60 matches found
prism
Loaded Dice: Solving the Non-Selection Problem for Scalable Probabilistic RowHammer Defense To appear in the 53rd International Symposium on Computer Architecture ISCA, 2026. Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 University of British Columbia 2 NVIDIA Equal contribution...
top-dns
Top DNS Measurement Overview This script uses a built in probabalistic measurement mechanism in Bro to measure the top DNS requests by type of query, i.e., CNAME, A, AAAA, etc being done over a definable period of time. This is logged into a new log named "topdns.log". By using the probabalistic...
cve-2019-2215-markw
Bad Binder for markw !CAUTION Everything you do is at your own risk. I am not responsible for your broken device. Adapted with Deepseek V4 Flash Made for the latest Global MIUI 10. Overview Main goal: Get temp root on latest official miui Root can be used for flashing custom abootwhich is what I...
A Rowhammer Attack on Fil-C'S Software Capabilities
Rowhammer is a hardware vulnerability in dynamic random-access memory DRAM in which repeated accesses to one or more aggressor rows can induce bit-flips in nearby victim rows. This phenomenon violates a core assumption of conventional programming language semantics: that reading from or writing t...
Towards TEE-Certified DP: Verifiable Differentially Private Training on Legacy GPUs
Wide adoption of machine learning has created growing policy and regulatory demand for protecting sensitive training data, with differential privacy DP emerging as a key mechanism. Yet a less-studied problem is how to certify the faithful execution of DP during training: an external verifier shou...
Variational Probabilistic Quantization for Secret Key Generation
Secret key generation from correlated observations at Alice and Bob, in the presence of an eavesdropper Eve, underpins physical-layer security. Classical pipelines quantize by hand, amplify privacy afterwards, and optimize no objective tied to a key rate. We propose Variational Probabilistic...
Mechanised Operational Semantics of Rowhammer
Rowhammer is a hardware vulnerability in dynamic random-access memory DRAM in which repeated accesses to aggressor rows can induce bit-flips in victim rows. This phenomenon violates a core assumption of conventional programming language semantics: reading or writing one memory location does not...
HammerSim: A System-Level Tool to Model RowHammer
Modern architecture research relies on simulators to evaluate system security, yet analyzing emerging hardware vulnerabilities like RowHammer requires full-system visibility. As RowHammer vulnerabilities worsen with continuous technology scaling, existing simulators lack the system-level models...
Formal Verification of Probing Security Via Conditional Independence
Side-channel attacks are a major threat to the security of cryptosystems. Masking is a widely used countermeasure against such attacks, but proving the security of masked algorithms is error-prone without formal verification. In this work, we propose a novel approach to formal verification of...
Loaded Dice: Solving the Non-Selection Problem for Scalable Probabilistic RowHammer Defense
DRAM scaling has exacerbated the RowHammer vulnerability. To counter this, JEDEC recently introduced Per Row Activation Counting PRAC with the Alert Back-Off protocol as an optional DDR5 feature. While promising, PRAC requires per-row counter cells that incur area overhead, and updating them on...
UBUNTU-CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
CVE-2026-25589
RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...
Incident response for AI: Same fire, different fuel
In this article 1. The fundamentals still hold 2. Where AI changes the equation 3. Closing the gaps in telemetry, tooling, and response 4. The human dimension 5. Looking ahead When a traditional security incident hits, responders replay what happened. They trace a known code path, find the defect...
Threat modeling AI applications
Proactively identifying, assessing, and addressing risk in AI systems We cannot anticipate every misuse or emergent behavior in AI systems. We can , however, identify what can go wrong, assess how bad it could be, and design systems that help reduce the likelihood or impact of those failure modes...
Threat modeling AI applications
Proactively identifying, assessing, and addressing risk in AI systems We cannot anticipate every misuse or emergent behavior in AI systems. We can , however, identify what can go wrong, assess how bad it could be, and design systems that help reduce the likelihood or impact of those failure modes...
Toward Risk Thresholds for AI-Enabled Cyber Threats: Enhancing Decision-Making under Uncertainty with Bayesian Networks
Artificial intelligence AI is increasingly being used to augment and automate cyber operations, altering the scale, speed, and accessibility of malicious activity. These shifts raise urgent questions about when AI systems introduce unacceptable or intolerable cyber risk, and how risk thresholds...
Certified but Fooled! Breaking Certified Defences with Ghost Certificates
Certified defenses promise provable robustness guarantees. We study the malicious exploitation of probabilistic certification frameworks to better understand the limits of guarantee provisions. Now, the objective is to not only mislead a classifier, but also manipulate the certification process t...
Quantifying Security for Networked Control Systems: A Review
Networked Control Systems NCSs are integral in critical infrastructures such as power grids, transportation networks, and production systems. Ensuring the resilient operation of these large-scale NCSs against cyber-attacks is crucial for societal well-being. Over the past two decades, extensive...
AEX-NStep: Probabilistic Interrupt Counting Attacks on Intel SGX
To mitigate interrupt-based stepping attacks notably using SGX-Step, Intel introduced AEX-Notify, an ISA extension to Intel SGX that aims to prevent deterministic single-stepping. In this work, we introduce AEX-NStep, the first interrupt counting attack on AEX-Notify-enabled Enclaves. We show tha...
