Portfolio item number 1
Short description of portfolio item number 1
Posts by Collection
portfolio
Portfolio item number 2
Short description of portfolio item number 2
publications
Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secrets
Published in USENIX Security, 2018
In this study, we discover a subtle yet serious timing side channel that exists in all generations of half-duplex IEEE 802.11 or Wi-Fi technology.
Download here
Shadowblock: A lightweight and stealthy adblocking browser
Published in The World Wide Web Conference, 2019
As the popularity of adblocking has soared over the last few years, publishers are increasingly deploying anti-adblocking paywalls that ask users to either disable their adblockers or pay to access content. In this work we propose ShadowBlock, a new Chromium-based adblocking browser that can hide traces of adblocking activities from anti-adblockers as it removes ads from web pages.
Download here
KOOBE: Towards Facilitating Exploit Generation of Kernel Out-Of-Bounds Write Vulnerabilities
Published in 29th USENIX Security Symposium , 2020
In this paper, we investigate another top memory vulnerability in Linux kernel—out-of-bounds (OOB) memory write from heap. We design KOOBE to assist the analysis of such vulnerabilities.
Download here
SyzScope: Revealing High-Risk Security Impacts of Fuzzer-Exposed Bugs in Linux kernel
Published in USENIX Security Symposium , 2021
In this paper, we develop SyzScope, a system that can automatically uncover new” high-risk” impacts given a bug with seemingly” low-risk” impacts.
Download here
SyzGen: Automated Generation of Syscall Specification of Closed-Source macOS Drivers
Published in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021
In this paper, we present SyzGen, a first attempt to automate the generation of syscall specifications for closed-source macOS drivers and facilitate interface-aware fuzzing.
Download here
Statically Discovering High-Order Taint Style Vulnerabilities in OS Kernels
Published in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021
we present SUTURE, a highly precise and scalable static analysis tool capable of discovering high-order vulnerabilities in OS kernels.
Download here
talks
Talk 1 on Relevant Topic in Your Field
Published:
This is a description of your talk, which is a markdown files that can be all markdown-ified like any other post. Yay markdown!
Conference Proceeding talk 3 on Relevant Topic in Your Field
Published:
This is a description of your conference proceedings talk, note the different field in type. You can put anything in this field.
teaching
Teaching experience 1
Undergraduate course, University 1, Department, 2014
This is a description of a teaching experience. You can use markdown like any other post.
Teaching experience 2
Workshop, University 1, Department, 2015
This is a description of a teaching experience. You can use markdown like any other post.