Lingolol

Vasileios KemerlisAs we welcome 2025, I'd like to take a moment to reflect on what an extraordinary year 2024 has been for Brown CS Secure Systems Lab (<a href="https://gitlab.com/brown-ssl/" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/</a>). It has been a year of innovation, creativity, and growth—both for the lab and for me personally as its director. Witnessing the passion, dedication, and brilliance of our team—Neophytos Christou, Alexander Gaidis, Marius Momeu, <a href="https://mastodon.social/@dijin" class="u-url mention" rel="nofollow noopener" target="_blank">@dijin</a>, and Vaggelis Atlidakis—has been truly fulfilling and inspiring!In 2024, we tackled complex challenges and made significant strides in advancing our research on software hardening and OS kernel protection. Here are some highlights from this remarkable year:✳️ Marius Momeu presented <a href="https://infosec.exchange/tags/SafeSlab" class="mention hashtag" rel="nofollow noopener" target="_blank">#SafeSlab</a> at <a href="https://mastodon.acm.org/@acm_ccs" class="u-url mention" rel="nofollow noopener" target="_blank">@acm_ccs</a> <a href="https://infosec.exchange/tags/CCS2024" class="mention hashtag" rel="nofollow noopener" target="_blank">#CCS2024</a>. Safeslab hardens the Linux SLUB allocator against exploits that abuse use-after-free (<a href="https://infosec.exchange/tags/UaF" class="mention hashtag" rel="nofollow noopener" target="_blank">#UaF</a>) vulnerabilities, using <a href="https://infosec.exchange/tags/Intel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Intel</a> <a href="https://infosec.exchange/tags/MPK" class="mention hashtag" rel="nofollow noopener" target="_blank">#MPK</a>. (Joint work with Technical University of Munich and <a href="https://infosec.exchange/@mikepo" class="u-url mention" rel="nofollow noopener" target="_blank">@mikepo</a>.) 📄 <a href="https://cs.brown.edu/~vpk/papers/safeslab.ccs24.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/safeslab.ccs24.pdf</a> 💾 <a href="https://github.com/tum-itsec/safeslab" rel="nofollow noopener" translate="no" target="_blank">https://github.com/tum-itsec/safeslab</a>✳️ Neophytos Christou presented <a href="https://infosec.exchange/tags/Eclipse" class="mention hashtag" rel="nofollow noopener" target="_blank">#Eclipse</a> at <a href="https://mastodon.acm.org/@acm_ccs" class="u-url mention" rel="nofollow noopener" target="_blank">@acm_ccs</a> <a href="https://infosec.exchange/tags/CCS2024" class="mention hashtag" rel="nofollow noopener" target="_blank">#CCS2024</a>. Eclipse is a compiler-assisted framework that propagates artificial data dependencies onto sensitive data, preventing the CPU from using attacker-controlled input during speculative execution. 📄 <a href="https://cs.brown.edu/~vpk/papers/eclipse.ccs24.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/eclipse.ccs24.pdf</a> 💾 <a href="https://gitlab.com/brown-ssl/eclipse" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/eclipse</a>✳️ Di Jin presented <a href="https://infosec.exchange/tags/BeeBox" class="mention hashtag" rel="nofollow noopener" target="_blank">#BeeBox</a> at the <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener" target="_blank">@usenixassociation</a> Security Symposium 2024. BeeBox hardens <a href="https://infosec.exchange/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> BPF/eBPF against transient execution attacks. <a href="https://infosec.exchange/tags/usesec24" class="mention hashtag" rel="nofollow noopener" target="_blank">#usesec24</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/beebox.sec24.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/beebox.sec24.pdf</a> 💾 <a href="https://gitlab.com/brown-ssl/beebox" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/beebox</a>✳️ Yaniv David presented <a href="https://infosec.exchange/tags/Quack" class="mention hashtag" rel="nofollow noopener" target="_blank">#Quack</a> at the NDSS Symposium 2024. Quack hardens PHP code against deserialization attacks using a novel (static) duck typing-based approach. (Joint work with Andreas D Kellas and Junfeng Yang.) <a href="https://infosec.exchange/tags/NDSSsymposium2024" class="mention hashtag" rel="nofollow noopener" target="_blank">#NDSSsymposium2024</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/quack.ndss24.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/quack.ndss24.pdf</a> 💾 <a href="https://github.com/columbia/quack" rel="nofollow noopener" translate="no" target="_blank">https://github.com/columbia/quack</a>✳️ Marius Momeu presented <a href="https://infosec.exchange/tags/ISLAB" class="mention hashtag" rel="nofollow noopener" target="_blank">#ISLAB</a> at <a href="https://mastodon.acm.org/@ACM" class="u-url mention" rel="nofollow noopener" target="_blank">@ACM</a> <a href="https://infosec.exchange/tags/ASIACCS24" class="mention hashtag" rel="nofollow noopener" target="_blank">#ASIACCS24</a>. ISLAB hardens SLAB-based (kernel) allocators, against memory errors, via SMAP-assisted isolation. (Joint work with Technical University of Munich and <a href="https://infosec.exchange/@mikepo" class="u-url mention" rel="nofollow noopener" target="_blank">@mikepo</a>.) <a href="https://infosec.exchange/tags/asiaccs" class="mention hashtag" rel="nofollow noopener" target="_blank">#asiaccs</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf</a> 💾 <a href="https://github.com/tum-itsec/islab" rel="nofollow noopener" translate="no" target="_blank">https://github.com/tum-itsec/islab</a>🏆 <a href="https://infosec.exchange/tags/EPF" class="mention hashtag" rel="nofollow noopener" target="_blank">#EPF</a> (presented by Di Jin at <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener" target="_blank">@usenixassociation</a> <a href="https://infosec.exchange/tags/ATC" class="mention hashtag" rel="nofollow noopener" target="_blank">#ATC</a> 2023) was the runner-up for the "Bug of the Year" award ("Weirdest Machine" category) at IEEE Symposium on Security and Privacy LangSec (Language-Theoretic Security) workshop 2024! <a href="https://infosec.exchange/tags/atc23" class="mention hashtag" rel="nofollow noopener" target="_blank">#atc23</a> <a href="https://infosec.exchange/tags/LangSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#LangSec</a> ⌨️ <a href="https://langsec.org/spw24/bugs-of-the-year-awards.html" rel="nofollow noopener" translate="no" target="_blank">https://langsec.org/spw24/bugs-of-the-year-awards.html</a> 📄 <a href="https://cs.brown.edu/~vpk/papers/epf.atc23.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/epf.atc23.pdf</a> 💾 <a href="https://gitlab.com/brown-ssl/epf" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/epf</a>🏅 I am honored and delighted to have received the "Distinguished Reviewer Award" at <a href="https://mastodon.acm.org/@acm_ccs" class="u-url mention" rel="nofollow noopener" target="_blank">@acm_ccs</a> <a href="https://infosec.exchange/tags/CCS2024" class="mention hashtag" rel="nofollow noopener" target="_blank">#CCS2024</a>!🏅Alexander Gaidis has been awarded the "Distinguished Artifact Reviewer" award at the <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener" target="_blank">@usenixassociation</a> Security Symposium 2024! <a href="https://cs.brown.edu/news/2024/09/20/brown-cs-phd-student-alexander-j-gaidis-has-been-named-a-usenix-security-2024-distinguished-artifact-reviewer/" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/news/2024/09/20/brown-cs-phd-student-alexander-j-gaidis-has-been-named-a-usenix-security-2024-distinguished-artifact-reviewer/</a> <a href="https://infosec.exchange/tags/usesec24" class="mention hashtag" rel="nofollow noopener" target="_blank">#usesec24</a> <a href="https://infosec.exchange/tags/proudadvisor" class="mention hashtag" rel="nofollow noopener" target="_blank">#proudadvisor</a>📢 I had the great pleasure of discussing some of these works recently at the Computer Systems Seminar at Boston University! 📽️ <a href="https://www.bu.edu/rhcollab/events/bu-systems-bu%E2%99%BAs-seminar/" rel="nofollow noopener" translate="no" target="_blank">https://www.bu.edu/rhcollab/events/bu-systems-bu%E2%99%BAs-seminar/</a><a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/browncs" class="mention hashtag" rel="nofollow noopener" target="_blank">#browncs</a> 🚀

Vasileios KemerlisMarius Momeu at <a href="https://mastodon.acm.org/@ACM" class="u-url mention" rel="nofollow noopener" target="_blank">@ACM</a> ASIA CCS 2024 presenting our work on hardening SLAB-based (kernel) allocators, against memory errors, via SMAP-assisted isolation -- joint work with <a href="https://wisskomm.social/@tu_muenchen" class="u-url mention" rel="nofollow noopener" target="_blank">@tu_muenchen</a>, Sergej Proskurin, and <a href="https://infosec.exchange/@mikepo" class="u-url mention" rel="nofollow noopener" target="_blank">@mikepo</a> | <a href="https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf</a> | <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/islab" class="mention hashtag" rel="nofollow noopener" target="_blank">#islab</a>

Vasileios KemerlisIt's official now, I got tenure 😎 🤘. I'm beyond grateful to all my students, collaborators, mentors, letter writers, and colleagues that made this happen -- thank you all!! <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://cs.brown.edu/news/2024/05/20/vasileios-kemerlis-and-ellie-pavlick-receive-promotions/" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/news/2024/05/20/vasileios-kemerlis-and-ellie-pavlick-receive-promotions/</a>

Vasileios Kemerlis📢 Off to <a href="https://infosec.exchange/tags/Copenhagen" class="mention hashtag" rel="nofollow noopener" target="_blank">#Copenhagen</a>, <a href="https://infosec.exchange/tags/Denmark" class="mention hashtag" rel="nofollow noopener" target="_blank">#Denmark</a> for <a href="https://infosec.exchange/tags/acm_ccs" class="mention hashtag" rel="nofollow noopener" target="_blank">#acm_ccs</a> 2023! Alexander Gaidis will be presenting our work on adaptive system call filtering (SysXCHG) in session 6D (Kernel & Syscalls) -- Nov 28, 3PM-4PM. <a href="https://cs.brown.edu/~vpk/papers/sysxchg.ccs23.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/sysxchg.ccs23.pdf</a> | <a href="https://gitlab.com/brown-ssl/sysxchg" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/sysxchg</a> | <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/sysxchg" class="mention hashtag" rel="nofollow noopener" target="_blank">#sysxchg</a>

Vasileios Kemerlis📢 Alexander Gaidis presented our (joint with Intel STORM team) work on FineIBT earlier this week at RAID 2023! FineIBT enhances forward-edge, hardware-assisted CFI schemes, like Intel IBT, with fine-grain enforcement capabilities. <a href="https://cs.brown.edu/~vpk/papers/fineibt.raid23.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/fineibt.raid23.pdf</a> | <a href="https://gitlab.com/brown-ssl/fineibt" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/fineibt</a> | <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/fineibt" class="mention hashtag" rel="nofollow noopener" target="_blank">#fineibt</a>

Vasileios KemerlisBrown Secure Systems Lab (<a href="https://gitlab.com/brown-ssl/" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/</a>) had a strong representation <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener" target="_blank">@usenixassociation</a> sponsored events this year! Neophytos Christou presented IvySyn at USENIX Security Symposium (SEC) '23, while Di Jin talked about EPF at USENIX Annual Technical Conference (ATC) '23 earlier in July!IvySyn fuzzes Deep Learning (DL) frameworks (TensorFlow, PyTorch) for memory-safety bugs and automatically synthesizes Python code snippets for triggering the respective vulnerabilities | <a href="https://www.usenix.org/.../usenixse.../presentation/christou" rel="nofollow noopener" translate="no" target="_blank">https://www.usenix.org/.../usenixse.../presentation/christou</a> | <a href="https://gitlab.com/brown-ssl/ivysyn" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/ivysyn</a>EPF (ab)uses the (e)BPF interpreter for bypassing various kernel hardening mechanisms in Linux -- we also introduce a set of lightweight defenses against EPF-style attacks | <a href="https://www.usenix.org/conference/atc23/presentation/jin" rel="nofollow noopener" translate="no" target="_blank">https://www.usenix.org/conference/atc23/presentation/jin</a> | <a href="https://gitlab.com/brown-ssl/epf" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/epf</a><a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/ivysyn" class="mention hashtag" rel="nofollow noopener" target="_blank">#ivysyn</a> <a href="https://infosec.exchange/tags/epf" class="mention hashtag" rel="nofollow noopener" target="_blank">#epf</a> <a href="https://infosec.exchange/tags/usenix" class="mention hashtag" rel="nofollow noopener" target="_blank">#usenix</a> <a href="https://infosec.exchange/tags/atc23" class="mention hashtag" rel="nofollow noopener" target="_blank">#atc23</a> <a href="https://infosec.exchange/tags/usesec23" class="mention hashtag" rel="nofollow noopener" target="_blank">#usesec23</a>

Vasileios KemerlisBinWrap won one of the Distinguished Paper awards at <a href="https://infosec.exchange/tags/ASIACCS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ASIACCS</a> 2023!! Extremely grateful to the technical program committee for this honor -- thank you, ASIACCS! <a href="https://infosec.exchange/tags/binwrap" class="mention hashtag" rel="nofollow noopener" target="_blank">#binwrap</a> <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a>

Vasileios Kemerlis📢 Our work on abusing/hardening the <a href="https://infosec.exchange/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> BPF interpreter for/against kernel exploitation has been accepted at the 2023 <a href="https://infosec.exchange/@usenixassociation" class="u-url mention" rel="nofollow noopener" target="_blank">@usenixassociation</a> Annual Technical Conference (USENIX ATC)! Joint work with Di Jin and Vaggelis Atlidakis | <a href="https://cs.brown.edu/~vpk/papers/epf.atc23.pdf" rel="nofollow noopener" translate="no" target="_blank">https://cs.brown.edu/~vpk/papers/epf.atc23.pdf</a> | <a href="https://infosec.exchange/tags/epf" class="mention hashtag" rel="nofollow noopener" target="_blank">#epf</a> <a href="https://infosec.exchange/tags/cbpf" class="mention hashtag" rel="nofollow noopener" target="_blank">#cbpf</a> <a href="https://infosec.exchange/tags/ebpf" class="mention hashtag" rel="nofollow noopener" target="_blank">#ebpf</a> <a href="https://infosec.exchange/tags/bpf" class="mention hashtag" rel="nofollow noopener" target="_blank">#bpf</a> <a href="https://infosec.exchange/tags/atc23" class="mention hashtag" rel="nofollow noopener" target="_blank">#atc23</a> <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a>

Vasileios Kemerlis📢 Our work on hardening Node.js against memory-safety vulnerabilities in native (C/C++) add-ons has been accepted at <a href="https://infosec.exchange/tags/ASIACCS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ASIACCS</a> 2023! Joint work with Nikos Vasilakis, Sotiris Ioannidis, Aarno Labs, Grigoris Ntousakis, and George Christou! <a href="https://infosec.exchange/tags/binwrap" class="mention hashtag" rel="nofollow noopener" target="_blank">#binwrap</a> <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a>

Vasileios Kemerlis📢 Our work on automated discovery of memory safety vulnerabilities in Deep Learning (DL) frameworks has been accepted at USENIX Security 2023! Joint work with Neophytos Christou, Di Jin, Vaggelis Atlidakis, and Baishakhi Ray (Columbia) | <a href="https://arxiv.org/abs/2209.14921" rel="nofollow noopener" translate="no" target="_blank">https://arxiv.org/abs/2209.14921</a> | <a href="https://gitlab.com/brown-ssl/ivysyn" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.com/brown-ssl/ivysyn</a> | 39 CVEs 😎 🤘 💣 | <a href="https://infosec.exchange/tags/ivysyn" class="mention hashtag" rel="nofollow noopener" target="_blank">#ivysyn</a> <a href="https://infosec.exchange/tags/brownssl" class="mention hashtag" rel="nofollow noopener" target="_blank">#brownssl</a> <a href="https://infosec.exchange/tags/usenixsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#usenixsecurity</a> <a href="https://infosec.exchange/tags/usesec23" class="mention hashtag" rel="nofollow noopener" target="_blank">#usesec23</a>

Recent searches

Search options

Administered by:

Server stats:

#brownssl