Andrea Mambretti

13 papers A* 3A 4C 1Journal 3Unranked 2
YearRankTypeTitle / Venue / Authors
2025 — conf
SoK: Automating Kernel Vulnerability Discovery and Exploit Generation.
WOOT
Anil Kurmus, Andrea Mambretti, Alessandro Sorniotti, Vincent Lenders, Damian Pfammatter, Bernhard Tellenbach
2024 A* conf
GhostRace: Exploiting and Mitigating Speculative Race Conditions.
USENIX Security Symposium
Hany Ragab, Andrea Mambretti, Anil Kurmus, Cristiano Giuffrida
2022 J jnl
HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.
ACM Trans. Priv. Secur.
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
2021 A conf
Bypassing memory safety mechanisms through speculative control flow hijacks.
EuroS&P
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William Robertson, Engin Kirda, Anil Kurmus
2021 A conf
GhostBuster: understanding and overcoming the pitfalls of transient execution vulnerability checkers.
SANER
Andrea Mambretti, Pasquale Convertini, Alessandro Sorniotti, Alexandra Sandulescu, Engin Kirda, Anil Kurmus
2020 J jnl
Bypassing memory safety mechanisms through speculative control flow hijacks.
CoRR
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William K. Robertson, Engin Kirda, Anil Kurmus
2020 A* conf
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.
NDSS
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
2020 J jnl
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.
CoRR
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William K. Robertson, Engin Kirda, Manuel Egele
2019 A conf
Speculator: a tool to analyze speculative execution attacks and mitigations.
ACSAC
Andrea Mambretti, Matthias Neugschwandtner, Alessandro Sorniotti, Engin Kirda, William K. Robertson, Anil Kurmus
2019 — conf
Two methods for exploiting speculative control flow hijacks.
WOOT @ USENIX Security Symposium
Andrea Mambretti, Alexandra Sandulescu, Matthias Neugschwandtner, Alessandro Sorniotti, Anil Kurmus
2018 C conf
Educational game design: an empirical study of the effects of narrative.
FDG
Chaima Jemmali, Sara Bunian, Andrea Mambretti, Magy Seif El-Nasr
2016 A* conf
LAVA: Large-Scale Automated Vulnerability Addition.
IEEE Symposium on Security and Privacy
Brendan Dolan-Gavitt, Patrick Hulin, Engin Kirda, Tim Leek, Andrea Mambretti, William K. Robertson, Frederick Ulrich, Ryan Whelan
2016 A conf
Trellis: Privilege Separation for Multi-user Applications Made Easy.
RAID
Andrea Mambretti, Kaan Onarlioglu, Collin Mulliner, William Robertson, Engin Kirda, Federico Maggi, Stefano Zanero