yusuke1997/dblp-id-title huggingface dataset:
Network Detection of Interactive SSH Impostors Using Deep Learning
A Large-Scale Interview Study on Information Security in and Attacks against Small and Medium-sized Enterprises
Automatic Techniques to Systematically Discover New Heap Exploitation Primitives
PAPILLON: Efficient and Stealthy Fuzz Testing-Powered Jailbreaks for LLMs
Approximating Clark-Wilson Access Triples with Basic UNIX Commands
Trust Me If You Can - How Usable Is Trusted Types In Practice?
Impeding Automated Malware Analysis with Environment-sensitive Malware
Hand-Held Computers Can Be Better Smart Cards
Information Security of Patient-Centred Services Utilising the German Nationwide Health Information Technology Infrastructure
CertTA: Certified Robustness Made Practical for Learning-Based Traffic Analysis
Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome
Whispering Under the Eaves: Protecting User Privacy Against Commercial and LLM-powered Automatic Speech Recognition Systems
Telepathwords: Preventing Weak Passwords by Reading Users' Minds
Fawkes: Protecting Privacy against Unauthorized Deep Learning Models
Timeless Timing Attacks: Exploiting Concurrency to Leak Secrets over Remote Connections
Understanding and Securing Device Vulnerabilities through Automated Bug Report Analysis
Metrics for runtime detection of allocators in binaries
Formal Analysis of SPDM: Security Protocol and Data Model version 1.2
GREYONE: Data Flow Sensitive Fuzzing
Constants Count: Practical Improvements to Oblivious RAM
Private Set Intersection and other Set Operations in the Third Party Setting
Lessons Learned from Using an Online Platform to Conduct Large-Scale, Online Controlled Security Experiments with Software Developers
Don't Mesh Around: Side-Channel Attacks and Mitigations on Mesh Interconnects
CarpetFuzz: Automatic Program Option Constraint Extraction from Documentation for Fuzzing
Omnes pro uno: Practical Multi-Writer Encrypted Database
One Size Does Not Fit All: Uncovering and Exploiting Cross Platform Discrepant APIs in WeChat
Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection
Seeing is Not Believing: Camouflage Attacks on Image Scaling Algorithms
Analysis of DTLS Implementations Using Protocol State Fuzzing
Methodically Modeling the Tor Network
CryptoLib: Cryptography in Software
Secure Distribution of Events in Content-Based Publish Subscribe Systems
Optimizing Seed Selection for Fuzzing
Reassembleable Disassembling
ZIPPER: Static Taint Analysis for PHP Applications with Precision and Efficiency
An Ever-evolving Game: Evaluation of Real-world Attacks and Defenses in Ethereum Ecosystem
Towards Systematic Evaluation of the Evadability of Bot/Botnet Detection Methods
Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services
NAUTILUS: Automated RESTful API Vulnerability Detection
Analyzing China's Blocking of Unpublished Tor Bridges
EchoLLM: LLM-Augmented Acoustic Eavesdropping Attack on Bone Conduction Headphones with mmWave Radar
A Critical Analysis of the Council of Europe Recommendations on E-Voting
A New Two-Server Approach for Authentication with Short Secrets
Generated Data with Fake Privacy: Hidden Dangers of Fine-tuning Large Language Models on Generated Data
Encrypted Access Logging for Online Accounts: Device Attributions without Device Tracking
Making Voting Accessible: Designing Digital Ballot Marking for People with Low Literacy and Mild Cognitive Disabilities
Sharpness-Aware Initialization: Improving Differentially Private Machine Learning from First Principles
6th USENIX Workshop on Hot Topics in Security, HotSec'11, San Francisco, CA, USA, August 9, 2011
Constant-weight PIR: Single-round Keyword PIR via Constant-weight Equality Operators
SmarTest: Effectively Hunting Vulnerable Transaction Sequences in Smart Contracts through Language Model-Guided Symbolic Execution
REMARK-LLM: A Robust and Efficient Watermarking Framework for Generative Large Language Models
When the Weakest Link is Strong: Secure Collaboration in the Case of the Panama Papers
Every Signature is Broken: On the Insecurity of Microsoft Office's OOXML Signatures
TracLLM: A Generic Framework for Attributing Long Context LLMs
FakeBehalf: Imperceptible Email Spoofing Attacks against the Delegation Mechanism in Email Systems
Beauty and the Burst: Remote Identification of Encrypted Video Streams
Tossing in the Dark: Practical Bit-Flipping on Gray-box Deep Neural Networks for Runtime Trojan Injection
Forgetting of Passwords: Ecological Theory and Data
A Broad Comparative Evaluation of Software Debloating Tools
RAZOR: A Framework for Post-deployment Software Debloating
UNIX Security Update
Not so Refreshing: Attacking GPUs using RFM Rowhammer Mitigation
The Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX
Shimmer: a Provably Secure Steganography Based on Entropy Collecting Mechanism
11th USENIX Workshop on Cyber Security Experimentation and Test, CSET 2018, Baltimore, MD, USA, August 13, 2018
zkSaaS: Zero-Knowledge SNARKs as a Service
Enhancing Bitcoin Security and Performance with Strong Consistency via Collective Signing
TapTrap: Animation-Driven Tapjacking on Android
Now Do Voters Notice Review Screen Anomalies? A Look at Voting System Usability
Securing Self-Virtualizing Ethernet Devices
The Effect of Design Patterns on (Present and Future) Cookie Consent Decisions
Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis of OpenDocument Signatures
Batch PIR and Labeled PSI with Oblivious Ciphertext Compression
Towards Measuring and Mitigating Social Engineering Software Download Attacks
Balboa: Bobbing and Weaving around Network Censorship
Practical Symmetric Key Cryptography on Modern Graphics Hardware
Demystifying Pointer Authentication on Apple M1
DISTDET: A Cost-Effective Distributed Cyber Threat Detection System
FaceObfuscator: Defending Deep Learning-based Privacy Attacks with Gradient Descent-resistant Features in Face Recognition
BASECOMP: A Comparative Analysis for Integrity Protection in Cellular Baseband Software
Whispers in the Hyper-space: High-speed Covert Channel Attacks in the Cloud
Cross-Modal Prompt Inversion: Unifying Threats to Text and Image Generative AI Models
SoK: What don't we know? Understanding Security Vulnerabilities in SNARKs
Inception: System-Wide Security Testing of Real-World Embedded Systems Software
Catching Phishers By Their Bait: Investigating the Dutch Phishing Landscape through Phishing Kit Detection
SDFuzz: Target States Driven Directed Fuzzing
Reading Between the Lines: Lessons from the SDMI Challenge
Native x86 Decompilation Using Semantics-Preserving Structural Analysis and Iterative Control-Flow Structuring
A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs
Your Firmware Has Arrived: A Study of Firmware Update Vulnerabilities
Software Diversity: Security, Entropy and Game Theory
The Flask Security Architecture: System Support for Diverse Security Policies
Challenges in Experimenting with Botnet Detection Systems
Context-Aware Anomaly Detection for Electronic Medical Record Systems
Composable Cachelets: Protecting Enclaves from Cache Side-Channel Attacks
Sync+Sync: A Covert Channel Built on fsync with Storage
See No Evil, Hear No Evil, Feel No Evil, Print No Evil? Malicious Fill Patterns Detection in Additive Manufacturing
ATtention Spanned: Comprehensive Vulnerability Analysis of AT Commands Within the Android Ecosystem
Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Apps
OpenScan: A Fully Transparent Optical Scan Voting System
Specification Mining for Intrusion Detection in Networked Control Systems
Midas: Systematic Kernel TOCTTOU Protection
Experimenting with Collaborative zk-SNARKs: Zero-Knowledge Proofs for Distributed Secrets
BScout: Direct Whole Patch Presence Test for Java Executables
"They Look at Vulnerability and Use That to Abuse You": Participatory Threat Modelling with Migrant Domestic Workers
SLUBStick: Arbitrary Memory Writes through Practical Software Cross-Cache Attacks within the Linux Kernel
D2U: Data Driven User Emulation for the Enhancement of Cyber Testing, Training, and Data Set Generation
When the User Is Inside the User Interface: An Empirical Study of UI Security Properties in Augmented Reality
Security at the End of the Tunnel: The Anatomy of VPN Mental Models Among Experts and Non-Experts in a Corporate Context
SandTrap: Securing JavaScript-driven Trigger-Action Platforms
Malla: Demystifying Real-world Large Language Model Integrated Malicious Services
TRIST: Circumventing Censorship with Transcoding-Resistant Image Steganography
DISTROY: Detecting Integrated Circuit Trojans with Compressive Measurements
Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks
Evaluating Differentially Private Machine Learning in Practice
Unified Support for Heterogeneous Security Policies in Distributed Systems
Moving from Logical Sharing of Guest OS to Physical Sharing of Deduplication on Virtual Machine
Privacy-Preserving Applications on Smartphones
Trusted Paths for Browsers
Security Analysis of Camera-LiDAR Fusion Against Black-Box Attacks on Autonomous Vehicles
Should Security Researchers Experiment More and Draw More Inferences?
Reverse Engineering x86 Processor Microcode
Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants
On the Difficulty of Defending Contrastive Learning against Backdoor Attacks
NetShaper: A Differentially Private Network Side-Channel Mitigation System
Inferring Internet Denial-of-Service Activity
You Shouldn't Collect My Secrets: Thwarting Sensitive Keystroke Leakage in Mobile IME Apps
EcoFuzz: Adaptive Energy-Saving Greybox Fuzzing as a Variant of the Adversarial Multi-Armed Bandit
29th USENIX Security Symposium, USENIX Security 2020, August 12-14, 2020
Approve Once, Regret Forever: On the Exploitation of Ethereum's Approve-TransferFrom Ecosystem
"I just hated it and I want my money back": Data-driven Understanding of Mobile VPN Service Switching Preferences in The Wild
Auditing Frameworks Need Resource Isolation: A Systematic Study on the Super Producer Threat to System Auditing and Its Mitigation
Instruction Backdoor Attacks Against Customized LLMs
Misty Registry: An Empirical Study of Flawed Domain Registry Operation
S/MINE: Collecting and Analyzing S/MIME Certificates at Scale
PROGRAPHER: An Anomaly Detection System based on Provenance Graph Embedding
Scantegrity II: End-to-End Verifiability for Optical Scan Election Systems using Invisible Ink Confirmation Codes
Communication-Computation Trade-offs in PIR
VULCANBOOST: Boosting ReDoS Fixes through Symbolic Representation and Feature Normalization
Galaxy: A Network Emulation Framework for Cybersecurity
DVSorder: Ballot Randomization Flaws Threaten Voter Privacy
Further Study on Frequency Estimation under Local Differential Privacy
Enhanced Label-Only Membership Inference Attacks with Fewer Queries
Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack
Formal Analysis and Patching of BLE-SC Pairing
Hermes: Unlocking Security Analysis of Cellular Network Protocols by Synthesizing Finite State Machines from Natural Language Specifications
Towards an Effective Method of ReDoS Detection for Non-backtracking Engines
A DETER Federation Architecture
More is Less: Extra Features in Contactless Payments Break Security
25th USENIX Security Symposium, USENIX Security 16, Austin, TX, USA, August 10-12, 2016
Notice the Imposter! A Study on User Tag Spoofing Attack in Mobile Apps
Birds of a Feather Flock Together: How Set Bias Helps to Deanonymize You via Revealed Intersection Sizes
Making USB Great Again with USBFILTER
Frontal Attack: Leaking Control-Flow in SGX via the CPU Frontend
Unpacking Privacy Labels: A Measurement and Developer Perspective on Google's Data Safety Section
Incremental Offline/Online PIR
Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM
Gone in 360 Seconds: Hijacking with Hitag2
Intender: Fuzzing Intent-Based Networking with Intent-State Transition Guidance
In the Line of Fire: Risks of DPI-triggered Data Collection
Doubly Dangerous: Evading Phishing Reporting Systems by Leveraging Email Tracking Techniques
Cyber-Physical Deception Through Coordinated IoT Honeypots
Communication-Efficient Triangle Counting under Local Differential Privacy
Understanding the Challenges with Medical Data Segmentation for Privacy
A Bestiary of Blocking: The Motivations and Modes behind Website Unavailability
Keynote Address: Why are our Systems Insecure? Must they always be?
Baggy Bounds Checking: An Efficient and Backwards-Compatible Defense against Out-of-Bounds Errors
WAN-hacking with AutoHack: Auditing Security Behind the Firewall
Eclipse Attacks on Bitcoin's Peer-to-Peer Network
Design of Access Control Mechanisms in Systems-on-Chip with Formal Integrity Guarantees
Not-Quite-So-Broken TLS: Lessons in Re-Engineering a Security Protocol Specification and Implementation
Black-box Adversarial Example Attack towards FCG Based Android Malware Detection under Incomplete Feature Information
The Digital-Safety Risks of Financial Technologies for Survivors of Intimate Partner Violence
Distributional Private Information Retrieval
ModelGuard: Information-Theoretic Defense Against Model Extraction Attacks
FAMOS: Robust Privacy-Preserving Authentication on Payment Apps via Federated Multi-Modal Contrastive Learning
Weight, Weight, Don't Tell Me: Using Scales to Select Ballots for Auditing
Greystar: Fast and Accurate Detection of SMS Spam Numbers in Large Cellular Networks Using Gray Phone Space
Towards a Re-evaluation of Data Forging Attacks in Practice
Password Rescue: A New Approach to Phishing Prevention
FLAME: A Flow-Level Anomaly Modeling Engine
TwinBreak: Jailbreaking LLM Security Alignments based on Twin Prompts
PatchCURE: Improving Certifiable Robustness, Model Utility, and Computation Efficiency of Adversarial Patch Defenses
The CRISIS Wide Area Security Architecture
DATA - Differential Address Trace Analysis: Finding Address-based Side-Channels in Binaries
Towards a Secure Zero-rating Framework with Three Parties
Private Proof-of-Stake Blockchains using Differentially-Private Stake Distortion
TockOwl: Asynchronous Consensus with Fault and Network Adaptability
SoK: Inaccessible & Insecure: An Exposition of Authentication Challenges Faced by Blind and Visually Impaired Users in State-of-the-Art Academic Proposals
Origin-Bound Certificates: A Fresh Approach to Strong Client Authentication for the Web
On the Security of Picture Gesture Authentication
Experimental Security Analysis of the App Model in Business Collaboration Platforms
Experiences with Practice-Focused Undergraduate Security Education
PET: Prevent Discovered Errors from Being Triggered in the Linux Kernel
Measuring the Effectiveness of Embedded Phishing Exercises
Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search
On Auditing Elections When Precincts Have Different Sizes
De-anonymizing Programmers via Code Stylometry
Beyond Disk Imaging for Preserving User State in Network Testbeds
Authenticated Network Time Synchronization
Protecting Free and Open Communications on the Internet Against Man-in-the-Middle Attacks on Third-Party Software: We're FOCI'd
Fact-Saboteurs: A Taxonomy of Evidence Manipulation Attacks against Fact-Verification Systems
Beyond The Gates: An Empirical Analysis of HTTP-Managed Password Stealers and Operators
The Importance of Usability Testing of Voting Systems
SSL Splitting: Securely Serving Data from Untrusted Caches
Systematic Assessment of Fuzzers using Mutation Analysis
Enter the Hydra: Towards Principled Bug Bounties and Exploit-Resistant Smart Contracts
ADsafety: Type-Based Verification of JavaScript Sandboxing
Statically Detecting Likely Buffer Overflow Vulnerabilities
Call Me Maybe: Eavesdropping Encrypted LTE Calls With ReVoLTE
From Patching Delays to Infection Symptoms: Using Risk Profiles for an Early Discovery of Vulnerabilities Exploited in the Wild
27th USENIX Security Symposium, USENIX Security 2018, Baltimore, MD, USA, August 15-17, 2018
6th USENIX Workshop on Free and Open Communications on the Internet, FOCI '16, Austin, TX, USA, August 8, 2016
Vetting Single Sign-On SDK Implementations via Symbolic Reasoning
Stick It to The Man: Correcting for Non-Cooperative Behavior of Subjects in Experiments on Social Networks
Texas A&M University Anarchistic Key Authorization (AKA)
Eye-Shield: Real-Time Protection of Mobile Device Screen Information from Shoulder Surfing
Double-Cross Attacks: Subverting Active Learning Systems
"I have no idea how to make it safer": Studying Security and Privacy Mindsets of Browser Extension Developers
Scantegrity III: Automatic Trustworthy Receipts, Highlighting Over/Under Votes, and Full Voter Verifiability
ECC.fail: Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory
Certificate-based Access Control for Widely Distributed Resources
Effective Inter-Component Communication Mapping in Android: An Essential Step Towards Holistic Security Analysis
Arbitrum: Scalable, private smart contracts
Bubble Trouble: Off-Line De-Anonymization of Bubble Forms
RTRlib: An Open-Source Library in C for RPKI-based Prefix Origin Validation
uXOM: Efficient eXecute-Only Memory on ARM Cortex-M
MultiFuzz: A Multi-Stream Fuzzer For Testing Monolithic Firmware
Fine-grained Sharing of Health Records using XSPA Profile for XACML - An Extended Abstract
Remote Side-Channel Attacks on Anonymous Transactions
TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time
RollingEvidence: Autoregressive Video Evidence via Rolling Shutter Effect
Account Security Interfaces: Important, Unintuitive, and Untrustworthy
It Doesn't Look Like Anything to Me: Using Diffusion Model to Subvert Visual Phishing Detectors
PASAN: Detecting Peripheral Access Concurrency Bugs within Bare-Metal Embedded Applications
Hecate: Abuse Reporting in Secure Messengers with Sealed Sender
Quantifying the Strength of Security Systems
DEEPVSA: Facilitating Value-set Analysis with Deep Learning for Postmortem Program Analysis
Hiding in Plain Sight: An Empirical Study of Web Application Abuse in Malware
Social Networking with Frientegrity: Privacy and Integrity with an Untrusted Provider
Aardvark: An Asynchronous Authenticated Dictionary with Applications to Account-based Cryptocurrencies
KeyForge: Non-Attributable Email from Forward-Forgeable Signatures
Shuffle-based Private Set Union: Faster and More Secure
OSLO: Improving the Security of Trusted Computing
Boxed Out: Blocking Cellular Interconnect Bypass Fraud at the Network Edge
Membership Inference Attacks Against Vision-Language Models
RE-Mind: a First Look Inside the Mind of a Reverse Engineer
überSpark: Enforcing Verifiable Object Abstractions for Automated Compositional Security Analysis of a Hypervisor
GraphAce: Secure Two-Party Graph Analysis Achieving Communication Efficiency
On Web Browsing Privacy in Anonymized NetFlows
Security Exercises for the Online Classroom with DETER
ALERT: Machine Learning-Enhanced Risk Estimation for Databases Supporting Encrypted Queries
A Bad Dream: Subverting Trusted Platform Module While You Are Sleeping
HyperDegrade: From GHz to MHz Effective CPU Frequencies
True Attacks, Attack Attempts, or Benign Triggers? An Empirical Measurement of Network Alerts in a Security Operations Center
Permission Re-Delegation: Attacks and Defenses
CalcuLatency: Leveraging Cross-Layer Network Latency Measurements to Detect Proxy-Enabled Abuse
InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2
Inception: Exposing New Attack Surfaces with Training in Transient Execution
Unveiling the Secrets without Data: Can Graph Neural Networks Be Exploited through Data-Free Model Extraction Attacks?
Using Amnesia to Detect Credential Database Breaches
Idle Port Scanning and Non-interference Analysis of Network Protocol Stacks Using Model Checking
Beyond Statistical Estimation: Differentially Private Individual Computation via Shuffling
Misleading Authorship Attribution of Source Code using Adversarial Learning
Domain-Based Administration of Identity-Based Cryptosystems for Secure Email and IPSEC
Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing
Experiences with Model Inference Assisted Fuzzing
Protecting Against Unexpected System Calls
Droplet: Decentralized Authorization and Access Control for Encrypted Data Streams
Mistrust Plugins You Must: A Large-Scale Study Of Malicious Plugins In WordPress Marketplaces
Introducing a New Alert Data Set for Multi-Step Attack Analysis
MOAT: Towards Safe BPF Kernel Extension
SANE: A Protection Architecture for Enterprise Networks
Security Analysis of the Palm Operating System and its Weaknesses Against Malicious Code Threats
Sneaky Spy Devices and Defective Detectors: The Ecosystem of Intimate Partner Surveillance with Covert Devices
"I am uncomfortable sharing what I can't see": Privacy Concerns of the Visually Impaired with Camera Based Assistive Applications
From Constraints to Cracks: Constraint Semantic Inconsistencies as Vulnerability Beacons for Embedded Systems
Protecting Cryptography Against Compelled Self-Incrimination
Mo(bile) Money, Mo(bile) Problems: Analysis of Branchless Banking Applications in the Developing World
Low-Cost and Comprehensive Non-textual Input Fuzzing with LLM-Synthesized Input Generators
Ferry: State-Aware Symbolic Execution for Exploring State-Dependent Program Paths
Fast and Service-preserving Recovery from Malware Infections Using CRIU
Computational Complexity and Information Asymmetry in Election Audits with Low-Entropy Randomness
Incrementally Updateable Honey Password Vaults
King of the Hill: A Novel Cybersecurity Competition for Teaching Penetration Testing
Data Subjects' Reactions to Exercising Their Right of Access
From the Aether to the Ethernet - Attacking the Internet using Broadcast Digital Television
A Secure Architecture for the Range-Level Command and Control System of a National Cyber Range Testbed
What Are the Chances? Explaining the Epsilon Parameter in Differential Privacy
FACE-AUDITOR: Data Auditing in Facial Recognition Systems
Dude, Where's That IP? Circumventing Measurement-based IP Geolocation
Recover from Excessive Faults in Partially-Synchronous BFT SMR
Toward Orchestration of Complex Networking Experiments
How to Make Private Distributed Cardinality Estimation Practical, and Get Differential Privacy for Free
Near-Optimal Constrained Padding for Object Retrievals with Dependencies
"Now I'm a bit angry: " Individuals' Awareness, Perception, and Responses to Data Breaches that Affected Them
Engaging Company Developers in Security Research Studies: A Comprehensive Literature Review and Quantitative Survey
Security Implications of Malicious G-Codes in 3D Printing
Stack Overflow Considered Helpful! Deep Learning Security Nudges Towards Stronger Cryptography
Don't be Dense: Efficient Keyword PIR for Sparse Databases
A Study of the Feasibility of Co-located App Attacks against BLE and a Large-Scale Analysis of the Current Application-Layer Security Landscape
Automating Voting Terminal Event Log Analysis
Quantifying Privacy Risks of Prompts in Visual Prompt Learning
Progressive Authentication: Deciding When to Authenticate on Mobile Phones
AuthLoop: End-to-End Cryptographic Authentication for Telephony over Voice Channels
Pass2Edit: A Multi-Step Generative Model for Guessing Edited Passwords
When LLMs Go Online: The Emerging Threat of Web-Enabled LLMs
Characterizing and Detecting Propaganda-Spreading Accounts on Telegram
Vulnerability-oriented Testing for RESTful APIs
User Profiling and Vulnerability Introduction Prediction in Social Coding Repositories: A Dynamic Graph Embedding Approach: Vulnerability Introduction Prediction in Social Coding Repositories
A Formal Analysis of IEEE 802.11's WPA2: Countering the Kracks Caused by Cracking the Counters
Towards Practical, End-to-End Formally Verified X.509 Certificate Validators with Verdict
Available Attestation: Towards a Reorg-Resilient Solution for Ethereum Proof-of-Stake
Size Does Matter: Why Using Gadget-Chain Length to Prevent Code-Reuse Attacks is Hard