Export Citations
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- abstractOctober 2016
WISCS'16: The 3rd ACM Workshop on Information Sharing and Collaborative Security
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1877–1878https://doi.org/10.1145/2976749.2990490The objective of the 3rd ACM Workshop on Information Sharing and Collaborative Security is to advance the scientific foundations for sharing security-related data. Improving information sharing remains an important theme in the computer security ...
- abstractOctober 2016
Theory of Implementation Security Workshop (TIs 2016)
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1875–1876https://doi.org/10.1145/2976749.2990488The Internet of Things (IoT) enables a network of communication between people-to-people, people-to-things and things-to-things. The security of these communications against all possible attacks is a significant part of todays security and privacy. Due ...
- posterOctober 2016
POSTER: WiPING: Wi-Fi signal-based PIN Guessing attack
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1835–1837https://doi.org/10.1145/2976749.2989067This paper presents a new type of online password guessing attack called "WiPING" (Wi-Fi signal-based PIN Guessing attack) to guess a victim's PIN (Personal Identification Number) within a small number of unlock attempts. WiPING uses wireless signal ...
- research-articleOctober 2016
Strong Non-Interference and Type-Directed Higher-Order Masking
- Gilles Barthe,
- Sonia Belaïd,
- François Dupressoir,
- Pierre-Alain Fouque,
- Benjamin Grégoire,
- Pierre-Yves Strub,
- Rébecca Zucchini
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 116–129https://doi.org/10.1145/2976749.2978427Differential power analysis (DPA) is a side-channel attack in which an adversary retrieves cryptographic material by measuring and analyzing the power consumption of the device on which the cryptographic algorithm under attack executes. An effective ...
- research-articleOctober 2016
Attacking OpenSSL Implementation of ECDSA with a Few Signatures
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1505–1515https://doi.org/10.1145/2976749.2978400In this work, we give a lattice attack on the ECDSA implementation in the latest version of OpenSSL, which implement the scalar multiplication by windowed Non-Adjacent Form method. We propose a totally different but more efficient method of extracting ...
- research-articleOctober 2016
When CSI Meets Public WiFi: Inferring Your Mobile Phone Password via WiFi Signals
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1068–1079https://doi.org/10.1145/2976749.2978397In this study, we present WindTalker, a novel and practical keystroke inference framework that allows an attacker to infer the sensitive keystrokes on a mobile device through WiFi-based side-channel information. WindTalker is motivated from the ...
- research-articleOctober 2016
Covert Channels through Random Number Generator: Mechanisms, Capacity Estimation and Mitigations
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 843–857https://doi.org/10.1145/2976749.2978374Covert channels present serious security threat because they allow secret communication between two malicious processes even if the system inhibits direct communication. We describe, implement and quantify a new covert channel through shared hardware ...
- research-articleOctober 2016
Prefetch Side-Channel Attacks: Bypassing SMAP and Kernel ASLR
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 368–379https://doi.org/10.1145/2976749.2978356Modern operating systems use hardware support to protect against control-flow hijacking attacks such as code-injection attacks. Typically, write access to executable pages is prevented and kernel mode execution is restricted to kernel code pages only. ...
- research-articleOctober 2016
Leave Your Phone at the Door: Side Channels that Reveal Factory Floor Secrets
- Avesta Hojjati,
- Anku Adhikari,
- Katarina Struckmann,
- Edward Chou,
- Thi Ngoc Tho Nguyen,
- Kushagra Madan,
- Marianne S. Winslett,
- Carl A. Gunter,
- William P. King
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 883–894https://doi.org/10.1145/2976749.2978323From pencils to commercial aircraft, every man-made object must be designed and manufactured. When it is cheaper or easier to steal a design or a manufacturing process specification than to invent one's own, the incentive for theft is present. As more ...
- research-articleOctober 2016
My Smartphone Knows What You Print: Exploring Smartphone-based Side-channel Attacks Against 3D Printers
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 895–907https://doi.org/10.1145/2976749.2978300Additive manufacturing, also known as 3D printing, has been increasingly applied to fabricate highly intellectual property (IP) sensitive products. However, the related IP protection issues in 3D printers are still largely underexplored. On the other ...
- research-articleOctober 2016
On Code Execution Tracking via Power Side-Channel
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1019–1031https://doi.org/10.1145/2976749.2978299With the proliferation of Internet of Things, there is a growing interest in embedded system attacks, e.g., key extraction attacks and firmware modification attacks. Code execution tracking, as the first step to locate vulnerable instruction pieces for ...