Cristian-Alexandru Staicu

According to our database, Cristian-Alexandru Staicu authored at least 24 papers between 2016 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

SoK: A Literature and Engineering Review of Regular Expression Denial of Service.

Masudul Hasan Masud Bhuiyan, Berk Çakar, Ethan H. Burmane, James C. Davis, Cristian-Alexandru Staicu

CoRR, 2024

SimSCOOD: Systematic Analysis of Out-of-Distribution Generalization in Fine-tuned Source Code Models.

Hossein Hajipour, Ning Yu, Cristian-Alexandru Staicu, Mario Fritz

Proceedings of the Findings of the Association for Computational Linguistics: NAACL 2024, 2024

2023

Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages.

Cristian-Alexandru Staicu, Sazzadur Rahaman, Ágnes Kiss, Michael Backes

Proceedings of the 32nd USENIX Security Symposium, 2023

Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js.

Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru Staicu

Proceedings of the 32nd USENIX Security Symposium, 2023

SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes.

Abdullah AlHamdan, Cristian-Alexandru Staicu

Proceedings of the 32nd USENIX Security Symposium, 2023

SecBench.js: An Executable Security Benchmark Suite for Server-Side JavaScript.

Masudul Hasan Masud Bhuiyan, Adithya Srinivas Parthasarathy, Nikos Vasilakis, Michael Pradel, Cristian-Alexandru Staicu

Proceedings of the 45th IEEE/ACM International Conference on Software Engineering, 2023

Jack-in-the-box: An Empirical Study of JavaScript Bundling on the Web and its Security Implications.

Jeremy Rack, Cristian-Alexandru Staicu

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

2022

A Tale of Frozen Clouds: Quantifying the Impact of Algorithmic Complexity Vulnerabilities in Popular Web Servers.

Masudul Hasan Masud Bhuiyan, Cristian-Alexandru Staicu

CoRR, 2022

SimSCOOD: Systematic Analysis of Out-of-Distribution Behavior of Source Code Models.

Hossein Hajipour, Ning Yu, Cristian-Alexandru Staicu, Mario Fritz

CoRR, 2022

2021

SampleFix: Learning to Generate Functionally Diverse Fixes.

Hossein Hajipour, Apratim Bhattacharyya, Cristian-Alexandru Staicu, Mario Fritz

Proceedings of the Machine Learning and Principles and Practice of Knowledge Discovery in Databases, 2021

Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction.

Nikos Vasilakis, Cristian-Alexandru Staicu, Grigoris Ntousakis, Konstantinos Kallas, Ben Karel, André DeHon, Michael Pradel

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

2020

Enhancing the Security and Privacy of Full-Stack JavaScript Web Applications.

Cristian-Alexandru Staicu

PhD thesis, 2020

Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript.

Nikos Vasilakis, Cristian-Alexandru Staicu, Greg Ntousakis, Konstantinos Kallas, Ben Karel, André DeHon, Michael Pradel

CoRR, 2020

Extracting taint specifications for JavaScript libraries.

Cristian-Alexandru Staicu, Martin Toldam Torp, Max Schäfer, Anders Møller, Michael Pradel

Proceedings of the ICSE '20: 42nd International Conference on Software Engineering, Seoul, South Korea, 27 June, 2020

2019

Anything to Hide? Studying Minified and Obfuscated Code in the Web.

Philippe Skolka, Cristian-Alexandru Staicu, Michael Pradel

Proceedings of the World Wide Web Conference, 2019

Small World with High Risks: A Study of Security Threats in the npm Ecosystem.

Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny, Michael Pradel

Proceedings of the 28th USENIX Security Symposium, 2019

Leaky Images: Targeted Privacy Attacks in the Web.

Cristian-Alexandru Staicu, Michael Pradel

Proceedings of the 28th USENIX Security Symposium, 2019

An Empirical Study of Information Flows in Real-World JavaScript.

Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld

Proceedings of the 14th ACM SIGSAC Workshop on Programming Languages and Analysis for Security, 2019

2018

Freezing the Web: A Study of ReDoS Vulnerabilities in JavaScript-based Web Servers.

Cristian-Alexandru Staicu, Michael Pradel

Proceedings of the 27th USENIX Security Symposium, 2018

SYNODE: Understanding and Automatically Preventing Injection Attacks on NODE.JS.

Cristian-Alexandru Staicu, Michael Pradel, Benjamin Livshits

Proceedings of the 25th Annual Network and Distributed System Security Symposium, 2018

2017

A Survey of Dynamic Analysis and Test Generation for JavaScript.

Esben Andreasen, Liang Gong, Anders Møller, Michael Pradel, Marija Selakovic, Koushik Sen, Cristian-Alexandru Staicu

ACM Comput. Surv., 2017

Saying 'hi!' is not enough: mining inputs for effective test generation.

Luca Della Toffola, Cristian-Alexandru Staicu, Michael Pradel

Proceedings of the 32nd IEEE/ACM International Conference on Automated Software Engineering, 2017

2016

Search Based Clustering for Protecting Software with Diversified Updates.

Mariano Ceccato, Paolo Falcarin, Alessandro Cabutto, Yosief Weldezghi Frezghi, Cristian-Alexandru Staicu

Proceedings of the Search Based Software Engineering - 8th International Symposium, 2016

Nomen est omen: exploring and exploiting similarities between argument and parameter names.

Hui Liu, Qiurong Liu, Cristian-Alexandru Staicu, Michael Pradel, Yue Luo

Proceedings of the 38th International Conference on Software Engineering, 2016