Alexandros Kapravelos

67 papers A* 25A 6B 3C 1Journal 26Unranked 5

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	Multi-Agent Taint Specification Extraction for Vulnerability Detection. CoRR Jonah Ghebremichael, Saastha Vasan, Saad Ullah, Greg Tystahl, David Adei, Christopher Kruegel, Giovanni Vigna, William Enck, Alexandros Kapravelos
2026	J	`jnl`	Towards Verifiably Safe Tool Use for LLM Agents. CoRR Aarya Doshi, Yining Hong, Congying Xu, Eunsuk Kang, Alexandros Kapravelos, Christian Kästner
2025	A*	`conf`	An Empirical Study on Reproducible Packaging in Open-Source Ecosystems. ICSE Giacomo Benedetti, Oreofe Solarin, Courtney Miller, Greg Tystahl, William Enck, Christian Kästner, Alexandros Kapravelos, Alessio Merlo, Luca Verderame
2025	J	`jnl`	Characterizing Phishing Pages by JavaScript Capabilities. CoRR Aleksandr Nahapetyan, Kanv Khare, Kevin Schwarz, Bradley Reaves, Alexandros Kapravelos
2025	J	`jnl`	Research Directions in Software Supply Chain Security. ACM Trans. Softw. Eng. Methodol. Laurie A. Williams, Giacomo Benedetti, Sivana Hamer, Ranindya Paramitha, Imranur Rahman, Mahzabin Tamanna, Greg Tystahl, Nusrat Zahan, Patrick Morrison, Yasemin Acar, Michel Cukier, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, William Enck
2025	J	`jnl`	S3C2 SICP Summit 2025-06: Vulnerability Response Summit. CoRR Anna Lena Rotthaler, Simon Oberthür, Juraj Somorovsky, Kirsten Thommes, Simon Trang, Yasemin Acar, Michel Cukier, William Enck, Alexandros Kapravelos, Christian Kästner, Dominik Wermke, Laurie A. Williams
2025	J	`jnl`	S3C2 Summit 2024-08: Government Secure Supply Chain Summit. CoRR Courtney Miller, William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Dominik Wermke, Laurie A. Williams
2025	J	`jnl`	S3C2 Summit 2024-09: Industry Secure Software Supply Chain Summit. CoRR Imranur Rahman, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2025	J	`jnl`	S3C2 Summit 2025-03: Industry Secure Supply Chain Summit. CoRR Elizabeth Lin, Jonah Ghebremichael, William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2025	A*	`conf`	Same Script, Different Behavior: Characterizing Divergent JavaScript Execution Across Different Device Platforms. CCS Ahsan Zafar, Junhua Su, Sohom Datta, Alexandros Kapravelos, Anupam Das
2025	J	`jnl`	SoK: Advances and Open Problems in Web Tracking. CoRR Yash Vekaria, Yohan Beugin, Shaoor Munir, Gunes Acar, Nataliia Bielova, Steven Englehardt, Umar Iqbal, Alexandros Kapravelos, Pierre Laperdrix, Nick Nikiforakis, Jason Polakis, Franziska Roesner, Zubair Shafiq, Sebastian Zimmeck
2024	J	`jnl`	4.5 Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Scams, and Malware. CoRR Hao He, Haoqin Yang, Philipp Burckhardt, Alexandros Kapravelos, Bogdan Vasilescu, Christian Kästner
2024	—	`conf`	Automated Generation of Behavioral Signatures for Malicious Web Campaigns. ISC (2) Shaown Sarker, William Melicher, Oleksii Starov, Anupam Das, Alexandros Kapravelos
2024	A*	`conf`	FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques. USENIX Security Symposium Nikolaos Pantelaios, Alexandros Kapravelos
2024	J	`jnl`	FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques. CoRR Nikolaos Pantelaios, Alexandros Kapravelos
2024	—	`conf`	JSHint: Revealing API Usage to Improve Detection of Malicious JavaScript. ISC (2) Shaown Sarker, Kasimir Schulz, Aleksandr Nahapetyan, Anupam Das, Alexandros Kapravelos
2024	J	`jnl`	Manifest V3 Unveiled: Navigating the New Era of Browser Extensions. CoRR Nikolaos Pantelaios, Alexandros Kapravelos
2024	A*	`conf`	On SMS Phishing Tactics and Infrastructure. SP Aleksandr Nahapetyan, Sathvik Prasad, Kevin Childs, Adam Oest, Yeganeh Ladwig, Alexandros Kapravelos, Bradley Reaves
2024	J	`jnl`	S3C2 Summit 2023-11: Industry Secure Supply Chain Summit. CoRR Nusrat Zahan, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2024	J	`jnl`	S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. CoRR Greg Tystahl, Yasemin Acar, Michel Cukier, William Enck, Christian Kästner, Alexandros Kapravelos, Dominik Wermke, Laurie A. Williams
2024	A*	`conf`	UntrustIDE: Exploiting Weaknesses in VS Code Extensions. NDSS Elizabeth Lin, Igibek Koishybayev, Trevor Dunlap, William Enck, Alexandros Kapravelos
2024	J	`jnl`	WRIT: Web Request Integrity and Attestation Against Malicious Browser Extensions. IEEE Trans. Dependable Secur. Comput. Giorgos Vasiliadis, Apostolos Karampelas, Alexandros Shevtsov, Panagiotis Papadopoulos, Sotiris Ioannidis, Alexandros Kapravelos
2023	A*	`conf`	ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions. USENIX Security Symposium Siddharth Muralee, Igibek Koishybayev, Aleksandr Nahapetyan, Greg Tystahl, Bradley Reaves, Antonio Bianchi, William Enck, Alexandros Kapravelos, Aravind Machiry
2023	A*	`conf`	Automatic Discovery of Emerging Browser Fingerprinting Techniques. WWW Junhua Su, Alexandros Kapravelos
2023	J	`jnl`	S3C2 Summit 2023-02: Industry Secure Supply Chain Summit. CoRR Trevor Dunlap, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2023	J	`jnl`	S3C2 Summit 2023-06: Government Secure Supply Chain Summit. CoRR William Enck, Yasemin Acar, Michel Cukier, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2023	J	`jnl`	S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit. CoRR Mindy Tran, Yasemin Acar, Michel Cucker, William Enck, Alexandros Kapravelos, Christian Kästner, Laurie A. Williams
2022	A*	`conf`	Characterizing the Security of Github CI Workflows. USENIX Security Symposium Igibek Koishybayev, Aleksandr Nahapetyan, Raima Zachariah, Siddharth Muralee, Bradley Reaves, Alexandros Kapravelos, Aravind Machiry
2022	J	`jnl`	CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing. IEEE Secur. Priv. Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2022	A*	`conf`	Measuring the Privacy vs. Compatibility Trade-off in Preventing Third-Party Stateful Tracking. WWW Jordan Jueckstock, Peter Snyder, Shaown Sarker, Alexandros Kapravelos, Benjamin Livshits
2022	A	`conf`	SoK: Workerounds - Categorizing Service Worker Attacks and Mitigations. EuroS&P Karthika Subramani, Jordan Jueckstock, Alexandros Kapravelos, Roberto Perdisci
2022	—	`conf`	yoU aRe a Liar: //A Unified Framework for Cross-Testing URL Parsers. SP (Workshops) Dashmeet Kaur Ajmani, Igibek Koishybayev, Alexandros Kapravelos
2021	C	`conf`	Browserprint: an Analysis of the Impact of Browser Features on Fingerprintability and Web Privacy. ISC Seyed Ali Akhavani, Jordan Jueckstock, Junhua Su, Alexandros Kapravelos, Engin Kirda, Long Lu
2021	J	`jnl`	Categorizing Service Worker Attacks and Mitigations. CoRR Karthika Subramani, Jordan Jueckstock, Alexandros Kapravelos, Roberto Perdisci
2021	A*	`conf`	Cookie Swap Party: Abusing First-Party Cookies for Web Tracking. WWW Quan Chen, Panagiotis Ilia, Michalis Polychronakis, Alexandros Kapravelos
2021	A*	`conf`	CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing. SP Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021	A*	`conf`	Detecting Filter List Evasion with Event-Loop-Turn Granularity JavaScript Signatures. SP Quan Chen, Peter Snyder, Ben Livshits, Alexandros Kapravelos
2021	A*	`conf`	Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases. NDSS Sung Ta Dinh, Haehyun Cho, Kyle Martin, Adam Oest, Kyle Zeng, Alexandros Kapravelos, Gail-Joon Ahn, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2021	A*	`conf`	Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets. USENIX Security Symposium Pierre Laperdrix, Oleksii Starov, Quan Chen, Alexandros Kapravelos, Nick Nikiforakis
2021	J	`jnl`	Introduction to the ACSAC'19 Special Issue - Vol. 2. DTRAP Roberto Perdisci, Martina Lindorfer, Adam Doupé, Andrea Lanzi, Alexandros Kapravelos, Gianluca Stringhini
2021	A*	`conf`	Towards Realistic and ReproducibleWeb Crawl Measurements. WWW Jordan Jueckstock, Shaown Sarker, Peter Snyder, Aidan Beggs, Panagiotis Papadopoulos, Matteo Varvello, Benjamin Livshits, Alexandros Kapravelos
2020	A	`conf`	Hiding in Plain Site: Detecting JavaScript Obfuscation through Concealed Browser API Usage. Internet Measurement Conference Shaown Sarker, Jordan Jueckstock, Alexandros Kapravelos
2020	J	`jnl`	Improving Web Content Blocking With Event-Loop-Turn Granularity JavaScript Signatures. CoRR Quan Chen, Peter Snyder, Ben Livshits, Alexandros Kapravelos
2020	J	`jnl`	Introduction to the ACSAC'19 Special Issue - Part 1. DTRAP Roberto Perdisci, Martina Lindorfer, Adam Doupé, Andrea Lanzi, Alexandros Kapravelos, Gianluca Stringhini
2020	A	`conf`	Mininode: Reducing the Attack Surface of Node.js Applications. RAID Igibek Koishybayev, Alexandros Kapravelos
2020	J	`jnl`	There's No Trick, Its Just a Simple Trick: A Web-Compat and Privacy Improving Approach to Third-party Web Storage. CoRR Jordan Jueckstock, Peter Snyder, Shaown Sarker, Alexandros Kapravelos, Benjamin Livshits
2020	A*	`conf`	You've Changed: Detecting Malicious Browser Extensions through their Update Deltas. CCS Nikolaos Pantelaios, Nick Nikiforakis, Alexandros Kapravelos
2019	A*	`conf`	Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting. USENIX Security Symposium Erik Trickel, Oleksii Starov, Alexandros Kapravelos, Nick Nikiforakis, Adam Doupé
2019	J	`jnl`	The Blind Men and the Internet: Multi-Vantage Point Web Measurements. CoRR Jordan Jueckstock, Shaown Sarker, Peter Snyder, Panagiotis Papadopoulos, Matteo Varvello, Benjamin Livshits, Alexandros Kapravelos
2019	A*	`conf`	Unnecessarily Identifiable: Quantifying the fingerprintability of browser extensions due to bloat. WWW Oleksii Starov, Pierre Laperdrix, Alexandros Kapravelos, Nick Nikiforakis
2019	A	`conf`	VisibleV8: In-browser Monitoring of JavaScript in the Wild. Internet Measurement Conference Jordan Jueckstock, Alexandros Kapravelos
2019	B	`conf`	Wild Extensions: Discovering and Analyzing Unlisted Chrome Extensions. DIMVA Aidan Beggs, Alexandros Kapravelos
2018	A*	`conf`	Mystique: Uncovering Information Leakage from Browser Extensions. CCS Quan Chen, Alexandros Kapravelos
2016	A*	`conf`	Cloak of Visibility: Detecting When Machines Browse a Different Web. IEEE Symposium on Security and Privacy Luca Invernizzi, Kurt Thomas, Alexandros Kapravelos, Oxana Comanescu, Jean-Michel Picod, Elie Bursztein
2015	A*	`conf`	Ad Injection at Scale: Assessing Deceptive Advertisement Modifications. IEEE Symposium on Security and Privacy Kurt Thomas, Elie Bursztein, Chris Grier, Grant Ho, Nav Jagpal, Alexandros Kapravelos, Damon McCoy, Antonio Nappa, Vern Paxson, Paul Pearce, Niels Provos, Moheeb Abu Rajab
2015	—	`—`	Analyzing and Defending Against Evolving Web Threats. Alexandros Kapravelos
2014	A*	`conf`	Hulk: Eliciting Malicious Behavior in Browser Extensions. USENIX Security Symposium Alexandros Kapravelos, Chris Grier, Neha Chachra, Christopher Kruegel, Giovanni Vigna, Vern Paxson
2014	J	`jnl`	On the Workings and Current Practices of Web-Based Device Fingerprinting. IEEE Secur. Priv. Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2014	B	`conf`	PExy: The Other Side of Exploit Kits. DIMVA Giancarlo De Maio, Alexandros Kapravelos, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2014	A	`conf`	The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements. Internet Measurement Conference Apostolis Zarras, Alexandros Kapravelos, Gianluca Stringhini, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. IEEE Symposium on Security and Privacy Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2013	A*	`conf`	Revolver: An Automated Approach to the Detection of Evasive Web-based Malware. USENIX Security Symposium Alexandros Kapravelos, Yan Shoshitaishvili, Marco Cova, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	You are what you include: large-scale evaluation of remote javascript inclusions. CCS Nick Nikiforakis, Luca Invernizzi, Alexandros Kapravelos, Steven Van Acker, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2011	B	`conf`	Escape from Monkey Island: Evading High-Interaction Honeyclients. DIMVA Alexandros Kapravelos, Marco Cova, Christopher Kruegel, Giovanni Vigna
2010	A	`conf`	D(e\|i)aling with VoIP: Robust Prevention of DIAL Attacks. ESORICS Alexandros Kapravelos, Iasonas Polakis, Elias Athanasopoulos, Sotiris Ioannidis, Evangelos P. Markatos
2009	—	`conf`	FleXConf: A Flexible Conference Assistant Using Context-Aware Notification Services. OTM Workshops Nikos Armenatzoglou, Yannis Marketakis, Lito Kriara, Elias Apostolopoulos, Vicky Papavasiliou, Dimitris Kampas, Alexandros Kapravelos, Eythimis Kartsonakis, Giorgos Linardakis, Sofia Nikitaki, Antonis Bikakis, Grigoris Antoniou
2009	—	`conf`	Realistic Passive Packet Loss Measurement for High-Speed Networks. TMA Ales Friedl, Sven Ubik, Alexandros Kapravelos, Michalis Polychronakis, Evangelos P. Markatos