Home

SoK: Towards a Unified Approach of Applied Replicability for Computer Security
Addresses shortcomings of validity practices within the Cybersecurity academic community, using best practices from other fields and novel contributions to propose a universal framework to represent how authors provide artifacts from their work to external members of the community.

Marlin
Proposes a solution to detecting fake cellular base stations (“IMSI-Catchers”), based on their behavior rather than configuration. We profile both commercial cell towers and controlled IMSI-Catchers, then detect a rogue tower in the wild matching the latter profile, becoming the first academic work to substantiate findings of rogue cellular base stations in the wild.

"Better Be Computer or I’m Dumb"
Runs a 1000+ participant user study to find out how well humans perform at recognizing audio deepfakes (i.e., average accuracy of 73\%), why they classify an audio sample as real or fake, and how their performance compares to ML-based detectors.

SoK: The Good, The Bad, and The Unbalanced
Reveals weaknesses in how audio deepfake competitions and datasets are carried out, then suggestd that detectors present sufficient performance metrics while dataset designers consider the base rate of deepfake audio samples.

Blue's Clues
Provides a complete break of Bluetooth Classic's Non-Discoverable mode by retransmitting wirelessly recovered MAC addresses, which leads to DoS attacks and packet injection against unauthenticated devices.

LeopardSeal
Introduces a new technique for detecting Audio Rouge Base Stations (ARBSs) in the wild using distance-bounding over the audio channel of a phone call, and tested this detection mechanism between dozens of cities throughout the United States.

FirmWire
Provides the first full-system emulation platform for baseband processors, uncovering four previously unknown vulnerabilities for LTE and GSM networks.