Michalis Polychronakis

107 Followers
94 Following
27 Posts
Associate professor in the Computer Science Department at Stony Brook University. My research aims to improve the security of computer systems and networks, build defenses against malicious software and online threats, reinforce the privacy of our online interactions, and enhance our understanding of the internet and its darker sides.
homepagehttps://www.cs.stonybrook.edu/~mikepo

Hello hackers! In case you missed it at @defcon: @perribus, @adamdoupe, @the_robwaz, @TheConnorNelson, @thedarktangent and I announced @DEFCONAcademy! I kept meaning to spread the word, and now that there's hype (https://news.asu.edu/20241031-science-and-technology-def-con-academy-looks-serve-build-community), it's time for the thread!

Read on! ๐Ÿงต

DEF CON Academy looks to serve, build community | ASU News

Every year, a legion of hackers, programmers, cybersecurity professionals and researchers descend on Las Vegas for the most storied convention in the hacker community: DEF CON.

Turing Machine โ€“ Working Lego Computer

What is a Turing machine?It's an abstract model of an algorithmic machine. Although it was not designed to be implemented in real life, some people ...

EPFL is hiring! We're opening three positions in computer science with focuses on cyber-physical security, security and privacy, and learning sciences. Become our colleague and join us at one of the top research universities (and clearly the most beautiful place in Switzerland with lake and mountains nearby). Reach out if you want to know more!

Faculty Positions in Computer & Communication Sciences / cyber-physical security: https://www.epfl.ch/about/working/page-26457-en-html/faculty-positions-in-computer-amp-communication-sciences-cyber-physical-security/

Faculty Positions in Computer & Communication Sciences / learning sciences: https://www.epfl.ch/about/working/page-26457-en-html/faculty-positions-in-computer-communication-sciences-learning-sciences/

Faculty Positions in Computer & Communication Sciences / security and privacy: https://www.epfl.ch/about/working/page-26457-en-html/faculty-positions-in-computer-amp-communication-sciences-security-and-privacy/

[Photo taken 5min ago from our lunch spot.] Please boost ๐Ÿ˜

Faculty Positions in Computer & Communication Sciences / cyber-physical security

The School of Computer and Communication Sciences (IC) at EPFL invites applications for the SICPA chair in cyber-physical security. Examples of research topics include but are not limited to digital/physical traceability, e.g. of natural resources, as well as data and document authentication and tracking. The support for research and external outreach will be provided by (...)

EPFL

This is the start of the Fall semester for my class "Advanced #Programming in the #UNIX Environment". Syllabus and all course materials including all code examples available here:

https://stevens.netmeister.org/631/

All video lectures are public and available for free on YouTube:

https://www.youtube.com/@cs631apue/videos

If you want to follow along, I'll be posting weekly links in this thread throughout the semester.

Advanced Programming in the UNIX Environment

We're just a few weeks away from the start of the Fall semester, when I'll be teaching "Advanced #Programming in the #UNIX Environment" again.

https://stevens.netmeister.org/631/

The video lectures remain online for free for everybody:
https://www.youtube.com/c/cs631apue

If you're interested, feel free to follow along during the semester, but if you wanted to run through some of the code examples from the videos before hand and let me know of any problems you run into, that'd be quite wonderful, too. :-)

Advanced Programming in the UNIX Environment

๐Ÿ“ข @dijin will be presenting our work on hardening #Linux (e)BPF against transient execution attacks at @usenixsecurity '24 tomorrow (Aug. 14, 1:45pm Track 2 -- "Side Channel I: Transient Execution")! Joint work with Alexander J. Gaidis. Paper: https://cs.brown.edu/~vpk/papers/beebox.sec24.pdf | Artifact: https://gitlab.com/brown-ssl/beebox | #brownssl #beebox #ebpf #bpf #usesec24

We're improving on the existing Windows DPAPI storage in Chrome by adding a new layer of encryption to additionally bind the data to application identity, starting with cookies in Chrome 127.

This helps prevent malicious apps (e.g. infostealers) running as the logged-in user from reading/decrypting this data, and makes their malicious actions (e.g. to bypass/inject) more observable to antivirus.

Read more about this protection:

https://security.googleblog.com/2024/07/improving-security-of-chrome-cookies-on.html

Improving the security of Chrome cookies on Windows

Posted by Will Harris, Chrome Security Team Cybercriminals using cookie theft infostealer malware continue to pose a risk to the safety ...

Google Online Security Blog
Marius Momeu at @ACM ASIA CCS 2024 presenting our work on hardening SLAB-based (kernel) allocators, against memory errors, via SMAP-assisted isolation -- joint work with @tu_muenchen, Sergej Proskurin, and @mikepo | https://cs.brown.edu/~vpk/papers/islab.asiaccs24.pdf | #brownssl #islab
I published a step by step guide on using Windows event logs to hunt for malware trying to steal sensitive data from browsers e.g. cookies, passwords etc. https://security.googleblog.com/2024/04/detecting-browser-data-theft-using.html #DFIR Hope it's useful!
Detecting browser data theft using Windows Event Logs

Posted by Will Harris, Chrome Security Team Chromium's sandboxed process model defends well from malicious web content, but...

Google Online Security Blog