Cyber attacks against IoT devices are a severe threat. These attacks exploit software
vulnerabilities in IoT firmware. Fuzzing is an effective software testing technique for finding …

Dynamic binary analysis techniques play a central role to study the security of software
systems and detect vulnerabilities in a broad range of devices and applications. Over the …

Serverless computing is a popular cloud computing paradigm that frees developers from
server management. Function-as-a-Service (FaaS) is the most popular implementation of …

We present PANDA, an open-source tool that has been purpose-built to support whole
system reverse engineering. It is built upon the QEMU whole system emulator, and so …

A rising number of embedded devices are reachable in the cyberspace, such as routers,
cameras, printers, etc. Those devices usually run firmware whose code is proprietary with …

Greybox fuzzing has become one of the most effective vulnerability discovery techniques.
However, greybox fuzzing techniques cannot be directly applied to applications in IoT …

Software patching is a crucial mitigation approach against Spectre-type attacks. It utilizes
serialization instructions to disable speculative execution of potential Spectre gadgets in a …

Owing to the popularity of the PDF format and the continued exploitation of Adobe Reader,
the detection of malicious PDFs remains a concern. All existing detection techniques rely on …

Kernel data structure detection is an important task in memory forensics that aims at
identifying semantically important kernel data structures from raw memory dumps. It is …

Defending against malware involves analysing large amounts of suspicious samples. To
deal with such quantities we rely heavily on automatic approaches to determine whether a …