Table of Contents

• The Zen of Bluetooth SecurityDaniele Antonioli. 1 [doi]
• OpenSky: How a Security Project Became Global InfrastructureIvan Martinovic, Martin Strohmeier. 2 [doi]
• The Final Security Frontier: Using Privacy-Preserving Computation to Secure Satellite Rendezvous and Proximity OperationsCaroline M. Brandon, Carson Stillman, Joel Hirschmann, Sara Rampazzi, Marina Blanton, Christopher D. Petersen, Kevin R. B. Butler. 3-15 [doi]
• Denied by Border: Denial-of-Service Attack Exploiting Location Restrictions in Non-Terrestrial NetworksKwangmin Kim, Taekkyung Oh, Yongdae Kim. 16-21 [doi]
• SideDish: Low-Cost Anti-Spoofing Countermeasure for Satellite Data CommunicationsEdd Salkield, Louis-Emile Ploix, Martin Strohmeier, Sebastian Köhler 0005, Simon Birnbach, Ivan Martinovic. 22-33 [doi]
• The Worm Is in the Root: On the Security of IoT Provisioning Protocols and PMF in Wi-Fi DevicesLucien Dikla Ngueleo, Kevin Jiokeng, Valeria Loscrì. 34-39 [doi]
• The Cost of Zero Trust: A Comparative Analysis of MACsec and IPsec Architectures for Secure Open FronthaulMahesha Viduranga Malmalabaduge, Atif Ahmed, Madhura Adeppady, Aloizio Da Silva. 40-50 [doi]
• ArchSnoop: LLM Architecture Snooping via Electromagnetic Side-Channel on Edge DevicesHaozhe Weng, Ruochen Zhou, Yubo Qu, Xiaoyu Ji 0001, Wenyuan Xu 0001. 51-62 [doi]
• Unlocking Apple's Private Cloud Compute: An Analysis of Privacy-Preserving Artificial IntelligenceYannik Dittmar, Marvin Jerome Stephan, Thomas Völkl, Matthias Hollick, Jiska Classen. 63-73 [doi]
• Pair-Fi: Integrity Code Protected Secure Device Pairing via SDR-Enabled Wi-Fi Chips on SmartphonesJakob Link, Florentin Putz, Matthias Hollick. 74-85 [doi]
• HardaBLE: Hardening BLE Against Software CompromiseTommaso Sacchetti, Daniele Antonioli, Norrathep Rattanavipanon. 86-96 [doi]
• Secure Trust On First Use for Enterprise Wi-Fi: Design Guidelines and Linux ImplementationRathan Appana, Mathy Vanhoef. 97-102 [doi]
• BlueBrothers: Three New Protocols to Secure BluetoothTommaso Sacchetti, Kasper Rasmussen, Daniele Antonioli. 103-114 [doi]
• Towards Fast Detection of Suspicious Bluetooth Trackers using Anomaly DetectionOrobosa Ekhator, Dylan Conklin, Primal Pappachan, Roberto Yus. 115-120 [doi]
• Are Android Developers Following Privacy Guidelines? A Study on Logging Practices of Personal DataJin Ouyang, Tiash Roy, Daqing Hou, Yuzhe Tang, Xueling Zhang. 121-132 [doi]
• iOSModZoo: A Large-Scale Study of Third-Party iOS App MarketsLuis Adan Saavedra, Hridoy Sankar Dutta, Alastair R. Beresford, Alice Hutchings. 133-144 [doi]
• PrivacyAssist: A User-Centric Agent Framework for Detecting Privacy Inconsistencies in Android AppsTran Thanh Lam Nguyen, Edoardo Di Tullio, Barbara Carminati, Elena Ferrari 0001. 145-150 [doi]
• AttestLens: A Large-Scale Measurement of Play Integrity Adoption in Android AppsCollin MacDonald, Stephen Herwig. 151-162 [doi]
• ORANClaw: Shredding E2 Nodes in O-RAN via Structure-aware MiTM FuzzingGeovani Benita, Matheus E. Garbelini, Sudipta Chattopadhyay 0001, Jianying Zhou 0001. 163-175 [doi]
• Evaluation of Security-Induced Latency on 5G RAN Interfaces and User Plane CommunicationSotiris Michaelides, Jakub Lapawa, Daniel Eguiguren Chavez, Martin Henze. 176-181 [doi]
• RAN-GUARD: A Hybrid Multi-Model Approach for Early Detection of IP-based DDoS Attacks in O-RANYousef Khalil, Hyame Assem Alameddine, Chadi Assi. 182-193 [doi]
• StormShield: Fingerprint-Based Detection and Mitigation of RRC Signaling Storms in O-RAN 5G RANsNoemi Giustini, Andrea Lacava, Leonardo Bonati, Stefano Maxenti, Michele Polese, Tommaso Melodia, Francesca Cuomo. 194-204 [doi]
• MUTUALISM: Low-Footprint and High-Throughput Software Implementation of HQC for Resource-Constrained DevicesCong Liu 0029, Akira Maruko, Yasushi Takahashi, Naoto Yanai. 205-216 [doi]
• TinyContainer: Container Runtime Middleware Enabling Multi-tenant Microcontrollers with Built-in SecurityBastien Buil, Chrystel Gaber, Samuel Legouix, Emmanuel Baccelli, Samia Bouzefrane 0001. 217-226 [doi]
• V-PASS: Sybil-Resistant Pseudonym Self-Provisioning for V2XHexuan Yu, Md Mohaimin Al Barat, Shaoyu Li, Md Hasan Shahriar, Yang Xiao 0010, Panagiotis Papadimitratos, Y. Thomas Hou 0001, Wenjing Lou. 227-238 [doi]
• Beyond Static Signatures: Statistical Analysis of Radio Fingerprint MutationsGabriele Oligeri, Savio Sciancalepore. 239-249 [doi]
• Black-Box RF Fingerprint Spoofing via Surrogate-Guided Generative PerturbationsZhaoyi Lu 0001, Wenchao Xu 0001, Yuhan Zhang, Cunqing Hua. 250-255 [doi]
• A Deep Dive into Wormhole Attacks in Underwater Acoustic Communication: From Theory to PracticeLuisa Lux, Jan Bauer, Eric Wagner 0003, Konrad Wolsing, Ulrike Meyer. 256-267 [doi]
• Security Analysis of Time-of-Arrival Estimation via Cross-Correlation under Narrow-Band ConditionsClaudio Anliker, Daniele Coppola, Giovanni Camurati, Srdjan Capkun. 268-279 [doi]
• Timestamps Unchained: Toward Secure Distance-Bounding on Commodity Wi-Fi HardwareMaximilian Von Tschirschnitz, Daniel von Kirschten, Viktor Boskovski, Simon Neuenhausen, Jens Grossklags. 280-291 [doi]
• TrackAR: AR/VR Device Fingerprinting and User-Device Pairing Detection via Shared Motion Sensor DataAhmed Tanvir Mahdad, Md Shahidur Rahaman, Nitesh Saxena. 292-303 [doi]
• Finding Phones Fast: Low-Latency and Scalable Monitoring of Cellular Communications in Sensitive AreasMartin Kotuliak, Simon Erni, Jakub Polák, Marc Roeschlin, Richard Baker 0008, Ivan Martinovic, Srdjan Capkun. 304-315 [doi]
• StateFi: Effectively Identifying Wi-Fi Devices through State TransitionsAbhishek Kumar Mishra 0001, Mathieu Cunche. 316-321 [doi]
• POSTER: Improving WLAN Firmware Fuzzing for Advanced Analyses of Qualcomm Hexagon WLAN ChipsDaniel Bücheler, Daniel Fraunholz, Hartmut König. 322-323 [doi]
• POSTER: Link Secrecy in the Near-Field With Antenna Subset ModulationHsiang-Yao Kuo, Chung-Tse Michael Wu, Chia-Yi Yeh. 324-325 [doi]
• POSTER: Accountable Cross-Operator 5G Charging via TEEsMijin Shin, Wooram Park, Sangwook Bae, CheolJun Park, Seongmin Kim. 326-327 [doi]
• DEMO: Recent Advancements in Detecting Cellular Attacks with CellGuardSwantje Lange, Lukas Arnold, Maximilian Paß, Matthias Hollick, Jiska Classen. 328-329 [doi]
• DEMO: 5G SA Roaming Testbed for Post Quantum IPsec Security EvaluationsOliver Zeidler, Mert Günes, Sai Anirudh Madhavapeddi, Wolfgang Kellerer. 330-331 [doi]