My paper list to read


  • Peizhe Cheng, Shuaiqiang Wang, Jun Ma, Jiankai Sun and Hui Xiong. Learning to Recommend Accurate and Diverse Items. The 26th International World Wide Web Conference (WWW)
  • Dimitrios Serbos, Shuyao Qi, Nikos Mamoulis, Evaggelia Pitoura and Panayiotis Tsaparas. Fairness in Package-to-Group Recommendations
  • Exploring Rated Datasets with Rating Maps






A Large-scale Analysis of the Mnemonic Password Advice
Show Me the Money! Finding Flawed Implementations of Third-party In-app Payment in Android Apps


A Call to ARMs: Understanding the Costs and Benefits of JIT Spraying Mitigations
Internet-scale Probing of CPS: Inference, Characterization and Orchestration Analysis
Dachshund: Digging for and Securing (Non-)Blinded Constants in JIT Code


Ramblr: Making Reassembly Great Again
BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments
A Broad View of the Ecosystem of Socially Engineered Exploit Documents
Dark Hazard: Learning-based, Large-Scale Discovery of Hidden Sensitive Operations in Android Apps
ASLR on the Line: Practical Cache Attacks on the MMU
Hey, My Malware Knows Physics! Attacking PLCs with Physical Model Aware Rootkit
Wi-Fly?: Detecting Privacy Invasion Attacks by Consumer Drones
HOP: Hardware makes Obfuscation Practical
TenantGuard: Scalable Runtime Verification of Cloud-Wide VM-Level Network Isolation
Broken Hearted: How To Attack ECG Biometrics


DELTA: A Security Assessment Framework for Software-Defined Networks
Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis
A2C: Self Destructing Exploit Executions via Input Perturbation
Address Oblivious Code Reuse: On the Effectiveness of Leakage Resilient Diversity


You are Who You Know and How You Behave: Attribute Inference Attacks via Users’ Social Friends and Behaviors 

Stealing Machine Learning Models via Prediction APIs

FlowFence: Practical Data Protection for Emerging IoT Application Frameworks

Towards Measuring and Mitigating Social Engineering Malware Download Attacks

Specification Mining for Intrusion Detection in Networked Control Systems

APISan: Sanitizing API Usages through Semantic Cross-checking

Undermining Entropy-based Information Hiding (And What to do About it)

zxcvbn: Low-Budget Password Strength Estimation

Mirror: Enabling Proofs of Data Replication and Retrievability in the Cloud

ARMageddon: Cache Attacks on Mobile Devices 

Hidden Voice Commands

OblivP2P: An Oblivious Peer-to-Peer Content Sharing System

AuthLoop: End-to-End Cryptographic Authentication for Telephony over Voice Channels

Trusted Browsers for Uncertain Times

Virtual U: Defeating Face Liveness Detection by Building Virtual Models From Your Public Photos

One Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks and Privilege Escalation

All Your Queries Are Belong to Us:The Power of File-Injection Attacks on Searchable Encryption

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks

SGX-Enabled Oblivious Machine Learning

Poking Holes into Information Hiding

Off-Path TCP Exploits: Global Rate Limit Considered Dangerous

Request and Conquer: Exposing Cross-Origin Resource Size


WebPerf: Evaluating What-If Scenarios for Cloud-hosted Web Applications

Taking the Blame Game out of Data Centers Operations with NetPoirot 

Accurate Spear Phishing Campaign Attribution and Early Detection

Rich Cloud-Based Web Applications with CloudBrowser 2.0 
Controlling the Elasticity of Web Applications on Cloud Computing


StormDroid: A Streaminglized Machine Learning-based System for Detecting Android Malware

Bilateral-secure Signature by Key Evolving

Efficient Authenticated Multi-Pattern Matching

Attestation Transparency: Building secure Internet services for legacy clients

Congesting the Internet with Coordinated And Decentralized Pulsating Attacks

Privacy and Utility of Inference Control Mechanisms for Social Computing Applications

StemJail: Dynamic Role Compartmentalization

Your Credentials Are Compromised, Do Not Panic: You Can Be Well Protected

Power-aware Checkpointing: Toward the Optimal Checkpointing Interval under Power Capping

A Sharper Sense of Self: Probabilistic Reasoning of Program Behaviors for Anomaly Detection with Context Sensitivity

Characterizing the Consistency of Online Services

Balancing Security and Performance for Agility in Dynamic Threat Environments
Specification Mining for Intrusion Detection in Networked Control Systems

CCS 2016
SmartWalk: Enhancing Social Network Security via Adaptive Random Walks

Acing the IOC Game: Toward Automatic Discovery and Analysis of Open-Source Cyber Threat Intelligence

Content Security Problems? Evaluating the Effectiveness of Content Security Policy in the Wild

CSP is Dead, Long Live CSP: On the Insecurity of Whitelists and the Future of the Content Security Policy

CSPAutoGen: Black-box Enforcement of Content Security Policy upon Real-World Websites

A EpicRec: Towards Practical Differentially Private Framework for Personalized Recommendation

Generic Attacks on Secure Outsourced Databases

Identifying the Scanners and Attack Infrastructure behind Amplification DDoS attacks

Lurking Malice in the Cloud: Understanding and Detecting Cloud Repository as a Malicious Service

Leave a Reply