1

The eBPF framework enables execution of user-provided code in the Linux kernel. In the last few years, a large ecosystem of cloud …

Abstract: Censorship systems such as the Great Firewall (GFW) have been continuously refined to enhance their filtering capabilities. However, most prior studies, and in particular the GFW, have been limited in scope and conducted over short time periods, leading to gaps in our understanding of the GFW’s evolving Web censorship mechanisms over time.

The widespread adoption of encryption in network protocols has significantly improved the overall security of many Internet …

Abstract: DNS manipulation is one of the most prevalent and effective techniques for censoring Internet access and interfering with users’ online activities worldwide. Reliable detection of DNS tampering is crucial, but challenging due to evolving censorship tactics and the lack of complete ground truth data.

Provenance graphs are structured audit logs that describe the history of a system’s execution. Recent studies have explored a …

Differentially-private (DP) databases allow for privacy-preserving analytics over sensitive datasets or data streams. In these systems, …

For safety reasons, unprivileged users today have only limited ways to customize the kernel through the extended Berkeley Packet Filter …

We develop a new, principled algorithm for estimating the contribution of training data points to the behavior of a deep learning …

We observe that the traditional use of DP with the Adam optimizer introduces a bias in the second moment estimation, due to the …

Network side channels (NSCs) leak secrets through packet timing and packet sizes. They are of particular concern in public IaaS Clouds, …