NISL实验室

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】DOITRUST: Dissecting On-chain Compromised Internet Domains via Graph Learning

• Presenter: 郎峙煜

• Conference:  NDSS '23
  

• Authors: Wang S, Almashor M, Abuadbba A, et al.

• Abstract: this paper introduces DOITRUST, a semi-supervised machine learning scheme that predicts and prunes compromised internet domains from allow-lists.

• Link to paper: https://www.ndss-symposium.org/wp-content/uploads/2023/02/ndss2023_f322_paper.pdf

  
  

2.【论文分享】“Len or index or count, anything but v1”: Predicting Variable Names in Decompilation Output with Transfer Learning

• Presenter: 朱文宇

• Conference: S&P '24

• Authors: Pal K K, Bajaj A P, Banerjee P, et al

• Abstract: This paper utilizes a BERT model to predict meaningful variable names in decompilation output.

• Link to paper: https://www.atipriya.com/files/papers/varbert_oakland24.pdf

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Who’s Got Your Mail? Characterizing Mail Service Provider Usage

• Presenter: 仓永康弘

• Conference:  IMC '21
  

• Authors: Liu, Enze and Akiwate, Gautam and Jonker, Mattijs and Mirian, Ariana and Savage, Stefan and Voelker, Geoffrey M.
  

• Abstract: The study conducted extensive measurements on email service providers. A project was developed to map domain names to email service providers. This method was employed to document the prominent and growing roles played by a few email service providers and hosting companies over the past four years. It also explored the extent to which nationality (and related legal jurisdiction) influences decision-making in such email service provider choices.

• Link to paper: https://www.sysnet.ucsd.edu/~voelker/pubs/mx-imc21.pdf

  
  

2.【论文分享】The Blockchain Imitation Game

• Presenter: 陈龙飞

• Conference: USENIX Security '22

• Authors: Qin, Kaihua and Chaliasos, Stefanos and Zhou, Liyi and Livshits, Benjamin and Song, Dawn and Gervais, Arthur

• Abstract: This paper introduces the Blockchain Imitation Game and proposes a generalized imitation attack methodology called APE.

• Link to paper: https://www.usenix.org/system/files/sec23fall-prepub-331-qin.pdf

# 学术沙龙问卷反馈

图1: 待分析的Example示例程序，其功能是验证用户名和口令

图2: 通过“在线体验”版MLM上传示例程序

图3: MLM基于语义搜索定位关键函数功能

图4: MLM生成的类C语言代码

图5: IDA PRO反编译生成的类C语言代码

图6: MLM生成的代码语义解释

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Cloud Watching: Understanding Attacks Against Cloud-Hosted Services

• Presenter: 王艺辰

• Conference:  IMC '23
  

• Authors: Liz Izhikevich, Manda Tran, Michalis Kallitsis, Aurore Fass, Zakir Durumeric
  

• Abstract: This paper utilizes a diverse set of cloud honeypots across multiple providers and countries to analyze the targeting behaviors of attackers in cloud environments.

• Link to paper: https://arxiv.org/pdf/2309.13471.pdf

  
  

2.【论文分享】PonziGuard: Detecting Ponzi Schemes on Ethereum with Contract Runtime Behavior Graph (CRBG)

• Presenter: 陈鹤影

• Conference: ICSE ’24

• Authors: R Liang, J Chen, K He, Y Wu, G Deng, R Du, C Wu

• Abstract: This paper introduces a high-performance blockchain Ponzi detection scheme based on CRBG and GNN.

• Link to paper: https://wu-yueming.github.io/Files/ICSE2024_PonziGuard.pdf

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Changing of the Guards: Certificate and Public Key Management on the Internet

• Presenter: 赵汉卿

• Conference:  PAM '22
  

• Authors: Bruhner C M, Linnarsson O, Nemec M, et al.
  

• Abstract: This paper first proposes a novel Server-side Certificate Replacement (CR) relational feature, and optimizes the certificate revocation process.

• Link to paper: https://link.springer.com/chapter/10.1007/978-3-030-98785-5_3

  
  

2.【论文分享】Tightly Seal Your Sensitive Pointers with PACTIGHT

• Presenter: 荣易

• Conference: Usenix Security ’22

• Authors: Ismail M, Quach A, Jelesnianski C, et al.
  

• Abstract: This paper utilizes Pointer Authentication (PA) to build a novel scheme to completely prevent any misuse of security-sensitive pointers.

• Link to paper: https://www.usenix.org/conference/usenixsecurity22/presentation/ismail

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】It’s (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses

• Presenter: 周安鹏

• Conference:  S&P '23
  

• Authors: Khodayari, Soheil, and Giancarlo Pellegrino
  

• Abstract: This paper systematically reviews HTML markup that can be used for DOM clobbering, then tests the prevalence and impact of this vulnerability on the top 5k websites in the Tranco list, and finally proposes some mitigation measures.

• Link to paper: https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10179403

  
  

2.【论文分享】Dubhe: Succinct Zero-Knowledge Proofs for Standard AES and related Applications

• Presenter: 李贇

• Conference: Usenix Security ’23

• Authors: Ding, Changchang, and Yan Huang
  

• Abstract: The paper proposes a new succinct zero-knowledge argument of knowledge that enables linear prover, logarithmic verifier and logarithmic communication, and applies the argument system to various AES-based applications.

• Link to paper: https://www.usenix.org/system/files/usenixsecurity23-ding-changchang.pdf

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Tranco: A research-oriented top sites ranking hardened against manipulation

• Presenter: 王一航

• Conference:  NDSS '19

• Authors: Victor Le Pochat, Tom Van Goethem, Samaneh Tajalizadehkhoob, Maciej Korczyński, Wouter Joosen
  

• Abstract: This article conducts a comprehensive analysis of four mainstream domain name ranking lists, including Alexa and Cisco, from five aspects including similarity and stability, and finds that each domain name ranking has at least one malicious way to manipulate the ranking. To address this weakness, the author proposed a list of manipulation-resistant and reproducible domain names, called Tranco, and made it available to the public.

• Link to paper: https://arxiv.org/abs/1806.01156

  
  

2.【论文分享】LibAFL: A Framework to Build Modular and Reusable Fuzzers

• Presenter: 王一燚

• Conference: CCS '22

• Authors: Fioraldi, Andrea and Maier, Dominik Christian and Zhang, Dongjia and Balzarotti, Davide
  

• Abstract: This paper propose a framework to build modular and reusable fuzzers.

• Link to paper:  https://dl.acm.org/doi/10.1145/3548606.3560602

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Cross Layer Attacks and How to Use Them (for DNS Cache Poisoning, Device Tracking and More)

• Presenter: 金拯龙

• Conference:  S&P '23

• Authors: Klein, Amit.
  

• Abstract: This paper introduces the weakness in the pseudo-random number generator in the Linux kernel, which can be exploited to infer UDP source ports, IPv6 flow labels, and IPv4 IDs, enabling cross-layer attacks such as DNS cache poisoning and device tracking.

• Link to paper: https://ieeexplore.ieee.org/document/9519455

  
  

2.【论文分享】Handcrafted Backdoors in Deep Neural Networks

• Presenter: 吴钰枭

• Conference: NeurIPS '22

• Authors: Hong, Sanghyun and Carlini, Nicholas and Kurakin, Alexey.
  

• Abstract: This paper introduce a handcrafted attack that directly manipulates a model's weights, and it can be used by supply-chain attacker to evade many backdoor detection or removal defenses effectively.

• Link to paper: https://arxiv.org/pdf/2106.04690.pdf

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【嘉宾分享】You’ve Got Report: Measurement and Security Implications of DMARC Reporting

• Presenter: 李纬同

• Conference: Usenix Security’23
  

• Authors: Mohammad Ishtiaq Ashiq Khan, Weitong Li, Tobias Fiebig, and Taejoong Chung

• Abstract: This paper presents a large-scale and comprehensive measurement study of DMARC reporting deployment and management. This paper collected data for all second-level domains under the .com, .net, .org, and .se TLDs over 13 months to analyze deployment and management from the domain name owner’s perspective. This study reveals pervasive mismanagement and missing security considerations in DMARC reporting.

• Bio: Weitong Li is a third year PhD student at Virginia Tech, advised by Taejoong Chung. His research interests include network security and privacy, centered around large-scale measurement and analysis. He is currently focusing on the management of protocols deployed on the Internet such as RPKI and DMARC. He received his bachelor degree from Zhejiang University in 2020, and has interned in industries like Cloudflare and Tencent.

• Link to paper: https://www.usenix.org/conference/usenixsecurity23/presentation/ashiq

2.【论文分享】The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies

• Presenter: 张家赫

• Conference: S&P '22

• Authors: Soheil Khodayari, Giancarlo Pellegrino

• Abstract: This paper performs the first evaluation of the SameSite cookie policy in terms of deployment, impact on website functionality, security attribute defects, and support of browsers and web frameworks, pointing out that there is still room for improvement of the SameSite mechanism before effectively defending XS attacks.

• Link to paper: https://publications.cispa.saarland/3504/1/samesite.pdf

  
  

3.【论文分享】Connecting Large Language Models with Evolutionary Algorithms Yields Powerful Prompt Optimizers

• Presenter: 王佳明

• Authors: Guo Q, Wang R, Guo J, et al.
  

• Abstract: A novel framework uses evolutionary algorithms to automate and optimize discrete prompt creation for Large Language Models，significantly outperforming existing methods in various language tasks.

• Link to paper: https://arxiv.org/abs/2309.08532

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Off-Path TCP Exploits of the Mixed IPID Assignment

• Presenter: 刘世明

• Conference: CCS '20

• Authors: Feng X, Fu C, Li Q, et al.

• Abstract: The article achieves degradation of IPID allocation algorithms by sending ICMP requests in a fragmented manner. It leverages the incremental nature of IPID as a side channel to infer the victim's IP address, port, as well as the ACK and SEQ values in the TCP traffic, thereby intercepting TCP traffic.

• Link to paper: https://dl.acm.org/doi/10.1145/3372297.3417884

  
  

2.【论文分享】Fuzzing SGX Enclaves via Host Program Mutations

• Presenter: 李哲铭

• Conference: EuroS&P '23

• Authors: Khan A, Zou M, Kim K, et al.
  

• Abstract: FUZZSGX proposes an input and program mutation-based fuzzer for Intel SGX enclave implementations. It provides an enclave fuzzing runtime, FUZZSGX RUNTIME, which is a drop-in library for the Intel SGX SDK, enabling code coverage and sanitization within enclaves. To explore the host app-enclave boundary, FUZZSGX conducts static analysis and symbolic execution on existing host apps and enclave implementations to generate promising fuzzing programs.

• Link to paper: https://ieeexplore.ieee.org/document/10190488

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Dial “N” for NXDomain: The Scale, Origin, and Security Implications of DNS Queries to Non-Existent Domains

• Presenter: 张允义

• Conference: IMC '23

• Authors: Liu G, Jin L, Hao S, et al.

• Abstract: This paper comprehensively investigates the scale, origin, and security implications of NXDomains.

• Link to paper: https://dl.acm.org/doi/pdf/10.1145/3618257.3624805

  
  

2.【论文分享】VD-Guard: DMA Guided Fuzzing for Hypervisor Virtual Device

• Presenter: 马哲宇

• Conference: ASE '23

• Authors: Liu Y, Chen S, Xie Y, Wang Y, et al.
  

• Abstract: The VD-GUARD methodology leverages static analysis to identify DMA call chains in virtual devices and uses this information, along with limited fuzzing, to guide a DMA-aware fuzzer in effectively uncovering DMA-related vulnerabilities.

• Link to paper: https://conf.researchr.org/details/ase-2023/ase-2023-papers/122/VD-Guard-DMA-Guided-Fuzzing-for-Hypervisor-Virtual-Device

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】AnimateDead: Debloating Web Applications Using Concolic Execution

• Presenter: 王恩泽

• Conference: USENIX Security '23

• Authors: Azad B A, Jahanshahi R, Tsoukaladelis C, et al.

• Abstract: This paper propose a hybrid approach based on concolic execution, exemplified by AnimateDead, a PHP emulator. This approach uses web server logs to perform concolic reachability analysis, reducing code size by 47%, critical API calls by 55%, and vulnerabilities by 35-65%. This debloating method ensures security improvements without runtime overhead or a training phase, reducing the risk of breakage for users.

• Link to paper: https://www.usenix.org/system/files/usenixsecurity23-azad.pdf

  
  

2.【论文分享】Titan : Efficient Multi-target Directed Greybox Fuzzin

• Presenter: 陈意扬

• Conference: S&P '24

• Authors: Huang H, Yao P, Hung-Chun C, et al.
  

• Abstract: This paper presents Titan, a tool to provide multi-target directed greybox fuzzing.

• Link to paper: https://5hadowblad3.github.io/files/Oakland24-Titan.pdf

# 学术沙龙问卷反馈

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】Stale TLS Certificates Investigating Precarious Third-Party Access to Valid TLS Keys

• Presenter: 李瑞烜

• Conference: IMC '23

• Authors: Ma Z, Faulkenberry A, Papastergiou T, et al.

• Abstract: This paper extensively explores the phenomenon of certificate invalidation, and identifies three classes of security-relevant events.

• Link to paper: https://zanema.com/papers/imc23_stale_certs.pdf

  
  

2.【论文分享】Silph: A Framework for Scalable and Accurate Generation of Hybrid MPC Protocols

• Presenter: 段宇飞

• Conference: S&P '23

• Authors: Chen E, Zhu J, Ozdemir A, et al.
  

• Abstract: This paper presents Silph, a framework that can automatically compile a program written in a high-level language to an optimized, hybrid MPC protocol that mixes multiple MPC primitives securely and efficiently.

• Link to paper: https://eprint.iacr.org/2023/060

清华大学网络与信息安全实验室学术沙龙，欢迎关注~ 

This is the Paper Reading Seminar of Network and Information Security Lab (NISL) at Tsinghua University. Tune in for more details!

* 本次分享对外公开直播，线上参会者要求实名备注“姓名-单位”

1.【论文分享】BEYOND PHISH: Toward Detecting Fraudulent e-Commerce Websites at Scale

• Presenter: 刘一静

• Conference: S&P '23

• Authors: Marzieh Bitaab, Haehyun Cho, Adam Oest

• Abstract: This paper propose an efficient and automated approach to gather fraudulent e-commerce websites through crowdsourcing, introduce the characteristics of FCWs and proposes an effective detection model.

• Link to paper: https://adamdoupe.com/publications/beyondphish-oakland2023.pdf

  
  

2.【论文分享】SEGFUZZ: Segmentizing Thread Interleaving to Discover Kernel Concurrency Bugs through Fuzzing

• Presenter: 张书樵

• Conference: S&P '23

• Authors: Dae R. Jeong, Byoungyoung Lee, Insik Shin

• Abstract: SEGFUZZ is a novel fuzzing framework designed to detect kernel concurrency bugs by decomposing thread interleavings into segments and utilizing them for more efficient coverage as feedback.

• Link to paper: https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10179398

祝NISL全体老师教师节快乐！！！

—— NISL全体同学