Table of Contents

• Message from General Chairs; EuroSP 2024Edgar R. Weippl, Matteo Maffei. 1 [doi]
• Work-in-Progress: CANGen: Practical Synthetic CAN Traces Generation Using Deep Generative ModelsYucheng Yin, Jorge Guajardo Merchan, Pradeep Pappachan, Vyas Sekar. 1-9 [doi]
• SPIDER: Interplay Assessment Method for Privacy and Other ValuesZoltán Ádám Mann, Jonathan Petit, Sarah M. Thornton, Michael Buchholz, Jason Millar. 1-8 [doi]
• Compliance as Baseline, or Striving for More? How Privacy Engineers Work and Use Privacy StandardsZachary Kilhoffer, Devyn Wilder, Masooda Bashir. 9-18 [doi]
• Data Retention Disclosures in the Google Play Store: Opacity Remains the NormDavid Rodríguez, Celia Fernández Aller, José M. del Álamo, Norman Sadeh 0001. 19-23 [doi]
• A Qualitative Analysis Framework for mHealth Privacy PracticesThomas Cory, Wolf Rieder, Thu-My Huynh. 24-31 [doi]
• Navigating Privacy Patterns in the Era of RobotaxisAla'a Al-Momani, David Balenson, Zoltán Ádám Mann, Sebastian Pape 0001, Jonathan Petit, Christoph Bösch. 32-39 [doi]
• Differentially Private Multi-Label Learning Is Harder Than You'd ThinkAnika Hannemann, Benjamin Friedl, Erik Buchmann. 40-47 [doi]
• An applied Perspective: Estimating the Differential Identifiability Risk of an Exemplary SOEP Data SetJonas Allmann, Saskia Nuñez von Voigt, Florian Tschorsch. 48-55 [doi]
• Measuring the Unmeasurable: Estimating True Population of Hidden Online CommunitiesJonah Gibbon, Tina Marjanov, Alice Hutchings, John Aston. 56-66 [doi]
• The (Relative) Impact of Email Cues on the Perceived Threat of Phishing Attacks: A User Perspective on Phishing DeceptivenessPavlo Burda, Maria Eleni Kokkini, Luca Allodi, Nicola Zannone. 67-84 [doi]
• Understanding Crypter-as-a-Service in a Popular Underground MarketplaceAlejandro De La Cruz Alvarado, Sergio Pastrana Portillo. 85-90 [doi]
• Towards Better Understanding of Cybercrime: The Role of Fine-Tuned LLMs in TranslationVeronica Valeros, Anna Sirokova, Carlos Adrián Catania, Sebastian García. 91-99 [doi]
• Actionable Cyber Threat Intelligence Using Knowledge Graphs and Large Language ModelsRomy Fieblinger, Md Tanvirul Alam, Nidhi Rastogi. 100-111 [doi]
• A Methodology to Measure the "Cost" of CPS Attacks: Not all CPS Networks are Created EqualMartin Rosso, Luca Allodi, Emmanuele Zambon, Jerry den Hartog. 112-129 [doi]
• Threat Analysis and Adversarial Model for Smart GridsJavier Sande Ríos, Jesús Canal Sánchez, Carmen Manzano Hernandez, Sergio Pastrana. 130-145 [doi]
• Attacking Operational Technology Without Specialized Knowledge: The Unspecialized OT Threat Actor ProfileStash Kempinski, Savio Sciancalepore, Emmanuele Zambon, Luca Allodi. 146-159 [doi]
• Secure Intermittent Computing with ARM TrustZone on the Cortex-MPietro Chiavassa, Filippo Gandino, Renato Ferrero, Jan Tobias Mühlberg. 160-168 [doi]
• Understanding Trust Relationships in Cloud-Based Confidential ComputingGianluca Scopelliti, Christoph Baumann, Jan Tobias Mühlberg. 169-176 [doi]
• SyncEmu: Enabling Dynamic Analysis of Stateful Trusted ApplicationsChristian Lindenmeier, Matti Schulze, Jonas Röckl, Marcel Busch. 177-185 [doi]
• Delegating Verification for Remote Attestation Using TEETakashi Yagawa, Tadanori Teruya, Kuniyasu Suzaki, Hirotake Abe. 186-192 [doi]
• SNPGuard: Remote Attestation of SEV-SNP VMs Using Open Source ToolsLuca Wilke, Gianluca Scopelliti. 193-198 [doi]
• PraaS: Verifiable Proofs of Property as-a-Service with Intel SGXIstemi Ekin Akkus, Ivica Rimac, Ruichuan Chen. 199-207 [doi]
• Revisiting Rollbacks on Smart Contracts in TEE-protected Private BlockchainsChen Chang Lew, Christof Ferreira Torres, Shweta Shinde, Marcus Brandenburger. 217-224 [doi]
• Conditional Network Availability: Enhancing Connectivity Guarantees for TEE-Based ServicesJonas Röckl, Christian Lindenmeier, Matti Schulze, Tilo Müller. 225-233 [doi]
• Minimal Partitioning Kernel with Time Protection and PredictabilityHenrik A. Karlsson. 234-241 [doi]
• NetReach: Guaranteed Network Availability and Reachability to enable Resilient Networks for Embedded SystemsTom Van Eyck, Sam Michiels, Xiaojiang Du, Danny Hughes 0001. 242-244 [doi]
• BarriCCAde: Isolating Closed-Source Drivers with ARM CCAMatti Schulze, Christian Lindenmeier, Jonas Röckl. 245-251 [doi]
• On the Quest for Foundation Generative-AI Models for Anomaly Detection in Time-Series DataGastón García González, Pedro Casas, Emilio Martínez, Alicia Fernández. 252-260 [doi]
• Explainable Stacking Models based on Complementary Traffic EmbeddingsLuca Gioacchini, Welton Santos, Barbara Lopes, Idilio Drago, Marco Mellia, Jussara M. Almeida, Marcos André Gonçalves. 261-272 [doi]
• A Tale of Two Methods: Unveiling the Limitations of GAN and the Rise of Bayesian Networks for Synthetic Network Traffic GenerationAdrien Schoen, Gregory Blanc, Pierre-François Gimenez, Yufei Han, Frédéric Majorczyk, Ludovic Mé. 273-286 [doi]
• Dynamic Cluster Analysis to Detect and Track Novelty in Network TelescopesKai Huang, Luca Gioacchini, Marco Mellia, Luca Vassio. 287-296 [doi]
• An Internet-Wide View on HTTPS Certificate Revocations: Observing the Revival of CRLs via Active TLS ScansMarkus Sosnowski, Johannes Zirngibl, Patrick Sattler, Juliane Aulbach, Jonas Lang, Georg Carle. 297-306 [doi]
• Are You Sure You Want To Do Coordinated Vulnerability Disclosure?Ting-Han Chen, Carlotta Tagliaro, Martina Lindorfer, Kevin Borgolte, Jeroen van der Ham-de Vos. 307-314 [doi]
• A First Look into Utiq: Next-Generation Cookies at the ISP LevelIsmael Castell-Uroz, Pere Barlet-Ros. 315-320 [doi]
• Optimal Flow Collector Placement In Experimental NetworksGanesh Chennimalai Sankaran, Mukund Raghothaman, M. Patrick Collins. 321-325 [doi]
• Improving Synthetic Network Attack Traffic GenerationAbdirisaq Farah, Martin Nielsen, Emmanouil Vasilomanolakis. 326-334 [doi]
• Measuring the Complexity of Benchmark NIDS Datasets via Spectral AnalysisRobert Flood, David Aspinall 0001. 335-341 [doi]
• Measuring Malware Detection Capability for Security Decision MakingMuhammad Yasir Muzayan Haq, Abhishta Abhishta, Sander Zeijlemaker, Annette Chau, Michael Siegel, Lambert J. M. Nieuwenhuis. 342-351 [doi]
• Hyperloop: A Cybersecurity PerspectiveAlessandro Brighente, Mauro Conti, Denis Donadel, Federico Turrin. 352-360 [doi]
• Work-in-Progress: Emerging E/E-Architectures as Enabler for Automotive HoneypotsNiclas Ilg, Dominik Germek, Paul Duplys, Michael Menth. 361-366 [doi]
• Work-in-Progress: Crash Course: Can (Under Attack) Autonomous Driving Beat Human Drivers?Francesco Marchiori, Alessandro Brighente, Mauro Conti. 367-372 [doi]
• Work-in-Progress: Towards a New Configurable and Practical Remote Automotive Security Testing PlatformSekar Kulandaivel, Wenjuan Lu, Brandon Barry, Jorge Guajardo. 373-379 [doi]
• Secure, Robust, and Energy-Efficient Authenticated Data Sharing in Drone to Vehicles CommunicationsAtefeh Mohseni-Ejiyeh. 380-389 [doi]
• False Flavor Honeypot: Deceiving Vulnerability Scanning ToolsTillmann Angeli, Daniel Reti, Daniel Schneider 0007, Hans D. Schotten. 399-406 [doi]
• Modeling a Cyber Deception Practitioner's Approach: Behaviorally Exploiting an American Cybercriminal with Warranting Theory and Whaley's Unpublished Work on "Unexpected Players"Tim Pappa. 407-414 [doi]
• Application Layer Cyber Deception Without Developer InteractionMario Kahlhofer, Stefan Rass. 416-429 [doi]
• LLM in the Shell: Generative HoneypotsMuris Sladic, Veronica Valeros, Carlos Adrián Catania, Sebastian García. 430-435 [doi]
• Duet: Combining a Trustworthy Controller with a Confidential Computing EnvironmentIstemi Ekin Akkus, Ivica Rimac. 436-442 [doi]
• Position-based Rogue Access Point DetectionWenjie Liu, Panos Papadimitratos. 436-442 [doi]
• A Game Theoretic Framework for Multi Domain Cyber DeceptionAhmed Hemida, Ahmed Bilal Asghar, Charles Kamhoua, Jon M. Kleinberg. 443-447 [doi]
• Position Paper: Think Globally, React Locally - Bringing Real-Time Reference-Based Website Phishing Detection on macOSIvan Petrukha, Nataliia Stulova, Sergii Kryvoblotskyi. 448-455 [doi]
• Contrasting and Synergizing CISOs' and Employees' Attitudes, Needs, and Resources for Security Using PersonasUta Menges, Annette Kluge. 456-472 [doi]
• Nobody Knows the Risks I Have Seen: Evaluating the Gap Between Risk Analysis and Security OperationsNathan Daniel Schiele, Jari Egberts, Olga Gadyatskaya. 473-483 [doi]
• "Trust Me Over My Privacy Policy": Privacy Discrepancies in Romantic AI Chatbot AppsAbdelrahman Ragab, Mohammad Mannan, Amr M. Youssef. 484-495 [doi]
• Position Paper: Leveraging Large Language Models for Cybersecurity ComplianceAhmed Salman, Sadie Creese, Michael Goldsmith. 496-503 [doi]
• Tell Me What You Like and I Know What You Will Share: Topical Interest Influences Behavior Toward News From High and Low Credible SourcesRebecca Weil, Sahar Abdelnabi, Mario Fritz, Rakibul Hasan 0001. 504-518 [doi]
• Work in Progress: Implicit Association Tests for Understanding Human Factor in Phishing Beyond AwarenessGennaro Esposito Mocerino, Claudio Velotti, Danilo Gentile, Luigi Gallo, Alessio Botta, Giorgio Ventre. 519-526 [doi]
• Work in Progress: I Know You Pin Me: Privacy Risks in User Pinning of Zoom Video ConferencingSeungwon Woo, Wonho Song, Min-Suk Kang. 527-532 [doi]
• Exploring the Malicious Document Threat Landscape: Towards a Systematic Approach to Detection and AnalysisAakanksha Saha, Jorge Blasco, Martina Lindorfer. 533-544 [doi]
• Position: On Potential Malware & New Attack Vectors for Internet-of-Brains (IoB)Tuomo Lahtinen, Andrei Costin, Guillermo Suarez-Tangil. 545-553 [doi]
• Position: The Explainability Paradox - Challenges for XAI in Malware Detection and AnalysisL. Rui, Olga Gadyatskaya. 554-561 [doi]
• LLMs for the Post-Hoc Creation of ProvenanceAbdullah Hamed Almuntashiri, Luis Daniel Ibáñez, Adriane Chapman. 562-566 [doi]
• A Low Overhead Approach for Automatically Tracking Provenance in Machine Learning WorkflowsNils Hoffmann, Neda Ebrahimi Pour. 567-573 [doi]
• A Provenance-Driven Approach for Detecting Revenue Leakage in TelecomWisam Abbasi, Adel Taweel, Andrea Saracino. 574-582 [doi]
• Evaluation of Provenance Serialisations for Astronomical Provenance - Application TrackMichael A. C. Johnson, Marcus Paradies, Hans-Rainer Klöckner, Albina Muzafarova, Kristen Lackeos, David J. Champion, Marta Dembska, Sirko Schindler. 583-591 [doi]
• Solving Why Not Questions for Aggregate Constraints Through Query RepairShatha Algarni, Boris Glavic, Seokki Lee, Adriane Chapman. 592-596 [doi]
• Towards an Integrated Provenance Framework: A Scenario for Marine DataTanja Auge, Susanne Feistel, Fajar J. Ekaputra, Meike Klettke, Susanne Jürgensmann, Emil Michels, Laura Waltersdorfer. 597-601 [doi]
• On the Structure of Game Provenance and its ApplicationsShawn Bowers, Yilin Xia, Bertram Ludäscher. 602-609 [doi]
• An Empirical Study of DevSecOps Focused on Continuous Security TestingClarisse Feio, Nuno Santos, Nelson Escravana, Bernardo Pacheco. 610-617 [doi]
• VulnBERTa: On Automating CWE Weakness Assignment and Improving the Quality of Cybersecurity CVE Vulnerabilities Through ML/NLPHannu Turtiainen, Andrei Costin. 618-625 [doi]
• "Have Heard of it": A Study with Practitioners on Adoption of Secure Software Development FrameworksAlex Wee, Arina Kudriavtseva, Olga Gadyatskaya. 626-633 [doi]
• LLM-based Vulnerability Sourcing from Unstructured DataVirendra Ashiwal, Sören Finster, Abdallah Dawoud. 634-641 [doi]
• Better Left Shift Security! Framework for Secure Software DevelopmentAbdallah Dawoud, Sören Finster, Nicolas Coppik, Virendra Ashiwal. 642-649 [doi]
• SMILE4VIP: Intervention to Support Visually Impaired Users Against PhishingMark Bohlender, Raphael Morisco, Mattia Mossano, Thorsten Schwarz, Melanie Volkamer. 650-657 [doi]
• The Unintended Harm of IoT Devices in Assistive Technology Distribution ProgramsTiffany Wilson. 658-665 [doi]
• Evaluating Privacy & Security of Online Dating Applications with a Focus on Older AdultsNaheem Noah, Supriya Thakur, Jason Beck, Sanchari Das. 666-677 [doi]
• Position Paper: Exploring Security and Privacy Needs of d/Deaf IndividualsMindy Tran, Xinru Tang, Adryana Hutchinson, Adam J. Aviv, Yixin Zou. 678-682 [doi]
• Work-in-Progress: Northcape: Embedded Real-Time Capability-Based AddressingEric Ackermann, Noah Mauthe, Sven Bugiel. 683-690 [doi]
• "Work-in-Progress" Structuring the Complexity: An Ontological Approach to Analyze the Cybersecurity of a 5G ServiceAndrea Bernardini, Francesco D'Alterio, Leonardo Sagratella, Marina Settembre, Nicolò Maunero. 691-700 [doi]
• Work-in-Progress: Protecting Knowledge Graph-based Descriptions of Digital TwinsGiuseppe Salerno, Andrea Pugliese 0001, Cristian Molinaro. 701-705 [doi]
• Work-in-Progress: A Sidecar Proxy for Usable and Performance-Adaptable End-to-End Protection of Communications in Cloud Native ApplicationsStefano Berlato, Matteo Rizzi, Matteo Franzil, Silvio Cretti, Pietro De Matteis, Roberto Carbone. 706-711 [doi]
• Analyzing the Impact of Obfuscation on the Runtime Execution of Android Apps at Kernel LevelLorenzo Valeriani, Giuseppe Bianchi 0001, Luca Verderame, Alessio Merlo. 712-717 [doi]
• Automating Penetration Testing with MeTeOrMichele Cerreta, Gabriele Costa 0001. 718-725 [doi]
• Work-In-Progress: Consistent and Tamper-Proof Acquisition of Automatically Verifiable Forensic Web EvidenceAlessandro Cantelli Forti, Giacomo Longo, Enrico Russo 0001. 726-730 [doi]
• A Few to Unveil Them All: Leveraging Mixture of Experts on Minimal Data for Detecting Covert Channels in Containerized Cloud InfrastructuresLuca Caviglione, Massimo Guarascio 0001, Francesco Sergio Pisani, Marco Zuppelli. 731-739 [doi]