Mathias Payer

According to our database, Mathias Payer authored at least 143 papers between 2007 and 2024.

Collaborative distances:

• Dijkstra number of three.
• Erdős number of three.

2024

DP-ACT: Decentralized Privacy-Preserving Asymmetric Digital Contact Tracing.

Azra Abtahi, Mathias Payer, Amir Aminifar

Proc. Priv. Enhancing Technol., January, 2024

Gradient: Gradual Compartmentalization via Object Capabilities Tracked in Types.

Aleksander Boruch-Gruszecki, Adrien Ghosn, Mathias Payer, Clément Pit-Claudel

Proc. ACM Program. Lang., 2024

Comprehensive Memory Safety Validation: An Alternative Approach to Memory Safety.

Kaiming Huang, Mathias Payer, Zhiyun Qian, Jack Sampson, Gang Tan, Trent Jaeger

IEEE Secur. Priv., 2024

Could ChatGPT get an Engineering Degree? Evaluating Higher Education Vulnerability to AI Assistants.

Beatriz Borges, Negar Foroutan, Deniz Bayazit, Anna Sotnikova, Syrielle Montariol, Tanya Nazaretzky, Mohammadreza Banaei, Alireza Sakhaeirad, Philippe Servant, Seyed Parsa Neshaei, Jibril Frej, Angelika Romanou, Gail Weiss, Sepideh Mamooler, Zeming Chen, Simin Fan, Silin Gao, Mete Ismayilzada, Debjit Paul, Alexandre Schöpfer, Andrej Janchevski, Anja Tiede, Clarence Linden, Emanuele Troiani, Francesco Salvi, Freya Behrens, Giacomo Orsi, Giovanni Piccioli, Hadrien Sevel, Louis Coulon, Manuela Pineros-Rodriguez, Marin Bonnassies, Pierre Hellich, Puck van Gerwen, Sankalp Gambhir, Solal Pirelli, Thomas Blanchard, Timothée Callens, Toni Abi Aoun, Yannick Calvino Alonso, Yuri Cho, Alberto Silvio Chiappa, Antonio Sclocchi, Étienne Bruno, Florian Hofhammer, Gabriel Pescia, Geovani Rizk, Leello Dadi, Lucas Stoffl, Manoel Horta Ribeiro, Matthieu Bovel, Yueyang Pan, Aleksandra Radenovic, Alexandre Alahi, Alexander Mathis, Anne-Florence Bitbol, Boi Faltings, Cécile Hébert, Devis Tuia, François Maréchal, George Candea, Giuseppe Carleo, Jean-Cédric Chappelier, Nicolas Flammarion, Jean-Marie Fürbringer, Jean-Philippe Pellet, Karl Aberer, Lenka Zdeborová, Marcel Salathé, Martin Jaggi, Martin Rajman, Mathias Payer, Matthieu Wyart, Michael Gastpar, Michele Ceriotti, Ola Svensson, Olivier Lévêque, Paolo Ienne, Rachid Guerraoui, Robert West, Sanidhya Kashyap, Valerio Piazza, Viesturs Simanis, Viktor Kuncak, Volkan Cevher, Philippe Schwaller, Sacha Friedli, Patrick Jermann, Tanja Käser, Antoine Bosselut

CoRR, 2024

Exploiting Android's Hardened Memory Allocator.

Philipp Mao, Elias Valentin Boschung, Marcel Busch, Mathias Payer

Proceedings of the 18th USENIX WOOT Conference on Offensive Technologies, 2024

EL3XIR: Fuzzing COTS Secure Monitors.

Christian Lindenmeier, Mathias Payer, Marcel Busch

Proceedings of the 33rd USENIX Security Symposium, 2024

GlobalConfusion: TrustZone Trusted Application 0-Days by Design.

Marcel Busch, Philipp Mao, Mathias Payer

Proceedings of the 33rd USENIX Security Symposium, 2024

Spill the TeA: An Empirical Study of Trusted Application Rollback Prevention on Android Smartphones.

Marcel Busch, Philipp Mao, Mathias Payer

Proceedings of the 33rd USENIX Security Symposium, 2024

HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface.

Alexander Bulekov, Qiang Liu, Manuel Egele, Mathias Payer

Proceedings of the 33rd USENIX Security Symposium, 2024

Monarch: A Fuzzing Framework for Distributed File Systems.

Tao Lyu, Liyi Zhang, Zhiyao Feng, Yueyang Pan, Yujie Ren, Meng Xu, Mathias Payer, Sanidhya Kashyap

Proceedings of the 2024 USENIX Annual Technical Conference, 2024

SyzTrust: State-aware Fuzzing on Trusted OS Designed for IoT Devices.

Qinying Wang, Boyu Chang, Shouling Ji, Yuan Tian, Xuhong Zhang, Binbin Zhao, Gaoning Pan, Chenyang Lyu, Mathias Payer, Wenhai Wang, Raheem Beyah

Proceedings of the IEEE Symposium on Security and Privacy, 2024

Everything is Good for Something: Counterexample-Guided Directed Fuzzing via Likely Invariant Inference.

Heqing Huang, Anshunkang Zhou, Mathias Payer, Charles Zhang

Proceedings of the IEEE Symposium on Security and Privacy, 2024

TuneFuzz: Adaptively Exploring Target Programs.

Han Zheng, Flavio Toffalini, Mathias Payer

Proceedings of the 17th ACM/IEEE International Workshop on Search-Based and Fuzz Testing, 2024

Tango: Extracting Higher-Order Feedback through State Inference.

Ahmad Hazimeh, Duo Xu, Qiang Liu, Yan Wang, Mathias Payer

Proceedings of the 27th International Symposium on Research in Attacks, 2024

Fuzzing JavaScript Engines with a Graph-based IR.

Haoran Xu, Zhiyuan Jiang, Yongjun Wang, Shuhui Fan, Shenglin Xu, Peidai Xie, Shaojing Fu, Mathias Payer

Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 2024

Top of the Heap: Efficient Memory Error Protection of Safe Heap Objects.

Kaiming Huang, Mathias Payer, Zhiyun Qian, Jack Sampson, Gang Tan, Trent Jaeger

Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, 2024

SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer.

Gwangmu Lee, Duo Xu, Solmaz Salimi, Byoungyoung Lee, Mathias Payer

Proceedings of the 19th ACM Asia Conference on Computer and Communications Security, 2024

2023

DatAFLow: Toward a Data-flow-guided Fuzzer.

Adrian Herrera, Mathias Payer, Antony L. Hosking

ACM Trans. Softw. Eng. Methodol., September, 2023

Instruction-Level Power Side-Channel Leakage Evaluation of Soft-Core CPUs on Shared FPGAs.

Ognjen Glamocanin, Shashwat Shrivastava, Jinwei Yao, Nour Ardo, Mathias Payer, Mirjana Stojilovic

J. Hardw. Syst. Secur., September, 2023

Top of the Heap: Efficient Memory Error Protection for Many Heap Objects.

Kaiming Huang, Mathias Payer, Zhiyun Qian, Jack Sampson, Gang Tan, Trent Jaeger

CoRR, 2023

FISHFUZZ: Catch Deeper Bugs by Throwing Larger Nets.

Han Zheng, Jiayuan Zhang, Yuhang Huang, Zezhong Ren, He Wang, Chunjie Cao, Yuqing Zhang, Flavio Toffalini, Mathias Payer

Proceedings of the 32nd USENIX Security Symposium, 2023

Silent Bugs Matter: A Study of Compiler-Introduced Security Bugs.

Jianhao Xu, Kangjie Lu, Zhengjie Du, Zhu Ding, Linke Li, Qiushi Wu, Mathias Payer, Bing Mao

Proceedings of the 32nd USENIX Security Symposium, 2023

AIFORE: Smart Fuzzing Based on Automatic Input Format Reverse Engineering.

Ji Shi, Zhun Wang, Zhiyao Feng, Yang Lan, Shisong Qin, Wei You, Wei Zou, Mathias Payer, Chao Zhang

Proceedings of the 32nd USENIX Security Symposium, 2023

GLeeFuzz: Fuzzing WebGL Through Error Message Guided Mutation.

Hui Peng, Zhihao Yao, Ardalan Amiri Sani, Dave Tian, Mathias Payer

Proceedings of the 32nd USENIX Security Symposium, 2023

ACTOR: Action-Guided Kernel Fuzzing.

Marius Fleischer, Dipanjan Das, Priyanka Bose, Weiheng Bai, Kangjie Lu, Mathias Payer, Christopher Kruegel, Giovanni Vigna

Proceedings of the 32nd USENIX Security Symposium, 2023

ARMore: Pushing Love Back Into Binaries.

Luca Di Bartolomeo, Hossein Moghaddas, Mathias Payer

Proceedings of the 32nd USENIX Security Symposium, 2023

WarpAttack: Bypassing CFI through Compiler-Introduced Double-Fetches.

Jianhao Xu, Luca Di Bartolomeo, Flavio Toffalini, Bing Mao, Mathias Payer

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

ViDeZZo: Dependency-aware Virtual Device Fuzzing.

Qiang Liu, Flavio Toffalini, Yajin Zhou, Mathias Payer

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

TEEzz: Fuzzing Trusted Applications on COTS Android Devices.

Marcel Busch, Aravind Machiry, Chad Spensky, Giovanni Vigna, Christopher Kruegel, Mathias Payer

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

SecureCells: A Secure Compartmentalized Architecture.

Atri Bhattacharyya, Florian Hofhammer, Yuanlong Li, Siddharth Gupta, Andrés Sánchez, Babak Falsafi, Mathias Payer

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

Crystallizer: A Hybrid Path Analysis Framework to Aid in Uncovering Deserialization Vulnerabilities.

Prashast Srivastava, Flavio Toffalini, Kostyantyn Vorobyov, François Gauthier, Antonio Bianchi, Mathias Payer

Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2023

Imprecise Store Exceptions.

Siddharth Gupta, Yuanlong Li, Qingxuan Kang, Abhishek Bhattacharjee, Babak Falsafi, Yunho Oh, Mathias Payer

Proceedings of the 50th Annual International Symposium on Computer Architecture, 2023

Creating Trust by Abolishing Hierarchies.

Charly Castes, Adrien Ghosn, Neelu Shivprakash Kalani, Yuchen Qian, Marios Kogias, Mathias Payer, Edouard Bugnion

Proceedings of the 19th Workshop on Hot Topics in Operating Systems, 2023

Temperature Impact on Remote Power Side-Channel Attacks on Shared FPGAs.

Ognjen Glamocanin, Hajira Bazaz, Mathias Payer, Mirjana Stojilovic

Proceedings of the Design, Automation & Test in Europe Conference & Exhibition, 2023

Arvin: Greybox Fuzzing Using Approximate Dynamic CFG Analysis.

Sirus Shahini, Mu Zhang, Mathias Payer, Robert Ricci

Proceedings of the 2023 ACM Asia Conference on Computer and Communications Security, 2023

2022

BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem.

Marco Casagrande, Eleonora Losiouk, Mauro Conti, Mathias Payer, Daniele Antonioli

IACR Trans. Cryptogr. Hardw. Embed. Syst., 2022

FishFuzz: Throwing Larger Nets to Catch Deeper Bugs.

Han Zheng, Jiayuan Zhang, Yuhang Huang, Zezhong Ren, He Wang, Chunjie Cao, Yuqing Zhang, Flavio Toffalini, Mathias Payer

CoRR, 2022

PACSan: Enforcing Memory Safety Based on ARM PA.

Yuan Li, Wende Tan, Zhizheng Lv, Songtao Yang, Mathias Payer, Ying Liu, Chao Zhang

CoRR, 2022

Deploying decentralized, privacy-preserving proximity tracing.

Carmela Troncoso, Dan Bogdanov, Edouard Bugnion, Sylvain Chatel, Cas Cremers, Seda F. Gürses, Jean-Pierre Hubaux, Dennis Jackson, James R. Larus, Wouter Lueks, Rui Oliveira, Mathias Payer, Bart Preneel, Apostolos Pyrgelis, Marcel Salathé, Theresa Stadler, Michael Veale

Commun. ACM, 2022

Midas: Systematic Kernel TOCTTOU Protection.

Atri Bhattacharyya, Uros Tesic, Mathias Payer

Proceedings of the 31st USENIX Security Symposium, 2022

ProFactory: Improving IoT Security via Formalized Protocol Customization.

Fei Wang, Jianliang Wu, Yuhong Nan, Yousra Aafer, Xiangyu Zhang, Dongyan Xu, Mathias Payer

Proceedings of the 31st USENIX Security Symposium, 2022

On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats.

Daniele Antonioli, Mathias Payer

Proceedings of the 43rd IEEE Security and Privacy, 2022

Minerva: browser API fuzzing with dynamic mod-ref analysis.

Chijin Zhou, Quan Zhang, Mingzhe Wang, Lihua Guo, Jie Liang, Zhe Liu, Mathias Payer, Yu Jiang

Proceedings of the 30th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2022

Preventing Kernel Hacks with HAKCs.

Derrick Paul McKee, Yianni Giannaris, Carolina Ortega, Howard E. Shrobe, Mathias Payer, Hamed Okhravi, Nathan Burow

Proceedings of the 29th Annual Network and Distributed System Security Symposium, 2022

The Taming of the Stack: Isolating Stack Data from Memory Errors.

Kaiming Huang, Yongzhe Huang, Mathias Payer, Zhiyun Qian, Jack Sampson, Gang Tan, Trent Jaeger

Proceedings of the 29th Annual Network and Distributed System Security Symposium, 2022

PACMem: Enforcing Spatial and Temporal Memory Safety via ARM Pointer Authentication.

Yuan Li, Wende Tan, Zhizheng Lv, Songtao Yang, Mathias Payer, Ying Liu, Chao Zhang

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

Evocatio: Conjuring Bug Capabilities from a Single PoC.

Zhiyuan Jiang, Shuitao Gan, Adrian Herrera, Flavio Toffalini, Lucio Romerio, Chaojing Tang, Manuel Egele, Chao Zhang, Mathias Payer

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy.

Daniele Antonioli, Nils Ole Tippenhauer, Kasper Rasmussen, Mathias Payer

Proceedings of the ASIA CCS '22: ACM Asia Conference on Computer and Communications Security, Nagasaki, Japan, 30 May 2022, 2022

Designing a Provenance Analysis for SGX Enclaves.

Flavio Toffalini, Mathias Payer, Jianying Zhou, Lorenzo Cavallaro

Proceedings of the Annual Computer Security Applications Conference, 2022

One Fuzz Doesn't Fit All: Optimizing Directed Fuzzing via Target-tailored Program State Restriction.

Prashast Srivastava, Stefan Nagy, Matthew Hicks, Antonio Bianchi, Mathias Payer

Proceedings of the Annual Computer Security Applications Conference, 2022

2021

Epidose: A privacy-preserving epidemic dosimeter based on contact tracing.

Diomidis Spinellis, Stefanos Georgiou, Johan Herland, Mathias Payer, Wouter Lueks, Bogdan Kulynych, Filip Muki Dobranic, konasimakopoulos

Dataset, May, 2021

Secure Compilation (Dagstuhl Seminar 21481).

David Chisnall, Deepak Garg, Catalin Hritcu, Mathias Payer

Dagstuhl Reports, 2021

LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacks.

Jianliang Wu, Ruoyu Wu, Daniele Antonioli, Mathias Payer, Nils Ole Tippenhauer, Dongyan Xu, Dave (Jing) Tian, Antonio Bianchi

Proceedings of the 30th USENIX Security Symposium, 2021

μSCOPE: A Methodology for Analyzing Least-Privilege Compartmentalization in Large Software Artifacts.

Nick Roessler, Lucas Atayde, Imani Palmer, Derrick Paul McKee, Jai Pandey, Vasileios P. Kemerlis, Mathias Payer, Adam Bates, Jonathan M. Smith, André DeHon, Nathan Dautenhahn

Proceedings of the RAID '21: 24th International Symposium on Research in Attacks, 2021

Evading Voltage-Based Intrusion Detection on Automotive CAN.

Rohit Bhatia, Vireshwar Kumar, Khaled Serag, Z. Berkay Celik, Mathias Payer, Dongyan Xu

Proceedings of the 28th Annual Network and Distributed System Security Symposium, 2021

Principal Kernel Analysis: A Tractable Methodology to Simulate Scaled GPU Workloads.

Cesar Avalos Baddouh, Mahmoud Khairy, Roland N. Green, Mathias Payer, Timothy G. Rogers

Proceedings of the MICRO '21: 54th Annual IEEE/ACM International Symposium on Microarchitecture, 2021

Gramatron: effective grammar-aware fuzzing.

Prashast Srivastava, Mathias Payer

Proceedings of the ISSTA '21: 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2021

Seed selection for successful fuzzing.

Adrian Herrera, Hendra Gunadi, Shane Magrath, Michael Norrish, Mathias Payer, Antony L. Hosking

Proceedings of the ISSTA '21: 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2021

Rebooting Virtual Memory with Midgard.

Siddharth Gupta, Atri Bhattacharyya, Yunho Oh, Abhishek Bhattacharjee, Babak Falsafi, Mathias Payer

Proceedings of the 48th ACM/IEEE Annual International Symposium on Computer Architecture, 2021

Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps' Native Code.

Sumaya Almanee, Arda Ünal, Mathias Payer, Joshua Garcia

Proceedings of the 43rd IEEE/ACM International Conference on Software Engineering: Companion Proceedings, 2021

Code Specialization through Dynamic Feature Observation.

Priyam Biswas, Nathan Burow, Mathias Payer

Proceedings of the CODASPY '21: Eleventh ACM Conference on Data and Application Security and Privacy, 2021

Igor: Crash Deduplication Through Root-Cause Clustering.

Zhiyuan Jiang, Xiyue Jiang, Ahmad Hazimeh, Chaojing Tang, Chao Zhang, Mathias Payer

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

Enclosure: language-based restriction of untrusted libraries.

Adrien Ghosn, Marios Kogias, Mathias Payer, James R. Larus, Edouard Bugnion

Proceedings of the ASPLOS '21: 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, 2021

2020

Magma: A Ground-Truth Fuzzing Benchmark.

Ahmad Hazimeh, Adrian Herrera, Mathias Payer

Proc. ACM Meas. Anal. Comput. Syst., 2020

Decentralized Privacy-Preserving Proximity Tracing.

Carmela Troncoso, Mathias Payer, Jean-Pierre Hubaux, Marcel Salathé, James R. Larus, Wouter Lueks, Theresa Stadler, Apostolos Pyrgelis, Daniele Antonioli, Ludovic Barman, Sylvain Chatel, Kenneth G. Paterson, Srdjan Capkun, David A. Basin, Jan Beutel, Dennis Jackson, Marc Roeschlin, Patrick Leu, Bart Preneel, Nigel P. Smart, Aysajan Abidin, Seda Gurses, Michael Veale, Cas Cremers, Michael Backes, Nils Ole Tippenhauer, Reuben Binns, Ciro Cattuto, Alain Barrat, Dario Fiore, Manuel Barbosa, Rui Oliveira, José Pereira

IEEE Data Eng. Bull., 2020

Decentralized Privacy-Preserving Proximity Tracing.

Carmela Troncoso, Mathias Payer, Jean-Pierre Hubaux, Marcel Salathé, James R. Larus, Edouard Bugnion, Wouter Lueks, Theresa Stadler, Apostolos Pyrgelis, Daniele Antonioli, Ludovic Barman, Sylvain Chatel, Kenneth G. Paterson, Srdjan Capkun, David A. Basin, Jan Beutel, Dennis Jackson, Marc Roeschlin, Patrick Leu, Bart Preneel, Nigel P. Smart, Aysajan Abidin, Seda F. Gürses, Michael Veale, Cas Cremers, Michael Backes, Nils Ole Tippenhauer, Reuben Binns, Ciro Cattuto, Alain Barrat, Dario Fiore, Manuel Barbosa, Rui Oliveira, José Pereira

CoRR, 2020

BLESA: Spoofing Attacks against Reconnections in Bluetooth Low Energy.

Jianliang Wu, Yuhong Nan, Vireshwar Kumar, Dave (Jing) Tian, Antonio Bianchi, Mathias Payer, Dongyan Xu

Proceedings of the 14th USENIX Workshop on Offensive Technologies, 2020

USBFuzz: A Framework for Fuzzing USB Drivers by Device Emulation.

Hui Peng, Mathias Payer

Proceedings of the 29th USENIX Security Symposium, 2020

FuzzGen: Automatic Fuzzer Generation.

Kyriakos K. Ispoglou, Daniel Austin, Vishwath Mohan, Mathias Payer

Proceedings of the 29th USENIX Security Symposium, 2020

HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation.

Abraham A. Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, Mathias Payer

Proceedings of the 29th USENIX Security Symposium, 2020

FuZZan: Efficient Sanitizer Metadata Design for Fuzzing.

Yuseok Jeon, Wookhyun Han, Nathan Burow, Mathias Payer

Proceedings of the 2020 USENIX Annual Technical Conference, 2020

RetroWrite: Statically Instrumenting COTS Binaries for Fuzzing and Sanitization.

Sushant Dinesh, Nathan Burow, Dongyan Xu, Mathias Payer

Proceedings of the 2020 IEEE Symposium on Security and Privacy, 2020

BlueShield: Detecting Spoofing Attacks in Bluetooth Low Energy Networks.

Jianliang Wu, Yuhong Nan, Vireshwar Kumar, Mathias Payer, Dongyan Xu

Proceedings of the 23rd International Symposium on Research in Attacks, 2020

SpecROP: Speculative Exploitation of ROP Chains.

Atri Bhattacharyya, Andrés Sánchez, Esmaeil Mohammadian Koruyeh, Nael B. Abu-Ghazaleh, Chengyu Song, Mathias Payer

Proceedings of the 23rd International Symposium on Research in Attacks, 2020

µRAI: Securing Embedded Systems with Return Address Integrity.

Naif Saleh Almakhdhub, Abraham A. Clements, Saurabh Bagchi, Mathias Payer

Proceedings of the 27th Annual Network and Distributed System Security Symposium, 2020

2019

The Fuzzing Hype-Train: How Random Testing Triggers Thousands of Crashes.

Mathias Payer

IEEE Secur. Priv., 2019

Too Quiet in the Library: A Study of Native Third-Party Libraries in Android.

Sumaya Almanee, Mathias Payer, Joshua Garcia

CoRR, 2019

Pythia: Remote Oracles for the Masses.

Shin-Yeh Tsai, Mathias Payer, Yiying Zhang

Proceedings of the 28th USENIX Security Symposium, 2019

SoK: Shining Light on Shadow Stacks.

Nathan Burow, Xinping Zhang, Mathias Payer

Proceedings of the 2019 IEEE Symposium on Security and Privacy, 2019

Butterfly Attack: Adversarial Manipulation of Temporal Properties of Cyber-Physical Systems.

Rouhollah Mahfouzi, Amir Aminifar, Soheil Samii, Mathias Payer, Petru Eles, Zebo Peng

Proceedings of the IEEE Real-Time Systems Symposium, 2019

Employing attack graphs for intrusion detection.

Frank Capobianco, Rahul George, Kaiming Huang, Trent Jaeger, Srikanth V. Krishnamurthy, Zhiyun Qian, Mathias Payer, Paul L. Yu

Proceedings of the NSPW '19: New Security Paradigms Workshop, 2019

BenchIoT: A Security Benchmark for the Internet of Things.

Naif Saleh Almakhdhub, Abraham A. Clements, Mathias Payer, Saurabh Bagchi

Proceedings of the 49th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2019

PoLPer: Process-Aware Restriction of Over-Privileged Setuid Calls in Legacy Applications.

Yuseok Jeon, Junghwan Rhee, Chung Hwan Kim, Zhichun Li, Mathias Payer, Byoungyoung Lee, Zhenyu Wu

Proceedings of the Ninth ACM Conference on Data and Application Security and Privacy, 2019

FirmFuzz: Automated IoT Firmware Introspection and Analysis.

Prashast Srivastava, Hui Peng, Jiahao Li, Hamed Okhravi, Howard E. Shrobe, Mathias Payer

Proceedings of the 2nd International ACM Workshop on Security and Privacy for the Internet-of-Things, 2019

SMoTherSpectre: Exploiting Speculative Execution through Port Contention.

Atri Bhattacharyya, Alexandra Sandulescu, Matthias Neugschwandtner, Alessandro Sorniotti, Babak Falsafi, Mathias Payer, Anil Kurmus

Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019

2018

Shining Light On Shadow Stacks.

Nathan Burow, Xinping Zhang, Mathias Payer

CoRR, 2018

ACES: Automatic Compartments for Embedded Systems.

Abraham A. Clements, Naif Saleh Almakhdhub, Saurabh Bagchi, Mathias Payer

Proceedings of the 27th USENIX Security Symposium, 2018

T-Fuzz: Fuzzing by Program Transformation.

Hui Peng, Yan Shoshitaishvili, Mathias Payer

Proceedings of the 2018 IEEE Symposium on Security and Privacy, 2018

CFIXX: Object Type Integrity for C++.

Nathan Burow, Derrick Paul McKee, Scott A. Carr, Mathias Payer

Proceedings of the 25th Annual Network and Distributed System Security Symposium, 2018

Milkomeda: Safeguarding the Mobile GPU Interface Using WebGL Security Checks.

Zhihao Yao, Saeed Mirzamohammadi, Ardalan Amiri Sani, Mathias Payer

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

Block Oriented Programming: Automating Data-Only Attacks.

Kyriakos K. Ispoglou, Bader AlBassam, Trent Jaeger, Mathias Payer

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

CUP: Comprehensive User-Space Protection for C/C++.

Nathan Burow, Derrick Paul McKee, Scott A. Carr, Mathias Payer

Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018

How memory safety violations enable exploitation of programs.

Mathias Payer

Proceedings of the Continuing Arms Race: Code-Reuse Attacks and Defenses, 2018

Code-pointer integrity.

Volodymyr Kuznetsov, Laszlo Szekeres, Mathias Payer, George Candea, R. Sekar, Dawn Song

Proceedings of the Continuing Arms Race: Code-Reuse Attacks and Defenses, 2018

2017

Automatic Contract Insertion with CCBot.

Scott A. Carr, Francesco Logozzo, Mathias Payer

IEEE Trans. Software Eng., 2017

Control-Flow Integrity: Precision, Security, and Performance.

Nathan Burow, Scott A. Carr, Joseph Nash, Per Larsen, Michael Franz, Stefan Brunthaler, Mathias Payer

ACM Comput. Surv., 2017

One Process to Reap Them All: Garbage Collection as-a-Service.

Ahmed Hussein, Mathias Payer, Antony L. Hosking, Christopher A. Vick

Proceedings of the 13th ACM SIGPLAN/SIGOPS International Conference on Virtual Execution Environments, 2017

Venerable Variadic Vulnerabilities Vanquished.

Priyam Biswas, Alessandro Di Federico, Scott A. Carr, Prabhu Rajasekaran, Stijn Volckaert, Yeoul Na, Michael Franz, Mathias Payer

Proceedings of the 26th USENIX Security Symposium, 2017

Protecting Bare-Metal Embedded Systems with Privilege Overlays.

Abraham A. Clements, Naif Saleh Almakhdhub, Khaled Saab, Prashast Srivastava, Jinkyu Koo, Saurabh Bagchi, Mathias Payer

Proceedings of the 2017 IEEE Symposium on Security and Privacy, 2017

An Evil Copy: How the Loader Betrays You.

Xinyang Ge, Mathias Payer, Trent Jaeger

Proceedings of the 24th Annual Network and Distributed System Security Symposium, 2017

Control-Flow Hijacking: Are We Making Progress?

Mathias Payer

Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 2017

Memory Safety for Embedded Devices with nesCheck.

Daniele Midi, Mathias Payer, Elisa Bertino

Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 2017

HexType: Efficient Detection of Type Confusion Errors for C++.

Yuseok Jeon, Priyam Biswas, Scott A. Carr, Byoungyoung Lee, Mathias Payer

Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2017

DataShield: Configurable Data Confidentiality and Integrity.

Scott A. Carr, Mathias Payer

Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 2017

rev.ng: a unified binary analysis framework to recover CFGs and function boundaries.

Alessandro Di Federico, Mathias Payer, Giovanni Agosta

Proceedings of the 26th International Conference on Compiler Construction, 2017

2016

malWASH: Washing Malware to Evade Dynamic Analysis.

Kyriakos K. Ispoglou, Mathias Payer

Proceedings of the 10th USENIX Workshop on Offensive Technologies, 2016

PSHAPE: Automatically Combining Gadgets for Arbitrary Method Execution.

Andreas Follner, Alexandre Bartel, Hui Peng, Yu-Chen Chang, Kyriakos K. Ispoglou, Mathias Payer, Eric Bodden

Proceedings of the Security and Trust Management - 12th International Workshop, 2016

VTrust: Regaining Trust on Virtual Calls.

Chao Zhang, Dawn Song, Scott A. Carr, Mathias Payer, Tongxin Li, Yu Ding, Chengyu Song

Proceedings of the 23rd Annual Network and Distributed System Security Symposium, 2016

Fine-Grained Control-Flow Integrity for Kernel Software.

Xinyang Ge, Nirupama Talele, Mathias Payer, Trent Jaeger

Proceedings of the IEEE European Symposium on Security and Privacy, 2016

HexPADS: A Platform to Detect "Stealth" Attacks.

Mathias Payer

Proceedings of the Engineering Secure Software and Systems - 8th International Symposium, 2016

Enforcing Least Privilege Memory Views for Multithreaded Applications.

Terry Ching-Hsiang Hsu, Kevin J. Hoffman, Patrick Eugster, Mathias Payer

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

TypeSan: Practical Type Confusion Detection.

István Haller, Yuseok Jeon, Hui Peng, Mathias Payer, Cristiano Giuffrida, Herbert Bos, Erik van der Kouwe

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

Forgery-Resistant Touch-based Authentication on Mobile Devices.

Neil Zhenqiang Gong, Mathias Payer, Reza Moazzezi, Mario Frank

Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, 2016

2015

What You Submit Is Who You Are: A Multimodal Approach for Deanonymizing Scientific Publications.

Mathias Payer, Ling Huang, Neil Zhenqiang Gong, Kevin Borgolte, Mario Frank

IEEE Trans. Inf. Forensics Secur., 2015

Towards Forgery-Resistant Touch-based Biometric Authentication on Mobile Devices.

Neil Zhenqiang Gong, Mathias Payer, Reza Moazzezi, Mario Frank

CoRR, 2015

CAIN: Silently Breaking ASLR in the Cloud.

Antonio Barresi, Kaveh Razavi, Mathias Payer, Thomas R. Gross

Proceedings of the 9th USENIX Workshop on Offensive Technologies, 2015

Control-Flow Bending: On the Effectiveness of Control-Flow Integrity.

Nicholas Carlini, Antonio Barresi, Mathias Payer, David A. Wagner, Thomas R. Gross

Proceedings of the 24th USENIX Security Symposium, 2015

Impact of GC design on power and performance for Android.

Ahmed Hussein, Mathias Payer, Antony L. Hosking, Christopher A. Vick

Proceedings of the 8th ACM International Systems and Storage Conference, 2015

The Correctness-Security Gap in Compiler Optimization.

Vijay D'Silva, Mathias Payer, Dawn Xiaodong Song

Proceedings of the 2015 IEEE Symposium on Security and Privacy Workshops, 2015

Control-Flow Integrity.

Antonio Barresi, Mathias Payer, Thomas R. Gross

Proceedings of the Software Engineering & Management 2015, Multikonferenz der GI-Fachbereiche Softwaretechnik (SWT) und Wirtschaftsinformatik (WI), FA WI-MAW, 17. März, 2015

Don't race the memory bus: taming the GC leadfoot.

Ahmed Hussein, Antony L. Hosking, Mathias Payer, Christopher A. Vick

Proceedings of the 2015 ACM SIGPLAN International Symposium on Memory Management, 2015

Fine-Grained Control-Flow Integrity Through Binary Hardening.

Mathias Payer, Antonio Barresi, Thomas R. Gross

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2015

2014

Eternal War in Memory.

Laszlo Szekeres, Mathias Payer, Tao Wei, R. Sekar

IEEE Secur. Priv., 2014

Similarity-based matching meets Malware Diversity.

Mathias Payer, Stephen Crane, Per Larsen, Stefan Brunthaler, Richard Wartell, Michael Franz

CoRR, 2014

Lockdown: Dynamic Control-Flow Integrity.

Mathias Payer, Antonio Barresi, Thomas R. Gross

CoRR, 2014

JIGSAW: Protecting Resource Access by Inferring Programmer Expectations.

Hayawardh Vijayakumar, Xinyang Ge, Mathias Payer, Trent Jaeger

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

Code-Pointer Integrity.

Volodymyr Kuznetsov, Laszlo Szekeres, Mathias Payer, George Candea, R. Sekar, Dawn Song

Proceedings of the 11th USENIX Symposium on Operating Systems Design and Implementation, 2014

The Matter of Heartbleed.

Zakir Durumeric, James Kasten, David Adrian, J. Alex Halderman, Michael D. Bailey, Frank Li, Nicholas Weaver, Johanna Amann, Jethro Beekman, Mathias Payer, Vern Paxson

Proceedings of the 2014 Internet Measurement Conference, 2014

2013

Lightweight Memory Tracing.

Mathias Payer, Enrico Kravina, Thomas R. Gross

Proceedings of the 2013 USENIX Annual Technical Conference, 2013

SoK: Eternal War in Memory.

Laszlo Szekeres, Mathias Payer, Tao Wei, Dawn Song

Proceedings of the 2013 IEEE Symposium on Security and Privacy, 2013

Hot-patching a web server: A case study of ASAP code repair.

Mathias Payer, Thomas R. Gross

Proceedings of the Eleventh Annual International Conference on Privacy, Security and Trust, 2013

String oriented programming: when ASLR is not enough.

Mathias Payer, Thomas R. Gross

Proceedings of the 2nd ACM SIGPLAN Program Protection and Reverse Engineering Workshop 2013, 2013

DynSec: On-the-fly Code Rewriting and Repair.

Mathias Payer, Boris Bluntschli, Thomas R. Gross

Proceedings of the 5th Workshop on Hot Topics in Software Upgrades, 2013

HI-CFG: Construction by Binary Analysis and Application to Attack Polymorphism.

Dan Caselden, Alex Bazhanyuk, Mathias Payer, Stephen McCamant, Dawn Song

Proceedings of the Computer Security - ESORICS 2013, 2013

2012

Safe loading and efficient runtime confinement: A foundation for secure execution.

Mathias Payer

PhD thesis, 2012

Protecting applications against TOCTTOU races by user-space caching of file metadata.

Mathias Payer, Thomas R. Gross

Proceedings of the 8th International Conference on Virtual Execution Environments, 2012

Safe Loading - A Foundation for Secure Execution of Untrusted Programs.

Mathias Payer, Tobias Hartmann, Thomas R. Gross

Proceedings of the IEEE Symposium on Security and Privacy, 2012

LLDSAL: a low-level domain-specific aspect language for dynamic code-generation and program modification.

Mathias Payer, Boris Bluntschli, Thomas R. Gross

Proceedings of the seventh workshop on Domain-Specific Aspect Languages, 2012

2011

Fine-grained user-space security through virtualization.

Mathias Payer, Thomas R. Gross

Proceedings of the 7th International Conference on Virtual Execution Environments, 2011

Performance evaluation of adaptivity in software transactional memory.

Mathias Payer, Thomas R. Gross

Proceedings of the IEEE International Symposium on Performance Analysis of Systems and Software, 2011

2010

Generating low-overhead dynamic binary translators.

Mathias Payer, Thomas R. Gross

Proceedings of of SYSTOR 2010: The 3rd Annual Haifa Experimental Systems Conference, 2010

Usage scenarios for fast dynamic binary translators.

Mathias Payer

Proceedings of of SYSTOR 2010: The 3rd Annual Haifa Experimental Systems Conference, 2010

2007

Online optimizations driven by hardware performance monitoring.

Florian T. Schneider, Mathias Payer, Thomas R. Gross

Proceedings of the ACM SIGPLAN 2007 Conference on Programming Language Design and Implementation, 2007