Kaan Onarlioglu

According to our database, Kaan Onarlioglu authored at least 26 papers between 2010 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies.

Bahruz Jabiyev, Anthony Gavazzi, Kaan Onarlioglu, Engin Kirda

Proceedings of the 27th International Symposium on Research in Attacks, 2024

Untangle: Multi-Layer Web Server Fingerprinting.

Cem Topcuoglu, Kaan Onarlioglu, Bahruz Jabiyev, Engin Kirda

Proceedings of the 31st Annual Network and Distributed System Security Symposium, 2024

2023

OAuth 2.0 Redirect URI Validation Falls Short, Literally.

Tommaso Innocenti, Matteo Golinelli, Kaan Onarlioglu, Seyed Ali Mirheidari, Bruno Crispo, Engin Kirda

Proceedings of the Annual Computer Security Applications Conference, 2023

2022

Web Cache Deception Escalates!

Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda, Bruno Crispo

Proceedings of the 31st USENIX Security Symposium, 2022

FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies.

Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, Engin Kirda

Proceedings of the 31st USENIX Security Symposium, 2022

2021

T-Reqs: HTTP Request Smuggling with Differential Fuzzing.

Bahruz Jabiyev, Steven Sprecher, Kaan Onarlioglu, Engin Kirda

Proceedings of the CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15, 2021

FADE: Detecting Fake News Articles on the Web.

Bahruz Jabiyev, Sinan Pehlivanoglu, Kaan Onarlioglu, Engin Kirda

Proceedings of the ARES 2021: The 16th International Conference on Availability, 2021

2020

Cached and Confused: Web Cache Deception in the Wild.

Seyed Ali Mirheidari, Sajjad Arshad, Kaan Onarlioglu, Bruno Crispo, Engin Kirda, William Robertson

Proceedings of the 29th USENIX Security Symposium, 2020

2018

Eraser: Your Data Won't Be Back.

Kaan Onarlioglu, William K. Robertson, Engin Kirda

Proceedings of the 2018 IEEE European Symposium on Security and Privacy, 2018

2017

Game of Registrars: An Empirical Analysis of Post-Expiration Domain Name Takeovers.

Tobias Lauinger, Abdelberi Chaabane, Ahmet Salih Buyukkayhan, Kaan Onarlioglu, William Robertson

Proceedings of the 26th USENIX Security Symposium, 2017

2016

Trellis: Privilege Separation for Multi-user Applications Made Easy.

Andrea Mambretti, Kaan Onarlioglu, Collin Mulliner, William Robertson, Engin Kirda, Federico Maggi, Stefano Zanero

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2016

CrossFire: An Analysis of Firefox Extension-Reuse Vulnerabilities.

Ahmet Salih Buyukkayhan, Kaan Onarlioglu, William K. Robertson, Engin Kirda

Proceedings of the 23rd Annual Network and Distributed System Security Symposium, 2016

WHOIS Lost in Translation: (Mis)Understanding Domain Name Expiration and Re-Registration.

Tobias Lauinger, Kaan Onarlioglu, Abdelberi Chaabane, William Robertson, Engin Kirda

Proceedings of the 2016 ACM on Internet Measurement Conference, 2016

Overhaul: Input-Driven Access Control for Better Privacy on Traditional Operating Systems.

Kaan Onarlioglu, William Robertson, Engin Kirda

Proceedings of the 46th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2016

2015

SENTINEL: Securing Legacy Firefox Extensions.

Kaan Onarlioglu, Ahmet Salih Buyukkayhan, William K. Robertson, Engin Kirda

Comput. Secur., 2015

BabelCrypt: The Universal Encryption Layer for Mobile Messaging Applications.

Ahmet Talha Ozcan, Can Gemicioglu, Kaan Onarlioglu, Michael Weissbacher, Collin Mulliner, William K. Robertson, Engin Kirda

Proceedings of the Financial Cryptography and Data Security, 2015

2014

Toward Robust Hidden Volumes using Write-Only Oblivious RAM.

Erik-Oliver Blass, Travis Mayberry, Guevara Noubir, Kaan Onarlioglu

IACR Cryptol. ePrint Arch., 2014

TrueClick: automatically distinguishing trick banners from genuine download links.

Sevtap Duman, Kaan Onarlioglu, Ali Osman Ulusoy, William K. Robertson, Engin Kirda

Proceedings of the 30th Annual Computer Security Applications Conference, 2014

2013

PrivExec: Private Execution as an Operating System Service.

Kaan Onarlioglu, Collin Mulliner, William K. Robertson, Engin Kirda

Proceedings of the 2013 IEEE Symposium on Security and Privacy, 2013

Holiday Pictures or Blockbuster Movies? Insights into Copyright Infringement in User Uploads to One-Click File Hosters.

Tobias Lauinger, Kaan Onarlioglu, Chaabane Abdelberi, Engin Kirda, William K. Robertson, Mohamed Ali Kâafar

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2013

Clickonomics: Determining the Effect of Anti-Piracy Measures for One-Click Hosting.

Tobias Lauinger, Martin Szydlowski, Kaan Onarlioglu, Gilbert Wondracek, Engin Kirda, Christopher Krügel

Proceedings of the 20th Annual Network and Distributed System Security Symposium, 2013

Securing Legacy Firefox Extensions with SENTINEL.

Kaan Onarlioglu, Mustafa Battal, William K. Robertson, Engin Kirda

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2013

Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks.

Ting-Fang Yen, Alina Oprea, Kaan Onarlioglu, Todd Leetham, William K. Robertson, Ari Juels, Engin Kirda

Proceedings of the Annual Computer Security Applications Conference, 2013

2012

Insights into User Behavior in Dealing with Internet Attacks.

Kaan Onarlioglu, Utku Ozan Yilmaz, Engin Kirda, Davide Balzarotti

Proceedings of the 19th Annual Network and Distributed System Security Symposium, 2012

2010

Efficient broadcast encryption with user profiles.

Murat Ak, Kamer Kaya, Kaan Onarlioglu, Ali Aydin Selçuk

Inf. Sci., 2010

G-Free: defeating return-oriented programming through gadget-less binaries.

Kaan Onarlioglu, Leyla Bilge, Andrea Lanzi, Davide Balzarotti, Engin Kirda

Proceedings of the Twenty-Sixth Annual Computer Security Applications Conference, 2010