Posts

We presented our paper titled BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem at CHES 2022 in the hardware security track. Here is the excellent presentation given by Marco Casagrande.

I’m glad to share three updates about the BLURtooth paper. We successfully tested the BLUR attacks on a Google Pixel 6 (Bluetooth 5.2) and submitted our findings to Google. They classified the report with high severity, assigned CVE-2022-20361, and shipped fixes as part of August’s Android Security bulletin.

Below you can find a webinar that I’ve recorded for the Automotive Security Research Group (ASRG) talking about our recent paper titled On the Insecurity of Vehicles Against Protocol-Level Bluetooth Threats.

I am glad to share that our paper titled BreakMi: Reversing, Exploiting and Fixing Xiaomi Fitness Tracking Ecosystem is publicly available here. In this work, we reverse-engineer, exploit, and fix the proprietary security protocols used by Xiaomi to secure the Bluetooth Low Energy communication between its trackers and smartphone applications.

The Journal of Systems Research (JSys) is a new journal with diamond-access publication model; that is, papers are free to read, submit, review, and publish. Its design borrows heavily from similar journals recently created in the databases, security, and crypto communities.

The WOOT'22 CFP is open. Please submit and spread the word. Links URL: https://www.ieee-security.org/TC/SP2022/WOOT22/index.html Submission: https://woot22.secpriv.tuwien.ac.at/woot22/paper/new Overview The Workshop on Offensive Technologies (WOOT) aims to present a broad picture of offense and its contributions, bringing together researchers and practitioners across all areas of computer security.

The call for papers for 8th ACM Cyber-Physical System Security Workshop (CPSS 2022) held in conjunction with ACM AsiaCCS'22 is closing in 1 month (December 3, 2021). Make sure to submit your awesome CPS security papers :D

The Digital Security Department of EURECOM invites applications for a tenured position at the Assistant Professor level in the area of Digital Security. Full info here. Please spread the word 😄 !

I’m glad to give a talk at the SecMT'21 workshop on mobile system security co-located with the ACNS'21 conference. Students can register to SecMT for free by filling this Google form.

It is my pleasure to announce that since 1st of June I’ve started my new adventure with EURECOM and the System Security Group (S3). I’m thrilled and honored to have joined a team of talented and diverse people, and I’m looking forward give my contribution!