Recherche

Afficher tous les résultats pour

Accueil

Personne

Mathias Josef Payer

Cette personne a quitté l’EPFL

À propos
Confidentialité
Mentions légales

Graph Chatbot

Publications associées (94)

Page 4 sur 5

GlobalConfusion: TrustZone Trusted Application 0-Days by Design

Mathias Josef Payer, Marcel Busch

Trusted Execution Environments form the backbone of mobile device security architectures. The GlobalPlatform Internal Core API is the de-facto standard that unites the fragmented landscape of real-world implementations, providing compatibility between diff ...

USENIX Association2024

Seed Selection for Successful Fuzzing

Mathias Josef Payer

Mutation-based greybox fuzzing-unquestionably the most widely-used fuzzing technique-relies on a set of non-crashing seed inputs (a corpus) to bootstrap the bug-finding process. When evaluating a fuzzer, common approaches for constructing this corpus inclu ...

ASSOC COMPUTING MACHINERY2021

Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps' Native Code

Mathias Josef Payer

Android apps include third-party native libraries to increase performance and to reuse functionality. Native code is directly executed from apps through the Java Native Interface or the Android Native Development Kit. Android developers add precompiled nat ...

IEEE COMPUTER SOC2021

FISHFUZZ: Catch Deeper Bugs by Throwing Larger Nets

Mathias Josef Payer, Flavio Toffalini, Han Zheng

Fuzzers effectively explore programs to discover bugs. Greybox fuzzers mutate seed inputs and observe their execution. Whenever a seed reaches new behavior (e.g., new code or higher execution frequency), it is stored for further mutation. Greybox fuzzers d ...

Usenix Assoc2023

Deploying Decentralized, Privacy-Preserving Proximity Tracing

Jean-Pierre Hubaux, Mathias Josef Payer, James Richard Larus, Marcel Salathé, Edouard Bugnion, Carmela González Troncoso, Apostolos Pyrgelis, Wouter Lueks, Sylvain Chatel, Theresa Stadler

2022

Single-Address-Space FaaS with Jord

Madhur Kumar, Babak Falsafi, Mathias Josef Payer, Sanidhya Kashyap, Atri Bhattacharyya, Yuanlong Li, Abhishek Bhattacharjee

Function-as-a-Service (FaaS) has emerged as a popular cloud paradigm that simplifies software development and deployment by providing scalable and event-driven function execution without the burden of managing servers. FaaS was originally created with a fu ...

ACM2025

MendelFuzz: The Return of the Deterministic Stage

Mathias Josef Payer, Flavio Toffalini, Han Zheng

Can a fuzzer cover more code with minimal corruption of the initial seed? Before a seed is fuzzed, the early greybox fuzzers first systematically enumerated slightly corrupted inputs by applying every mutation operator to every part of the seed, once per g ...

Association for Computing Machinery (ACM)2025

Igor: Crash Deduplication Through Root-Cause Clustering

Mathias Josef Payer, Ahmad Hazimeh

Fuzzing has emerged as the most effective bug-finding technique. The output of a fuzzer is a set of proof-of-concept (PoC) test cases for all observed "unique" crashes. It costs developers substantial efforts to analyze each crashing test case. This, mostl ...

ASSOC COMPUTING MACHINERY2021

BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem

Mathias Josef Payer

Xiaomi is the leading company in the fitness tracking industry. Successful attacks on its fitness tracking ecosystem would result in severe consequences, including the loss of sensitive health and personal data. Despite these relevant risks, we know very l ...

2022

Everything is Good for Something: Counterexample-Guided Directed Fuzzing via Likely Invariant Inference

Mathias Josef Payer

Directed fuzzing demonstrates the potential to reproduce bug reports, verify patches, and debug vulnerabilities. State-of-the-art directed fuzzers prioritize inputs that are more likely to trigger the target vulnerability or filter irrelevant inputs unrela ...

Institute of Electrical and Electronics Engineers Inc.2024

Evocatio: Conjuring Bug Capabilities from a Single PoC

Lucio Ezechiele Romerio, Mathias Josef Payer, Flavio Toffalini

The popularity of coverage-guided greybox fuzzers has led to a tsunami of security-critical bugs that developers must prioritize and fix. Knowing the capabilities a bug exposes (e.g., type of vulnerability, number of bytes read/written) enables prioritizat ...

Association for Computing Machinery2022

ACTOR: Action-Guided Kernel Fuzzing

Mathias Josef Payer

Fuzzing reliably and efficiently finds bugs in software, including operating system kernels. In general, higher code coverage leads to the discovery of more bugs. This is why most existing kernel fuzzers adopt strategies to generate a series of inputs that ...

Usenix Assoc2023

Tango: Extracting Higher-Order Feedback through State Inference

Mathias Josef Payer

Fuzzing is the de facto standard for automated testing. However, while coverage-guided fuzzing excels at code discovery, its effectiveness falters when applied to complex systems. One such class entails persistent targets whose behavior depends on the stat ...

Association for Computing Machinery2024

BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy

Mathias Josef Payer, Daniele Antonioli

Bluetooth is a pervasive wireless technology specified in an open standard. The standard defines Bluetooth Classic (BT) for high-throughput wireless services and Bluetooth Low Energy (BLE) very low-power ones. The standard also specifies security mechanism ...

ASSOC COMPUTING MACHINERY2022

FuzzGen: Automatic Fuzzer Generation

Mathias Josef Payer

Fuzzing is a testing technique to discover unknown vulnerabilities in software. When applying fuzzing to libraries, the core idea of supplying random input remains unchanged, yet it is non-trivial to achieve good code coverage. Libraries cannot run as stan ...

USENIX ASSOC2020

Designing a Provenance Analysis for SGX Enclaves

Mathias Josef Payer, Flavio Toffalini

SGX enclaves are trusted user-space memory regions that ensure isolation from the host, which is considered malicious. However, enclaves may suffer from vulnerabilities that allow adversaries to compromise their trustworthiness. Consequently, the SGX isola ...

ASSOC COMPUTING MACHINERY2022

GLeeFuzz: FuzzingWebGL Through Error Message Guided Mutation

Mathias Josef Payer

WebGL is a set of standardized JavaScript APIs for GPU accelerated graphics. Security of the WebGL interface is paramount because it exposes remote and unsandboxed access to the underlying graphics stack (including the native GL libraries and GPU drivers) ...

Usenix Assoc2023

Early evidence of effectiveness of digital contact tracing for SARS-CoV-2 in Switzerland

Mathias Josef Payer, James Richard Larus, Marcel Salathé, Edouard Bugnion, Carmela González Troncoso, Wouter Lueks, Theresa Stadler, Daniele Antonioli

In the wake of the pandemic of coronavirus disease 2019 (COVID-19), contact tracing has become a key element of strategies to control the spread of severe acute respiratory syndrome coronavirus-2 (SARS-CoV-2). Given the rapid and intense spread of SARS-CoV ...

E M H SWISS MEDICAL PUBLISHERS LTD2020

DP-ACT: Decentralized Privacy-Preserving Asymmetric Digital Contact Tracing

Mathias Josef Payer, Amir Aminifar

Digital contact tracing substantially improves the identification of high-risk contacts during pandemics. Despite several attempts to encourage people to use digital contact-tracing applications by developing and rolling out decentralized privacy-preservin ...

2024

ACES: Automatic compartments for embedded systems

Mathias Josef Payer

Securing the rapidly expanding Internet of Things (IoT) is critical. Many of these "things" are vulnerable bare-metal embedded systems where the application executes directly on hardware without an operating system. Unfortunately, the integrity of current ...

USENIX Association2018