Manuel Egele

IEEE Secur. Priv., 2024

Argus: All your (PHP) Injection-sinks are belong to us.

[BibT_eX]

[DOI]

Rasoul Jahanshahi

Proceedings of the 33rd USENIX Security Symposium, 2024

HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface.

[BibT_eX]

[DOI]

Proceedings of the 33rd USENIX Security Symposium, 2024

Pandawan: Quantifying Progress in Linux-based Firmware Rehosting.

[BibT_eX]

[DOI]

Ioannis Angelakopoulos

Proceedings of the 33rd USENIX Security Symposium, 2024

IOMMU Deferred Invalidation Vulnerability: Exploit and Defense.

[BibT_eX]

[DOI]

Proceedings of the Design, Automation & Test in Europe Conference & Exhibition, 2024

2023

Minimalist: Semi-automated Debloating of PHP Web Applications through Static Analysis.

[BibT_eX]

[DOI]

Proceedings of the 32nd USENIX Security Symposium, 2023

AnimateDead: Debloating Web Applications Using Concolic Execution.

[BibT_eX]

[DOI]

Proceedings of the 32nd USENIX Security Symposium, 2023

FirmSolo: Enabling dynamic analysis of binary Linux-based IoT kernel modules.

[BibT_eX]

[DOI]

Ioannis Angelakopoulos

Proceedings of the 32nd USENIX Security Symposium, 2023

Prodigy: Towards Unsupervised Anomaly Detection in Production HPC Systems.

[BibT_eX]

[DOI]

Proceedings of the International Conference for High Performance Computing, 2023

No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions.

[BibT_eX]

[DOI]

Proceedings of the 30th Annual Network and Distributed System Security Symposium, 2023

ProcessorFuzz: Processor Fuzzing with Control and Status Registers Guidance.

[BibT_eX]

[DOI]

Sadullah Canakci

Chathura Rajapaksha

Leila Delshadtehrani

Anoop Mysore Nataraja

Michael Bedford Taylor

Ajay Joshi

Proceedings of the IEEE International Symposium on Hardware Oriented Security and Trust, 2023

SIGFuzz: A Framework for Discovering Microarchitectural Timing Side Channels.

[BibT_eX]

[DOI]

Proceedings of the Design, Automation & Test in Europe Conference & Exhibition, 2023

ThreadLock: Native Principal Isolation Through Memory Protection Keys.

[BibT_eX]

[DOI]

William Blair

Proceedings of the 2023 ACM Asia Conference on Computer and Communications Security, 2023

2022

HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.

[BibT_eX]

[DOI]

ACM Trans. Priv. Secur., 2022

ProcessorFuzz: Guiding Processor Fuzzing using Control and Status Registers.

[BibT_eX]

[DOI]

Sadullah Canakci

Chathura Rajapaksha

Anoop Mysore Nataraja

CoRR, 2022

Polytope: Practical Memory Access Control for C++ Applications.

[BibT_eX]

[DOI]

Ioannis Agadakos

CoRR, 2022

Morphuzz: Bending (Input) Space to Fuzz Virtual Devices.

[BibT_eX]

[DOI]

Proceedings of the 31st USENIX Security Symposium, 2022

MPKAlloc: Efficient Heap Meta-data Integrity Through Hardware Memory Protection Keys.

[BibT_eX]

[DOI]

William Blair

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2022

Evocatio: Conjuring Bug Capabilities from a Single PoC.

[BibT_eX]

[DOI]

Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, 2022

TargetFuzz: Using DARTs to Guide Directed Greybox Fuzzers.

[BibT_eX]

[DOI]

Proceedings of the ASIA CCS '22: ACM Asia Conference on Computer and Communications Security, Nagasaki, Japan, 30 May 2022, 2022

2021

The Art, Science, and Engineering of Fuzzing: A Survey.

[BibT_eX]

[DOI]

IEEE Trans. Software Eng., 2021

A Cautionary Tale About Detecting Malware Using Hardware Performance Counters and Machine Learning.

[BibT_eX]

[DOI]

IEEE Des. Test, 2021

Saphire: Sandboxing PHP Applications with Tailored System Call Allowlists.

[BibT_eX]

[DOI]

Alexander Bulekov

Rasoul Jahanshahi

Proceedings of the 30th USENIX Security Symposium, 2021

Proctor: A Semi-Supervised Performance Anomaly Diagnosis Framework for Production HPC Systems.

[BibT_eX]

[DOI]

Proceedings of the High Performance Computing - 36th International Conference, 2021

To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media.

[BibT_eX]

[DOI]

Proceedings of the 28th Annual Network and Distributed System Security Symposium, 2021

Using Monitoring Data to Improve HPC Performance via Network-Data-Driven Allocation.

[BibT_eX]

[DOI]

Proceedings of the 2021 IEEE High Performance Extreme Computing Conference, 2021

AppJitsu: Investigating the Resiliency of Android Applications.

[BibT_eX]

[DOI]

Proceedings of the IEEE European Symposium on Security and Privacy, 2021

E2EWatch: An End-to-End Anomaly Diagnosis Framework for Production HPC Systems.

[BibT_eX]

[DOI]

Proceedings of the Euro-Par 2021: Parallel Processing, 2021

SealPK: Sealable Protection Keys for RISC-V.

[BibT_eX]

[DOI]

Proceedings of the Design, Automation & Test in Europe Conference & Exhibition, 2021

DirectFuzz: Automated Test Generation for RTL Designs using Directed Graybox Fuzzing.

[BibT_eX]

[DOI]

Sadullah Canakci

Leila Delshadtehrani

Furkan Eris

Michael Bedford Taylor

Ajay Joshi

Proceedings of the 58th ACM/IEEE Design Automation Conference, 2021

SoK: Enabling Security Analyses of Embedded Systems via Rehosting.

[BibT_eX]

[DOI]

Proceedings of the ASIA CCS '21: ACM Asia Conference on Computer and Communications Security, 2021

Oversharing Is Not Caring: How CNAME Cloaking Can Expose Your Session Cookies.

[BibT_eX]

[DOI]

Assel Aliyeva

Proceedings of the ASIA CCS '21: ACM Asia Conference on Computer and Communications Security, 2021

FlexFilt: Towards Flexible Instruction Filtering for Security.

[BibT_eX]

[DOI]

Proceedings of the ACSAC '21: Annual Computer Security Applications Conference, Virtual Event, USA, December 6, 2021

2020

Efficient Sealable Protection Keys for RISC-V.

[BibT_eX]

[DOI]

CoRR, 2020

PHMon: A Programmable Hardware Monitor and Its Security Use Cases.

[BibT_eX]

[DOI]

Proceedings of the 29th USENIX Security Symposium, 2020

Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers.

[BibT_eX]

[DOI]

Proceedings of the 2020 IEEE Symposium on Security and Privacy, 2020

HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.

[BibT_eX]

[DOI]

Proceedings of the 27th Annual Network and Distributed System Security Symposium, 2020

Libspector : Context-Aware Large-Scale Network Traffic Analysis of Android Applications.

[BibT_eX]

[DOI]

Onur Zungur

Proceedings of the 50th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2020

Efficient Context-Sensitive CFI Enforcement Through a Hardware Monitor.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2020

You shall not pass: Mitigating SQL Injection Attacks on Legacy Web Applications.

[BibT_eX]

[DOI]

Rasoul Jahanshahi

Adam Doupé

Proceedings of the ASIA CCS '20: The 15th ACM Asia Conference on Computer and Communications Security, 2020

2019

Online Diagnosis of Performance Variation in HPC Systems Using Machine Learning.

[BibT_eX]

[DOI]

IEEE Trans. Parallel Distributed Syst., 2019

RANDR: Record and Replay for Android Applications via Targeted Runtime Instrumentation.

[BibT_eX]

[DOI]

Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering, 2019

HPAS: An HPC Performance Anomaly Suite for Reproducing Performance Variations.

[BibT_eX]

[DOI]

Proceedings of the 48th International Conference on Parallel Processing, 2019

BorderPatrol: Securing BYOD using Fine-Grained Contextual Information.

[BibT_eX]

[DOI]

Onur Zungur

Guillermo Suarez-Tangil

Proceedings of the 49th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, 2019

On the Perils of Leaking Referrers in Online Collaboration Services.

[BibT_eX]

[DOI]

Beliz Kaleli

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2019

Towards Practical Record and Replay for Mobile Applications.

[BibT_eX]

[DOI]

Proceedings of the 56th Annual Design Automation Conference 2019, 2019

2018

Fuzzing: Art, Science, and Engineering.

[BibT_eX]

[DOI]

CoRR, 2018

Nile: A Programmable Monitoring Coprocessor.

[BibT_eX]

[DOI]

IEEE Comput. Archit. Lett., 2018

Proteus: Detecting Android Emulators from Instruction-Level Profiles.

[BibT_eX]

[DOI]

Onur Sahin

Ayse K. Coskun

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2018

Taxonomist: Application Detection Through Rich Monitoring Data.

[BibT_eX]

[DOI]

Proceedings of the Euro-Par 2018: Parallel Processing, 2018

Hardware Performance Counters Can Detect Malware: Myth or Fact?

[BibT_eX]

[DOI]

Proceedings of the 2018 on Asia Conference on Computer and Communications Security, 2018

2017

Towards Detecting Compromised Accounts on Social Networks.

[BibT_eX]

[DOI]

IEEE Trans. Dependable Secur. Comput., 2017

What's in a Name?: Understanding Profile Name Reuse on Twitter.

[BibT_eX]

[DOI]

Proceedings of the 26th International Conference on World Wide Web, 2017

Diagnosing Performance Variations in HPC Applications Using Machine Learning.

[BibT_eX]

[DOI]

Proceedings of the High Performance Computing - 32nd International Conference, 2017

Semi-automated discovery of server-based information oversharing vulnerabilities in Android applications.

[BibT_eX]

[DOI]

Proceedings of the 26th ACM SIGSOFT International Symposium on Software Testing and Analysis, Santa Barbara, CA, USA, July 10, 2017

High-performance low-energy implementation of cryptographic algorithms on a programmable SoC for IoT devices.

[BibT_eX]

[DOI]

Boyou Zhou

Ajay Joshi

Proceedings of the 2017 IEEE High Performance Extreme Computing Conference, 2017

PayBreak: Defense Against Cryptographic Ransomware.

[BibT_eX]

[DOI]

Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 2017

2016

Towards Automated Dynamic Analysis for Linux-based Embedded Firmware.

[BibT_eX]

[DOI]

Proceedings of the 23rd Annual Network and Distributed System Security Symposium, 2016

Why allowing profile name reuse is a bad idea.

[BibT_eX]

[DOI]

Proceedings of the 9th European Workshop on System Security, 2016

EmailProfiler: Spearphishing Filtering with Header and Stylometric Features of Emails.

[BibT_eX]

[DOI]

Sevtap Duman

Kubra Kalkan-Cakmakci

Engin Kirda

Proceedings of the 40th IEEE Annual Computer Software and Applications Conference, 2016

CRiOS: Toward Large-Scale iOS Application Analysis.

[BibT_eX]

[DOI]

Damilola Orikogbo

Matthias Büchler

Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices, 2016

2015

EVILCOHORT: Detecting Communities of Malicious Accounts on Online Services.

[BibT_eX]

[DOI]

Proceedings of the 24th USENIX Security Symposium, 2015

EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2015

Drops for Stuff: An Analysis of Reshipping Mule Scams.

[BibT_eX]

[DOI]

Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015

2014

Blanket Execution: Dynamic Similarity Testing for Program Binaries and Components.

[BibT_eX]

[DOI]

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

2013

COMPA: Detecting Compromised Accounts on Social Networks.

[BibT_eX]

[DOI]

Proceedings of the 20th Annual Network and Distributed System Security Symposium, 2013

Follow the green: growth and dynamics in twitter follower markets.

[BibT_eX]

[DOI]

Proceedings of the 2013 Internet Measurement Conference, 2013

An empirical study of cryptographic misuse in android applications.

[BibT_eX]

[DOI]

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

2012

NSDI '12 and LEET '12.

[BibT_eX]

[DOI]

A survey on automated dynamic malware-analysis techniques and tools.

[BibT_eX]

[DOI]

ACM Comput. Surv., 2012

PoX: Protecting users from malicious Facebook applications.

[BibT_eX]

[DOI]

Comput. Commun., 2012

Poultry markets: on the underground economy of twitter followers.

[BibT_eX]

[DOI]

Comput. Commun. Rev., 2012

B@bel: Leveraging Email Delivery for Spam Mitigation.

[BibT_eX]

[DOI]

Proceedings of the 21th USENIX Security Symposium, Bellevue, WA, USA, August 8-10, 2012, 2012

MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones.

[BibT_eX]

[DOI]

Proceedings of the 19th Annual Network and Distributed System Security Symposium, 2012

2011

Removing web spam links from search engine results.

[BibT_eX]

[DOI]

Clemens Kolbitsch

Christian Platzer

J. Comput. Virol., 2011

PiOS: Detecting Privacy Leaks in iOS Applications.

[BibT_eX]

[DOI]

Proceedings of the Network and Distributed System Security Symposium, 2011

Challenges for Dynamic Analysis of iOS Applications.

[BibT_eX]

[DOI]

Proceedings of the Open Problems in Network Security - IFIP WG 11.4 International Workshop, 2011

Poster: control-flow integrity for smartphones.

[BibT_eX]

[DOI]

Proceedings of the 18th ACM Conference on Computer and Communications Security, 2011

Hit 'em where it hurts: a live security exercise on cyber situational awareness.

[BibT_eX]

[DOI]

Proceedings of the Twenty-Seventh Annual Computer Security Applications Conference, 2011

2010

CAPTCHA smuggling: hijacking web browsing sessions to create CAPTCHA farms.

[BibT_eX]

[DOI]

Proceedings of the 2010 ACM Symposium on Applied Computing (SAC), 2010

Organizing Large Scale Hacking Competitions.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, 2010

A solution for the automated detection of clickjacking attacks.

[BibT_eX]

[DOI]

Proceedings of the 5th ACM Symposium on Information, 2010

2009

Mitigating Drive-By Download Attacks: Challenges and Open Problems.

[BibT_eX]

[DOI]