BACScan: Automatic Black-Box Detection of Broken-Access-Control Vulnerabilities in Web ApplicationsFengyu Liu, Yuan Zhang, Enhao Li et al.
Fengyu Liu, Yuan Zhang, Enhao Li et al.
BadAML: Exploiting Legacy Firmware Interfaces to Compromise Confidential Virtual MachinesSatoru Takekoshi, Manami Mori, Takaaki Fukai et al.
Satoru Takekoshi, Manami Mori, Takaaki Fukai et al.
CITesting: Systematic Testing of Context Integrity Violations in Cellular Core NetworksMincheol Son, Kwangmin Kim, Beomseok Oh et al.
Mincheol Son, Kwangmin Kim, Beomseok Oh et al.
DivTrackee versus DynTracker: Promoting Diversity in Anti-Facial Recognition against Dynamic FR StrategyWenshu Fan, Minxing Zhang, Hongwei Li et al.
Wenshu Fan, Minxing Zhang, Hongwei Li et al.
Don't Look Up: There Are Sensitive Internal Links in the Clear on GEO SatellitesWenyi (Morty) Zhang, Annie Dai, Keegan Ryan et al.
Wenyi (Morty) Zhang, Annie Dai, Keegan Ryan et al.
Empirical Security Analysis of Software-based Fault Isolation through Controlled Fault InjectionNils Bars, Lukas Bernhard, Moritz Schloegel et al.
Nils Bars, Lukas Bernhard, Moritz Schloegel et al.
Exact Robustness Certification of k-Nearest NeighborsFrancesco Ranzato, Ahmad Shakeel, Marco Zanella
Francesco Ranzato, Ahmad Shakeel, Marco Zanella
Forking the RANDAO: Manipulating Ethereum's Distributed Randomness BeaconÁbel Nagy, János Tapolcai, Bence Ladóczki et al.
Ábel Nagy, János Tapolcai, Bence Ladóczki et al.
From OT to OLE with Subquadratic CommunicationJack Doerner, Iftach Haitner, Yuval Ishai et al.
Jack Doerner, Iftach Haitner, Yuval Ishai et al.
Harnessing Sparsification in Federated Learning: A Secure, Efficient, and Differentially Private RealizationShuangqing Xu, Yifeng Zheng, Zhongyun Hua
Shuangqing Xu, Yifeng Zheng, Zhongyun Hua
Harnessing Vital Sign Vibration Harmonics for Effortless and Inbuilt XR User AuthenticationTianfang Zhang, Qiufan Ji, Md Mojibur Rahman Redoy Akanda et al.
Tianfang Zhang, Qiufan Ji, Md Mojibur Rahman Redoy Akanda et al.
High-Throughput Universally Composable Threshold FHE DecryptionGuy Zyskind, Doron Zarchy, Max Leibovich et al.
Guy Zyskind, Doron Zarchy, Max Leibovich et al.
Jazzline: Composable CryptoLine functional correctness proofs for Jasmin programsJosé Bacelar Almeida, Manuel Barbosa, Gilles Barthe et al.
José Bacelar Almeida, Manuel Barbosa, Gilles Barthe et al.
Layered, Overlapping, and Inconsistent: A Large-Scale Analysis of the Multiple Privacy Policies and Controls of U.S. BanksLu Xian, Van Tran, Lauren Lee et al.
Lu Xian, Van Tran, Lauren Lee et al.
Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS AppsDavid Schmidt, Sebastian Schrittwieser, Edgar Weippl
David Schmidt, Sebastian Schrittwieser, Edgar Weippl
Looping for Good: Cyclic Proofs for Security ProtocolsFelix Linker, Christoph Sprenger, Cas Cremers et al.
Felix Linker, Christoph Sprenger, Cas Cremers et al.
On the Security of SSH Client SignaturesFabian Bäumer, Marcus Brinkmann, Maximilian Radoy et al.
Fabian Bäumer, Marcus Brinkmann, Maximilian Radoy et al.
Optimistic, Signature-Free Reliable Broadcast and Its ApplicationsNibesh Shrestha, Qianyu Yu, Aniket Kate et al.
Nibesh Shrestha, Qianyu Yu, Aniket Kate et al.
PAnDA: Rethinking Metric Differential Privacy Optimization at Scale with Anchor-Based ApproximationRuiyao Liu, Chenxi Qiu
Ruiyao Liu, Chenxi Qiu
Rethinking Tamper-Evident Logging: A High-Performance, Co-Designed Auditing SystemRui Zhao, Muhammad Shoaib, Viet Tung Hoang et al.
Rui Zhao, Muhammad Shoaib, Viet Tung Hoang et al.
RingSG: Optimal Secure Vertex-Centric Computation for Collaborative Graph ProcessingZhenhua Zou, Zhuotao Liu, Jinyong Shan et al.
Zhenhua Zou, Zhuotao Liu, Jinyong Shan et al.
Sliced PIR: Offloading Heavyweight Work with NTTJonathan Weiss, Yossi Gilad
Jonathan Weiss, Yossi Gilad
Split UnlearningYanna Jiang, Guangsheng Yu, QIN WANG et al.
Yanna Jiang, Guangsheng Yu, QIN WANG et al.
SyzSpec: Specification Generation for Linux Kernel Fuzzing via Under-Constrained Symbolic ExecutionYu Hao, Juefei Pu, Xingyu Li et al.
Yu Hao, Juefei Pu, Xingyu Li et al.
The OCH Authenticated Encryption SchemeSanketh Menda, Mihir Bellare, Viet Tung Hoang et al.
Sanketh Menda, Mihir Bellare, Viet Tung Hoang et al.
The Odyssey of robots.txt Governance: Measuring Convention Implications of Web Bots in Large Language Model ServicesJian Cui, Mingming Zha, XiaoFeng Wang et al.
Jian Cui, Mingming Zha, XiaoFeng Wang et al.
WireTap: Breaking Server SGX via DRAM Bus InterpositionAlex Seto, Oytun Kuday Duran, Samy Amer et al.
Sources: each organizer's own list, linked on every winner, read monthly in each award's announcement window. A list is the organizer's judgment, not ours. Logos via logo.dev; trademarks belong to their owners.
Award winners by email
At most once a month, only when a tracked award or list has published new winners.
