Schedule

SESSION 1 [Room A]

• 09:00–09:30 Opening Remarks (General chair + PC chairs)
• 09:30–10:30 Invited Keynote From Smartphones to Cloud: Trustworthy Foundations for Digital Sovereignty Shweta Shinde ETH Zurich, Switzerland

PARALLEL SESSION 2a [Room A]

Session chair: Pierre Wilke (CentraleSupélec, France)

Authentication & Vulnerabilities

1. Simple But Not Secure: An Empirical Security Analysis of Two-factor Authentication Systems Xin Yang, Zhi Wang, Du Chen, Han Gao, Meiqi Tian, Yan Jia and Wanpeng Li Nankai University & Hong Kong University, China; University of Liverpool, Uk
2. Breaking Google Wallet For Fun and Profit Etienne Nedjaï and Mohamed Sabt Université de Rennes, France
3. On the Long-Term Reproducibility of Vulnerable Environments Olivier Levillain, Nicolas Dejon, Clément Parssegny and Sylvie Laniepce Orange Research & Institut Polytechnique de Paris, France

PARALLEL SESSION 2b [Room B]

Session chair: Rohitkumar R. Upadhyay (Université de Rennes, France)

Post-Quantum Cryptography

1. FIPS-Aligned STARK Verification of ML-DSA and Classical Signatures, with an AIR-Based Cost Model Stephen Holmes University of Surrey, UK
2. HRA-secure Attribute-based Proxy Re-encryption from Fully Homomorphic Attribute-based Encryption Seiryo Hamasu, Hyungrok Jo, Shingo Sato and Junji Shikata Yokohama National University, Japan
3. Direct Robust Function-Private Identity-Based Encryption from Lattices Hao Qin, Qinyi Li and Xavier Boyen Griffith University & Queensland University of Technology, Australia

PARALLEL SESSION 3a [Room A]

Session chair: Shweta Shinde (ETH Zurich, Switzerland)

System Architecture, Hardware & Software Resilience

1. A Study of Kernel Telemetry Options for Security-Oriented Provenance Paul Robert Balthazar Houssel, Olivier Levillain, Sylvie Laniepce, Nicolas Dejon and Hervé Debar Orange Research & Institut Polytechnique de Paris, France
2. Investigating Fault-Induced Misconfiguration of RISC-V PMP and Its Consequences for Isolated Software Execution Environment Kévin Queneherve, Philippe Tanguy, Rachid Dafali and Vianney Lapotre Université de Bretagne-Sud & DGA MI, France
3. gPAC: Enforcing Forward-Edge Control-Flow Integrity on GPUs via Pointer Authentication Chaochao Zhang and Xingbin Wang Ningbo University of Technology & Tianjin University, China

PARALLEL SESSION 3b [Room B]

Session chair: Masahiro Mambo (Kanazawa University, Japan)

Symmetric Cryptography & Private Computing

1. Differential-based Attacks on Round-reduced BAKSHEESH Yong Liu, Siwei Sun, Zejun Xiang, Rui Xu, Xiutao Feng and Xiangyong Zeng Chinese Academy of Sciences & Hubei University, China
2. Differentially Private SQL Query Processing: An Empirical Evaluation of Systems and Their Trade-offs Loïs Ecoffet, Veronika Rehn-Sonigo, Jean-François Couchot and Catuscia Palamidessi Université Marie et Louis Pasteur & Inria Saclay, France
3. Verifiable Information-Theoretic HSS over General Adversary Structures Yang Liu and Liang Feng Zhang ShanghaiTech University, China

SESSION 4a [Room A]

Session chair: Olivier Levillain (Institut Polytechnique de Paris, France)

Intrusion Detection, Log Analytics & Threat Detection

1. Mitigating Log Poisoning Attack against Anomaly-based Intrusion Detection System Alexandre Azor, Françoise Sailhan, Alexandre Reiffers-Masson and Julien Francq IMT Atlantique & NAVAL Group, France
2. FoRGe: Feedback-Oriented Rule Generation for Security Log Detection Aidan Wen, Karen Shieh, Jingzhi Jiang, Andy Zhang, Raghad Alkhudair, Basel Alomair and David Wagner KACST, Saudi Arabia; UC Berkeley, USA
3. Multi-Period Traffic Folding for Efficient IoT Intrusion Detection Guangwei Cai Zhengzhou University, China

SESSION 4b [Room B]

Session chair: Ludovic Mé (Inria, France)

Phishing, Cryptography & Malware Detection

1. Inside Steam Phishing: Credential Harvesting Mechanics and Evasion Infrastructure Sara Shakeel, Enrico Branca, and Natalia Stakhanova University of Saskatchewan, Canada
2. LAS+: Lattice-based Adaptor Signature with Stronger Security Jiaheng Wang, Guomin Yang, Haiyang Xue, Meng Hao and Robert Deng Singapore Management University, Singapore
3. Enhancing Malware Detection through Intent Subsequence Mining from API Call Sequences Tianheng Qu, Xiurong Cao, Hao Dai, Hongsong Zhu, Jiayu Zhang, and Kaixiang Liu Beijing Institute of Specialized Machinery & Chinese Academy of Sciences, China

SESSION 5 [Room A]

Session chair: Mehdi Tibouchi (NTT Social Informatics Laboratories, Japan)

• 09:00–10:00 Invited Keynote LINE-Break: Cryptanalysis and Reverse Engineering of Letter Sealing Diego F. Aranha Aarhus University, Denmark

SESSION 6a [Room A]

Session chair: Guillaume Gravier (IRISA, France)

AI, LLMs & Agentic Security

1. ProTA: Provenance-Aware Tool Authorization for LLM Agents under Indirect Prompt Injection Rui Wang, Haozhe Li, Yichen Guo, Kaihao Xu, Yun Feng, Xiaoyu Wang, Xinyu Liu, Jianjun Zhao and Qixu Liu Institute of Information Engineering, Chinese Academy of Sciences, China
2. Beyond Network Size: Factors Shaping Autonomous Cyber Agent Strategy Kenechukwu Nwodo, Justin Van Roy, Dziyana Hnedzko and Angelos Stavrou Virginia Tech & A2 Labs, USA
3. What Doesn’t Transfer: Generalization-Aware Auditing of Sensitive-Condition Inference from Sanitized LLM-Agent Telemetry Aditya Jain, Anmol Pandey, Liang Chen and Carsten Maple University of Warwick & University of Hertfordshire, UK

SESSION 6b [Room B]

Session chair: Gouenou Coatrieux (IMT Atlantique, France)

Digital Forensics, Deepfakes & Transformers

1. TRACE-ECG: Transfer-Based Re-Identification Attack on Cross-Dataset ECG Signals Hamza Aguelal and Paolo Palmieri University College Cork, Ireland
2. You Can't Spot a Deepfake—And Neither Can Your Brain Nor Eyes: A Neurophysiological Framework for Deepfake Exploitation of Cognitive Engagement and Implicit Visual Evaluation Cagri Arisoy, Md Imanul Huq, Amy Hays and Nitesh Saxena Bozok University, Turkey; Texas A&M University, USA
3. Botochtone: Culturally Adapted Transformer-Based Moderation for Indigenous Communities Chaimaa Oulmalme Université du Québec à Chicoutimi, Canada

PARALLEL SESSION 7a [Room A]

Session chair: SequoIA Cluster

AI-augmented Security & Privacy Preservation

1. I-Tab - Irradiation of Tabular Data to Fight Against Illegal Data Use and Re-Use in AI Mehdi Ben Ghali, Gouenou Coatrieux and Reda Bellafqira Inserm & IMT Atlantique, France
2. AI-augmented static analysis framework for secure C software Amadéo Gilliéron, Nga Nguyen, Guillaume Guerard, Youssef Souissi and Ville Oskari Yli-Mäyry De Vinci Research Center & Secure-IC, France
3. MNHA-Net: Mitigating Feature Dilution in Image Manipulation Localization via Hybrid Architecture and Late Noise Fusion Zexian Song, Shufen Niu, Manyou Ma, Xiaolin Zhou and Yichen Wei Shenzhen Technology University, China
4. CRSF: Collusion-Resilient Privacy-Preserving Sensor Fusion with Byzantine-Robust Participation Chao Yin, Haihong Tian, Zheng Yang, Haibin Zhang, Fabio Massacci and Chenglu Jin Southwest University, China; Vrije University Amsterdam & Centrum Wiskunde & Informatica, The Netherlands

PARALLEL SESSION 7b [Room B]

Session chair: Diego F. Aranha (Aarhus University, Denmark)

Side-Channeling, Authentication & Transciphering Applications

1. How Transfer Learning Can Help Remote Far Field EM Side-Channel Attacks Huanyu Wang, Minkang Lu, Bijia Cao and Junnian Wang Hunan University of Science and Technology, China
2. Robot Visions: Breaking reCAPTCHA at Zero Cost and Zero Shot Suphannee Sivakorn and Samantha Gottlieb Bloomberg, USA
3. Parallelized Authenticated Encryption with Tag Combiners Christoph Dobraunig and Charlotte Lefevre IRISA, France; Intel Labs, USA
4. Walsh LUT Evaluation on Lazy Bits for CKKS AES Transciphering Rostin Shokri and Nektarios Georgios Tsoutsos University of Delaware, USA

SESSION 8 [Room A]

Session chair: Thomas Rokicki (CentraleSupélec, France)

Privacy, Satellite Security & Cryptography

1. Solving the Identity-Privacy Paradox: How to Identify Friend or Foe Without Self-Disclosure? Ema Sujster, Konrad Wrona and Evangelia Anna Markatou KU Leuven, Belgium, TU Delft and NATO Communications and Information Agency, The Netherlands
2. PABV-STIN: A Proxy-Authorization-Based Batch Verification Protocol for Satellite-Terrestrial Integrated Network Xin Qi, Caixia Liu, Yuzheng Liu, Yulu Gao and Yixuan Wu Systems Engineering Institute, Harbin Engineering University, and Northwestern Polytechnical University, China
3. Credential-Conditioned Latent Recovery for Wireless Image Semantic Transmission Sidong Kang, Shixian Chen, Shengliang Wu, Hongtao Wang, Ke Hu and Xin He AnHui Normal University, China
4. Stress Testing Social Media Authentication Ceremonies of End-to-End Encrypted Messaging with Ephemeral Fake Accounts Mashari Alatawi, Md Shahidur Rahaman and Nitesh Saxena King Saud University, Saudi Arabia; Texas A&M University, USA
5. An efficient Failure Probability Estimator for LWE-based encryption, and application to IBE Julien Cam Groupe Kudelski & Université de Rennes, France