Recent & Upcoming Talks

Although Rust is safer and more modern than C/C++, it is still difficult to justify the cost of migrating existing, mature systems …
Aug 20, 2018 10:49 PM Portland, Oregon, USA
PDF Code

Featured Publications

The C and C++ programming languages are notoriously insecure yet remain indispensable. Developers therefore resort to a multi-pronged …
Dokyung Song Julian Lettner Prabhu Rajasekaran Yeoul Na Stijn Volckaert Per Larsen Michael Franz
To appear in SP 2019
Preprint

Code-reuse attacks continue to evolve and remain a severe threat to modern software. Recent research has proposed a variety of defenses …
Stephen Crane Stijn Volckaert Felix Schuster Christopher Liebchen Per Larsen Lucas Davi Ahmad-Reza Sadeghi Thorsten Holz Bjorn De Sutter Michael Franz
In CCS
PDF

Adversaries exploit memory corruption vulnerabilities to hijack a program’s control flow and gain arbitrary code execution. One …
Mauro Conti Stephen Crane Lucas Davi Michael Franz Per Larsen Marco Negro Christopher Liebchen Mohaned Qunaibit Ahmad-Reza Sadeghi
In CCS
PDF

Code-reuse attacks such as return-oriented programming (ROP) pose a severe threat to modern software. Designing practical and effective …
Stephen Crane Christopher Liebchen Andrei Homescu Lucas Davi Per Larsen Ahmad-Reza Sadeghi Stefan Brunthaler Michael Franz
In SP
PDF Video

Memory corruption vulnerabilities not only allow modification of control data and injection of malicious payloads; they also allow …
Robert Rudd Richard Skowyra David Bigelow Veer Dedhia Thomas Hobson Stephen Crane Christopher Liebchen Per Larsen Lucas Davi Michael Franz Ahmad-Reza Sadeghi Hamed Okhravi
In NDSS
PDF Slides Video

A new binary software randomization and Control-Flow Integrity (CFI) enforcement system is presented, which is the first to resist …
Vishwath Mohan Per Larsen Stefan Brunthaler Kevin W Hamlen Michael Franz
In NDSS
PDF Slides

We explore software diversity as a defense against side-channel attacks by dynamically and systematically randomizing the control flow …
Stephen Crane Andrei Homescu Stefan Brunthaler Per Larsen Michael Franz
In NDSS
PDF Slides

The idea of automatic software diversity is at least two decades old. The deficiencies of currently deployed defenses and the …
Per Larsen Andrei Homescu Stefan Brunthaler Michael Franz
In SP
PDF

Just-in-time compilers (JITs) are here to stay. Unfortunately, they also provide new capabilities to cyber attackers, namely the …
Andrei Homescu Stefan Brunthaler Per Larsen Michael Franz
In CCS
PDF

Code-reuse attacks are notoriously hard to defeat, and most current solutions to the problem focus on automated software diversity. …
Andrei Homescu Steven Neisius Per Larsen Stefan Brunthaler Michael Franz
In CGO
PDF

Contact

  • perl@uci.edu
  • ICS1, University of California, Irvine, 92697, USA