Alexandros Kapravelos

According to our database, Alexandros Kapravelos authored at least 51 papers between 2009 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

WRIT: Web Request Integrity and Attestation Against Malicious Browser Extensions.

Giorgos Vasiliadis, Apostolos Karampelas, Alexandros Shevtsov, Panagiotis Papadopoulos, Sotiris Ioannidis, Alexandros Kapravelos

IEEE Trans. Dependable Secur. Comput., 2024

S3C2 Summit 2023-11: Industry Secure Supply Chain Summit.

Nusrat Zahan, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams

CoRR, 2024

S3C2 Summit 2024-03: Industry Secure Supply Chain Summit.

Greg Tystahl, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams

CoRR, 2024

Manifest V3 Unveiled: Navigating the New Era of Browser Extensions.

Nikolaos Pantelaios, Alexandros Kapravelos

CoRR, 2024

FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques.

Nikolaos Pantelaios, Alexandros Kapravelos

Proceedings of the 33rd USENIX Security Symposium, 2024

On SMS Phishing Tactics and Infrastructure.

Aleksandr Nahapetyan, Sathvik Prasad, Kevin Childs, Adam Oest, Yeganeh Ladwig, Alexandros Kapravelos, Bradley Reaves

Proceedings of the IEEE Symposium on Security and Privacy, 2024

UntrustIDE: Exploiting Weaknesses in VS Code Extensions.

Elizabeth Lin, Igibek Koishybayev, Trevor Dunlap, William Enck, Alexandros Kapravelos

Proceedings of the 31st Annual Network and Distributed System Security Symposium, 2024

JSHint: Revealing API Usage to Improve Detection of Malicious JavaScript.

Shaown Sarker, Kasimir Schulz, Aleksandr Nahapetyan, Anupam Das, Alexandros Kapravelos

Proceedings of the Information Security - 27th International Conference, 2024

Automated Generation of Behavioral Signatures for Malicious Web Campaigns.

Shaown Sarker, William Melicher, Oleksii Starov, Anupam Das, Alexandros Kapravelos

Proceedings of the Information Security - 27th International Conference, 2024

2023

S3C2 Summit 2023-06: Government Secure Supply Chain Summit.

William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams

CoRR, 2023

S3C2 Summit 2023-02: Industry Secure Supply Chain Summit.

Trevor Dunlap, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams

CoRR, 2023

S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit.

Mindy Tran, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams

CoRR, 2023

Automatic Discovery of Emerging Browser Fingerprinting Techniques.

Junhua Su, Alexandros Kapravelos

Proceedings of the ACM Web Conference 2023, 2023

ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions.

Siddharth Muralee, Igibek Koishybayev, Aleksandr Nahapetyan, Greg Tystahl, Bradley Reaves, Antonio Bianchi, William Enck, Alexandros Kapravelos, Aravind Machiry

Proceedings of the 32nd USENIX Security Symposium, 2023

2022

CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing.

Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn

IEEE Secur. Priv., 2022

Measuring the Privacy vs. Compatibility Trade-off in Preventing Third-Party Stateful Tracking.

Jordan Jueckstock, Peter Snyder, Shaown Sarker, Alexandros Kapravelos, Benjamin Livshits

Proceedings of the WWW '22: The ACM Web Conference 2022, Virtual Event, Lyon, France, April 25, 2022

Characterizing the Security of Github CI Workflows.

Igibek Koishybayev, Aleksandr Nahapetyan, Raima Zachariah, Siddharth Muralee, Bradley Reaves, Alexandros Kapravelos, Aravind Machiry

Proceedings of the 31st USENIX Security Symposium, 2022

yoU aRe a Liar: //A Unified Framework for Cross-Testing URL Parsers.

Dashmeet Kaur Ajmani, Igibek Koishybayev, Alexandros Kapravelos

Proceedings of the 43rd IEEE Security and Privacy, 2022

SoK: Workerounds - Categorizing Service Worker Attacks and Mitigations.

Karthika Subramani, Jordan Jueckstock, Alexandros Kapravelos, Roberto Perdisci

Proceedings of the 7th IEEE European Symposium on Security and Privacy, 2022

2021

Categorizing Service Worker Attacks and Mitigations.

Karthika Subramani, Jordan Jueckstock, Alexandros Kapravelos, Roberto Perdisci

CoRR, 2021

Towards Realistic and ReproducibleWeb Crawl Measurements.

Jordan Jueckstock, Shaown Sarker, Peter Snyder, Aidan Beggs, Panagiotis Papadopoulos, Matteo Varvello, Benjamin Livshits, Alexandros Kapravelos

Proceedings of the WWW '21: The Web Conference 2021, 2021

Cookie Swap Party: Abusing First-Party Cookies for Web Tracking.

Quan Chen, Panagiotis Ilia, Michalis Polychronakis, Alexandros Kapravelos

Proceedings of the WWW '21: The Web Conference 2021, 2021

Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets.

Pierre Laperdrix, Oleksii Starov, Quan Chen, Alexandros Kapravelos, Nick Nikiforakis

Proceedings of the 30th USENIX Security Symposium, 2021

Detecting Filter List Evasion with Event-Loop-Turn Granularity JavaScript Signatures.

Quan Chen, Peter Snyder, Ben Livshits, Alexandros Kapravelos

Proceedings of the 42nd IEEE Symposium on Security and Privacy, 2021

Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases.

Sung Ta Dinh, Haehyun Cho, Kyle Martin, Adam Oest, Kyle Zeng, Alexandros Kapravelos, Gail-Joon Ahn, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili

Proceedings of the 28th Annual Network and Distributed System Security Symposium, 2021

Browserprint: an Analysis of the Impact of Browser Features on Fingerprintability and Web Privacy.

Seyed Ali Akhavani, Jordan Jueckstock, Junhua Su, Alexandros Kapravelos, Engin Kirda, Long Lu

Proceedings of the Information Security - 24th International Conference, 2021

2020

There's No Trick, Its Just a Simple Trick: A Web-Compat and Privacy Improving Approach to Third-party Web Storage.

Jordan Jueckstock, Peter Snyder, Shaown Sarker, Alexandros Kapravelos, Benjamin Livshits

CoRR, 2020

Improving Web Content Blocking With Event-Loop-Turn Granularity JavaScript Signatures.

Quan Chen, Peter Snyder, Ben Livshits, Alexandros Kapravelos

CoRR, 2020

Mininode: Reducing the Attack Surface of Node.js Applications.

Igibek Koishybayev, Alexandros Kapravelos

Proceedings of the 23rd International Symposium on Research in Attacks, 2020

Hiding in Plain Site: Detecting JavaScript Obfuscation through Concealed Browser API Usage.

Shaown Sarker, Jordan Jueckstock, Alexandros Kapravelos

Proceedings of the IMC '20: ACM Internet Measurement Conference, 2020

You've Changed: Detecting Malicious Browser Extensions through their Update Deltas.

Nikolaos Pantelaios, Nick Nikiforakis, Alexandros Kapravelos

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

2019

The Blind Men and the Internet: Multi-Vantage Point Web Measurements.

Jordan Jueckstock, Shaown Sarker, Peter Snyder, Panagiotis Papadopoulos, Matteo Varvello, Benjamin Livshits, Alexandros Kapravelos

CoRR, 2019

Unnecessarily Identifiable: Quantifying the fingerprintability of browser extensions due to bloat.

Oleksii Starov, Pierre Laperdrix, Alexandros Kapravelos, Nick Nikiforakis

Proceedings of the World Wide Web Conference, 2019

Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting.

Erik Trickel, Oleksii Starov, Alexandros Kapravelos, Nick Nikiforakis, Adam Doupé

Proceedings of the 28th USENIX Security Symposium, 2019

VisibleV8: In-browser Monitoring of JavaScript in the Wild.

Jordan Jueckstock, Alexandros Kapravelos

Proceedings of the Internet Measurement Conference, 2019

Wild Extensions: Discovering and Analyzing Unlisted Chrome Extensions.

Aidan Beggs, Alexandros Kapravelos

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2019

2018

Mystique: Uncovering Information Leakage from Browser Extensions.

Quan Chen, Alexandros Kapravelos

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

2016

Cloak of Visibility: Detecting When Machines Browse a Different Web.

Luca Invernizzi, Kurt Thomas, Alexandros Kapravelos, Oxana Comanescu, Jean-Michel Picod, Elie Bursztein

Proceedings of the IEEE Symposium on Security and Privacy, 2016

2015

Analyzing and Defending Against Evolving Web Threats.

Alexandros Kapravelos

PhD thesis, 2015

Ad Injection at Scale: Assessing Deceptive Advertisement Modifications.

Kurt Thomas, Elie Bursztein, Chris Grier, Grant Ho, Nav Jagpal, Alexandros Kapravelos, Damon McCoy, Antonio Nappa, Vern Paxson, Paul Pearce, Niels Provos, Moheeb Abu Rajab

Proceedings of the 2015 IEEE Symposium on Security and Privacy, 2015

2014

On the Workings and Current Practices of Web-Based Device Fingerprinting.

Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna

IEEE Secur. Priv., 2014

Hulk: Eliciting Malicious Behavior in Browser Extensions.

Alexandros Kapravelos, Chris Grier, Neha Chachra, Christopher Kruegel, Giovanni Vigna, Vern Paxson

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements.

Apostolis Zarras, Alexandros Kapravelos, Gianluca Stringhini, Thorsten Holz, Christopher Kruegel, Giovanni Vigna

Proceedings of the 2014 Internet Measurement Conference, 2014

PExy: The Other Side of Exploit Kits.

Giancarlo De Maio, Alexandros Kapravelos, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2014

2013

Revolver: An Automated Approach to the Detection of Evasive Web-based Malware.

Alexandros Kapravelos, Yan Shoshitaishvili, Marco Cova, Christopher Kruegel, Giovanni Vigna

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting.

Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna

Proceedings of the 2013 IEEE Symposium on Security and Privacy, 2013

2012

You are what you include: large-scale evaluation of remote javascript inclusions.

Nick Nikiforakis, Luca Invernizzi, Alexandros Kapravelos, Steven Van Acker, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna

Proceedings of the ACM Conference on Computer and Communications Security, 2012

2011

Escape from Monkey Island: Evading High-Interaction Honeyclients.

Alexandros Kapravelos, Marco Cova, Christopher Kruegel, Giovanni Vigna

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2011

2010

D(e|i)aling with VoIP: Robust Prevention of DIAL Attacks.

Alexandros Kapravelos, Iasonas Polakis, Elias Athanasopoulos, Sotiris Ioannidis, Evangelos P. Markatos

Proceedings of the Computer Security, 2010

2009

FleXConf: A Flexible Conference Assistant Using Context-Aware Notification Services.

Nikos Armenatzoglou, Yannis Marketakis, Lito Kriara, Elias Apostolopoulos, Vicky Papavasiliou, Dimitris Kampas, Alexandros Kapravelos, Eythimis Kartsonakis, Giorgos Linardakis, Sofia Nikitaki, Antonis Bikakis, Grigoris Antoniou

Proceedings of the On the Move to Meaningful Internet Systems: OTM 2009 Workshops, 2009

Realistic Passive Packet Loss Measurement for High-Speed Networks.

Ales Friedl, Sven Ubik, Alexandros Kapravelos, Michalis Polychronakis, Evangelos P. Markatos

Proceedings of the Traffic Monitoring and Analysis, First International Workshop, 2009