SP
2009
IEEE
13 years 11 months ago
2009
IEEE
We defeat two proposed Unix file-system race condition defense mechanisms. First, we attack the probabilistic defense mechanism of Tsafrir, et al., published at USENIX FAST 2008[...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
The Mifare Classic is the most widely used contactless smartcard on the market. The stream cipher CRYPTO1 used by the Classic has recently been reverse engineered and serious atta...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
– HTTPS is designed to provide secure web communications over insecure networks. The protocol itself has been rigorously designed and evaluated by assuming the network as an adve...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
This paper presents a novel technique for authenticating physical documents based on random, naturally occurring imperfections in paper texture. We introduce a new method for meas...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
Recommendation systems can be attacked in various ways, and the ultimate attack form is reached with a sybil attack, where the attacker creates a potentially unlimited number of s...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
We present a logic for reasoning about properties of secure systems. The logic is built around a concurrent programming language with constructs for modeling machines with shared ...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
Malware authors have recently begun using emulation technology to obfuscate their code. They convert native malware binaries into bytecode programs written in a randomly generated...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
This paper presents a variety of plaintext-recovering attacks against SSH. We implemented a proof of concept of our attacks against OpenSSH, where we can verifiably recover 14 bi...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
Providing online access to sensitive data makes web servers lucrative targets for attackers. A compromise of any of the web server’s scripts, applications, or operating system c...
SP
2009
IEEE
13 years 11 months ago
2009
IEEE
This paper describes the design, implementation and evaluation of Native Client, a sandbox for untrusted x86 native code. Native Client aims to give browser-based applications the...