Publications

Filter by type:
. VIP: Safeguard Value Invariant Property for Thwarting Critical Memory Corruption Attacks (to appear). ACM CCS, 2021.

. Securely Sharing Randomized Code that Flies. DTRAP, 2021.

. Enabling the Large-Scale Emulation of Internet of Things Firmware With Heuristic Workarounds. IEEE S&P, 2021.

. FirmAE: Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis (to appear). ACSAC, 2020.

. CrFuzz: Fuzzing Multi-purpose Programs through Input Validation. ESEC/FSE, 2020.

. MARDU : Efficient and Scalable Code Re-randomization. SYSTOR, 2020.

. MOSE: Practical Multi-User Oblivious Storage via Secure Enclaves. CODASPY, 2020.

. HFL: Hybrid Fuzzing on the Linux Kernel. ISOC NDSS, 2020.

. Fuzzing and Exploiting Virtual Channels in Microsoft Remote Desktop Protocol for Fun and Profit. BlackHat Europe, 2019.

Slides

. BlueMaster: Bypassing and Fixing Bluetooth-based Proximity Authentication. BlackHat Europe, 2019.

PDF Slides

. Making Code Re-randomization Practical with MARDU. arXiv, 2019.

. soFrida - Dynamic Analysis Tool for Mobile Apps with Cloud Backend. DEF CON, 2019.

. MultiK: A Framework for Orchestrating Multiple Specialized Kernels. arXiv, 2019.

PDF Project

. Hardware-Supported ORAM in Effect: Practical Oblivious Search and Update on Very Large Dataset. PoPETs, 2019.

PDF

. QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing. USENIX Security, 2018.

PDF Code Slides Video

. Hardware-Supported ORAM in Effect: Practical Oblivious Search and Update on Very Large Dataset. Cryptology ePrint Archive, 2018.

Project

. Hardware-Supported ORAM in Effect: Practical Oblivious Search and Update on Very Large Dataset. Cryptology ePrint Archive, 2018.

. SGX-Bomb: Locking Down the Processor via Rowhammer Attack. SysTEX, 2017.

PDF Code Slides

. Hacking in Darkness: Return-oriented Programming against Secure Enclaves. USENIX Security, 2017.

PDF Code Slides Video

. Building Trust in the User I/O in Computer Systems. PhD Thesis, 2017.

PDF Slides

. Breaking Kernel Address Space Layout Randomization with Intel TSX. ACM CCS, 2016.

PDF Code Slides

. Towards Engineering a Secure Android Ecosystem: A Survey of Existing Techniques. ACM CSUR, 2016.

. Toward Engineering a Secure Android Ecosystem: A Survey of Existing Techniques. ACM Computing Surveys (CSUR) 49(2), 2016.

PDF

. Breaking Kernel Address Space Layout Randomization with Intel TSX. BlackHat USA, 2016.

PDF Code Slides Video

. APISAN: Sanitizing API Usages through Semantic Cross-checking. USENIX Security, 2016.

PDF Slides Video

. UCognito: Private Browsing without Tears. ACM CCS, 2015.

PDF Code Project Slides

. Breaking and Fixing VoLTE: Exploiting Hidden Data Channels and Mis-implementations. ACM CCS, 2015.

PDF Slides

. Preventing Use-after-free with Dangling Pointers Nullification. ISOC NDSS, 2015.

PDF Slides

. A11y Attacks: Exploiting Accessibility in Operating Systems. ACM CCS, 2014.

PDF Slides

. On the Feasibility of Large-Scale Infections of iOS Devices. USENIX Security, 2014.

. On the Feasibility of Large-Scale Infections of iOS Devices. USENIX Security, 2014.

PDF Video

. Mimesis Aegis: A Mimicry Privacy Shield. USENIX Security, 2014.

. Mimesis Aegis: A Mimicry Privacy Shield. USENIX Security, 2014.

PDF Video

. Exploiting Unpatched iOS Vulnerabilities for Fun and Profit. BlackHat USA, 2014.

. Exploiting Unpatched iOS Vulnerabilities for Fun and Profit. BlackHat USA, 2014.

Slides Video

. Abusing Performance Optimization Weaknesses to Bypass ASLR. BlackHat USA, 2014.

. Abusing Performance Optimization Weaknesses to Bypass ASLR. BlackHat USA, 2014.

Slides

. Gyrus: A Framework for User-Intent Monitoring of Text-based Networked Applications. ISOC NDSS, 2014.

PDF Slides

. Mactans: Injecting Malware Into iOS Devices via Malicious Chargers. BlackHat USA, 2013.

PDF Slides Video