{"id":100,"date":"2020-05-29T22:02:43","date_gmt":"2020-05-29T14:02:43","guid":{"rendered":"https:\/\/blog.secdr.org\/?p=100"},"modified":"2020-05-29T22:04:15","modified_gmt":"2020-05-29T14:04:15","slug":"sp-2020-%e8%ae%ba%e6%96%87%e5%bd%95%e7%94%a8%e5%88%97%e8%a1%a8","status":"publish","type":"post","link":"https:\/\/blog.secdr.org\/?p=100","title":{"rendered":"S&P 2020 \u8bba\u6587\u5f55\u7528\u5217\u8868"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

IEEE Symposium on Security and Privacy(\u7b80\u79f0 S&P)\u662f\u4fe1\u606f\u5b89\u5168\u9886\u57df\u56db\u5927\u9876\u7ea7\u5b66\u672f\u4f1a\u8bae\u4e4b\u4e00\uff0c\u59cb\u4e8e1980\u5e74\uff0c\u4eca\u5e74\u662f\u7b2c41\u5c4a\u3002S&P 2020\u5171\u5f55\u53d6104\u7bc7\u8bba\u6587\uff08\u63a5\u6536\u6570\u91cf\u5b98\u65b9\u6682\u672a\u516c\u5e03\uff09\uff1b2019\u5e74\u5171\u63a5\u6536679\u7bc7\u8bba\u6587\uff0c\u5f55\u53d684\u7bc7\uff0c\u63a5\u6536\u738712.37%\uff1b2018\u5e74\u5171\u63a5\u6536549\u7bc7\u8bba\u6587\uff0c\u5f55\u53d663\u7bc7\uff0c\u63a5\u53d7\u738711.47%\u3002\u5b98\u7f51\u516c\u5e03\u7684Best Paper Award\u3001Best Practical Paper Award\u3001Best Student Paper Award \u83b7\u5956\u8bba\u6587\uff0c\u5c0f\u7f16\u4e5f\u6807\u8bb0\u51fa\u6765\u4e86\u4f9b\u5927\u5bb6\u67e5\u9605\u3002
<\/p>\n\n\n\n

S&P 2020\u7684\u8bba\u6587\u5f55\u7528\u5217\u8868<\/strong>
<\/p>\n\n\n\n

A Programming Framework for Differential Privacy with Accuracy Concentration Bounds<\/strong><\/p>\n\n\n\n

Elisabet Lobo-Vesga (Chalmers University of Technology), Alejandro Russo (Chalmers University of Technology), Marco Gaboardi (Boston University)
<\/p>\n\n\n\n

A Security Analysis of the Facebook Ad Library<\/strong><\/p>\n\n\n\n

Laura Edelson (New York University), Tobias Lauinger (New York University), Damon McCoy (New York University)
<\/p>\n\n\n\n

A Stealthier Partitioning Attack against Bitcoin Peer-to-Peer Network<\/strong><\/p>\n\n\n\n

Muoi Tran (National University of Singapore), Inho Choi (National University of Singapore), Gi Jun Moon (Korea University), Anh Vu (Japan Advanced Institute of Science and Technology), Min Suk Kang (National University of Singapore)
<\/p>\n\n\n\n

A Tale of Sea and Sky: On the Security of Maritime VSAT Communications<\/strong><\/p>\n\n\n\n

James Pavur (Oxford University), Daniel Moser (armasuisse), Martin Strohmeier (armasuisse), Vincent Lenders (armasuisse), Ivan Martinovic (Oxford University)
<\/p>\n\n\n\n

AdGraph: A Graph-Based Approach to Ad and Tracker Blocking<\/strong><\/p>\n\n\n\n

Umar Iqbal (University of Iowa \/ Brave Software), Peter Snyder (Brave Software), Shitong Zhu (UC Riverside), Benjamin Livshits (Brave Software \/ Imperial College London), Zhiyun Qian (UC Riverside), Zubair Shafiq (University of Iowa)
<\/p>\n\n\n\n

An Analysis of Pre-installed Android Software<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Best Practical Paper Award (Sponsored by <\/strong>)<\/strong><\/p>\n\n\n\n

Julien Gamba (IMDEA Networks Institute, Universidad Carlos III de Madrid), Mohammed Rashed (Universidad Carlos III de Madrid), Abbas Razaghpanah (Stony Brook University), Juan Tapiador (Universidad Carlos III de Madrid), Narseo Vallina-Rodriguez (IMDEA Networks Institute, ICSI)
<\/p>\n\n\n\n

Are Anonymity-Seekers Just Like Everybody Else? An Analysis of Contributions to Wikipedia from Tor<\/strong><\/p>\n\n\n\n

Chau Tran (New York University), Kaylea Champion (University of Washington), Andrea Forte (Drexel University), Benjamin Mako Hill (University of Washington), Rachel Greenstadt (New York University)
<\/p>\n\n\n\n

Are We Susceptible to Rowhammer? An End-to-End Methodology for Cloud Providers<\/strong><\/p>\n\n\n\n

Lucian Cojocar (Microsoft Research), Jeremie Kim (ETH Zurich, CMU), Minesh Patel (ETH Zurich), Lillian Tsai (MIT), Stefan Saroiu (Microsoft Research), Alec Wolman (Microsoft Research), Onur Mutlu (ETH Zurich, CMU)
<\/p>\n\n\n\n

Ask the Experts: What Should Be on an IoT Privacy and Security Label?<\/strong><\/p>\n\n\n\n

Pardis Emami-Naeini (Carnegie Mellon University), Yuvraj Agarwal (Carnegie Mellon University), Lorrie Faith Cranor (Carnegie Mellon University), Hanan Hibshi (Carnegie Mellon University)
<\/p>\n\n\n\n

Automatic Uncovering of Hidden Behaviors from Input Validation in Mobile Apps<\/strong><\/p>\n\n\n\n

Quingchuan Zhao (The Ohio State University), Chaoshun Zuo (The Ohio State University), Brendan Dolan-Gavitt (New York University), Giancarlo Pellegrino (CISPA Helmholtz Center for Information Security, Germany), Zhiqiang Lin (The Ohio State University)
<\/p>\n\n\n\n

Automatically Detecting Bystanders in Photos to Reduce Privacy Risks<\/strong><\/p>\n\n\n\n

Rakibul Hasan (Indiana University), David Crandall (Indiana University), Mario Fritz (CISPA Helmholtz Center for Information Security, Germany), Apu Kapadia (Indiana University)
<\/p>\n\n\n\n

BIAS: Bluetooth Impersonation AttackS<\/strong><\/p>\n\n\n\n

Daniele Antonioli (\u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne (EPFL)), Nils Ole Tippenhauer (CISPA Helmholtz Center for Information Security, Germany), Kasper Rasmussen (University of Oxford)
<\/p>\n\n\n\n

Binsec\/Rel: Efficient Relational Symbolic Execution for Constant-Time at Binary-Level<\/strong><\/p>\n\n\n\n

Lesly-Ann Daniel (CEA, List, Universit\u00e9 Paris-Sacley), S\u00e9bastien Bardin (CEA, List, Universit\u00e9 Paris-Sacley), Tamara Rezk (INRIA Sophia-Antipolis, INDES Project, France)
<\/p>\n\n\n\n

Breaking and (Partially) Fixing Provably Secure Onion Routing<\/strong><\/p>\n\n\n\n

Christiane Kuhn (KIT Karlsruhe), Martin Beck (TU Dresden), Thorsten Strufe (Karlsruhe Institute of Technology (KIT) and Centre of Tactile Internet (TU Dresden))
<\/p>\n\n\n\n

Browsing Unicity: On the Limits of Anonymizing Web Tracking Data<\/strong><\/p>\n\n\n\n

Clemens Deu\u00dfer (TU Dresden), Steffen Passmann (INFOnline GMbH), Thorsten Strufe (Karlsruhe Institute of Technology (KIT) and Centre of Tactile Internet (TU Dresden))
<\/p>\n\n\n\n

Burglars’ IoT Paradise: Understanding and Mitigating Security Risks of General Messaging Protocols on IoT Clouds<\/strong><\/p>\n\n\n\n

Yan Jia (Xidian University \/ University of Chinese Academy of Sciences \/ Indana University at Bloomington), Luyi Xing (Indiana University at Bloomington), Yuhang Mao (Xidian University \/ University of Chinese Academy of Sciences), Dongfang Zhao (Indiana University at Bloomington), XiaoFeng Wang (Indiana University at Bloomington), Shangru Zhao (Xidian University \/ University of Chinese Academy of Sciences), Yuqing Zhang (Xidian University \/ University of Chinese Academy of Sciences)
<\/p>\n\n\n\n

C3APSULe: Cross-FPGA Covert-Channel Attacks through Power Supply Unit Leakage<\/strong><\/p>\n\n\n\n

Ilias Giechaskiel (University of Oxford), Kasper Bonne Rasmussen (University of Oxford), Jakub Szefer (Yale University)
<\/p>\n\n\n\n

Can Voters Detect Malicious Manipulation of Ballot Marking Devices?<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Best Student Paper Award (Sponsored by <\/strong> )<\/strong><\/p>\n\n\n\n

Matthew Bernhard (University of Michigan), Allison McDonald (University of Michigan), Henry Meng (University of Michigan), Jensen Hwa (University of Michigan), Nakul Bajaj (The Harker School), Kevin Chang (University of Michigan), J. Alex Halderman (University of Michigan)
<\/p>\n\n\n\n

Combating Dependence Explosion in Forensic Analysis Using Alternative Tag Propagation Semantics<\/strong><\/p>\n\n\n\n

Md Nahid Hossain (Stony Brook University), Sanaz Sheikhi (Stony Brook University), R. Sekar (Stony Brook University)
<\/p>\n\n\n\n

Cornucopia: Temporal Safety for CHERI Heaps<\/strong><\/p>\n\n\n\n

Nathaniel Wesley Filardo (University of Cambridge), Brett F. Gutstein (University of Cambridge), Jonathan Woodruff (University of Cambridge), Sam Ainsworth (University of Cambridge), Lucian Paul-Trifu (University of Cambridge), Brooks Davis (SRI International), Hongyan Xia (University of Cambridge), Edward Tomasz Napierala (University of Cambridge), Alexander Richardson (University of Cambridge), John Baldwin (Ararat River Consulting), David Chisnall (Microsoft Research \/ University of Cambridge), Jessica Clarke (University of Cambridge), Khilan Gudka (University of Cambridge), Alexandre Joannou (University of Cambridge), A. Theodore Markettos (University of Cambridge), Alfredo Mazzinghi (University of Cambridge), Robert Norton (University of Cambridge), Michael Roe (University of Cambridge), Peter Sewell (University of Cambridge), Stacey Son (University of Cambridge), Timothy M. Jones (University of Cambridge), Simon Moore (University of Cambridge), Peter G. Neumann (SRI International), Robert N. M. Watson (University of Cambridge)
<\/p>\n\n\n\n

CrypTFlow : Secure TensorFlow Inference<\/strong><\/p>\n\n\n\n

Nishant Kumar (Microsoft Research, India), Mayank Rathee (Microsoft Research, India), Nishanth Chandran (Microsoft Research, India), Divya Gupta (Microsoft Research, India), Aseem Rastogi (Microsoft Research, India), Rahul Sharma (Microsoft Research, India)
<\/p>\n\n\n\n

Detection of Electromagnetic Interference Attacks on Sensor Systems<\/strong><\/p>\n\n\n\n

Youqian Zhang (University of Oxford), Kasper Rasmussen (University of Oxford)
<\/p>\n\n\n\n

Do Cookie Banners Respect My Choice? Measuring Legal Compliance of Banners from IAB Europe’s Transparancy and Consent Framework<\/strong><\/p>\n\n\n\n

C\u00e9lestin Matte (Inria, France), Nataliia Bielova (Inria, France), Cristiana Santos (Inria, France)
<\/p>\n\n\n\n

Dragonblood: Analyzing the Dragonfly Handshake of WPA3 and EAP-pwd<\/strong><\/p>\n\n\n\n

Mathy Vanhoef (New York University Abu Dhabi), Eyal Ronen (Tel Aviv University \/ KU Leuven)
<\/p>\n\n\n\n

Efficient and Secure Multiparty Computation from Fixed-Key Block Ciphers<\/strong><\/p>\n\n\n\n

Chun Guo (Universit\u00e9 catholique de Louvain), Jonathan Katz (University of Maryland), Xiao Wang (Northwestern University), Yu Yu (Shanghai Jiao Tong University)
<\/p>\n\n\n\n

Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment<\/strong><\/p>\n\n\n\n

Jianping Zhu (University of Chinese Academy of Sciences), Rui Hou (University of Chinese Academy of Sciences), XiaoFeng Wang (Indiana University at Bloomington), Wenhao Wang (University of Chinese Academy of Sciences), Jianfeng Cao (University of Chinese Academy of Sciences), Boyan Zhao (University of Chinese Academy of Sciences), Zhongpu Wang (University of Chinese Academy of Sciences), Yuhui Zhang (University of Chinese Academy of Sciences), Jiameng Ying (University of Chinese Academy of Sciences), Lixin Zhang (Institute of Computing Technology, CAS), Dan Meng (University of Chinese Academy of Sciences)
<\/p>\n\n\n\n

Even Black Cats Cannot Stay Hidden in the Dark: Full-band De-anonymization of Bluetooth Classic Devices<\/strong><\/p>\n\n\n\n

Marco Cominelli (CNIT \/ University of Brescia), Francesco Gringoli (CNIT \/ University of Brescia), Margus Lind (Context Information Security, Scotland), Paul Patras (The University of Edinburgh), Guevara Noubir (Northeastern University)
<\/p>\n\n\n\n

EverCrypt: A Fast, Verified, Cross-Platform Crytographic Provider<\/strong><\/p>\n\n\n\n

Jonathan Protzenko (Microsoft Research), Bryan Parno (Carnegie Melon University), Aymeric Fromherz (Carnegie Melon University), Chris Hawblitzel (Microsoft Research), Marina Polubelova (Inria, France), Karthikeyan Bhargavan (Inria, France), Benjamin Beurdouche (Inria, France), Joonwon Choi (MIT \/ Microsoft Research), Antione Delignat-Lavaud (Microsoft Research), C\u00e9dric Fournet (Microsoft Research), Natalia Kulatova (Inria, France), Tahina Ramananandro (Microsoft Research), Aseem Rastogi (Microsoft Research, India), Nikhil Swamy (Microsoft Research), Christoph Wintersteiger (Microsoft Research, UK), Santiago Zanella-Beguelin (Microsoft Research, UK)
<\/p>\n\n\n\n

Flash Boys 2.0: Frontrunning in Decentralized Exchanges, Miner Extractable Value, and Consensus Instability<\/strong><\/p>\n\n\n\n

Philip Daian (Cornell Tech), Steven Goldfeder (Cornell Tech), Tyler Kell (Cornell Tech), Yunqi Li (UIUC), Xueyuan Zhao (Carnegie Mellon University), Iddo Bentov (Cornell Tech), Lorenz Breidenbach (ETH Zurich), Ari Juels (Cornell Tech)
<\/p>\n\n\n\n

Flaw Label: Exploiting IPv6 Flow Label<\/strong><\/p>\n\n\n\n

Jonathan Berger (Bar-Ilan University), Amit Klein (Bar-Ilan University), Benny Pinkas (Bar-Ilan University)
<\/p>\n\n\n\n

FlyClient: Super-Light Clients for Cryptocurrencies<\/strong><\/p>\n\n\n\n

Benedikt B\u00fcnz (Stanford University), Lucianna Kiffer (Northeastern University), Loi Luu (Kyber Network), Mahdi Zamani (Visa Research)
<\/p>\n\n\n\n

Fuzzing JavaScript Engines with Aspect-preserving Mutation<\/strong><\/p>\n\n\n\n

Soyeon Park (Georgia Institute of Technology), Wen Xu (Georgia Institute of Technology), Insu Yun (Georgia Institute of Technology), Daehee Jang (Georgia Institute of Technology), Taesoo Kim (Georgia Institute of Technology)
<\/p>\n\n\n\n

Gesture Authentication for Smartphones: Evaluation of Gesture Password Selection Policies<\/strong><\/p>\n\n\n\n

Laura Edelson (New York University), Tobias Lauinger (New York University), Damon McCoy (New York University)
<\/p>\n\n\n\n

A Security Analysis of the Facebook Ad Library<\/strong><\/p>\n\n\n\n

Eunyong Cheon (UNIST, Republic of Korea), Yonghwan Shin (UNIST, Republic of Korea), Jun Ho Huh (Samsung Research, Republic of Korea), Hyoungshick Kim (Sungkyunkwan University, Republic of Korea), Ian Oakley (UNIST, Republic of Korea)
<\/p>\n\n\n\n

High Precision Open-World Website Fingerprinting<\/strong><\/p>\n\n\n\n

Tao Wang (Hong Kong University of Science and Technology)
<\/p>\n\n\n\n

HopSkipJumpAttack: A Query-Efficient Decision-Based Attack<\/strong><\/p>\n\n\n\n

Jianbo Chen (University of California, Berkeley), Michael I. Jordan (University of California, Berkeley), Martin J. Wainwright (University of California, Berkeley \/ Voleon Group)
<\/p>\n\n\n\n

How Not to Prove Your Election Outcome<\/strong><\/p>\n\n\n\n

Thomas Haines (Norweigian University of Science and Technology), Sarah Jamie Lewis (Open Privacy Research Society), Olivier Pereira (UCLouvian ICTEAM), Vanessa Teague (The University of Melbourne)
<\/p>\n\n\n\n

Humpty Dumpty: Controlling Word Meanings via Corpus Poisoning<\/strong><\/p>\n\n\n\n

Roei Schuster (Tel Aviv University), Tal Schuster (CSAIL \/ MIT), Yoav Meri (Cornell Tech), Vitaly Shmatikov (Cornell Tech)
<\/p>\n\n\n\n

HydRand: Efficient Continuous Distributed Randomness<\/strong><\/p>\n\n\n\n

Philipp Schindler (SBA Research), Aljosha Judmayer (SBA Research), Nicholas Stifter (SBA Research \/ TU Wien), Edgar Weippl (SBA Research \/ TU Wien)
<\/p>\n\n\n\n

ICAS: An Extensible Framework for Estimating the Susceptibility of IC Layouts to Additive Trojans<\/strong><\/p>\n\n\n\n

Timothy Trippel (University of Michigan), Kang Shin (University of Michigan), Kevin Bush (MIT Lincoln Laboratory), Matthew Hicks (Virginia Tech)
<\/p>\n\n\n\n

ICLab: A Global, Longitudinal Internet Censorship Measurement Platform<\/strong><\/p>\n\n\n\n

Arian Akhavan Niaki (University of Massachusetts, Amherst), Shinyoung Cho (University of Massachusetts, Amherst \/ Stony Brook University), Zachary Weinberg (Carnegie Mellon University), Nguyen Phong Hoang (Stony Brook University), Abbas Razaghpanah (Stony Brook University), Nicholas Christin (Carnegie Mellon University), Phillipa Gill (Stony Brook University)
<\/p>\n\n\n\n

IJON: Exploring Deep State Spaces via Fuzzing<\/strong><\/p>\n\n\n\n

Cornelius Aschermann (Ruhr University Bochum), Sergej Schumilo (Ruhr University Bochum), Ali Abbasi (Ruhr University Bochum), Thorsten Holz (Ruhr University Bochum)
<\/p>\n\n\n\n

Influencing Photo Sharing Decisions on Social Media: A Case of Paradoxical Findings<\/strong><\/p>\n\n\n\n

Mary Jean Amon (University of Colorado Boulder), Rakibul Hasan (Indiana University), Kurt Hugenberg (Indiana University), Bennett Bertenthal (Indiana University), Apu Kapadia (Indiana University)
<\/p>\n\n\n\n

Intriguing Properties of Adversarial ML Attacks in the Problem Space<\/strong><\/p>\n\n\n\n

Fabio Pierazzi (King’s College London), Feargus Pendlebury (King’s College London & Royal Holloway, University of London & The Alan Turing Institute), Jacopo Cortellazzi (King’s College London), Lorenzo Cavallaro (King’s College London)
<\/p>\n\n\n\n

Is FIDO2 the Kingslayer of User Authentication? A Comparative Usability Study of FIDO2 Passwordless Authentication<\/strong><\/p>\n\n\n\n

Sanam Ghorbani Lyastani (CISPA Helmholtz Center for Information Security, Germany), Michael Schilling (CISPA Helmholtz Center for Information Security, Germany), Michaela Neumayr (CISPA Helmholtz Center for Information Security, Germany), Michael Backes (CISPA Helmholtz Center for Information Security, Germany), Sven Bugiel (CISPA Helmholtz Center for Information Security, Germany)
<\/p>\n\n\n\n

JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation<\/strong><\/p>\n\n\n\n

Tegan Brennan (University of California, Santa Barbara), Nicol\u00e1s Rosner (University of California, Santa Barbara), Tevfik Bultan (University of California, Santa Barbara)
<\/p>\n\n\n\n

KARONTE: Detecting Insecure Multi-binary Interactions in Embedded Firmware<\/strong><\/p>\n\n\n\n

Nilo Redini (University of California, Santa Barbara), Aravind Machiry (University of California, Santa Barbara), Ruoyu Wang (Arizona State University), Chad Spensky (University of California, Santa Barbara), Andrea Continella (University of California, Santa Barbara), Yan Shoshitaishvili (Arizona State University), Christopher Kruegel (University of California, Santa Barbara), Giovanni Vigna (University of California, Santa Barbara)
<\/p>\n\n\n\n

Kobold: Evaluating Decentralized Access Control for Remote NSXPC Methods on iOS<\/strong><\/p>\n\n\n\n

Luke Deshotels (North Carolina State University \/ Samsung Research America), Costin Caraba\u0219 (University POLITEHNICA of Bucharest), Jordan Beichler (North Carolina State University), R\u0103zvan Deaconescu (University POLITEHNICA of Bucharest), William Enck (North Carolina State University)
<\/p>\n\n\n\n

Krace: Data Race Fuzzing for Kernel File Systems<\/strong><\/p>\n\n\n\n

Meng Xu (Georgia Institute of Technology), Sanidhya Kashyap (Georgia Institute of Technology), Hanqing Zhao (Georgia Institute of Technology), Taesoo Kim (Georgia Institute of Technology)
<\/p>\n\n\n\n

LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection<\/strong><\/p>\n\n\n\n

Jo Van Bulck (imec-DistriNet, KU Leuven), Daniel Moghimi (Worchester Polytechnic Institute), Michael Schwarz (Graz University of Technology), Moritz Lipp (Graz University of Technology), Marina Minkin (University of Michigan), Daniel Genkin (University of Michigan), Yuval Yarom (University of Adalaide and Data61), Berk Sunar (Worchester Polytechnic Institute), Daniel Gruss (Graz University of Technology), Frank Piessens (imec-DistriNet, KU Leuven)
<\/p>\n\n\n\n

Leveraging EM Side-Channel Information to Detect Rowhammer Attacks<\/strong><\/p>\n\n\n\n

Zhenkai Zhang (Texas Tech University), Zihao Zhan (Vanderbilt University), Daniel Balasubramanian (Vanderbilt University), Bo Li (Univeristy of Illinios at Urbana-Champaign), Peter Volgyesi (Vanderbilt University), Xenofon Koutsoukos (Vanderbilt University)
<\/p>\n\n\n\n

MarkUs: Drop-in use-after-free prevention for low-level languages<\/strong><\/p>\n\n\n\n

Sam Ainsworth (University of Cambridge), Timothy Jones (University of Cambridge)
<\/p>\n\n\n\n

Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers<\/strong><\/p>\n\n\n\n

Brian Kondracki (Stony Brook University), Assel Aliyeva (Boston University), Manuel Egele (Boston University), Jason Polakis (University of Illinios at Chicago), Nick Nikiforakis (Stony Brook University)
<\/p>\n\n\n\n

Message Time of Arrival Codes: A Fundamental Primitive for Secure Distance Measurement<\/strong><\/p>\n\n\n\n

Patrick Leu (ETH Zurich), Mridula Singh (ETH Zurich), Marc Roeschlin (ETH Zurich), Kenneth Paterson (ETH Zurich), Srdjan Capkun (ETH Zurich)
<\/p>\n\n\n\n

NetCAT: Practical Cache Attacks for the Network<\/strong><\/p>\n\n\n\n

Michael Kurth (Vrije Universiteit Amsterdam, The Netherlands; ETH Zurich, Switzerland), Ben Gras (Vrije Universiteit Amsterdam, The Netherlands), Dennis Andriesse (Vrije Universiteit Amsterdam, The Netherlands), Cristiano Giuffrida (Vrije Universiteit Amsterdam, The Netherlands), Herbert Bos (Vrije Universiteit Amsterdam, The Netherlands), Kaveh Razavi (Vrije Universiteit Amsterdam, The Netherlands)
<\/p>\n\n\n\n

Neutaint: Efficient Dynamic Taint Analysis with Neural Networks<\/strong><\/p>\n\n\n\n

Dongdong She (Columbia University), Yizheng Chen (Columbia University), Abhishek Shah (Columbia University), Baishakhi Ray (Columbia University), Suman Jana (Columbia University)
<\/p>\n\n\n\n

OAT: Attesting Operation Integrity of Embedded Devices<\/strong><\/p>\n\n\n\n

Zhichuang Sun (Northeastern University), Bo Feng (Northeastern University), Long Lu (Northeastern University), Somesh Jha (University of Wisconsin-Madison)
<\/p>\n\n\n\n

OHIE: Blockchain Scaling Made Simple<\/strong><\/p>\n\n\n\n

Haifeng Yu (National University of Singapore), Ivica Nikolic (National University of Singapore), Ruomu Hou (National University of Singapore), Prateek Saxena (National University of Singapore)
<\/p>\n\n\n\n

PMP: Cost-effective Forced Execution with Probabilistic Memory Pre-planning<\/strong><\/p>\n\n\n\n

Wei You (Purdue University), Zhuo Zhang (Purdue University), Yonghwi Kwon (University of Virginia), Yousra Aafer (Purdue University), Fei Peng (Purdue University), Yu Shi (Purdue University), Carson Harmon (Purdue University), Xiangyu Zhang (Purdue University)
<\/p>\n\n\n\n

Pangolin:Incremental Hybrid Fuzzing with Polyhedral Path Abstraction<\/strong><\/p>\n\n\n\n

Heqing Huang (The Hong Kong University of Science and Technology), Peisen Yao (The Hong Kong University of Science and Technology), Rongxin Wu (Xiamen University), Qingkai Shi (The Hong Kong University of Science and Technology), Charles Zhang (The Hong Kong University of Science and Technology)
<\/p>\n\n\n\n

Path Oblivious Heap: Optimal and Practical Oblivious Priority Queue<\/strong><\/p>\n\n\n\n

Elaine Shi (Cornell University)
<\/p>\n\n\n\n

Plundervolt: Software-based Fault Injection Attacks against Intel SGX<\/strong><\/p>\n\n\n\n

Kit Murdock (University of Birmingham), David Oswald (University of Birmingham), Flavio Garcia (University of Birmingham), Jo Van Bulck (imec-DistriNet, KU Leuven), Daniel Gruss (Graz University of Technology), Frank Piessens (imec-DistriNet, KU Leuven)
<\/p>\n\n\n\n

Privacy Risks of General-Purpose Language Models<\/strong><\/p>\n\n\n\n

Xudong Pan (Fudan University), Mi Zhang (Fudan University), Shouling Ji (Zhejiiang University \/ Alibaba-Zhejiang University Joint Research Institute of Frontier Technologies), Min Yang (Fudan University)
<\/p>\n\n\n\n

Private Resource Allocators and Their Applications<\/strong><\/p>\n\n\n\n

Sebastian Angel (University of Pennsylvania), Sampath Kannan (University of Pennsylvania), Zachary Ratliff (Raytheon BBN Technologies)
<\/p>\n\n\n\n

Pseudorandom Black Swans: Cache Attacks on CTR_DRBG<\/strong><\/p>\n\n\n\n

Shaanan Cohney (University of Pennsylvania), Andrew Kwong (University of Michigan), Sharar Paz (Tel Aviv University), Daniel Genkin (University of Michigan), Nadia Heninger (University of California, San Diego), Eyal Ronen (Tel Eviv University \/ COSIC), Yuval Yarom (University of Adalaide \/ Data61)
<\/p>\n\n\n\n

RAMBleed: Reading Bits in Memory Without Accessing Them<\/strong><\/p>\n\n\n\n

Andrew Kwong (University of Michigan), Daniel Genkin (University of Michigan), Daniel Gruss (Graz University of Technology), Yuval Yarom (University of Adalaide and Data61)
<\/p>\n\n\n\n

Replicated State Machines Without Replicated Execution<\/strong><\/p>\n\n\n\n

Jonathan Lee (Microsoft Research), Kirill Nikitin (EPFL), Srinath Setty (Microsoft Research)
<\/p>\n\n\n\n

RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization<\/strong><\/p>\n\n\n\n

Sushant Dinesh (Purdue University), Nathan Burow (Purdue University), Dongyan Xu (Purdue University), Mathias Payer (EPFL)
<\/p>\n\n\n\n

Rigorous Engineering for Hardware Security: Formal Modelling and Proof in the CHERI Design and Implementation Process<\/strong><\/p>\n\n\n\n

Kyndylan Nienhuis (University of Cambridge), Alexandre Joannou (University of Cambridge), Thomas Bauereiss (University of Cambridge), Anthony Fox (ARM Limited), Michael Roe (University of Cambridge), Brian Campbell (University of Edinburgh), Matthew Naylor (University of Cambridge), Robert Norton (University of Cambridge), Simon Moore (University of Cambridge), Peter Neumann (SRI International), Ian Stark (University of Edinburgh), Robert Watson (University of Cambridge), Peter Sewell (University of Cambridge)
<\/p>\n\n\n\n

SAVIOR: Towards Bug-Driven Hybrid Testing<\/strong><\/p>\n\n\n\n

Yaohui Chen (Northeastern University), Peng Li (Baidu USA), Jun Xu (Stevens Institute of Technology), Shengjian Guo (Baidu USA), Rundong Zhou (Baidu USA), Yulong Zhang (Baidu USA), Tao Wei (Baidu USA), Long Lu (Northeastern University)
<\/p>\n\n\n\n

SEIMI: Efficient and Secure SMAP-Enabled Intra-process Memory Isolation<\/strong><\/p>\n\n\n\n

Zhe Wang (Institute of Computing Technology, CAS, University of Chinese Academy of Sciences), Chenggang Wu (Institute of Computing Technology, CAS, University of Chinese Academy of Sciences), Mengyao Xie (Institute of Computing Technology, CAS, University of Chinese Academy of Sciences), Yinqian Zhang (The Ohio State University), Kangjie Lu (University of Minnesota), Xiaofeng Zhang (Institute of Computing Technology, CAS, University of Chinese Academy of Sciences), Yuanming Lai (Institute of Computing Technology, CAS, University of Chinese Academy of Sciences), Yang Kang (Institute of Computing Technology, CAS), Min Yang (Fudan University)
<\/p>\n\n\n\n

SEVurity: No Security Without Integrity – Breaking Integrity-Free Memory Encryption with Minimal Assumptions<\/strong><\/p>\n\n\n\n

Luca Wilke (University of L\u00fcbeck), Jan Wichelmann (University of L\u00fcbeck), Mathias Morbitzer (Fraunhofer AISEC), Thomas Eisenbarth (University of L\u00fcbeck)
<\/p>\n\n\n\n

SPECCFI: Mitigating Spectre Attacks Using CFI Imformed Speculation<\/strong><\/p>\n\n\n\n

Esmaeil Mohammadian Koruyeh (University of California, Riverside), Shirin Hajl Amin Shirazi (University of California, Riverside), Khaled Khasawneh (George Mason University), Chengyu Song (University of California, Riverside), Nael Abu-Ghazaleh (University of California, Riverside)
<\/p>\n\n\n\n

SPIDER: Enabling Fast Patch Propagation in Related Software Repositories<\/strong><\/p>\n\n\n\n

Aravind Machiry (University of California, Santa Barbara), Nilo Redini (University of California, Santa Barbara), Eric Camellini (Politecnico di Milano), Christopher Kruegel (University of California, Santa Barbara), Giovanni Vigna (University of California, Santa Barbara)
<\/p>\n\n\n\n

Security Update Labels: Establishing Economic Incentives for Security Patching of IoT Consumer Products<\/strong><\/p>\n\n\n\n

Philipp Morgner (Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)), Christoph Mai (Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)), Nicole Koschate-Fischer (Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)), Felix Freiling (Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)), Zinaida Benenson (Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU))
<\/p>\n\n\n\n

Semantic Understanding of Smart Contracts: Executable Operational Semantics of Solidity<\/strong><\/p>\n\n\n\n

Jiao Jiao (Nanyang Technological University), Shuanglong Kan (Nanyang Technological University), Shang-Wei Lin (Nanyang Technological University), David San\u00e1n (Nanyang Technological University), Yang Liu (Nanyang Technological University), Jun Sun (Singapore Management University)
<\/p>\n\n\n\n

SoK: A Minimalist Approach to Formalizing Analog Sensor Security<\/strong><\/p>\n\n\n\n

Chen Yan (Zhejiang University), Hocheol Shin (KAIST), Connor Bolton (University of Michigan), Wenyuan Xu (Zhejiang University), Yongdae Kim (KAIST), Kevin Fu (University of Michigan)
<\/p>\n\n\n\n

SoK: Cyber Insurance – Technical Challenges and a System Security Roadmap<\/strong><\/p>\n\n\n\n

Savino Dambra (Eurecom), Leyla Bilge (Symantec Research Labs), Davide Balzarotti (Eurecom)
<\/p>\n\n\n\n

SoK: Differential Privacy as a Causal Property<\/strong><\/p>\n\n\n\n

Michael Carl Tschantz (International Computer Science Institute), Shayak Sen (Carnegie Melon University), Anupam Datta (Carnegie Melon University)
<\/p>\n\n\n\n

SoK: Understanding the Prevailing Security Vulnerabilities in TrustZone-assisted TEE Systems<\/strong><\/p>\n\n\n\n

David Cerdeira (Universidade do Minho), Nuno Santos (INESC-ID \/ Instituto Superior T\u00e9cnico, Universidade de Lisboa), Pedro Fonseca (Purdue University), Sandro Pinto (Universidade do Minho)
<\/p>\n\n\n\n

Spectector: Principled Detection of Speculative Information Flows<\/strong><\/p>\n\n\n\n

Marco Guarnieri (IMDEA Software Institute), Boris K\u00f6pf (Microsoft Research), Jos\u00e9 Morales (IMDEA Software Institute), Jan Reineke (Saarland University), Andr\u00e9s S\u00e1nchez (IMDEA Software Institute)
<\/p>\n\n\n\n

Sync HotStuff: Simple and Practical Synchronous State Machine Replication<\/strong><\/p>\n\n\n\n

Ittai Abraham (Vmware Research), Dahlia Malkhi (Calibra), Kartik Nayak (Duke University), Ling Ren (University of Illinois at Urbana-Champaign), Maofan Yin (Cornell University)
<\/p>\n\n\n\n

TARDIS: Rolling Back The Clock On CMS-Targeting Cyber Attacks<\/strong><\/p>\n\n\n\n

Ranjita Pai Kasturi (Georgia Institute of Technology), Yiting Sun (Georgia Institute of Technology), Ruian Duan (Georgia Institute of Technology), Omar Alrawi (Georgia Institute of Technology), Ehsan Asdar (Georgia Institute of Technology), Victor Zhu (Georgia Institute of Technology), Yonghwi Kwon (University of Virginia), Brendan Saltaformaggio (Georgia Institute of Technology)
<\/p>\n\n\n\n

TRRespass: Exploiting the Many Sides of Target Row Refresh      <\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Best Paper Award (Sponsored by <\/strong>)<\/strong><\/p>\n\n\n\n

Pietro Frigo (Vrije Universiteit Amsterdam, The Netherlands), Emanuele Vannacci (Vrije Universiteit Amsterdam, The Netherlands), Hasan Hassan (ETH Z\u00fcrich), Victor van der Veen (Qualcomm Technologies, Inc.), Onur Mutlu (ETH Z\u00fcrich), Cristiano Giuffrida (Vrije Universiteit Amsterdam, The Netherlands), Herbert Bos (Vrije Universiteit Amsterdam, The Netherlands), Kaveh Razavi (Vrije Universiteit Amsterdam, The Netherlands)

<\/p>\n\n\n\n

Tactical Provenance Analysis for Endpoint Detection and Response Systems<\/strong><\/p>\n\n\n\n

Wajih Ul Hassan (University of Illinois at Urbana-Champaign), Adam Bates (University of Illinois at Urbana-Champaign), Daniel Marino (NortonLifeLock Research Group)
<\/p>\n\n\n\n

TextExerciser: Feedback-driven Text Input Exercising for Android Applications<\/strong><\/p>\n\n\n\n

Yuyu He (Fudan University), Lei Zhang (Fudan University), Zhemin Yang (Fudan University), Yinzhi Cao (Johns Hopkins University), Keke Lian (Fudan University), Shuai Li (Fudan University), Wei Yang (University of Texas at Dallas), Zhibo Zhang (Fudan University), Min Yang (Fudan University), Yuan Zhang (Fudan University), Haixin Duan (Fudan University)
<\/p>\n\n\n\n

The Last Mile: High-Assurance and High-Speed Cryptographic Implementations<\/strong><\/p>\n\n\n\n

Jos\u00e9 Bacelar Almeida (University of Minho \/ INESC TEC), Manuel Barbosa (University of Porto (FCUP) \/ INESC TEC), Gilles Barthe (MPI for Security and Privacy \/ IMDEA Software), Benjamin Gr\u00e9goire (Inria), Adrien Koutsos (LSV, CNRS, ENS Paris-Saclay), Vincent Laporte (Inria), Tiago Oliveira (University of Porto (FCUP) \/ INESC TEC), Pierre-Yves Strub (Ecole Polytechnique)
<\/p>\n\n\n\n

The Many Kinds of Creepware Used for Interpersonal Attacks<\/strong><\/p>\n\n\n\n

Kevin Roundy (NortonLifeLock Research Group), Paula Barmaimon Mendelberg (Cornell Tech), Nicola Dell (Cornell Tech), Damon McCoy (New York University), Daniel Nissani (Cornell Tech), Thomas Ristenpart (Cornell Tech), Acar Tamersoy (NortonLifeLock Research Group)
<\/p>\n\n\n\n

The State of the Uniform: Attacks on Encrypted Databases Beyond the Uniform Query Distribution<\/strong><\/p>\n\n\n\n

Evgenios Kornaropoulos (UC Berkeley), Charalampos Papamanthou (University of Maryland), Roberto Tamassia (Brown University)
<\/p>\n\n\n\n

The Value of Collaboration in Convex Machine Learning with Differential Privacy<\/strong><\/p>\n\n\n\n

Nan Wu (Macquarie University), Farhad Farokhi (CSIRO’s Data61 \/ The University of Melbourne), David Smith (CSIRO’s Data61 \/ Austrailian National University), Mohamed Ali Kaafar (CSIRO’s Data61 \/ Macquarie University)
<\/p>\n\n\n\n

This PIN Can Be Easily Guessed: Analyzing the Security of Smartphone Unlock PINs<\/strong><\/p>\n\n\n\n

Philipp Markert (Ruhr University Bochum), Daniel Bailey (Ruhr University Bochum), Maximilian Golla (Max Planck Institute for Security and Privacy), Markus D\u00fcrmuth (Ruhr University Bochum), Adam Aviv (The George Washington University)
<\/p>\n\n\n\n

Throwing Darts in the Dark? Detecting Bots with Limited Data using Neural Data Augmentation<\/strong><\/p>\n\n\n\n

Steve T.K. Jan (University of Illinios at Urbana-Champaign \/ Virginia Tech), Qingying Hao (University of Illinios at Urbana-Champaign), Tianrui Hu (Virginia Tech), Jiameng Pu (Virginia Tech), Sonal Oswal (Radware, Isreal), Gang Wang (University of Illinios at Urbana-Champaign), Bimal Viswanath (Virginia Tech)
<\/p>\n\n\n\n

Towards Effective Differential Privacy Communication for Users’ Data Sharing Decision and Comprehension<\/strong><\/p>\n\n\n\n

Aiping Xiong (Penn State University), Tianhao Wang (Purdue University), Ninghui Li (Purdue University), Somesh Jha (University of Wisconsin-Madison)
<\/p>\n\n\n\n

Towards Scalable Threshold Cryptosystems<\/strong><\/p>\n\n\n\n

Alin Tomescu (MIT CSAIL), Robert Chen (MIT PRIMES \/ Lexington High School), Yiming Zheng (MIT PRIMES \/ Lexington High School), Ittai Abraham (VMware Research), Benny Pinkas (VMware Research \/ Bar Ilan University), Guy Golan Gueta (VMware Research), Srinivas Devadas (MIT CSAIL)
<\/p>\n\n\n\n

Towards a Natural Perspective of Smart Homes for Practical Security and Safety Analyses<\/strong><\/p>\n\n\n\n

Sunil Manandhar (William & Mary), Kevin Moran (William & Mary), Kaushal Kafle (William & Mary), Ruhao Tang (William & Mary), Denys Poshyvanyk (William & Mary), Adwait Nadkarni (William & Mary)
<\/p>\n\n\n\n

Transparent Polynomial Delegation and Its Applications to Zero Knowledge Proof<\/strong><\/p>\n\n\n\n

Jiaheng Zhang (UC Berkeley), Tiancheng Xie (UC Berkeley), Yupeng Zhang (Texas A&M University), Dawn Song (UC Berkeley)
<\/p>\n\n\n\n

Transys: Leveraging Common Security Properties Across Hardware Designs<\/strong><\/p>\n\n\n\n

Rui Zhang (University of North Carolina at Chapel Hill), Cynthia Sturton (University of North Carolina at Chapel Hill)
<\/p>\n\n\n\n

Unexpected Data Dependency Creation and Chaining: A New Attack to SDN<\/strong><\/p>\n\n\n\n

Feng Xiao (The Pennsylvania State University), Jinquan Zhang (The Pennsylvania State University), Jianwei Huang (Texas A&M University), Guofei Gu (Texas A&M University), Dinghao Wu (The Pennsylvania State University), Peng Liu (The Pennsylvania State University)
<\/p>\n\n\n\n

VerX: Safety Verification of Smart Contracts<\/strong><\/p>\n\n\n\n

Anton Permenev (ChainSecurity), Dimitar Dimitrov (ETH Zurich), Petar Tsankov (ChainSecurity), Dana Drachsler-Cohen (ETH Zurich), Martin Vechev (ETH Zurich)
<\/p>\n\n\n\n

VeriSmart: A Highly Precise Safety Verifier for Ethereum Smart Contracts<\/strong><\/p>\n\n\n\n

Sunbeom So (Korea University), Myungho Lee (Korea University), Jisu Park (Korea University), Heejo Lee (Korea University), Hakjoo Oh (Korea University)
<\/p>\n\n\n\n

WaveSpy: Remote and Through-wall Screen Attack via mmWave Sensing<\/strong><\/p>\n\n\n\n

Zhengxiong Li (University of Buffalo, SUNY), Fenglong Ma (University of Buffalo, SUNY), Aditya Singh Rathore (University of Buffalo, SUNY), Zhuolin Yang (University of Buffalo, SUNY), Baicheng Chen (University of Buffalo, SUNY), Lu Su (University of Buffalo, SUNY), Wenyao Xu (University of Buffalo, SUNY)
<\/p>\n\n\n\n

ZEXE: Enabling Decentralized Private Computation<\/strong><\/p>\n\n\n\n

Sean Bowe (Zcash), Alessandro Chiesa (University of California, Berkeley), Matthew Green (Johns Hopkins University), Ian Miers (Cornell Tech), Pratyush Mishra (University of California, Berkeley), Howard Wu (University of California, Berkeley)
<\/p>\n\n\n\n

_ I Know Where You Parked Last Summer _ Automated Reverse Engineering and Privacy Analysis of Modern Cars<\/strong><\/p>\n\n\n\n

Daniel Frassinelli (CISPA Helmholtz Center for Information Security, Saarland Informatics Campus, Germany), Sohyeon Park (CISPA Helmholtz Center for Information Security, Saarland Informatics Campus, Germany), Stefan N\u00fcrnberger (CISPA Helmholtz Center for Information Security, Saarland Informatics Campus, Germany)
<\/p>\n\n\n\n

xMP: Selective Memory Protection for Kernel and User Space<\/strong><\/p>\n\n\n\n

Sergej Proskurin (Technical University of Munich), Marius Momeu (Technical University of Munich), Seyedhamed Ghavamnia (Stony Brook University), Vasileios Kemerlis (Brown University), Michalis Polychronakis (Stony Brook University)<\/p>\n\n\n\n

\u4f1a\u8bae\u4e3b\u9875\uff1a<\/strong><\/em><\/p>\n\n\n\n

https:\/\/www.ieee-security.org\/TC\/SP2020<\/a><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

\u62d3\u5c55\u9605\u8bfb<\/p>\n\n\n\n

S&P 2019 \u8bba\u6587\u5f55\u7528\u5217\u8868<\/a><\/p>\n\n\n\n

S&P 2018 \u8bba\u6587\u5f55\u7528\u5217\u8868<\/a><\/p>\n\n\n\n

\u5b89\u5168\u5b66\u672f\u5708\u62db\u52df\u961f\u53cb-ing<\/a>, \u6709\u5174\u8da3\u52a0\u5165\u5b66\u672f\u5708\u7684\u8bf7\u8054\u7cfbsecdr#qq.com<\/p>\n\n\n\n