Computer Security - ESORICS 2025, Kartoniert / Broschiert

Klappentext

.- QUIC-Fuzz: An Effective Greybox Fuzzer For The QUIC Protocol. .- Systematic Assessment of Cache Timing Vulnerabilities on RISC-V Processors. .- No Root, No Problem: Automating Linux Least Privilege and Securing Ansible Deployments. .- NICraft: Malicious NIC Firmware-based Cache Side-channel Attack. .- Identifying Potential Timing Leakages from Hardware Design with Precondition Synthesis. .- LibAFLstar: Fast and State-aware Protocol Fuzzing. .- PUSH for Security: A PUF-Based Protocol to Prevent Session Hijacking. .- Hardening HSM Clusters: Resolving Key Sync Vulnerabilities for Robust CU Isolation. .- AcouListener: An Inaudible Acoustic Side-channel Attack on AR/VR Systems. .- Verifying DRAM Addressing in Software. .- Epistemology of Rowhammer Attacks: Threats to Rowhammer Research Validity. .- Personalized Password Guessing via Modeling Multiple Leaked Credentials of the Same User. .- WelkIR: Flow-Sensitive Pre-trained Embeddings from Compiler IR for Vulnerability Detection. .- Edge Coverage Feedback of Embedded Systems Fuzzing Based on Debugging Interfaces. .- Cache Demote for Fast Eviction Set Construction and Page Table Attribute Leakage. .- WaitWatcher & WaitGuard: Detecting Flush-Based Cache Side-Channels through Spurious Wakeups. .- T-Time: A Fine-grained Timing-based Controlled-Channel Attack against Intel TDX. .- Unraveling DoH Traces: Padding-Resilient Website Fingerprinting via HTTP/2 Key Frame Sequences. .- NLSaber: Enhancing Netlink Family Fuzzing via Automated Syscall Description Generation. .- The Hidden Dangers of Public Serverless Repositories: An Empirical Security Assessment. .- CapMan: Detecting and Mitigating Linux Capability Abuses at Runtime to Secure Privileged Containers. .- Digital Twin for Adaptive Adversary Emulation in IIoT Control Networks. .- Formal Security Analysis of ss2DNS. .- High-Efficiency Fuzzing Technique Using Hooked I/O System Calls for Targeted Input Analysis. .- VeriFLo: Verifiable Provenance with Fault Localization for Inter-domain Routing. .- The Polymorphism Maze: Understanding Diversities and Similarities in Malware Families. .- End-to-End Non-Profiled Side-Channel Analysis on Long Raw Traces.