Publications associées à Vulnerability management

A review of the security vulnerabilities and countermeasures in the Internet of Things solutions: A bright future for the Blockchain

The current advances in the Internet of Things (IoT) and the solutions being offered by this technology have accounted IoT among the top ten technologies that will transform the global economy by 2030. IoT is a state-of-the-art paradigm that has developed ...

2023

A Deep-Learning Approach to Side-Channel Based CPU Disassembly at Design Time

Mirjana Stojilovic

Side-channel CPU disassembly is a side-channel attack that allows an adversary to recover instructions executed by a processor. Not only does such an attack compromise code confidentiality, it can also reveal critical information on the system’s internals. ...

IEEE2022

Electrical-Level Attacks on CPUs, FPGAs, and GPUs: Survey and Implications in the Heterogeneous Era

Mirjana Stojilovic, Dina Gamaleldin Ahmed Shawky Mahmoud

Given the need for efficient high-performance computing, computer architectures combining CPUs, GPUs, and FPGAs are nowadays prevalent. However, each of these components suffers from electrical-level security risks. Moving to heterogeneous systems, with th ...

2022

FuzzGen: Automatic Fuzzer Generation

Mathias Josef Payer

Fuzzing is a testing technique to discover unknown vulnerabilities in software. When applying fuzzing to libraries, the core idea of supplying random input remains unchanged, yet it is non-trivial to achieve good code coverage. Libraries cannot run as stan ...

USENIX ASSOC2020

BIAS: Bluetooth Impersonation AttackS

Daniele Antonioli

Bluetooth (BR/EDR) is a pervasive technology for wireless communication used by billions of devices. The Bluetooth standard includes a legacy authentication procedure and a secure authentication procedure, allowing devices to authenticate to each other usi ...

IEEE COMPUTER SOC2020

FirmFuzz: Automated IoT Firmware Introspection and Analysis

Mathias Josef Payer, Hui Peng

While the number of IoT devices grows at an exhilarating pace their security remains stagnant. Imposing secure coding standards across all vendors is infeasible. Testing individual devices allows an analyst to evaluate their security post deployment. Any d ...

ASSOC COMPUTING MACHINERY2019

Vulnerability Assessment of Buildings in Ranau Township: Methodological Design

Pierino Lestuzzi, Noor Sheena Herayani Harith

Structural damage usually happens during earthquake events. This had caused damage of properties and even worse, loss of lives. Usually, the greatest losses were not caused by the quake specifically, but rather because of the fall of the structures. The vu ...

UKM PRESS2019

High anxiety trait: A vulnerable phenotype for stress-induced depression

Maria del Carmen Sandi Perez, Meltem Weger

A great deal of research aims to identify risk factors related to individual vulnerability to develop stress-induced psychopathologies. Here, we summarize evidence that point at anxiety trait as a significant contributor to inter-individual differences in ...

2018

Some Proofs of Conditional and Joint Biases in RC4 Stream Cipher

Subhadeep Banik

In this paper we present proofs for the new biases in RC4 which were experimentally found and listed out (without theoretical justifi- cations and proofs) in a paper by Vanhoef et al. in USENIX 2015. Their purpose was to exploit the vulnerabilities of RC4 ...

2018

Theoretical Understanding of Some Conditional and Joint Biases in RC4 Stream Cipher

Subhadeep Banik

In this paper we present proofs for the new biases in RC4 which were experimentally found and listed out (without theoretical justifications and proofs) in a paper by Vanhoef et al. in USENIX 2015. Their purpose was to exploit the vulnerabilities of RC4 in ...

IEICE-INST ELECTRONICS INFORMATION COMMUNICATIONS ENG2018

Governing Cybersecurity Risks and Benefits of the Internet of Things: Connected Medical and Health Devices and Connected Vehicles

Marie-Valentine Renée Agnès Florin

IRGC organised in 2016 an expert workshop on 'Governing Cybersecurity Risks and Benefits in the Internet of Things (IoT), applied to connected vehicles and medical devices. In those sectors, connectivity improves both safety and vulnerability, but cybersec ...

International Risk Governance Center2017

Cybersecurity Solutions for Active Power Distribution Networks

Teklemariam Tsegay Tesfay

An active distribution network (ADN) is an electrical-power distribution network that implements a real-time monitoring and control of the electrical resources and the grid. Effective monitoring and control is realised by deploying a large number of sensin ...

EPFL2017

High System-Code Security with Low Overhead

George Candea, Johannes Kinder, Volodymyr Kuznetsov, Jonas Benedict Wagner

Security vulnerabilities plague modern systems because writing secure systems code is hard. Promising approaches can retrofit security automatically via runtime checks that implement the desired security policy; these checks guard critical operations, like ...

2015

L’invention partagée (Michel Lussault, L’avènement du Monde)

Jacques Lévy

"L’avènement du Monde" by Michel Lussault offers a substantial and innovative spatial theory of an object, the World. Space is addressed both as a technical system and a society, and each of these approaches generates an overall, panoramic view. In additio ...

Association Espaces Temps2015

Buffer overlow vulnerabilities in CUDA: a preliminary analysis

Andrea Miele

We present a preliminary study of buffer overflow vulnerabilities in CUDA software running on GPUs. We show how an attacker can overrun a buffer to corrupt sensitive data or steer the execution flow by overwriting function pointers, e.g., manipulating the ...

Springer France2015

Security Vulnerabilities of the Cisco IOS Implementation of the MPLS Transport Profile

Jean-Yves Le Boudec, Sergio Barreto Andrade, Teklemariam Tsegay Tesfay, Udaya Upul Kumara Jayasinghe, Miroslav Popovic

We are interested in the security of the MPLS Transport Profile (MPLS-TP), in the context of smart-grid communication networks. The security guidelines of the MPLS-TP standards are written in a complex and indirect way, which led us to pose as hypothesis t ...

2014

Sustainable Land Use in Mountain Regions Under Global Change: Synthesis Across Scales and Disciplines

Alexandre Buttler, François Gillet, Adrienne Grêt-Regamey, Thomas Spiegelberger, Heike Lischke

Mountain regions provide essential ecosystem goods and services (EGS) for both mountain dwellers and people living outside these areas. Global change endangers the capacity of mountain ecosystems to provide key services. The Mountland project focused on th ...

Resilience Alliance2013

On the vulnerability Analysis against IEMI

Marcos Rubinstein, Farhad Rachidi-Haeri, Sidi-Rachid Cherkaoui, Nicolas Mora Parra, Gaspard Lugrin

Vulnerability is estimated in terms of the effects that IEMI may induce to the services provided by the facility under study. We estimate the vulnerability by considering three variables: the likelihood, the risk, and the hardness. The different parameters ...

2012

Resting-state networks in adolescents with 22q11.2 deletion syndrome: Associations with prodromal symptoms and executive functions

Dimitri Nestor Alice Van De Ville, Maude Schneider

Atypical functional connectivity in the maturing brains of 22q11.2 deletion syndrome (22q11DS) may contribute to the expression of early psychotic symptoms commonly reported by these youths. This study's objective was to examine functional connectivity in ...

Elsevier2012

Automated Vulnerability Discovery in Distributed Systems

Rachid Guerraoui, George Candea, Radu Banabic

In this paper we present a technique for automatically assessing the amount of damage a small number of participant nodes can inﬂict on the overall performance of a large distributed system. We propose a feedback-driven tool that synthesizes malicious node ...

2011