research
∙
09/19/2023
Poster: Control-Flow Integrity in Low-end Embedded Devices
Embedded, smart, and IoT devices are increasingly popular in numerous ev...
share
research
∙
09/07/2023
Caveat (IoT) Emptor: Towards Transparency of IoT Device Presence (Full Version)
As many types of IoT devices worm their way into numerous settings and m...
research
∙
08/23/2023
PARseL: Towards a Verified Root-of-Trust over seL4
Widespread adoption and growing popularity of embedded/IoT/CPS devices m...
research
∙
07/22/2023
An Empirical Study Evaluation of Modern CAPTCHAs
For nearly two decades, CAPTCHAs have been widely used as a means of pro...
research
∙
10/05/2022
Thermal (and Hybrid Thermal/Audio) Side-Channel Attacks on Keyboard Input
To date, there has been no systematic investigation of thermal profiles ...
research
∙
09/02/2022
CASU: Compromise Avoidance via Secure Update for Low-end Embedded Systems
Guaranteeing runtime integrity of embedded system software is an open pr...
research
∙
05/05/2022
Privacy-from-Birth: Protecting Sensed Data from Malicious Sensors with VERSA
There are many well-known techniques to secure sensed data in IoT/CPS sy...
research
∙
05/04/2022
V'CER: Efficient Certificate Validation in Constrained Networks
We address the challenging problem of efficient trust establishment in c...
research
∙
09/26/2021
Vronicle: A System for Producing Videos with Verifiable Provenance
Demonstrating the veracity of videos is a longstanding problem that has ...
research
∙
05/14/2021
VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests
Recent data protection regulations (such as GDPR and CCPA) grant consume...
research
∙
03/24/2021
DIALED: Data Integrity Attestation for Low-end Embedded Devices
Verifying integrity of software execution in low-end micro-controller un...
research
∙
02/13/2021
GAROTA: Generalized Active Root-Of-Trust Architecture
In this paper, we set out to systematically design a minimal active RoT ...
research
∙
11/14/2020
Tiny-CFA: A Minimalistic Approach for Control-Flow Attestation Using Verified Proofs of Execution
The design of tiny trust anchors has received significant attention over...
research
∙
10/26/2020
On the Root of Trust Identification Problem
Root of Trust Identification (RTI) refers to determining whether a given...
research
∙
07/20/2020
CACTI: Captcha Avoidance via Client-side TEE Integration
Preventing abuse of web services by bots is an increasingly important pr...
research
∙
05/08/2020
On the TOCTOU Problem in Remote Attestation
We propose Remote Attestation with TOCTOU Avoidance (RATA): a provably s...
research
∙
09/25/2019
PDoT: Private DNS-over-TLS with TEE Support
Security and privacy of the Internet Domain Name System (DNS) have been ...
research
∙
08/07/2019
A Verified Architecture for Proofs of Execution on Remote Devices under Full Software Compromise
Modern society is increasingly surrounded by, and accustomed to, a wide ...
research
∙
03/30/2019
PILOT: Password and PIN Information Leakage from Obfuscated Typing Videos
This paper studies leakage of user passwords and PINs based on observati...
research
∙
11/01/2018
Formally Verified Hardware/Software Co-Design for Remote Attestation
In this work, we take the first step towards formal verification of RA b...
research
∙
07/13/2018
ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices
Secure firmware update is an important stage in the IoT device life-cycl...
research
∙
06/26/2018
Thermanator: Thermal Residue-Based Post Factum Attacks On Keyboard Password Entry
As a warm-blooded mammalian species, we humans routinely leave thermal r...
research
∙
04/11/2018