Best Papers/S&P

S&P Best Papers

IEEE Symposium on Security and Privacy

43 papers · 2020–2025

← S&P Conference Info

🏆 2025(13)

Distinguished Paper Award

Breaking the Barrier: Post-Barrier Spectre Attacks

Wikner, Razavi

SpectreMicroarchitecture

Distinguished Paper Award

The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against 'Truly Anonymous' Synthetic Datasets

Ganev, De Cristofaro

PrivacySynthetic Data

Best Paper Award

COBBL: Dynamic Constraint Generation for SNARKs

Kunming Jiang, Fraser Brown, Riad Wahby

Generative Models

Best Paper Award

Transport Layer Obscurity: Circumventing SNI Censorship on the TLS Layer

Niklas Niere, Felix Lange, Juraj Somorovsky, Robert Merget

Best Paper Award

Follow My Flow: Unveiling Client-Side Prototype Pollution Gadgets from One Million Real-World Websites

Zifeng Kang, Muxi Lyu, Zhengyu Liu, Jianjia Yu, Runqi Fan, Song Li, Yinzhi Cao

Best Paper Award

CipherSteal: Stealing Input Data from TEE-Shielded Neural Networks with Ciphertext Side Channels

Yuanyuan Yuan, Zhibo Liu, Sen Deng, Yanzuo Chen, Shuai Wang, Yinqian Zhang, Zhendong Su

Best Paper Award

Characterizing Robocalls with Multiple Vantage Points

Sathvik Prasad, Aleksandr Nahapetyan, Bradley Reaves

Best Paper Award

Verifiable Boosted Tree Ensembles

Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Giulio Ermanno Pibiri

Best Paper Award

Unveiling Security Vulnerabilities in Git Large File Storage Protocol

Yuan Chen, Qinying Wang, Yong Yang, Yuanchao Chen, Yuwei Li, Shouling Ji

Storage SystemsNetwork ProtocolsVersion Control

Best Paper Award

Empc: Effective Path Prioritization for Symbolic Execution with Path Cover

Shuangjie Yao & Dongdong She

Best Paper Award

SLAP: Data Speculation Attacks via Load Address Prediction on Apple Silicon

Jason Kim, Daniel Genkin, Yuval Yarom

Best Paper Award

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications

Fengyu Liu, Yuan Zhang, Tian Chen, Youkun Shi, Guangliang Yang, Zihan Lin, Min Yang, Junyao He

Taint AnalysisMicroservices

Best Paper Award

DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks

Yupei Liu, Yuqi Jia, Jinyuan Jia, Dawn Song, Neil Zhenqiang Gong

Prompt LearningDetection

🏆 2024(9)

Distinguished Paper Award

BENZENE: A Practical Root Cause Analysis System with an Under-Constrained State Mutation

Park, Lee, Jung, Koo, Kim

FuzzingRoot Cause Analysis

Distinguished Paper Award

From Chatbots to Phishbots?: Phishing Scam Generation in Commercial Large Language Models

Roy, Thota, Naragam, Nilizadeh

LLMPhishing

Distinguished Paper Award

SoK: Prudent Evaluation Practices for Fuzzing

Schloegel, Bars, Schiller, Bernhard et al.

FuzzingSoK

Distinguished Paper Award

WESEE: Using Malicious #VC Interrupts to Break AMD SEV-SNP

Schlüter, Sridhara, Bertschi, Shinde

TEEMicroarchitecture

Best Paper Award

Shedding Light on CVSS Scoring Inconsistencies: A User-Centric Study on Evaluating Widespread Security Vulnerabilities

Julia Wunder, Andreas Kurtz, Christian Eichenmüller, Freya Gassmann, Zinaida Benenson

Best Paper Award

"False negative - that one is going to kill you." - Understanding Industry Perspectives of Static Analysis based Security Testing

Amit Seal Ami, Kevin Moran, Denys Poshyvanyk, Adwait Nadkarni

Best Paper Award

The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web

Soheil Khodayari, Thomas Barber, Giancarlo Pellegrino

Best Paper Award

SoK: Unintended Interactions among Machine Learning Defenses and Risks

Vasisht Duddu, Sebastian Szyller, N. Asokan

Best Paper Award

From Virtual Touch to Tesla Command: Unlocking Unauthenticated Control Chains From Smart Glasses for Vehicle Takeover

Xingli Zhang, Yazhou Tu, Yan Long, Liqun Shan, Mohamed A Elsaadani, Kevin Fu, Zhiqiang Lin, Xiali Hei

Touch Interfaces

🏆 2023(12)

Best Paper Award

MEGA: Malleable Encryption Goes Awry

Backendal et al.

EncryptionCryptanalysis

Distinguished Paper Award

WaVe: a verifiably secure WebAssembly sandboxing runtime

Johnson, Laufer, Zhao, Narayan, Savage, Stefan, Brown

WebAssemblySandbox

Distinguished Paper Award

Weak Fiat-Shamir Attacks on Modern Proof Systems

Dao, Miller, Wright, Grubbs

Zero-KnowledgeCryptography

Best Paper Award

Practically-exploitable Cryptographic Vulnerabilities in Matrix

Martin Albrecht, Sofía Celi, Benjamin Dowling, Daniel Jones

Best Paper Award

Typing High-Speed Cryptography against Spectre v1

Basavesh Ammanaghatta Shivakumar, Gilles Barthe, Benjamin Grégoire, Vincent Laporte, Tiago Oliviera, Swarn Priya, Peter Schwabe, Lucas Tabary-Maujean

Best Paper Award

Red Team vs. Blue Team: A Real-World Hardware Trojan Detection Case Study Across Four Modern CMOS Technology Generations

Endres Puschner, Thorben Moos, Christian Kison, Steffen Becker, Amir Moradi, Christof Paar

HardwareDetection

Best Paper Award

It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses

Soheil Khodayari & Giancarlo Pellegrino

Best Paper Award

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web

Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock

Best Paper Award

Characterizing Everyday Misuse of Smart Home Devices

Phoebe Moh, Pubali Datta, Noel Warford, Adam Bates, Nathan Malkin, Michelle Mazurek

Smart Home

Best Paper Award

Not Yet Another Digital ID: Privacy-preserving Humanitarian Aid Distribution

Boya Wang, Wouter Lueks, Justinas Sukaitis, Vincent Graf Narbel, Carmela Troncoso

Privacy

Best Paper Award

"In Eighty Percent of the Cases, I Select the Password for Them": Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya

Collins W. Munyendo, Yasemin Acar, Adam J. Aviv

Privacy

Best Paper Award

Space Odyssey: An Experimental Software Security Analysis of Satellites

Johannes Willbold, Moritz Schloegel, Manuel Vögele, Maximilian Gerhardt, Thorsten Holz, Ali Abbasi

🏆 2022(5)

Distinguished Paper Award

Assessing the Security of GitHub Copilot's Code Contributions

Pearce, Ahmad, Tan, Dolan-Gavitt, Karri

AI CodeSecurity

Distinguished Paper Award

Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects

Wermke, Woehler, Klemmer, Fourné, Acar, Fahl

Open SourceTrust

Distinguished Paper Award

Four Attacks and a Proof for Telegram

Albrecht, Mareková, Paterson, Stepanovs

CryptographyProtocol

Best Paper Award

Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions

Hammond Pearce, Baleegh Ahmad, Benjamin Tan, Brendan Dolan-Gavitt, Ramesh Karri

Best Paper Award

Invisible Finger: Practical Electromagnetic Interference Attack on Touchscreen-based Electronic Devices

Haoqi Shan, Boyi Zhang, Zihao Zhan, Dean Sullivan, Shuo Wang, Yier Jin

Touch Interfaces

🏆 2021(3)

Best Paper Award

Compositional Security for Reentrant Applications

Ethan Cecchetti, Siqiu Yao, Haobin Ni, Andrew C. Myers

program securityreentrancysmart contracts

Best Paper Award

The EMV Standard: Break, Fix, Verify

David Basin, Ralf Sasse, Jorge Toro-Pozo

security protocolsformal verificationEMVpayment

Best Paper Award

Hardware-Software Contracts for Secure Speculation

Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila

Hardware

🏆 2020(1)

Best Paper Award

TRRespass: Exploiting the Many Sides of Target Row Refresh

Pietro Frigo, Emanuele Vannacci, Hasan Hassan, Victor van der Veen, Onur Mutlu, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi

Best Papers/S&P

S&P Best Papers

IEEE Symposium on Security and Privacy

43 papers · 2020–2025

← S&P Conference Info

🏆 2025(13)

Distinguished Paper Award

Breaking the Barrier: Post-Barrier Spectre Attacks

Wikner, Razavi

SpectreMicroarchitecture

Distinguished Paper Award

The Inadequacy of Similarity-based Privacy Metrics: Privacy Attacks against 'Truly Anonymous' Synthetic Datasets

Ganev, De Cristofaro

PrivacySynthetic Data

Best Paper Award

COBBL: Dynamic Constraint Generation for SNARKs

Kunming Jiang, Fraser Brown, Riad Wahby

Generative Models

Best Paper Award

Transport Layer Obscurity: Circumventing SNI Censorship on the TLS Layer

Niklas Niere, Felix Lange, Juraj Somorovsky, Robert Merget

Best Paper Award

Follow My Flow: Unveiling Client-Side Prototype Pollution Gadgets from One Million Real-World Websites

Zifeng Kang, Muxi Lyu, Zhengyu Liu, Jianjia Yu, Runqi Fan, Song Li, Yinzhi Cao

Best Paper Award

CipherSteal: Stealing Input Data from TEE-Shielded Neural Networks with Ciphertext Side Channels

Yuanyuan Yuan, Zhibo Liu, Sen Deng, Yanzuo Chen, Shuai Wang, Yinqian Zhang, Zhendong Su

Best Paper Award

Characterizing Robocalls with Multiple Vantage Points

Sathvik Prasad, Aleksandr Nahapetyan, Bradley Reaves

Best Paper Award

Verifiable Boosted Tree Ensembles

Stefano Calzavara, Lorenzo Cazzaro, Claudio Lucchese, Giulio Ermanno Pibiri

Best Paper Award

Unveiling Security Vulnerabilities in Git Large File Storage Protocol

Yuan Chen, Qinying Wang, Yong Yang, Yuanchao Chen, Yuwei Li, Shouling Ji

Storage SystemsNetwork ProtocolsVersion Control

Best Paper Award

Empc: Effective Path Prioritization for Symbolic Execution with Path Cover

Shuangjie Yao & Dongdong She

Best Paper Award

SLAP: Data Speculation Attacks via Load Address Prediction on Apple Silicon

Jason Kim, Daniel Genkin, Yuval Yarom

Best Paper Award

Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications

Fengyu Liu, Yuan Zhang, Tian Chen, Youkun Shi, Guangliang Yang, Zihan Lin, Min Yang, Junyao He

Taint AnalysisMicroservices

Best Paper Award

DataSentinel: A Game-Theoretic Detection of Prompt Injection Attacks

Yupei Liu, Yuqi Jia, Jinyuan Jia, Dawn Song, Neil Zhenqiang Gong

Prompt LearningDetection

🏆 2024(9)

Distinguished Paper Award

BENZENE: A Practical Root Cause Analysis System with an Under-Constrained State Mutation

Park, Lee, Jung, Koo, Kim

FuzzingRoot Cause Analysis

Distinguished Paper Award

From Chatbots to Phishbots?: Phishing Scam Generation in Commercial Large Language Models

Roy, Thota, Naragam, Nilizadeh

LLMPhishing

Distinguished Paper Award

SoK: Prudent Evaluation Practices for Fuzzing

Schloegel, Bars, Schiller, Bernhard et al.

FuzzingSoK

Distinguished Paper Award

WESEE: Using Malicious #VC Interrupts to Break AMD SEV-SNP

Schlüter, Sridhara, Bertschi, Shinde

TEEMicroarchitecture

Best Paper Award

Shedding Light on CVSS Scoring Inconsistencies: A User-Centric Study on Evaluating Widespread Security Vulnerabilities

Julia Wunder, Andreas Kurtz, Christian Eichenmüller, Freya Gassmann, Zinaida Benenson

Best Paper Award

"False negative - that one is going to kill you." - Understanding Industry Perspectives of Static Analysis based Security Testing

Amit Seal Ami, Kevin Moran, Denys Poshyvanyk, Adwait Nadkarni

Best Paper Award

The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web

Soheil Khodayari, Thomas Barber, Giancarlo Pellegrino

Best Paper Award

SoK: Unintended Interactions among Machine Learning Defenses and Risks

Vasisht Duddu, Sebastian Szyller, N. Asokan

Best Paper Award

From Virtual Touch to Tesla Command: Unlocking Unauthenticated Control Chains From Smart Glasses for Vehicle Takeover

Xingli Zhang, Yazhou Tu, Yan Long, Liqun Shan, Mohamed A Elsaadani, Kevin Fu, Zhiqiang Lin, Xiali Hei

Touch Interfaces

🏆 2023(12)

Best Paper Award

MEGA: Malleable Encryption Goes Awry

Backendal et al.

EncryptionCryptanalysis

Distinguished Paper Award

WaVe: a verifiably secure WebAssembly sandboxing runtime

Johnson, Laufer, Zhao, Narayan, Savage, Stefan, Brown

WebAssemblySandbox

Distinguished Paper Award

Weak Fiat-Shamir Attacks on Modern Proof Systems

Dao, Miller, Wright, Grubbs

Zero-KnowledgeCryptography

Best Paper Award

Practically-exploitable Cryptographic Vulnerabilities in Matrix

Martin Albrecht, Sofía Celi, Benjamin Dowling, Daniel Jones

Best Paper Award

Typing High-Speed Cryptography against Spectre v1

Basavesh Ammanaghatta Shivakumar, Gilles Barthe, Benjamin Grégoire, Vincent Laporte, Tiago Oliviera, Swarn Priya, Peter Schwabe, Lucas Tabary-Maujean

Best Paper Award

Red Team vs. Blue Team: A Real-World Hardware Trojan Detection Case Study Across Four Modern CMOS Technology Generations

Endres Puschner, Thorben Moos, Christian Kison, Steffen Becker, Amir Moradi, Christof Paar

HardwareDetection

Best Paper Award

It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses

Soheil Khodayari & Giancarlo Pellegrino

Best Paper Award

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web

Jannis Rautenstrauch, Giancarlo Pellegrino, Ben Stock

Best Paper Award

Characterizing Everyday Misuse of Smart Home Devices

Phoebe Moh, Pubali Datta, Noel Warford, Adam Bates, Nathan Malkin, Michelle Mazurek

Smart Home

Best Paper Award

Not Yet Another Digital ID: Privacy-preserving Humanitarian Aid Distribution

Boya Wang, Wouter Lueks, Justinas Sukaitis, Vincent Graf Narbel, Carmela Troncoso

Privacy

Best Paper Award

"In Eighty Percent of the Cases, I Select the Password for Them": Security and Privacy Challenges, Advice, and Opportunities at Cybercafes in Kenya

Collins W. Munyendo, Yasemin Acar, Adam J. Aviv

Privacy

Best Paper Award

Space Odyssey: An Experimental Software Security Analysis of Satellites

Johannes Willbold, Moritz Schloegel, Manuel Vögele, Maximilian Gerhardt, Thorsten Holz, Ali Abbasi

🏆 2022(5)

Distinguished Paper Award

Assessing the Security of GitHub Copilot's Code Contributions

Pearce, Ahmad, Tan, Dolan-Gavitt, Karri

AI CodeSecurity

Distinguished Paper Award

Committed to Trust: A Qualitative Study on Security & Trust in Open Source Software Projects

Wermke, Woehler, Klemmer, Fourné, Acar, Fahl

Open SourceTrust

Distinguished Paper Award

Four Attacks and a Proof for Telegram

Albrecht, Mareková, Paterson, Stepanovs

CryptographyProtocol

Best Paper Award

Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions

Hammond Pearce, Baleegh Ahmad, Benjamin Tan, Brendan Dolan-Gavitt, Ramesh Karri

Best Paper Award

Invisible Finger: Practical Electromagnetic Interference Attack on Touchscreen-based Electronic Devices

Haoqi Shan, Boyi Zhang, Zihao Zhan, Dean Sullivan, Shuo Wang, Yier Jin

Touch Interfaces

🏆 2021(3)

Best Paper Award

Compositional Security for Reentrant Applications

Ethan Cecchetti, Siqiu Yao, Haobin Ni, Andrew C. Myers

program securityreentrancysmart contracts

Best Paper Award

The EMV Standard: Break, Fix, Verify

David Basin, Ralf Sasse, Jorge Toro-Pozo

security protocolsformal verificationEMVpayment

Best Paper Award

Hardware-Software Contracts for Secure Speculation

Marco Guarnieri, Boris Köpf, Jan Reineke, Pepe Vila

Hardware

🏆 2020(1)

Best Paper Award

TRRespass: Exploiting the Many Sides of Target Row Refresh

Pietro Frigo, Emanuele Vannacci, Hasan Hassan, Victor van der Veen, Onur Mutlu, Cristiano Giuffrida, Herbert Bos, Kaveh Razavi