4 web security
play

4. Web Security - Measuring and Analyzing Search Engine Poisoning of - PDF document

Jul 12, 2023 •238 likes •290 views

All papers can be found by Google Scholar. For those papers accepted by S&P 2019, you can download them from this website: https://www.ieee- security.org/TC/SP2019/program-papers.html The below papers are published in the top security

  1. All papers can be found by Google Scholar. For those papers accepted by S&P 2019, you can download them from this website: https://www.ieee- security.org/TC/SP2019/program-papers.html The below papers are published in the top security conferences within 2 years. You should better select your presentation paper from these papers. If you select the paper outsides this list, please make sure this paper has been published by our 1st and 2nd tier conferences within recent years. Note: When you determinate the paper you will make a presentation in class, please send the paper title to TA one week before your presentation. 1. Mobile Security 2. Electrical Cash and Smart Contracts 3. Machine Learning Security 4. Web Security 5. IoT and Cyber-physical Security 6. Cybercriminal Security 7. Side Channels Attack 8. Authentication and Protocol Security 9. Enterprise Security 1. Mobile Security - Please Forget Where I Was Last Summer: The Privacy Risks of Public Location (Meta)Data, NDSS 2019 - Time Does Not Heal All Wounds: A Longitudinal Analysis of Security-Mechanism Support in Mobile Browsers, NDSS 2019 - Geo-locating Drivers: A Study of Sensitive Data Leakage in Ride-Hailing Services, NDSS 2019 - ClickShield: Are You Hiding Something? Towards Eradicating Clickjacking on Android, CCS 2018 - Mobile Application Web API Reconnaissance: Web-to-Mobile Inconsistencies & Vulnerabilities, S&P 2018 - Phishing Attacks on Modern Android, CCS 2018 - Precise Android API Protection Mapping Derivation and Reasoning, CCS 2018

  2. - Invetter: Locating Insecure Input Validations in Android Services, CCS 2018 - No Training Hurdles: Fast Training-Agnostic Attacks to Infer Your Typing, CCS 2018 - PatternListener: Cracking Android Pattern Lock Using Acoustic Signals, CCS 2018 2. Electrical Cash and Smart Contracts - A Treasury System for Cryptocurrencies: Enabling Better Collaborative Intelligence, NDSS 2019 - Perun: Virtual Payment Hubs over Cryptocurrencies, S&P 2019 - Fast Secure Multiparty ECDSA with Practical Distributed Key Generation and Applications to Cryptocurrency Custody, CCS 2018 - MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense, CCS 2018 - SECURIFY: Practical Security Analysis of Smart Contracts, CCS 2018 - BitML: a calculus for Bitcoin smart contracts, CCS 2018 - teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts, Usenix 2018 - Enter the Hydra: Towards Principled Bug Bounties and Exploit-Resistant Smart Contracts, Usenix 2018 - Arbitrum: Scalable, private smart contracts, Usenix 2018 - Erays: Reverse Engineering Ethereum's Opaque Smart Contracts, Usenix 2018 3. Machine Learning Security - TextBugger: Generating Adversarial Text Against Real-world Applications, NDSS 2019 - Practical Hidden Voice Attacks against Speech and Speaker Recognition Systems, NDSS 2019 - Life after Speech Recognition: Fuzzing Semantic Misinterpretation for Voice Assistant Applications, NDSS 2019 - DEEPSEC: A Uniform Platform for Security Analysis of Deep Learning Model, S&P 2019 - Exploiting Unintended Feature Leakage in Collaborative Learning, S&P 2019 - LEMNA: Explaining Deep Learning based Security Applications, CCS 2018 - Effective Program Debloating via Reinforcement Learning, CCS 2018 - Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring, Usenix 2018

  3. 4. Web Security - Measuring and Analyzing Search Engine Poisoning of Linguistic Collisions, S&P 2019 - Master of Web Puppets: Abusing Web Browsers for Persistent and Stealthy Computation, NDSS 2019 - JavaScript Template Attacks: Automatically Inferring Host Information for Targeted Exploits, NDSS 2019 - Latex Gloves: Protecting Browser Extensions from Probing and Revelation Attacks, NDSS 2019 - Fidelius: Protecting User Secrets from Compromised Browsers, S&P 2019 - HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows, S&P 2019 - Deep Fingerprinting: Undermining Website Fingerprinting Defenses with Deep Learning, CCS 2018 - DeepCorr: Strong Flow Correlation Attacks on Tor Using Deep Learning, CCS 2018 - Measuring Information Leakage in Website Fingerprinting Attacks and Defenses, CCS 2018 5. IoT and Cyber-Physical Security - HoMonit: Monitoring Smart Home Apps from Encrypted Traffic, CCS 2018 - If This Then What? Controlling Flows in IoT Apps, CCS 2018 - IoTGuard: Dynamic Enforcement of Security and Safety Policy in Commodity IoT, NDSS 2019 - SoK: Security Evaluation of Home-Based IoT Deployments, S&P 2019 - Dangerous Skills: Understanding and Mitigating Security Risks of Voice- Controlled Third-Party Functions on Virtual Personal Assistant Systems, S&P 2019 - Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps, S&P 2019 - 6thSense: A Context-aware Sensor-based Attack Detector for Smart Devices, Usenix 2018 - Rethinking Access Control and Authentication for the Home Internet of Things (IoT), Usenix 2018

  4. 6. Cybercriminal Security - Cybercriminal Minds ： An investigative study of cryptocurrency abuses in the Dark Web, NDSS 2019 - Characterizing Pixel Tracking through the Lens of Disposable Email Services, S&P 2019 - Resident Evil: Understanding Residential IP Proxy as a Dark Service, S&P 2019 - Plug and Prey? Measuring the Commoditization of Cybercrime via Online Anonymous Markets, Usenix 2018 - Reading Thieves' Cant: Automatically Identifying and Understanding Dark Jargons from Cybercrime Marketplaces, Usenix 2018 7. Side Channels Attack - Profit: Detecting and Quantifying Side Channels in Networked Applications, NDSS 2019 - Privacy Attacks to the 4G and 5G Cellular Paging Protocols Using Side Channel Information, NDSS 2019 - Attack Directories, Not Caches: Side Channel Attacks in a Non-Inclusive World, S&P 2019 - Screaming Channels: When Electromagnetic Side Channels Meet Radio Transceivers, CCS 2018 - Malicious Management Unit: Why Stopping Cache Attacks in Software is Harder Than You Think, Usenix 2018 - Translation Leak-aside Buffer: Defeating Cache Side-channel Protections with TLB Attacks, Usenix 2018 8. Authentication and Protocol Security - BadBluetooth: Breaking Android Security Mechanisms via Malicious Bluetooth Peripherals, NDSS 2019 - Understanding Open Ports in Android Applications: Discovery, Diagnosis, and Security Assessment, NDSS 2019 - Touching the Untouchables: Dynamic Security Analysis of the LTE Control Plane, S&P 2019 - Robust Performance Metrics for Authentication Systems, NDSS 2019 - How to End Password Reuse on the Web, NDSS 2019 - Blind Certificate Authorities, S&P 2019

  5. - The use of TLS in Censorship Circumvention, NDSS 2019 - PASTA: Password-based Threshold Authentication, CCS 2018 9. Enterprise Security - Digital Healthcare-Associated Infection: A Case Study on the Security of a Major Multi-Campus Hospital System, NDSS 2019 - Mind Your Own Business: A Longitudinal Study of Threats and Vulnerabilities in Enterprises, NDSS 2019 - NoDoze: Combatting Threat Alert Fatigue with Automated Provenance Triage, NDSS 2019 - The Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise Level, Usenix 2018 - SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection, Usenix 2018

Recommend

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Security Security as term, Possible Security violations Authentication Criteria for

Security Security as term, Possible Security violations Authentication Criteria for

BS1 WS19/20 topic-based slides Security Security as term, Possible Security violations Authentication Criteria for Trust in Computer Systems Three hearts of Windows Security DACLs A Look at Security System is secure if

988 views • 20 slides
CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC 410 / 611 : Operating Systems CPSC410/611: Security Security Security Attacks Security Threats Crypto Authentication Examples SSL Security Threats Breach of confidentiality unauthorized access to

458 views • 18 slides
Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security WS 06/07 Seminar Prof. Dr.-Ing. Jana Dittmann & Dr.-Ing. Claus Vielhauer with support from Tobias Scheidat

419 views • 16 slides
1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

Course Overview Course Requirements EECS 498-7/8 Cryptography and Network Security: www.citi.umich.edu/u/honey/security Principles and Practice (Third Edition) Computer Security Monday & Friday, 9:00 10:30 William Stallings

670 views • 19 slides
A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security Introducing Spring Security View layer security Whats coming in Spring Security 3 E-mail: craig@habuma.com Blog: http://www.springloaded.info

452 views • 19 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CSCE Intro to Computer Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies Security

472 views • 20 slides
SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY TESTING CONCEPTS 3. SECURITY TESTING TYPES 4. TOP 10 SECURITY RISKS Few Security Breaches Date: 2013-14 September 2016, while in negotiations to

404 views • 18 slides
Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in distributed systems arises from the desire to share resources Resources must be protected against unauthorized access, as enemies (attackers)

1.16k views • 67 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CPSC 410/611 Operating Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies

419 views • 19 slides
International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International Security What is security? Freedom from threats to core values? Contestation over referent object: Individual? State? System? How is security achieved?

715 views • 11 slides
Security 101 Definition of Information Security Information security is the protection of

Security 101 Definition of Information Security Information security is the protection of

Computing Services Information Security Office Security 101 Definition of Information Security Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction or disruption. The

469 views • 22 slides
Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety Sensitive Information Not for public or media release F.S. 119.071. Required by law, rule and regulation: Homeland Security Directive 5 and 8.

393 views • 11 slides
Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the computing world, and are parallel to even older problems outside computing Required level of security is always related to what you protect

237 views • 23 slides
Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

ITS335 Intro. to Security Concepts Threats, Attacks, Assets Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 2

965 views • 34 slides
Effective Security for the Post-compliance Era Security Awareness and Training for Security

Effective Security for the Post-compliance Era Security Awareness and Training for Security

Effective Security for the Post-compliance Era Security Awareness and Training for Security Specialists M. ANGELA SASSE, RUHR UNIVERSITY BOCHUM & UCL The problem MENSCHLICH WELTOFFEN LEISTUNGSSTARK 2 ENISA Report December 2018

362 views • 33 slides
Security as a Architectural Concern Reid Holmes [TAILOR ET AL.] NFP: Security Security:

Security as a Architectural Concern Reid Holmes [TAILOR ET AL.] NFP: Security Security:

Material and some slide content from: - Software Architecture: Foundations, Theory, and Practice - Krzysztof Czarnecki Security as a Architectural Concern Reid Holmes [TAILOR ET AL.] NFP: Security Security: The protection a ff orded a

160 views • 4 slides
Security of Encryption Security of Encryption Perfect secrecy (IND-Onetime security) is too

Security of Encryption Security of Encryption Perfect secrecy (IND-Onetime security) is too

Defining Encryption (ctd.) Lecture 3 CPA/CCA security Computational Indistinguishability Pseudo-randomness, One-Way Functions Security of Encryption Security of Encryption Perfect secrecy (IND-Onetime security) is too strong (though too

1.36k views • 113 slides
Outline Security Principles and Policies Security terms and concepts CS 239 Security

Outline Security Principles and Policies Security terms and concepts CS 239 Security

Outline Security Principles and Policies Security terms and concepts CS 239 Security policies Computer Security Basic concepts Peter Reiher Security policies for real systems January 13, 2005 Lecture 2 Lecture 2 Page 1

347 views • 9 slides
Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security

Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security

Chapter 9 Cloud Security Contents Security in an interconnected world, cloud security risks. Attacks in a cloud environment, top threats. Security, a major concern for cloud users. Privacy. Trust. Operating systems

661 views • 38 slides
Election Security and Integrity What is election security? What is election integrity? Election

Election Security and Integrity What is election security? What is election integrity? Election

Election Security and Integrity What is election security? What is election integrity? Election Security = Physical Security + Cybersecurity Physical Security Security plans Secure storage of voting machines and electronic pollbooks

341 views • 13 slides
Computer Security environment, without compromising functionality or security? Three parts

Computer Security environment, without compromising functionality or security? Three parts

9/7/2013 Some topics Im working on Computing on encrypted data Information flow: Dynamic IFC in Haskell, web Sandboxing Untrusted JavaScript Third party web tracking and other web security stories Practical web security

572 views • 21 slides
Network Security Where we are in the Course Security crosses all layers Applicatjon

Network Security Where we are in the Course Security crosses all layers Applicatjon

Network Security Where we are in the Course Security crosses all layers Applicatjon Transport Network Link Physical CSE 461 University of Washington 2 Security Threats Security is like performance Means many things

1.12k views • 92 slides

More recommend