Anonymity Networks on Smartphones
Drifuzz: Harvesting Bugs in Device Drivers from Golden Seeds
Building an Open, Robust, and Stable Voting-Based Domain Top List
Keynote Address: Back to the Future
Android SmartTVs Vulnerability Discovery via Log-Guided Fuzzing
Using Text Categorization Techniques for Intrusion Detection
FANCI : Feature-based Automated NXDomain Classification and Intelligence
Identifying and Characterizing Sybils in the Tor Network
PUBCRAWL: Protecting Users and Businesses from CRAWLers
Formal Security Analysis of Neural Networks using Symbolic Intervals
PrivacyXray: Detecting Privacy Breaches in LLMs through Semantic Consistency and Probability Certainty
DoubleStar: Long-Range Attack Towards Depth Estimation based Obstacle Avoidance in Autonomous Systems
2nd Workshop on Cyber Security Experimentation and Test, CSET '09, Montreal, Canada, August 10, 2009
Lost in Conversion: Exploit Data Structure Conversion with Attribute Loss to Break Android Systems
Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study
Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps
The Design of a Cryptographic Security Architecture
Building Secure Robot Applications
Pandawan: Quantifying Progress in Linux-based Firmware Rehosting
Hall Spoofing: A Non-Invasive DoS Attack on Grid-Tied Solar Inverter
The Use of Likely Invariants as Feedback for Fuzzers
2nd USENIX Workshop on Free and Open Communications on the Internet, FOCI '12, Bellevue, WA, USA, August 6, 2012
Experiences Deploying Multi-Vantage-Point Domain Validation at Let's Encrypt
Using Trusted Sensors to Monitor Patients' Habits
PORE: Provably Robust Recommender Systems against Data Poisoning Attacks
DeepHammer: Depleting the Intelligence of Deep Neural Networks through Targeted Chain of Bit Flips
Constant-Time Callees with Variable-Time Callers
Unveiling and Quantifying Facebook Exploitation of Sensitive Personal Data for Advertising Purposes
Place Protections at the Right Place: Targeted Hardening for Cryptographic Code against Spectre v1
How the Great Firewall of China is Blocking Tor
A Research Roadmap for Healthcare IT Security Inspired by the PCAST Health Information Technology Report
SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements
Towards Robust LiDAR-based Perception in Autonomous Driving: General Black-box Adversarial Sensor Attack and Countermeasures
Detecting Android Root Exploits by Learning from Root Providers
Towards More Practical Threat Models in Artificial Intelligence Security
Exploiting Task-Level Vulnerabilities: An Automatic Jailbreak Attack and Defense Benchmarking for LLMs
HSTS Supports Targeted Surveillance
Cross-VM and Cross-Processor Covert Channels Exploiting Processor Idle Power Management
A Comprehensive Quality Evaluation of Security and Privacy Advice on the Web
MPI: Multiple Perspective Attack Investigation with Semantic Aware Execution Partitioning
Position Paper: Certificate Root Stores - An Area of Unity or Disparity?
HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security
SHARD: Fine-Grained Kernel Specialization with Context-Aware Hardening
7th USENIX Workshop on Hot Topics in Security, HotSec'12, Bellevue, WA, USA, August 7, 2012
Neuroscience Meets Cryptography: Designing Crypto Primitives Secure Against Rubber Hose Attacks
Cryptographic Analysis of Delta Chat
How and Why People Use Virtual Private Networks
Faster Private Set Intersection Based on OT Extension
Near-Optimal Oblivious Key-Value Stores for Efficient PSI, PSU and Volume-Hiding Multi-Maps
Software Availability Protection in Cyber-Physical Systems
All Your Clicks Belong to Me: Investigating Click Interception on the Web
One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters for Different Android User Profiles
PRSA: Prompt Stealing Attacks against Real-World Prompt Services
Why TLS is better without STARTTLS: A Security Analysis of STARTTLS in the Email Context