Export Citations
Save this search
Please login to be able to save your searches and receive alerts for new content matching your search criteria.
- posterOctober 2016
POSTER: Re-Thinking Risks and Rewards for Trusted Third Parties
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1796–1798https://doi.org/10.1145/2976749.2989060Commercial trusted third parties (TTPs) may increase their bottom line by watering down their validation procedures because they assume no liability for lapses of judgement. Consumers bear the risk of misplaced trust. Reputation loss is a weak deterrent ...
- posterOctober 2016
POSTER: An Educational Network Protocol for Covert Channel Analysis Using Patterns
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1739–1741https://doi.org/10.1145/2976749.2989037The utilization of information hiding is on the rise among cybercriminals, e.g. to cloak the communication of malicious software as well as by ordinary users for privacy-enhancing purposes. A recent trend is to use network traffic in form of covert ...
- demonstrationOctober 2016
DEMO: OffPAD - Offline Personal Authenticating Device with Applications in Hospitals and e-Banking
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1847–1849https://doi.org/10.1145/2976749.2989033Identity and authentication solutions often lack usability and scalability, or do not provide high enough authentication assurance. The concept of Lucidman (Local User-Centric Identity Management) is an approach to providing scalable, secure and user ...
- research-articleOctober 2016
Function Secret Sharing: Improvements and Extensions
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1292–1303https://doi.org/10.1145/2976749.2978429Function Secret Sharing (FSS), introduced by Boyle et al. (Eurocrypt 2015), provides a way for additively secret-sharing a function from a given function family F. More concretely, an m-party FSS scheme splits a function f : {0, 1}n -> G, for some ...
- research-articleOctober 2016
DPSense: Differentially Private Crowdsourced Spectrum Sensing
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 296–307https://doi.org/10.1145/2976749.2978426Dynamic spectrum access (DSA) has great potential to address worldwide spectrum shortage by enhancing spectrum efficiency. It allows unlicensed secondary users to access the underutilized licensed spectrum when the licensed primary users are not ...
-
- research-articleOctober 2016
Frodo: Take off the Ring! Practical, Quantum-Secure Key Exchange from LWE
- Joppe Bos,
- Craig Costello,
- Leo Ducas,
- Ilya Mironov,
- Michael Naehrig,
- Valeria Nikolaenko,
- Ananth Raghunathan,
- Douglas Stebila
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1006–1018https://doi.org/10.1145/2976749.2978425Lattice-based cryptography offers some of the most attractive primitives believed to be resistant to quantum computers. Following increasing interest from both companies and government agencies in building quantum computers, a number of works have ...
- research-articleOctober 2016
On the Practical (In-)Security of 64-bit Block Ciphers: Collision Attacks on HTTP over TLS and OpenVPN
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 456–467https://doi.org/10.1145/2976749.2978423While modern block ciphers, such as AES, have a block size of at least 128 bits, there are many 64-bit block ciphers, such as 3DES and Blowfish, that are still widely supported in Internet security protocols such as TLS, SSH, and IPsec. When used in CBC ...
- research-articleOctober 2016
Computational Soundness for Dalvik Bytecode
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 717–730https://doi.org/10.1145/2976749.2978418Automatically analyzing information flow within Android applications that rely on cryptographic operations with their computational security guarantees imposes formidable challenges that existing approaches for understanding an app's behavior struggle ...
- research-articleOctober 2016
Stemming Downlink Leakage from Training Sequences in Multi-User MIMO Networks
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1580–1590https://doi.org/10.1145/2976749.2978412Multi-User MIMO has attracted much attention due to its significant advantage of increasing the utilization ratio of wireless channels. Recently a serious eavesdropping attack, which exploits the CSI feedback of the FDD system, is discovered in MU-MIMO ...
- research-articleOctober 2016
Systematic Fuzzing and Testing of TLS Libraries
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1492–1504https://doi.org/10.1145/2976749.2978411We present TLS-Attacker, an open source framework for evaluating the security of TLS libraries. TLS-Attacker allows security engineers to create custom TLS message flows and arbitrarily modify message contents using a simple interface in order to test ...
- research-articleOctober 2016
The Honey Badger of BFT Protocols
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 31–42https://doi.org/10.1145/2976749.2978399The surprising success of cryptocurrencies has led to a surge of interest in deploying large scale, highly robust, Byzantine fault tolerant (BFT) protocols for mission-critical applications, such as financial transactions. Although the conventional ...
- research-articleOctober 2016
When CSI Meets Public WiFi: Inferring Your Mobile Phone Password via WiFi Signals
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1068–1079https://doi.org/10.1145/2976749.2978397In this study, we present WindTalker, a novel and practical keystroke inference framework that allows an attacker to infer the sensitive keystrokes on a mobile device through WiFi-based side-channel information. WindTalker is motivated from the ...
- research-articleOctober 2016
A Systematic Analysis of the Juniper Dual EC Incident
- Stephen Checkoway,
- Jacob Maskiewicz,
- Christina Garman,
- Joshua Fried,
- Shaanan Cohney,
- Matthew Green,
- Nadia Heninger,
- Ralf-Philipp Weinmann,
- Eric Rescorla,
- Hovav Shacham
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 468–479https://doi.org/10.1145/2976749.2978395In December 2015, Juniper Networks announced multiple security vulnerabilities stemming from unauthorized code in ScreenOS, the operating system for their NetScreen VPN routers. The more sophisticated of these vulnerabilities was a passive VPN ...
- research-articleOctober 2016
Host of Troubles: Multiple Host Ambiguities in HTTP Implementations
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1516–1527https://doi.org/10.1145/2976749.2978394The Host header is a security-critical component in an HTTP request, as it is used as the basis for enforcing security and caching policies. While the current specification is generally clear on how host-related protocol fields should be parsed and ...
- research-articleOctober 2016
New Security Threats Caused by IMS-based SMS Service in 4G LTE Networks
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1118–1130https://doi.org/10.1145/2976749.2978393SMS (Short Messaging Service) is a text messaging service for mobile users to exchange short text messages. It is also widely used to provide SMS-powered services (e.g., mobile banking). With the rapid deployment of all-IP 4G mobile networks, the ...
- research-articleOctober 2016
A Secure Sharding Protocol For Open Blockchains
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 17–30https://doi.org/10.1145/2976749.2978389Cryptocurrencies, such as Bitcoin and 250 similar alt-coins, embody at their core a blockchain protocol --- a mechanism for a distributed network of computational nodes to periodically agree on a set of new transactions. Designing a secure blockchain ...
- research-articleOctober 2016
All Your DNS Records Point to Us: Understanding the Security Threats of Dangling DNS Records
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1414–1425https://doi.org/10.1145/2976749.2978387In a dangling DNS record (Dare), the resources pointed to by the DNS record are invalid, but the record itself has not yet been purged from DNS. In this paper, we shed light on a largely overlooked threat in DNS posed by dangling DNS records. Our work ...
- research-articleOctober 2016
A Comprehensive Formal Security Analysis of OAuth 2.0
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1204–1215https://doi.org/10.1145/2976749.2978385The OAuth 2.0 protocol is one of the most widely deployed authorization/single sign-on (SSO) protocols and also serves as the foundation for the new SSO standard OpenID Connect. Despite the popularity of OAuth, so far analysis efforts were mostly ...
- research-articleOctober 2016
Efficient Cryptographic Password Hardening Services from Partially Oblivious Commitments
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1192–1203https://doi.org/10.1145/2976749.2978375Password authentication still constitutes the most widespread authentication concept on the Internet today, but the human incapability to memorize safe passwords has left this concept vulnerable to various attacks ever since. Affected enterprises such ...
- research-articleOctober 2016
A Surfeit of SSH Cipher Suites
CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications SecurityOctober 2016, Pages 1480–1491https://doi.org/10.1145/2976749.2978364This work presents a systematic analysis of symmetric encryption modes for SSH that are in use on the Internet, providing deployment statistics, new attacks, and security proofs for widely used modes. We report deployment statistics based on two ...