INS Reading Group

Date	Paper	Link
2026-06-25	A Practical Solution to Systematically Monitor Inconsistencies in SBOM-based Vulnerability Scanners Rosso, M., Jaffar, M. A. J., Brighente, A., & Conti, M.
2026-05-28	No Root, No Problem: Automating Linux Least Privilege and Securing Ansible Deployments Billoir, E., Laborde, R., Canavese, D., Rütschlé, Y., Wazan, A. S., & Benzekri, A.
2026-04-30	The Decentralisation Paradox in Digital Identity: Centralising Decentralisation with Digital Wallets? Konstantinidis, I., Mavridis, I., & Markakis, E. K.
2026-04-14	Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy Gegenhuber, G. K., Frenzel, P. É., Günther, M., Ullrich, J., & Judmayer, A.
2026-03-31	Large-scale online deanonymization with LLMs Lermen, S., Paleka, D., Swanson, J., Aerni, M., Carlini, N., & Tramèr, F.
2026-03-03	Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers Scarlata, M., Torrisi, G., Backendal, M., & Paterson, K. G.
2026-02-17	INVISILINE: Invisible Plausibly-Deniable Storage Pinjala, S. K., Carbunar, B., Chakraborti, A., & Sion, R.
2026-02-03	Analysis and Attacks on the Reputation System of Nym Cao, X. A., & Green, M.
2026-01-20	Don’t Look Up: There Are Sensitive Internal Links in the Clear on,GEO Satellites Zhang, W. M., Dai, A., Ryan, K., Levin, D., Heninger, N., & Schulman, A.
2025-12-02	Be Aware of What You Let Pass: Demystifying URL-based Authentication Bypass Vulnerability in Java Web Applications Zhang, Q., Liu, F., Lin, Z., & Zhang, Y.
2025-11-18	Breaking Bad: How Compilers Break Constant-Time Implementations Schneider, M., Lain, D., Puddu, I., Dutly, N., & Capkun, S.
2025-11-04	Born with a Silver Spoon: On the (In)Security of Native Granted App Privileges in Custom Android ROMs Wang, C., Zhao, Y., Deng, J., & Wang, H.
2025-10-21	Tracking You from a Thousand Miles Away! Turning a Bluetooth Device into an Apple AirTag Without Root Privileges Chen, J., Ma, X., Luo, L., & Zeng, Q.
2025-10-07	Amigo: Secure Group Mesh Messaging in Realistic Protest Settings Inyangson, D., Radway, S., Jois, T. M., Fazio, N., & Mickens, J.
2025-09-23	Catch-22: Uncovering Compromised Hosts using SSH Public Keys Munteanu, C., Smaragdakis, G., Feldmann, A., & Fiebig, T.