Amin Kharraz

29 papers A* 6A 5B 4Misc 1Journal 9Unranked 4
YearRankTypeTitle / Venue / Authors
2025 J jnl
An In-kernel Forensics Engine for Investigating Evasive Attacks.
CoRR
Javad Zandi, Lalchandra Rampersaud, Amin Kharraz
2025 J jnl
Beyond the Upload Button: A 10-Year Retrospective on Security Issues Within File Upload.
IEEE Commun. Mag.
Harun Oz, Güliz Seray Tuncay, Ahmet Aris, Amin Kharraz, Arif Selcuk Uluagac
2025 J jnl
Open Source, Open Threats? Investigating Security Challenges in Open-Source Software.
CoRR
Seyed Ali Akhavani, Behzad Ousat, Amin Kharraz
2025 J jnl
PriveShield: Enhancing User Privacy Using Automatic Isolated Profiles in Browsers.
CoRR
Seyed Ali Akhavani, Engin Kirda, Amin Kharraz
2025 — conf
ShadowBOX: A Low-Artifact Framework for Analyzing Evasive Malicious Code.
eCrime
Javad Zandi, Lalchandra Rampersaud, Amin Kharraz
2024 A* conf
(In)Security of File Uploads in Node.js.
WWW
Harun Oz, Abbas Acar, Ahmet Aris, Güliz Seray Tuncay, Amin Kharraz, A. Selcuk Uluagac
2024 — conf
Breaking the Bot Barrier: Evaluating Adversarial AI Techniques Against Multi-Modal Defense Models.
WWW (Companion Volume)
Behzad Ousat, Dongsheng Luo, Amin Kharraz
2024 B conf
Constructs of Deceit: Exploring Nuances in Modern Social Engineering Attacks.
DIMVA
Mohammad Ali Tofighi, Behzad Ousat, Javad Zandi, Esteban Schafir, Amin Kharraz
2024 — conf
DevPhish: Exploring Social Engineering in Software Supply Chain Attacks on Developers.
UEMCON
Hossein Siadati, Sima Jafarikhah, Elif Sahin, Terrence Brent Hernandez, Elijah Lorenzo Tripp, Denis Khryashchev, Amin Kharraz
2024 J jnl
In-Application Defense Against Evasive Web Scans through Behavioral Analysis.
CoRR
Behzad Ousat, Mahshad Shariatnasab, Esteban Schafir, Farhad Shirani Chaharsooghi, Amin Kharraz
2024 A* conf
The Matter of Captchas: An Analysis of a Brittle Security Feature on the Modern Web.
WWW
Behzad Ousat, Esteban Schafir, Duc C. Hoang, Mohammad Ali Tofighi, Cuong V. Nguyen, Sajjad Arshad, A. Selcuk Uluagac, Amin Kharraz
2023 A conf
An End-to-End Analysis of Covid-Themed Scams in the Wild.
AsiaCCS
Behzad Ousat, Mohammad Ali Tofighi, Amin Kharraz
2023 J jnl
EnSolver: Uncertainty-Aware CAPTCHA Solver Using Deep Ensembles.
CoRR
Duc C. Hoang, Cuong V. Nguyen, Amin Kharraz
2021 Misc conf
Preventing server-side request forgery attacks.
SAC
Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz, Engin Kirda
2021 B conf
SCRUTINIZER: Detecting Code Reuse in Malware via Decompilation and Machine Learning.
DIMVA
Omid Mirzaei, Roman Vasilenko, Engin Kirda, Long Lu, Amin Kharraz
2021 A* conf
WebSocket Adoption and the Landscape of the Real-Time Web.
WWW
Paul Murley, Zane Ma, Joshua Mason, Michael D. Bailey, Amin Kharraz
2021 B conf
You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures.
DIMVA
Tommaso Innocenti, Seyed Ali Mirheidari, Amin Kharraz, Bruno Crispo, Engin Kirda
2019 A* conf
Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild.
WWW
Amin Kharraz, Zane Ma, Paul Murley, Charles Lever, Joshua Mason, Andrew Miller, Nikita Borisov, Manos Antonakakis, Michael D. Bailey
2019 A conf
USBESAFE: An End-Point Solution to Protect Against USB-Based Attacks.
RAID
Amin Kharraz, Brandon L. Daley, Graham Z. Baker, William Robertson, Engin Kirda
2018 J jnl
Identifying Extension-based Ad Injection via Fine-grained Web Content Provenance.
CoRR
Sajjad Arshad, Amin Kharraz, William K. Robertson
2018 J jnl
Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions.
CoRR
Sajjad Arshad, Amin Kharraz, William K. Robertson
2018 J jnl
Protecting against Ransomware: A New Line of Research or Restating Classic Ideas?
IEEE Secur. Priv.
Amin Kharraz, William K. Robertson, Engin Kirda
2018 A* conf
Surveylance: Automatically Detecting Online Survey Scams.
IEEE Symposium on Security and Privacy
Amin Kharraz, William K. Robertson, Engin Kirda
2017 A conf
Redemption: Real-Time Protection Against Ransomware at End-Hosts.
RAID
Amin Kharraz, Engin Kirda
2016 A conf
Identifying Extension-Based Ad Injection via Fine-Grained Web Content Provenance.
RAID
Sajjad Arshad, Amin Kharraz, William Robertson
2016 — conf
Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions.
Financial Cryptography
Sajjad Arshad, Amin Kharraz, William Robertson
2016 A* conf
UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware.
USENIX Security Symposium
Amin Kharraz, Sajjad Arshad, Collin Mulliner, William K. Robertson, Engin Kirda
2015 B conf
Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks.
DIMVA
Amin Kharraz, William K. Robertson, Davide Balzarotti, Leyla Bilge, Engin Kirda
2014 A conf
Optical Delusions: A Study of Malicious QR Codes in the Wild.
DSN
Amin Kharraz, Engin Kirda, William K. Robertson, Davide Balzarotti, Aurélien Francillon