Published in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021
we present SUTURE, a highly precise and scalable static analysis tool capable of discovering high-order vulnerabilities in OS kernels.
Download here
Published in Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, 2021
In this paper, we present SyzGen, a first attempt to automate the generation of syscall specifications for closed-source macOS drivers and facilitate interface-aware fuzzing.
Download here
Published in USENIX Security Symposium , 2021
In this paper, we develop SyzScope, a system that can automatically uncover new” high-risk” impacts given a bug with seemingly” low-risk” impacts.
Download here
Published in 29th USENIX Security Symposium , 2020
In this paper, we investigate another top memory vulnerability in Linux kernel—out-of-bounds (OOB) memory write from heap. We design KOOBE to assist the analysis of such vulnerabilities.
Download here
Published in The World Wide Web Conference, 2019
As the popularity of adblocking has soared over the last few years, publishers are increasingly deploying anti-adblocking paywalls that ask users to either disable their adblockers or pay to access content. In this work we propose ShadowBlock, a new Chromium-based adblocking browser that can hide traces of adblocking activities from anti-adblockers as it removes ads from web pages.
Download here
Published in USENIX Security, 2018
In this study, we discover a subtle yet serious timing side channel that exists in all generations of half-duplex IEEE 802.11 or Wi-Fi technology.
Download here