Zola 2026-08-12T00:00:00+00:00 https://fhofhammer.de/atom.xml 2026-08-12T00:00:00+00:00 2026-08-12T00:00:00+00:00 Florian Hofhammer Daniele Antonioli Mathias Payer https://fhofhammer.de/publications/privacyshield/ <h2 id="abstract"><a class="zola-anchor" href="#abstract" aria-label="Anchor link for: abstract"><i class="icon"></i></a> Abstract</h2> <p>Offline finding networks such as Apple’s Find My, Google’s Find My Device, or Samsung’s SmartThings Find are frequently abused to stalk unsuspecting victims. These networks allow users to attach small, cheap tags to items to locate them if they are lost. The tags announce their presence via Bluetooth Low Energy (BLE) beacons, and nearby Internetconnected devices such as smartphones report their location to the finding network. However, the low price and easy-tohide footprint of offline finding tags makes them appealing to malicious actors, who place tags on their unwitting victims. Nearby devices or even the victim’s own device then unknowingly report the victim’s location to the stalker.</p> <p>We analyze the anti-stalking measures put in place by offline finding networks with a focus on Apple’s Find My and Google’s Find My Device. We show how malicious actors can bypass those measures and propose PRIVACYSHIELD, a novel relay network protecting stalking victims. Our network takes advantage of the fact that offline finding BLE beacons are unauthenticated and can be relayed to arbitrary locations. Relayed beacons cause third-party devices to report incorrect locations to the finding network, obfuscating the victim’s location. We demonstrate PRIVACYSHIELD’s effectiveness in masking a tag’s location, and show the robustness of the system against attempts to thwart its usage. Then, we suggest practical recommendations for offline finding network providers to improve stalking protection.</p> <h2 id="links"><a class="zola-anchor" href="#links" aria-label="Anchor link for: links"><i class="icon"></i></a> Links</h2> <div class="tags"> <a href="2026-hofhammer-privacyshield.pdf">PDF</a> <a href="2026-hofhammer-privacyshield.bib">BibTeX</a> <a class="external" href="https://github.com/HexHive/privacyshield">Code</a> </div> <h2 id="bibtex"><a class="zola-anchor" href="#bibtex" aria-label="Anchor link for: bibtex"><i class="icon"></i></a> BibTeX</h2> <pre class="giallo" style="color: #CAD3F5; background-color: #24273A;"><code data-lang="bibtex"><span class="giallo-l"><span style="color: #C6A0F6;">@inproceedings</span><span style="color: #939AB7;">{</span><span style="color: #EED49F;font-style: italic;">hofhammer2026privacyshield</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> title</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>PrivacyShield</span><span style="color: #939AB7;">}}</span><span>: </span><span style="color: #939AB7;">{{</span><span>Relaying BLE Beacons</span><span style="color: #939AB7;">}}</span><span> to </span><span style="color: #939AB7;">{{</span><span>Counter Unsolicited Tracking</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> booktitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Proceedings of the 35th </span><span style="color: #939AB7;">{{</span><span>USENIX Security Symposium</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> author</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Hofhammer, Florian and Antonioli, Daniele and Payer, Mathias</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> date</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2026-08</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> publisher</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>USENIX Association</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> location</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Baltimore, MD, USA</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eventtitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>USENIX Security</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span></span> <span class="giallo-l"><span style="color: #939AB7;">}</span></span></code></pre> 2024-12-17T00:00:00+00:00 2024-12-17T00:00:00+00:00 Florian Hofhammer Qinying Wang Atri Bhattacharyya Majid Salehi Bruno Crispo Manuel Egele Mathias Payer Marcel Busch https://fhofhammer.de/publications/embedfuzz/ <h2 id="abstract"><a class="zola-anchor" href="#abstract" aria-label="Anchor link for: abstract"><i class="icon"></i></a> Abstract</h2> <p>Dynamic analysis and especially fuzzing are challenging tasks for embedded firmware running on modern low-end Microcontroller Units (MCUs) due to performance overheads from instruction emulation, the difficulty of emulating the vast space of available peripherals, and low availability of open-source embedded firmware. Consequently, efficient security testing of MCU firmware has proved to be a resource- and engineering-heavy endeavor.</p> <p>EmbedFuzz introduces an efficient end-to-end fuzzing framework for MCU firmware. Our novel <em>firmware transplantation</em> technique converts binary MCU firmware to a functionally equivalent and fuzzing-enhanced version of the firmware which executes on a compatible high-end device at native performance. Besides the performance gains, our system enables advanced introspection capabilities based on tooling for typical Linux user space processes, thus simplifying analysis of crashes and bug triaging. In our evaluation against state-of-the-art MCU fuzzers, EmbedFuzz exhibits up to eight-fold fuzzing throughput while consuming at most a fourth of the energy thanks to its native execution.</p> <h2 id="links"><a class="zola-anchor" href="#links" aria-label="Anchor link for: links"><i class="icon"></i></a> Links</h2> <div class="tags"> <a href="2024-hofhammer-embedfuzz.pdf">Paper</a> <a href="2024-hofhammer-embedfuzz.bib">BibTeX</a> <a class="external" href="https://doi.org/10.48550/arXiv.2412.12746">DOI</a> <a class="external" href="https://github.com/HexHive/SURGEON">Code</a> </div> <h2 id="bibtex"><a class="zola-anchor" href="#bibtex" aria-label="Anchor link for: bibtex"><i class="icon"></i></a> BibTeX</h2> <pre class="giallo" style="color: #CAD3F5; background-color: #24273A;"><code data-lang="bibtex"><span class="giallo-l"><span style="color: #C6A0F6;">@unpublished</span><span style="color: #939AB7;">{</span><span style="color: #EED49F;font-style: italic;">hofhammer2024embedfuzz</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> title</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>EmbedFuzz</span><span style="color: #939AB7;">}}</span><span>: </span><span style="color: #939AB7;">{{</span><span>High Speed Fuzzing Through Transplantation</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> shorttitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>EmbedFuzz</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> author</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Hofhammer, Florian and Wang, Qinying and Bhattacharyya, Atri and Salehi, Majid and Crispo, Bruno and Egele, Manuel and Payer, Mathias and Busch, Marcel</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> date</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2024-12-17</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eprint</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2412.12746</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eprinttype</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>arXiv</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eprintclass</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>cs</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> doi</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>10.48550/arXiv.2412.12746</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> url</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>http://arxiv.org/abs/2412.12746</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> urldate</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2024-12-18</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> keywords</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Computer Science - Cryptography and Security</span><span style="color: #A6DA95;">}</span></span> <span class="giallo-l"><span style="color: #939AB7;">}</span></span></code></pre> 2024-12-03T00:00:00+00:00 2024-12-03T00:00:00+00:00 Beatriz Borges Negar Foroutan Deniz Bayazit Anna Sotnikova Syrielle Montariol Tanya Nazaretzky Mohammadreza Banaei Alireza Sakhaeirad Philippe Servant Seyed Parsa Neshaei Jibril Frej Angelika Romanou Gail Weiss Sepideh Mamooler Zeming Chen Simin Fan Silin Gao Mete Ismayilzada Debjit Paul Philippe Schwaller Sacha Friedli Patrick Jermann Tanja Käser Antoine Bosselut EPFL Grader Consortium EPFL Data Consortium https://fhofhammer.de/publications/chatgpt/ <h2 id="abstract"><a class="zola-anchor" href="#abstract" aria-label="Anchor link for: abstract"><i class="icon"></i></a> Abstract</h2> <p>AI assistants, such as ChatGPT, are being increasingly used by students in higher education institutions. While these tools provide opportunities for improved teaching and education, they also pose significant challenges for assessment and learning outcomes. We conceptualize these challenges through the lens of vulnerability, the potential for university assessments and learning outcomes to be impacted by student use of generative AI. We investigate the potential scale of this vulnerability by measuring the degree to which AI assistants can complete assessment questions in standard university-level Science, Technology, Engineering, and Mathematics (STEM) courses. Specifically, we compile a dataset of textual assessment questions from 50 courses at the École polytechnique fédérale de Lausanne (EPFL) and evaluate whether two AI assistants, GPT-3.5 and GPT-4 can adequately answer these questions. We use eight prompting strategies to produce responses and find that GPT-4 answers an average of 65.8% of questions correctly, and can even produce the correct answer across at least one prompting strategy for 85.1% of questions. When grouping courses in our dataset by degree program, these systems already pass the nonproject assessments of large numbers of core courses in various degree programs, posing risks to higher education accreditation that will be amplified as these models improve. Our results call for revising program-level assessment design in higher education in light of advances in generative AI.</p> <h2 id="links"><a class="zola-anchor" href="#links" aria-label="Anchor link for: links"><i class="icon"></i></a> Links</h2> <div class="tags"> <a href="2024-borges-could-chatgpt.pdf">Paper</a> <a href="2024-borges-could-chatgpt.bib">BibTeX</a> <a class="external" href="https://doi.org/10.1073/pnas.2414955121">DOI</a> </div> <h2 id="bibtex"><a class="zola-anchor" href="#bibtex" aria-label="Anchor link for: bibtex"><i class="icon"></i></a> BibTeX</h2> <pre class="giallo" style="color: #CAD3F5; background-color: #24273A;"><code data-lang="bibtex"><span class="giallo-l"><span style="color: #C6A0F6;">@article</span><span style="color: #939AB7;">{</span><span style="color: #EED49F;font-style: italic;">borges2024could</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> title</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Could </span><span style="color: #939AB7;">{{</span><span>ChatGPT</span><span style="color: #939AB7;">}}</span><span> Get an Engineering Degree? </span><span style="color: #939AB7;">{{</span><span>Evaluating</span><span style="color: #939AB7;">}}</span><span> Higher Education Vulnerability to </span><span style="color: #939AB7;">{{</span><span>AI</span><span style="color: #939AB7;">}}</span><span> Assistants</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> shorttitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Could </span><span style="color: #939AB7;">{{</span><span>ChatGPT</span><span style="color: #939AB7;">}}</span><span> Get an Engineering Degree?</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> author</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Borges, Beatriz and Foroutan, Negar and Bayazit, Deniz and Sotnikova, Anna and Montariol, Syrielle and Nazaretzky, Tanya and Banaei, Mohammadreza and Sakhaeirad, Alireza and Servant, Philippe and Neshaei, Seyed Parsa and Frej, Jibril and Romanou, Angelika and Weiss, Gail and Mamooler, Sepideh and Chen, Zeming and Fan, Simin and Gao, Silin and Ismayilzada, Mete and Paul, Debjit and Schwaller, Philippe and Friedli, Sacha and Jermann, Patrick and K\&quot;aser, Tanja and Bosselut, Antoine and </span><span style="color: #939AB7;">{</span><span>EPFL Grader Consortium</span><span style="color: #939AB7;">}</span><span> and </span><span style="color: #939AB7;">{</span><span>EPFL Data Consortium</span><span style="color: #939AB7;">}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> date</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2024-12-03</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> journaltitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Proceedings of the National Academy of Sciences</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> shortjournal</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Proc. Natl. Acad. Sci. U.S.A.</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> volume</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>121</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> number</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>49</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> issn</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>0027-8424, 1091-6490</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> doi</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>10.1073/pnas.2414955121</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> url</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>https://pnas.org/doi/10.1073/pnas.2414955121</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> urldate</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2024-11-29</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> langid</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>english</span><span style="color: #A6DA95;">}</span></span> <span class="giallo-l"><span style="color: #939AB7;">}</span></span></code></pre> 2024-03-01T00:00:00+00:00 2024-03-01T00:00:00+00:00 Florian Hofhammer Marcel Busch Qinying Wang Manuel Egele Mathias Payer https://fhofhammer.de/publications/surgeon/ <h2 id="abstract"><a class="zola-anchor" href="#abstract" aria-label="Anchor link for: abstract"><i class="icon"></i></a> Abstract</h2> <p>Dynamic analysis of microcontroller-based embedded firmware remains challenging. The general lack of source code availability for Commercial-off-the-shelf (COTS) firmware prevents powerful source-based instrumentation and prohibits compiling the firmware into an executable directly runnable by an analyst. Analyzing firmware binaries requires either acquisition and configuration of custom hardware, or configuration of extensive software stacks built around emulators. In both cases, dynamic analysis is limited in functionality by complex debugging and instrumentation interfaces and in performance by low execution speeds on Microcontroller Units (MCUs) and Instruction Set Architecture (ISA) translation overheads in emulators.</p> <p>SURGEON provides a performant, flexible, and accurate rehosting approach for dynamic analysis of embedded firmware. We introduce <em>transplantation</em> to transform binary, embedded firmware into a Linux user space process executing natively on compatible high-performance systems through static binary rewriting. In addition to the achieved performance improvements, SURGEON scales horizontally through process instantiation and provides the flexibility to apply existing dynamic analysis tooling for user space processes without requiring adaptations to firmware-specific use cases. SURGEON’s key use cases include debugging binary firmware with off-the-shelf tooling for user space processes and fuzz testing.</p> <h2 id="links"><a class="zola-anchor" href="#links" aria-label="Anchor link for: links"><i class="icon"></i></a> Links</h2> <div class="tags"> <a href="2024-hofhammer-surgeon.pdf">Paper</a> <a href="2024-hofhammer-surgeon-presentation.pdf">Slides</a> <a href="2024-hofhammer-surgeon.bib">BibTeX</a> <a class="external" href="https://doi.org/10.14722/bar.2024.23011">DOI</a> <a class="external" href="https://github.com/HexHive/SURGEON">Code</a> </div> <h2 id="bibtex"><a class="zola-anchor" href="#bibtex" aria-label="Anchor link for: bibtex"><i class="icon"></i></a> BibTeX</h2> <pre class="giallo" style="color: #CAD3F5; background-color: #24273A;"><code data-lang="bibtex"><span class="giallo-l"><span style="color: #C6A0F6;">@inproceedings</span><span style="color: #939AB7;">{</span><span style="color: #EED49F;font-style: italic;">hofhammer2024surgeon</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> title</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>SURGEON</span><span style="color: #939AB7;">}}</span><span>: </span><span style="color: #939AB7;">{{</span><span>Performant</span><span style="color: #939AB7;">}}</span><span>, </span><span style="color: #939AB7;">{{</span><span>Flexible</span><span style="color: #939AB7;">}}</span><span>, and </span><span style="color: #939AB7;">{{</span><span>Accurate Re-Hosting</span><span style="color: #939AB7;">}}</span><span> via </span><span style="color: #939AB7;">{{</span><span>Transplantation</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> shorttitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>SURGEON</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> booktitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Proceedings of the 2024 </span><span style="color: #939AB7;">{{</span><span>Workshop</span><span style="color: #939AB7;">}}</span><span> on </span><span style="color: #939AB7;">{{</span><span>Binary Analysis Research</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> author</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Hofhammer, Florian and Busch, Marcel and Wang, Qinying and Egele, Manuel and Payer, Mathias</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> date</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2024-03</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> publisher</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Internet Society</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> location</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>San Diego, CA, USA</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> doi</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>10.14722/bar.2024.23011</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> url</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>https://www.ndss-symposium.org/wp-content/uploads/bar2024-11-paper.pdf</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> urldate</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2025-02-28</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eventtitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Workshop on </span><span style="color: #939AB7;">{{</span><span>Binary Analysis Research</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> isbn</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>979-8-9894372-0-7</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> langid</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>english</span><span style="color: #A6DA95;">}</span></span> <span class="giallo-l"><span style="color: #939AB7;">}</span></span></code></pre> 2023-05-22T00:00:00+00:00 2023-05-22T00:00:00+00:00 Atri Bhattacharyya Florian Hofhammer Yuanlong Li Siddharth Gupta Andrés Sanchez Babak Falsafi Mathias Payer https://fhofhammer.de/publications/securecells/ <h2 id="abstract"><a class="zola-anchor" href="#abstract" aria-label="Anchor link for: abstract"><i class="icon"></i></a> Abstract</h2> <p>Modern programs are monolithic, combining code of varied provenance without isolation, all the while running on network-connected devices. A vulnerability in any component may compromise code and data of all other components. Compartmentalization separates programs into fault domains with limited policy-defined permissions, following the Principle of Least Privilege, preventing arbitrary interactions between components. Unfortunately, existing compartmentalization mechanisms target weak attacker models, incur high overheads, or overfit to specific use cases, precluding their general adoption. The need of the hour is a secure, performant, and flexible mechanism on which developers can reliably implement an arsenal of compartmentalized software.</p> <p>We present SecureCells, a novel architecture for intra-address space compartmentalization. SecureCells enforces per-Virtual Memory Area (VMA) permissions for secure and scalable access control, and introduces new userspace instructions for secure and fast compartment switching with hardware-enforced call gates and zero-copy permission transfers. SecureCells enables novel software mechanisms for call stack maintenance and register context isolation. In microbenchmarks, SecureCells switches compartments in only 8 cycles on a 5-stage in-order processor, reducing cost by an order of magnitude compared to state-of-the-art. Consequently, SecureCells helps secure high-performance software such as an in-memory key-value store with negligible overhead of less than 3%.</p> <h2 id="links"><a class="zola-anchor" href="#links" aria-label="Anchor link for: links"><i class="icon"></i></a> Links</h2> <div class="tags"> <a href="2023-bhattacharyya-securecells.pdf">Paper</a> <a href="2023-bhattacharyya-securecells-presentation.pdf">Slides</a> <a href="2023-bhattacharyya-securecells.bib">BibTeX</a> <a class="external" href="https://doi.org/10.1109/SP46215.2023.10179472">DOI</a> <a class="external" href="https://github.com/HexHive?q=seccell&type=all&language=&sort=">Code</a> <a class="external" href="https://hexhive.epfl.ch/securecells/">Website</a> </div> <h2 id="bibtex"><a class="zola-anchor" href="#bibtex" aria-label="Anchor link for: bibtex"><i class="icon"></i></a> BibTeX</h2> <pre class="giallo" style="color: #CAD3F5; background-color: #24273A;"><code data-lang="bibtex"><span class="giallo-l"><span style="color: #C6A0F6;">@inproceedings</span><span style="color: #939AB7;">{</span><span style="color: #EED49F;font-style: italic;">bhattacharyya2023securecells</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> title</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>SecureCells</span><span style="color: #939AB7;">}}</span><span>: </span><span style="color: #939AB7;">{{</span><span>A Secure Compartmentalized Architecture</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> shorttitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{{</span><span>SecureCells</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> booktitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2023 </span><span style="color: #939AB7;">{{</span><span>IEEE Symposium</span><span style="color: #939AB7;">}}</span><span> on </span><span style="color: #939AB7;">{{</span><span>Security</span><span style="color: #939AB7;">}}</span><span> and </span><span style="color: #939AB7;">{{</span><span>Privacy</span><span style="color: #939AB7;">}}</span><span> (</span><span style="color: #939AB7;">{{</span><span>SP</span><span style="color: #939AB7;">}}</span><span>)</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> author</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Bhattacharyya, Atri and Hofhammer, Florian and Li, Yuanlong and Gupta, Siddharth and Sanchez, Andres and Falsafi, Babak and Payer, Mathias</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> date</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2023-05</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> pages</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2921--2939</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> publisher</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>IEEE</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> location</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>San Francisco, CA, USA</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> doi</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>10.1109/SP46215.2023.10179472</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> url</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>https://ieeexplore.ieee.org/document/10179472/</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> urldate</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2023-10-10</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eventtitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2023 </span><span style="color: #939AB7;">{{</span><span>IEEE Symposium</span><span style="color: #939AB7;">}}</span><span> on </span><span style="color: #939AB7;">{{</span><span>Security</span><span style="color: #939AB7;">}}</span><span> and </span><span style="color: #939AB7;">{{</span><span>Privacy</span><span style="color: #939AB7;">}}</span><span> (</span><span style="color: #939AB7;">{{</span><span>SP</span><span style="color: #939AB7;">}}</span><span>)</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> isbn</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>978-1-6654-9336-9</span><span style="color: #A6DA95;">}</span></span> <span class="giallo-l"><span style="color: #939AB7;">}</span></span></code></pre> 2020-02-25T00:00:00+00:00 2020-02-25T00:00:00+00:00 Christoph Etzel Florian Hofhammer Bernhard Bauer https://fhofhammer.de/publications/east-adl-metrics/ <h2 id="abstract"><a class="zola-anchor" href="#abstract" aria-label="Anchor link for: abstract"><i class="icon"></i></a> Abstract</h2> <p>Quality of system and software architectures plays a major role in today’s development to reduce the complexity of systems during design and ensure maintainability and extensibility. Metrics can provide system architects with information about the quality of the system architectures and support them to ensure the quality characteristics defined in ISO 25010.</p> <p>In this position paper, we look on selected metrics from code and object-oriented design analysis to use them for the evaluation of system architectures modeled with EAST-ADL. Therefore, the metrics (collections) <em>Lines of Code</em>, <em>Cyclomatic Complexity</em>, <em>Chidamber and Kemerer</em> and <em>MOOD</em> are examined for their application on EAST-ADL models.</p> <h2 id="links"><a class="zola-anchor" href="#links" aria-label="Anchor link for: links"><i class="icon"></i></a> Links</h2> <div class="tags"> <a href="2020-etzel-east-adl.pdf">Paper</a> <a href="2020-etzel-east-adl.bib">BibTeX</a> <a class="external" href="https://doi.org/10.5220/0009165704410448">DOI</a> </div> <h2 id="bibtex"><a class="zola-anchor" href="#bibtex" aria-label="Anchor link for: bibtex"><i class="icon"></i></a> BibTeX</h2> <pre class="giallo" style="color: #CAD3F5; background-color: #24273A;"><code data-lang="bibtex"><span class="giallo-l"><span style="color: #C6A0F6;">@inproceedings</span><span style="color: #939AB7;">{</span><span style="color: #EED49F;font-style: italic;">etzel2020metrics</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> title</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Towards </span><span style="color: #939AB7;">{{</span><span>Metrics</span><span style="color: #939AB7;">}}</span><span> for </span><span style="color: #939AB7;">{{</span><span>Analyzing System Architectures Modeled</span><span style="color: #939AB7;">}}</span><span> with </span><span style="color: #939AB7;">{{</span><span>EAST-ADL</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> shorttitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Towards </span><span style="color: #939AB7;">{{</span><span>Metrics</span><span style="color: #939AB7;">}}</span><span> for </span><span style="color: #939AB7;">{{</span><span>Analyzing System Architectures Modeled</span><span style="color: #939AB7;">}}</span><span> with </span><span style="color: #939AB7;">{{</span><span>EAST-ADL</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> booktitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Proceedings of the 8th </span><span style="color: #939AB7;">{{</span><span>International Conference</span><span style="color: #939AB7;">}}</span><span> on </span><span style="color: #939AB7;">{{</span><span>Model-Driven Engineering</span><span style="color: #939AB7;">}}</span><span> and </span><span style="color: #939AB7;">{{</span><span>Software Development</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> author</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Etzel, Christoph and Hofhammer, Florian and Bauer, Bernhard</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> date</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2020</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> pages</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>441--448</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> publisher</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span style="color: #939AB7;">{</span><span>SCITEPRESS - Science and Technology Publications</span><span style="color: #939AB7;">}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> location</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>Valletta, Malta</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> doi</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>10.5220/0009165704410448</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> url</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>http://www.scitepress.org/DigitalLibrary/Link.aspx?doi=10.5220/0009165704410448</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> urldate</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>2022-10-28</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> eventtitle</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>8th </span><span style="color: #939AB7;">{{</span><span>International Conference</span><span style="color: #939AB7;">}}</span><span> on </span><span style="color: #939AB7;">{{</span><span>Model-Driven Engineering</span><span style="color: #939AB7;">}}</span><span> and </span><span style="color: #939AB7;">{{</span><span>Software Development</span><span style="color: #939AB7;">}}</span><span style="color: #A6DA95;">}</span><span>,</span></span> <span class="giallo-l"><span style="color: #8AADF4;font-style: italic;"> isbn</span><span style="color: #8BD5CA;"> =</span><span style="color: #A6DA95;"> {</span><span>978-989-758-400-8</span><span style="color: #A6DA95;">}</span></span> <span class="giallo-l"><span style="color: #939AB7;">}</span></span></code></pre>