2023 IEEE Security and Privacy Workshops (SPW)最新文献_第2页

DISV: Domain Independent Semantic Validation of Data Files 数据文件的领域独立语义验证

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00020

Ashish Kumar, B. Harris, Gang Tan

引用次数: 1

ESPwn32: Hacking with ESP32 System-on-Chips ESPwn32:利用ESP32片上系统进行黑客攻击

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00033

Romain Cayre, Damien Cauquil, Aurélien Francillon

引用次数: 0

Research Report: Synthesizing Intrusion Detection System Test Data from Open-Source Attack Signatures 研究报告:基于开源攻击特征的入侵检测系统测试数据合成

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00023

Jared Chandler, Adam Wick

引用次数: 0

Scripted Henchmen: Leveraging XS-Leaks for Cross-Site Vulnerability Detection 脚本追随者:利用XS-Leaks进行跨站点漏洞检测

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00038

Tom van Goethem, Iskander Sánchez-Rola, W. Joosen

引用次数: 0

Towards Simultaneous Attacks on Multiple Cellular Networks 针对多蜂窝网络的同时攻击

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00040

Alexandra Ross, Bradley Reaves

{"title":"Towards Simultaneous Attacks on Multiple Cellular Networks","authors":"Alexandra Ross, Bradley Reaves","doi":"10.1109/SPW59333.2023.00040","DOIUrl":"https://doi.org/10.1109/SPW59333.2023.00040","url":null,"abstract":"Cellular network attack research has dramatically expanded its capabilities in the last decade, but threat models routinely assume an attacker who targets a single cell with a small number of moderately-priced software defined radios. In many settings, such as mass crowd surveillance, attackers seek to gain passive or active dominance over a given area that is virtually always served by multiple cells and network operators. To do so, the only method publicly available is to naively duplicate their hardware at extensive cost. This paper presents a preliminary analysis of the feasibility of using a single software defined radio to surveil multiple networks simultaneously. Our key insight is that an attacker is often interested in only a portion of transmissions in a cell, and by design cellular transmissions are rigidly and predictably scheduled. Our system, Intercellular, rapidly schedules a single radio to tune between cells, effectively multiplexing the downlink channels of cells together. We demonstrate that radio tuning time is quite low (around 100ms), radio clocks are sufficiently stable to skip synchronization when retuning, and that even when monitoring multiple cells a radio can quite accurately count the devices served by all cells under observation. In so doing, we open new research directions advancing the efficiency and broad applicability of cellular network attacks.","PeriodicalId":308378,"journal":{"name":"2023 IEEE Security and Privacy Workshops (SPW)","volume":"84 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127482993","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Corpus-wide Analysis of Parser Behaviors via a Format Analysis Workbench 通过格式分析工作台对解析器行为进行语料库范围的分析

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00024

Pottayil Harisanker Menon, Walt Woods

{"title":"Corpus-wide Analysis of Parser Behaviors via a Format Analysis Workbench","authors":"Pottayil Harisanker Menon, Walt Woods","doi":"10.1109/SPW59333.2023.00024","DOIUrl":"https://doi.org/10.1109/SPW59333.2023.00024","url":null,"abstract":"As the number of parsers written for a data format grows, the number of interpretations of that format's specification also grows. Often, these interpretations differ in subtle, hard-to-determine ways that can result in parser differentials – where one input passed to two parsing programs results in two semantically different behaviors. For example, two widely-used HTTP parsers have been shown to process packet headers differently, allowing for the exfiltration of private files. To help find, diagnose, and mitigate the risks of parser differentials, we present the Format Analysis Workbench (FAW), a collection of tools for collecting information on large numbers of parser/input interactions and analyzing those interactions to detect and explain differentials. This tool suite supports any number of file formats through a flexible configuration, allows for processing to be scaled horizontally, and can be run offline. It has been used for results including the analysis of more than 1 million PDF files and unifying parser behaviors across these files to identify a gold standard of validity across multiple parsers. The included statistical tools have been used to identify the root causes of parser rendering differentials, including mislabeled non-embedded fonts. Tools for instrumenting existing parsers are also included, such as PolyTracker, allowing for the analysis of blind spots which might be used to craft differentials for other parsers, or to exfiltrate large quantities of data. Through allowing users to characterize parser behaviors at scale against large corpuses of inputs, the FAW helps to mitigate security risks arising from parser behaviors by making it tractable to resolve examples of differentials back to their behavioral causes.","PeriodicalId":308378,"journal":{"name":"2023 IEEE Security and Privacy Workshops (SPW)","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128449436","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Divergent Representations: When Compiler Optimizations Enable Exploitation 分歧表示:当编译器优化启用利用

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00035

A. Kellas, Alan Cao, Peter Goodman, Junfeng Yang

引用次数: 0

Emoji shellcoding in RISC-V 在RISC-V中的表情符号shell编码

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00028

Hadrien Barral, Georges-Axel Jaloyan, D. Naccache

引用次数: 0

Go or No Go: Differential Fuzzing of Native and C Libraries Go或No Go:原生库和C库的差异模糊测试

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00036

A. Sorniotti, Michael Weissbacher, Anil Kurmus

{"title":"Go or No Go: Differential Fuzzing of Native and C Libraries","authors":"A. Sorniotti, Michael Weissbacher, Anil Kurmus","doi":"10.1109/SPW59333.2023.00036","DOIUrl":"https://doi.org/10.1109/SPW59333.2023.00036","url":null,"abstract":"In little more than a decade, Go has become one of the most popular programming languages in use today. It is a statically-typed, compiled language with spatial and temporal memory safety achieved by way of strong typing, automatically inserted bounds checks, and a mark-and-sweep garbage collector. Go developers can make immediate use of a large set of native libraries, whether shipped as part of the runtime or available to be imported from community code. Alternatively Go developers can directly link to C/C++ libraries which can be called from Go sources thanks to cgo functionality. Factors that go into this decision are stability, performance, and availability. As a result developers have a choice between Go native libraries or non-native code. However, today there is little understanding how to consider security implications in this decision. Our work is the first to investigate security implications of choosing between native and non-native libraries for Go programs. We first investigate to what extent popular GitHub projects make use of cgo, revealing that this choice is in fact quite popular. We then design and build a differential fuzzer that can compare native and C/C++ implementations of the same functionality. We implement the fuzzer and test its effectiveness on four popular packages (libcrypto, libpng, libssl, and libz), describing the results and highlighting their security impact. Finally, we present two real-world case studies (anti-virus evasion including the anti-virus scanner included in Gmail plus Certificate Transparency case study) and discuss how our differential fuzzer discovered implementation differences with security impact. Our work has led to changes in Golang zlib which have since shipped.","PeriodicalId":308378,"journal":{"name":"2023 IEEE Security and Privacy Workshops (SPW)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125531564","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Automatically Detecting Variability Bugs Through Hybrid Control and Data Flow Analysis 基于混合控制和数据流分析的可变性bug自动检测

2023 IEEE Security and Privacy Workshops (SPW) Pub Date : 2023-05-01 DOI: 10.1109/SPW59333.2023.00022

Kelly Kaoudis, Henrik Brodin, E. Sultanik

{"title":"Automatically Detecting Variability Bugs Through Hybrid Control and Data Flow Analysis","authors":"Kelly Kaoudis, Henrik Brodin, E. Sultanik","doi":"10.1109/SPW59333.2023.00022","DOIUrl":"https://doi.org/10.1109/SPW59333.2023.00022","url":null,"abstract":"Subtle bugs that only manifest in certain software configurations are notoriously difficult to correctly trace. Sometimes called Heisenbugs, these runtime variability flaws can result from invoking undefined behavior in languages like C and C++, or from compiler flaws. In this paper, we present a novel analysis technique for detecting and correctly diagnosing variability bugs' impact on a program through comparing control-affecting data flow across differently compiled program variants. Our UBet prototype dynamically derives a runtime control flow trace while tracing universal data flow for a program processing a given input, operating at a level of tracing completeness not achievable through similar dynamic instrumentation means. Sans compiler bugs or undefined behavior, every compile-time program configuration (i.e., compiler flags vary) should be semantically equivalent. Thus, any input for which a program variant produces inconsistent output indicates a variability bug. Our analysis compares control-affecting data flow traces from disagreeing program version runs to identify related input bytes and determine where in the program the processing variability originates. Though we initially demonstrate our technique on C++ variability bugs in Nitro, the American Department of Defense NITF (National Imagery Transmission Format) reference implementation parser, our approach applies equally to other programs and input types beyond NITF parsers. Finally, we sketch a path toward completing this work and refining our analysis, including evaluating parsers of other input formats.","PeriodicalId":308378,"journal":{"name":"2023 IEEE Security and Privacy Workshops (SPW)","volume":"68 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126739685","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0