CISPA @ NDSS 2025 in San Diego

Das NDSS-Symposium (Network and Distributed System Security Symposium) gehört zu den wichtigsten jährlichen Veranstaltungen für Sicherheitsforschende. Bei der diesjährigen Ausgabe 2025 in San Diego traf sich die weltweite Security-Community, um über aktuelle Herausforderungen und Innovationen zu diskutieren. Viele CISPA-Forschende waren mit dabei, stellten ihre neuesten Arbeiten vor und tauschten sich mit Expert:innen aus aller Welt aus.  

Diese Paper von CISPA-Autor:innen wurden auf dem NDSS 2025 in San Diego präsentiert:

• Cascading Spy Sheets: Exploiting the Complexity of Modern CSS for Email and Browser Fingerprinting

Leon Trampert, Daniel Weber, Lukas Gerlach, Christian Rossow, Michael Schwarz

• The (Un)usual Suspects – Studying Reasons for Lacking Updates in WordPress

Maria Hellenthal, Lena Gotsche, Rafael Mrowczynski, Sarah Kugel, Michael Schilling, Ben Stock

• The Power of Words: A Comprehensive Analysis of Rationales and Their Effects on Users' Permission Decision

Yusra Elbitar, Alexander Hart, Sven Bugiel

• Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?

Rui Wen, Michael Backes, Yang Zhang

• Welcome to Jurassic Park: A Comprehensive Study of Security Risks in Deno and its Ecosystem

Abdullah AlHamdan, Cristian-Alexandru Staicu

• A Comprehensive Memory Safety Analysis of Bootloaders

 Jianqiang Wang, Meng Wang, Ali Abbasi, Thorsten Holz, Qinying Wang (Zhejiang University), Nils Langius (Leibniz Universität Hannover), Li Shi (ETH Zurich)

• Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security

​​​​​​​Jan-Ulrich Holtgrave, Kay Friedrich, Fabian Fischer, Niklas Busch, Jan H. Klemmer, Oliver Wiese, Sascha Fahl, Nicolas Huaman (Leibniz University Hannover), Marcel Fourné (Paderborn University), Dominik Wermke (North Carolina State University)

• Do (Not) Follow the White Rabbit: Challenging the Myth of Harmless Open Redirection

​​​​​​​Soheil Khodayari, Giancarlo Pellegrino, Kai Glauber (Saarland University)

• Towards Understanding Unsafe Video Generation

​​​​​​​​​​​​​​Yang Zhang (CISPA), Yan Pang (University of Virginia), Aiping Xiong (Penn State University), Tianhao Wang (University of Virginia)

• TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks

​​​​​​​Matteo Leonelli, Addison Crump, Meng Wang, Florian Bauckholt, Keno Hassler, Ali Abbasi, Thorsten Holz

• ​​​​​​​YuraScanner: Leveraging LLMs for Task-driven Web App Scanning

​​​​​​​Aleksei Stafeev, Tim Recktenwald, Gianluca De Stefano, Soheil Khodayari, Giancarlo Pellegrino