Mathias Josef Payer

About
Privacy
Disclaimer

Graph Chatbot

Related publications (94)

Tango: Extracting Higher-Order Feedback through State Inference

Fuzzing is the de facto standard for automated testing. However, while coverage-guided fuzzing excels at code discovery, its effectiveness falters when applied to complex systems. One such class entails persistent targets whose behavior depends on the stat ...

Association for Computing Machinery2024

HYPERPILL: fuzzing for hypervisor-bugs by leveraging the hardware virtualization interface

Mathias Josef Payer

The security guarantees of cloud computing depend on the isolation guarantees of the underlying hypervisors. Prior works have presented effective methods for automatically identifying vulnerabilities in hypervisors. However, these approaches are limited in ...

USENIX Association2024

DP-ACT: Decentralized Privacy-Preserving Asymmetric Digital Contact Tracing

Mathias Josef Payer, Amir Aminifar

Digital contact tracing substantially improves the identification of high-risk contacts during pandemics. Despite several attempts to encourage people to use digital contact-tracing applications by developing and rolling out decentralized privacy-preservin ...

2024

GlobalConfusion: TrustZone Trusted Application 0-Days by Design

Mathias Josef Payer, Marcel Busch

Trusted Execution Environments form the backbone of mobile device security architectures. The GlobalPlatform Internal Core API is the de-facto standard that unites the fragmented landscape of real-world implementations, providing compatibility between diff ...

USENIX Association2024

Gradient: Gradual Compartmentalization via Object Capabilities Tracked in Types

Mathias Josef Payer, Clément Pit-Claudel

Modern software needs fine-grained compartmentalization, i.e., intra-process isolation. A particularly important reason for it are supply-chain attacks, the need for which is aggravated by modern applications depending on hundreds or even thousands of libr ...

ASSOC COMPUTING MACHINERY2024

Spill the TeA: an empirical study of trusted application rollback prevention on android smartphones

Mathias Josef Payer, Marcel Busch

The number and complexity of Trusted Applications (TAs, applications running in Trusted Execution Environments— TEEs) deployed on mobile devices has exploded. A vulnerability in a single TA impacts the security of the entire device. Thus, vendors must rapi ...

USENIX Association2024

Everything is Good for Something: Counterexample-Guided Directed Fuzzing via Likely Invariant Inference

Mathias Josef Payer

Directed fuzzing demonstrates the potential to reproduce bug reports, verify patches, and debug vulnerabilities. State-of-the-art directed fuzzers prioritize inputs that are more likely to trigger the target vulnerability or filter irrelevant inputs unrela ...

Institute of Electrical and Electronics Engineers Inc.2024

Top of the Heap: Efficient Memory Error Protection of Safe Heap Objects

Mathias Josef Payer

Heap memory errors remain a major source of software vulnerabilities. Existing memory safety defenses aim at protecting all objects, resulting in high performance cost and incomplete protection. Instead, we propose an approach that accurately identifies ob ...

Association for Computing Machinery, Inc2024

SyzRisk: A Change-Pattern-Based Continuous Kernel Regression Fuzzer

Mathias Josef Payer

Syzbot continuously fuzzes the full Linux kernel to discover latent bugs. Yet, around 75% of recent kernel bugs are caused by recent patches, dubbed regression bugs. Regression fuzzing prioritizes inputs that target recently or frequently patched code. How ...

Association for Computing Machinery, Inc2024

Comprehensive Memory Safety Validation: An Alternative Approach to Memory Safety

Mathias Josef Payer

Comprehensive memory safety validation identifies the memory objects whose accesses provably comply with all classes of memory safety, protecting them from memory errors elsewhere at low overhead. We assess the breadth and depth of comprehensive memory saf ...

Ieee Computer Soc2024

Page 2 of 10