Artifact for "Security Risks of CAD Exchange File Formats on the Example of STEP"

This contains the artifacts for our paper “Security Risks of CAD Exchange File Formats on the Example of STEP”. The artifact contains the proof-of-concept files and, where applicable, results and generated data. Folder denial-of-service Section in paper: 5.1 STEP files in /files generated by the accompanying scripts /results/README.md contains notes and observations during execution of the attacks /results/logs contains the data created by the monitor-process.ps1 script. The data is then plotted as used in the paper (Figure 4). Folder data-exfiltration Section in paper: 5.2 STEP files in /files generated by the accompanying scripts as we found no evidence of support for these features, there are no results Folder parsing-differentials Section in paper: 5.3 STEP files in /files generated by the accompanying script, based on the pre_* files /results contains manual observations after loading the files (README.md) and screenshots of interesting cases Right now the attached 7z file is password protected, as we are still in the disclosure process to the affected companies. Once the paper is published, an unprotected updated version of the artifact will be made available.