Christopher Kruegel

274 papers A* 100A 54B 17C 6Misc 7Journal 44Unranked 42

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	DevOps-Gym: Benchmarking AI Agents in Software DevOps Cycle. CoRR Yuheng Tang, Kaijie Zhu, Bonan Ruan, Chuqi Zhang, Michael Yang, Hongwei Li, Suyue Guo, Tianneng Shi, Zekun Li, Christopher Kruegel, Giovanni Vigna, Dawn Song, William Yang Wang, Lun Wang, Yangruibo Ding, Zhenkai Liang, Wenbo Guo
2026	J	`jnl`	Multi-Agent Taint Specification Extraction for Vulnerability Detection. CoRR Jonah Ghebremichael, Saastha Vasan, Saad Ullah, Greg Tystahl, David Adei, Christopher Kruegel, Giovanni Vigna, William Enck, Alexandros Kapravelos
2025	—	`conf`	A History of Greed: Practical Symbolic Execution for Ethereum Smart Contracts. DIMVA (2) Nicola Ruaro, Fabio Gritti, Robert McLaughlin, Dongyu Meng, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2025	A*	`conf`	A Large-Scale Measurement Study of the PROXY Protocol and its Security Implications. NDSS Stijn Pletinckx, Christopher Kruegel, Giovanni Vigna
2025	A*	`conf`	Approve Once, Regret Forever: On the Exploitation of Ethereum's Approve-TransferFrom Ecosystem. USENIX Security Symposium Nicola Ruaro, Fabio Gritti, Dongyu Meng, Robert McLaughlin, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2025	A	`conf`	Beneath the Surface: An Analysis of OEM Customizations on the Android TLS Protocol Stack. EuroS&P Vinuri Bandara, Stijn Pletinckx, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna, Juan Tapiador, Narseo Vallina-Rodriguez
2025	J	`jnl`	From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEs. CoRR Saad Ullah, Praneeth Balasubramanian, Wenbo Guo, Amanda Burnett, Hammond Pearce, Christopher Kruegel, Giovanni Vigna, Gianluca Stringhini
2025	J	`jnl`	In-Context Watermarks for Large Language Models. CoRR Yepeng Liu, Xuandong Zhao, Christopher Kruegel, Dawn Song, Yuheng Bu
2025	J	`jnl`	MADCAT: Combating Malware Detection Under Concept Drift with Test-Time Adaptation. CoRR Eunjin Roh, Yigitcan Kaya, Christopher Kruegel, Giovanni Vigna, Sanghyun Hong
2025	A*	`conf`	MALintent: Coverage Guided Intent Fuzzing Framework for Android. NDSS Ammar Askar, Fabian Fleischer, Christopher Kruegel, Giovanni Vigna, Taesoo Kim
2025	A	`conf`	SyzGrapher: Resource-Centric Graph-Based Kernel Fuzzing. RAID Marius Fleischer, Harrison Green, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2025	J	`jnl`	When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins. CoRR Yigitcan Kaya, Anton Landerer, Stijn Pletinckx, Michelle Zimmermann, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	ChainReactor: Automated Privilege Escalation Chain Discovery via AI Planning. USENIX Security Symposium Giulio De Pasquale, Ilya Grishchenko, Riccardo Iesari, Gabriel Pizarro, Lorenzo Cavallaro, Christopher Kruegel, Giovanni Vigna
2024	A	`conf`	DEEPCAPA: Identifying Malicious Capabilities in Windows Malware. ACSAC Saastha Vasan, Hojjat Aghakhani, Stefano Ortolani, Roman Vasilenko, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	GuideEnricher: Protecting the Anonymity of Ethereum Mixing Service Users with Deep Reinforcement Learning. USENIX Security Symposium Ravindu De Silva, Wenbo Guo, Nicola Ruaro, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	Invisible Image Watermarks Are Provably Removable Using Generative AI. NeurIPS Xuandong Zhao, Kexun Zhang, Zihao Su, Saastha Vasan, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna, Yu-Xiang Wang, Lei Li
2024	A*	`conf`	Not your Type! Detecting Storage Collision Vulnerabilities in Ethereum Smart Contracts. NDSS Nicola Ruaro, Fabio Gritti, Robert McLaughlin, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services. USENIX Security Symposium Wil Gibbs, Arvind S. Raj, Jayakrishna Menon Vadayath, Hui Jun Tay, Justin Miller, Akshay Ajayan, Zion Leonahenahe Basque, Audrey Dutcher, Fangzhou Dong, Xavier J. Maso, Giovanni Vigna, Christopher Kruegel, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2024	A*	`conf`	Remote Keylogging Attacks in Multi-user VR Applications. USENIX Security Symposium Zihao Su, Kunlin Cai, Reuben Beeler, Lukas Dresel, Allan Garcia, Ilya Grishchenko, Yuan Tian, Christopher Kruegel, Giovanni Vigna
2024	J	`jnl`	Remote Keylogging Attacks in Multi-user VR Applications. CoRR Zihao Su, Kunlin Cai, Reuben Beeler, Lukas Dresel, Allan Garcia, Ilya Grishchenko, Yuan Tian, Christopher Kruegel, Giovanni Vigna
2024	—	`conf`	The Power of Default: Measuring the Effect of Slippage Tolerance in Decentralized Exchanges. FC (1) Nir Chemaya, Dingyue Liu, Robert McLaughlin, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	TrojanPuzzle: Covertly Poisoning Code-Suggestion Models. SP Hojjat Aghakhani, Wei Dai, Andre Manoel, Xavier Fernandes, Anant Kharkar, Christopher Kruegel, Giovanni Vigna, David Evans, Ben Zorn, Robert Sim
2024	A	`conf`	Unveiling the Risks of NFT Promotion Scams. ICWSM Sayak Saha Roy, Dipanjan Das, Priyanka Bose, Christopher Kruegel, Giovanni Vigna, Shirin Nilizadeh
2023	A*	`conf`	A Large Scale Study of the Ethereum Arbitrage Ecosystem. USENIX Security Symposium Robert McLaughlin, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	ACTOR: Action-Guided Kernel Fuzzing. USENIX Security Symposium Marius Fleischer, Dipanjan Das, Priyanka Bose, Weiheng Bai, Kangjie Lu, Mathias Payer, Christopher Kruegel, Giovanni Vigna
2023	A	`conf`	Certifiably Vulnerable: Using Certificate Transparency Logs for Target Reconnaissance. EuroS&P Stijn Pletinckx, Thanh-Dat Nguyen, Tobias Fiebig, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	Columbus: Android App Testing Through Systematic Callback Exploration. ICSE Priyanka Bose, Dipanjan Das, Saastha Vasan, Sebastiano Mariani, Ilya Grishchenko, Andrea Continella, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Columbus: Android App Testing Through Systematic Callback Exploration. CoRR Priyanka Bose, Dipanjan Das, Saastha Vasan, Sebastiano Mariani, Ilya Grishchenko, Andrea Continella, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	Confusum Contractum: Confused Deputy Vulnerabilities in Ethereum Smart Contracts. USENIX Security Symposium Fabio Gritti, Nicola Ruaro, Robert McLaughlin, Priyanka Bose, Dipanjan Das, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2023	A	`conf`	Container Orchestration Honeypot: Observing Attacks in the Wild. RAID Noah Spahn, Nils Hanke, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Demystifying NFT Promotion and Phishing Scams. CoRR Sayak Saha Roy, Dipanjan Das, Priyanka Bose, Christopher Kruegel, Giovanni Vigna, Shirin Nilizadeh
2023	J	`jnl`	Exploiting Unfair Advantages: Investigating Opportunistic Trading in the NFT Market. CoRR Priyanka Bose, Dipanjan Das, Fabio Gritti, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2023	A	`conf`	Shimware: Toward Practical Security Retrofitting for Monolithic Firmware Images. RAID Eric Gustafson, Paul Grosen, Nilo Redini, Saagar Jha, Andrea Continella, Ruoyu Wang, Kevin Fu, Sara Rampazzi, Christopher Kruegel, Giovanni Vigna
2023	—	`conf`	Street Rep: A Privacy-Preserving Reputation Aggregation System. SecureComm (2) Christophe Hauser, Shirin Nilizadeh, Yan Shoshitaishvili, Ni Trieu, Srivatsan Ravi, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Street Rep: A Privacy-Preserving Reputation Aggregation System. IACR Cryptol. ePrint Arch. Christophe Hauser, Shirin Nilizadeh, Yan Shoshitaishvili, Ni Trieu, Srivatsan Ravi, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	TEEzz: Fuzzing Trusted Applications on COTS Android Devices. SP Marcel Busch, Aravind Machiry, Chad Spensky, Giovanni Vigna, Christopher Kruegel, Mathias Payer
2023	J	`jnl`	Token-Level Fuzzing. CoRR Christopher Salls, Chani Jindal, Jake Corina, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities. SP Erik Trickel, Fabio Pagani, Chang Zhu, Lukas Dresel, Giovanni Vigna, Christopher Kruegel, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2023	J	`jnl`	TrojanPuzzle: Covertly Poisoning Code-Suggestion Models. CoRR Hojjat Aghakhani, Wei Dai, Andre Manoel, Xavier Fernandes, Anant Kharkar, Christopher Kruegel, Giovanni Vigna, David Evans, Ben Zorn, Robert Sim
2023	—	`conf`	Venomave: Targeted Poisoning Against Speech Recognition. SaTML Hojjat Aghakhani, Lea Schönherr, Thorsten Eisenhofer, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	DEEPCASE: Semi-Supervised Contextual Analysis of Security Events. SP Thijs van Ede, Hojjat Aghakhani, Noah Spahn, Riccardo Bortolameotti, Marco Cova, Andrea Continella, Maarten van Steen, Andreas Peter, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	Decomperson: How Humans Decompile and What We Can Learn From It. USENIX Security Symposium Kevin Burk, Fabio Pagani, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. USENIX Security Symposium Tobias Scharnowski, Nils Bars, Moritz Schloegel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, Ali Abbasi
2022	A*	`conf`	HEAPSTER: Analyzing the Security of Dynamic Allocators for Monolithic Firmware Images. SP Fabio Gritti, Fabio Pagani, Ilya Grishchenko, Lukas Dresel, Nilo Redini, Christopher Kruegel, Giovanni Vigna
2022	B	`conf`	Hybrid Pruning: Towards Precise Pointer and Taint Analysis. DIMVA Dipanjan Das, Priyanka Bose, Aravind Machiry, Sebastiano Mariani, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel
2022	C	`conf`	Looking for Signals: A Systems Security Perspective. IH&MMSec Christopher Kruegel
2022	A	`conf`	POPKORN: Popping Windows Kernel Drivers At Scale. ACSAC Rajat Gupta, Lukas Patrick Dresel, Noah Spahn, Giovanni Vigna, Christopher Kruegel, Taesoo Kim
2022	A*	`conf`	Regulator: Dynamic Analysis to Detect ReDoS. USENIX Security Symposium Robert McLaughlin, Fabio Pagani, Noah Spahn, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds. SP Priyanka Bose, Dipanjan Das, Yanju Chen, Yu Feng, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	SYMBEXCEL: Automated Analysis and Understanding of Malicious Excel 4.0 Macros. SP Nicola Ruaro, Fabio Pagani, Stefano Ortolani, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	Understanding Security Issues in the NFT Ecosystem. CCS Dipanjan Das, Priyanka Bose, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Bran: Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms. AsiaCCS Dongyu Meng, Michele Guerriero, Aravind Machiry, Hojjat Aghakhani, Priyanka Bose, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability. EuroS&P Hojjat Aghakhani, Dongyu Meng, Yu-Xiang Wang, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Conware: Automated Modeling of Hardware Peripherals. AsiaCCS Chad Spensky, Aravind Machiry, Nilo Redini, Colin Unger, Graham Foster, Evan Blasband, Hamed Okhravi, Christopher Kruegel, Giovanni Vigna
2021	A*	`conf`	Diane: Identifying Fuzzing Triggers in Apps to Generate Under-constrained Inputs for IoT Devices. SP Nilo Redini, Andrea Continella, Dipanjan Das, Giulio De Pasquale, Noah Spahn, Aravind Machiry, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Glitching Demystified: Analyzing Control-flow-based Glitching Attacks and Defenses. DSN Chad Spensky, Aravind Machiry, Nathan Burow, Hamed Okhravi, Rick Housley, Zhongshu Gu, Hani Jamjoom, Christopher Kruegel, Giovanni Vigna
2021	J	`jnl`	One Size Does Not Fit All: A Longitudinal Analysis of Brazilian Financial Malware. ACM Trans. Priv. Secur. Marcus Botacin, Hojjat Aghakhani, Stefano Ortolani, Christopher Kruegel, Giovanni Vigna, Daniela Oliveira, Paulo Lício de Geus, André Grégio
2021	J	`jnl`	SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds. CoRR Priyanka Bose, Dipanjan Das, Yanju Chen, Yu Feng, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	SyML: Guiding Symbolic Execution Toward Vulnerable States Through Pattern Learning. RAID Nicola Ruaro, Kyle Zeng, Lukas Dresel, Mario Polino, Tiffany Bao, Andrea Continella, Stefano Zanero, Christopher Kruegel, Giovanni Vigna
2021	—	`conf`	Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone. Checkmate@CCS Davide Quarta, Michele Ianni, Aravind Machiry, Yanick Fratantonio, Eric Gustafson, Davide Balzarotti, Martina Lindorfer, Giovanni Vigna, Christopher Kruegel
2021	A*	`conf`	Token-Level Fuzzing. USENIX Security Symposium Christopher Salls, Chani Jindal, Jake Corina, Christopher Kruegel, Giovanni Vigna
2021	J	`jnl`	Toward a Secure Crowdsourced Location Tracking System. CoRR Chinmay Garg, Aravind Machiry, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2021	—	`conf`	Toward a secure crowdsourced location tracking system. WISEC Chinmay Garg, Aravind Machiry, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2021	J	`jnl`	Understanding Security Issues in the NFT Ecosystem. CoRR Dipanjan Das, Priyanka Bose, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2020	J	`jnl`	Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability. CoRR Hojjat Aghakhani, Dongyu Meng, Yu-Xiang Wang, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web. WWW Iskander Sánchez-Rola, Davide Balzarotti, Christopher Kruegel, Giovanni Vigna, Igor Santos
2020	—	`conf`	Exploring Abstraction Functions in Fuzzing. CNS Christopher Salls, Aravind Machiry, Adam Doupé, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. USENIX Security Symposium Abraham A. Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, Mathias Payer
2020	A*	`conf`	Karonte: Detecting Insecure Multi-binary Interactions in Embedded Firmware. SP Nilo Redini, Aravind Machiry, Ruoyu Wang, Chad Spensky, Andrea Continella, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2020	B	`conf`	On the Security of Application Installers and Online Software Repositories. DIMVA Marcus Botacin, Giovanni Bertão, Paulo L. de Geus, André Grégio, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	SPIDER: Enabling Fast Patch Propagation In Related Software Repositories. SP Aravind Machiry, Nilo Redini, Eric Camellini, Christopher Kruegel, Giovanni Vigna
2020	—	`conf`	SYMBION: Interleaving Symbolic with Concrete Execution. CNS Fabio Gritti, Lorenzo Fontana, Eric Gustafson, Fabio Pagani, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2020	—	`conf`	TRUST.IO: Protecting Physical Interfaces on Cyber-physical Systems. CNS Chad Spensky, Aravind Machiry, Marcel Busch, Kevin Leach, Rick Housley, Christopher Kruegel, Giovanni Vigna
2020	A	`conf`	Tracing and Analyzing Web Access Paths Based on User-Side Data Collection: How Do Users Reach Malicious URLs? RAID Takeshi Takahashi, Christopher Kruegel, Giovanni Vigna, Katsunari Yoshioka, Daisuke Inoue
2020	J	`jnl`	VENOMAVE: Clean-Label Poisoning Against Speech Recognition. CoRR Hojjat Aghakhani, Thorsten Eisenhofer, Lea Schönherr, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features. NDSS Hojjat Aghakhani, Fabio Gritti, Francesco Mecca, Martina Lindorfer, Stefano Ortolani, Davide Balzarotti, Giovanni Vigna, Christopher Kruegel
2019	B	`conf`	BinTrimmer: Towards Static Binary Debloating Through Abstract Interpretation. DIMVA Nilo Redini, Ruoyu Wang, Aravind Machiry, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel
2019	—	`conf`	BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. CODASPY Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
2019	J	`jnl`	BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. CoRR Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
2019	—	`conf`	Lightning Talk - Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis. WWW (Companion Volume) Shirin Nilizadeh, Hojjat Aghakhani, Eric Gustafson, Christopher Kruegel, Giovanni Vigna
2019	J	`jnl`	Neurlux: Dynamic Malware Analysis Without Feature Engineering. CoRR Chani Jindal, Christopher Salls, Hojjat Aghakhani, Keith Long, Christopher Kruegel, Giovanni Vigna
2019	A	`conf`	Neurlux: dynamic malware analysis without feature engineering. ACSAC Chani Jindal, Christopher Salls, Hojjat Aghakhani, Keith Long, Christopher Kruegel, Giovanni Vigna
2019	A*	`conf`	PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary. NDSS Dokyung Song, Felicitas Hetzelt, Dipanjan Das, Chad Spensky, Yeoul Na, Stijn Volckaert, Giovanni Vigna, Christopher Kruegel, Jean-Pierre Seifert, Michael Franz
2019	A	`conf`	Sleak: automating address space layout derandomization. ACSAC Christophe Hauser, Jayakrishna Menon, Yan Shoshitaishvili, Ruoyu Wang, Giovanni Vigna, Christopher Kruegel
2019	A*	`conf`	Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis. WWW Shirin Nilizadeh, Hojjat Aghakhani, Eric Gustafson, Christopher Kruegel, Giovanni Vigna
2019	A	`conf`	Toward the Analysis of Embedded Firmware through Automated Re-hosting. RAID Eric Gustafson, Marius Muench, Chad Spensky, Nilo Redini, Aravind Machiry, Yanick Fratantonio, Davide Balzarotti, Aurélien Francillon, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
2018	A*	`conf`	Broken Fingers: On the Usage of the Fingerprint API in Android. NDSS Antonio Bianchi, Yanick Fratantonio, Aravind Machiry, Christopher Kruegel, Giovanni Vigna, Simon Pak Ho Chung, Wenke Lee
2018	—	`conf`	Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates. ANRW Kevin Borgolte, Tobias Fiebig, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2018	A*	`conf`	Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates. NDSS Kevin Borgolte, Tobias Fiebig, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2018	—	`conf`	Detecting Deceptive Reviews Using Generative Adversarial Networks. IEEE Symposium on Security and Privacy Workshops Hojjat Aghakhani, Aravind Machiry, Shirin Nilizadeh, Christopher Kruegel, Giovanni Vigna
2018	J	`jnl`	Detecting Deceptive Reviews using Generative Adversarial Networks. CoRR Hojjat Aghakhani, Aravind Machiry, Shirin Nilizadeh, Christopher Kruegel, Giovanni Vigna
2018	B	`conf`	GuardION: Practical Mitigation of DMA-Based Rowhammer Attacks on ARM. DIMVA Victor van der Veen, Martina Lindorfer, Yanick Fratantonio, Harikrishnan Padmanabha Pillai, Giovanni Vigna, Christopher Kruegel, Herbert Bos, Kaveh Razavi
2018	A*	`conf`	HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security. USENIX Security Symposium Moritz Eckert, Antonio Bianchi, Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2018	B	`conf`	In rDNS We Trust: Revisiting a Common Data-Source's Reliability. PAM Tobias Fiebig, Kevin Borgolte, Shuang Hao, Christopher Kruegel, Giovanni Vigna, Anja Feldmann
2018	Misc	`conf`	Measuring E-mail header injections on the world wide web. SAC Sai Prashanth Chandramouli, Pierre-Marie Bajan, Christopher Kruegel, Giovanni Vigna, Ziming Zhao, Adam Doupé, Gail-Joon Ahn
2018	A*	`conf`	MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense. CCS Radhesh Krishnan Konoth, Emanuele Vineti, Veelasha Moonsamy, Martina Lindorfer, Christopher Kruegel, Herbert Bos, Giovanni Vigna
2018	A*	`conf`	Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks. USENIX Security Symposium Wei Meng, Chenxiong Qian, Shuang Hao, Kevin Borgolte, Giovanni Vigna, Christopher Kruegel, Wenke Lee
2018	A	`conf`	Using Loops For Malware Classification Resilient to Feature-unaware Perturbations. ACSAC Aravind Machiry, Nilo Redini, Eric Gustafson, Yanick Fratantonio, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments. NDSS Aravind Machiry, Eric Gustafson, Chad Spensky, Christopher Salls, Nick Stephens, Ruoyu Wang, Antonio Bianchi, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	BootStomp: On the Security of Bootloaders in Mobile Devices. USENIX Security Symposium Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	DIFUZE: Interface Aware Fuzzing for Kernel Drivers. CCS Jake Corina, Aravind Machiry, Christopher Salls, Yan Shoshitaishvili, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers. USENIX Security Symposium Aravind Machiry, Chad Spensky, Jake Corina, Nick Stephens, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	Demystifying DDoS as a Service. IEEE Commun. Mag. Ali Zand, Gaspar Modelo-Howard, Alok Tongaonkar, Sung-Ju Lee, Christopher Kruegel, Giovanni Vigna
2017	A	`conf`	Exploitation and Mitigation of Authentication Schemes Based on Device-Public Information. ACSAC Antonio Bianchi, Eric Gustafson, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2017	A	`conf`	Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions. AsiaCCS Cheng Huang, Shuang Hao, Luca Invernizzi, Jiayong Liu, Yong Fang, Christopher Kruegel, Giovanni Vigna
2017	A	`conf`	How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games. CSF Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, David Brumley
2017	A*	`conf`	Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis. NDSS Andrea Continella, Yanick Fratantonio, Martina Lindorfer, Alessandro Puccetti, Ali Zand, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	On the Privacy and Security of the Ultrasound Ecosystem. Proc. Priv. Enhancing Technol. Vasilios Mavroudis, Shuang Hao, Yanick Fratantonio, Federico Maggi, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	POISED: Spotting Twitter Spam Off the Beaten Paths. CCS Shirin Nilizadeh, Francois Labreche, Alireza Sedighian, Ali Zand, José M. Fernandez, Christopher Kruegel, Gianluca Stringhini, Giovanni Vigna
2017	J	`jnl`	POISED: Spotting Twitter Spam Off the Beaten Paths. CoRR Shirin Nilizadeh, Francois Labreche, Alireza Sedighian, Ali Zand, José M. Fernandez, Christopher Kruegel, Gianluca Stringhini, Giovanni Vigna
2017	A	`conf`	Piston: Uncooperative Remote Runtime Patching. ACSAC Christopher Salls, Yan Shoshitaishvili, Nick Stephens, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	Ramblr: Making Reassembly Great Again. NDSS Ruoyu Wang, Yan Shoshitaishvili, Antonio Bianchi, Aravind Machiry, John Grosen, Paul Grosen, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance. CCS Yan Shoshitaishvili, Michael Weissbacher, Lukas Dresel, Christopher Salls, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance. CoRR Yan Shoshitaishvili, Michael Weissbacher, Lukas Dresel, Christopher Salls, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna
2017	B	`conf`	Something from Nothing (There): Collecting Global IPv6 Datasets from DNS. PAM Tobias Fiebig, Kevin Borgolte, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	Towards Detecting Compromised Accounts on Social Networks. IEEE Trans. Dependable Secur. Comput. Manuel Egele, Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2016	A*	`conf`	Driller: Augmenting Fuzzing Through Selective Symbolic Execution. NDSS Nick Stephens, John Grosen, Christopher Salls, Andrew Dutcher, Ruoyu Wang, Jacopo Corbetta, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2016	A*	`conf`	Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy. NDSS Vitor Monte Afonso, Paulo L. de Geus, Antonio Bianchi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna, Adam Doupé, Mario Polino
2016	A*	`ed.`	Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria, October 24-28, 2016 CCS Edgar R. Weippl, Stefan Katzenbeisser, Christopher Kruegel, Andrew C. Myers, Shai Halevi
2016	A	`conf`	Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory. RAID Marius Muench, Fabio Pagani, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna, Davide Balzarotti
2016	A*	`conf`	TriggerScope: Towards Detecting Logic Bombs in Android Applications. IEEE Symposium on Security and Privacy Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2015	A	`conf`	BareDroid: Large-Scale Analysis of Android Apps on Real Devices. ACSAC Simone Mutti, Yanick Fratantonio, Antonio Bianchi, Luca Invernizzi, Jacopo Corbetta, Dhilung Kirat, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	CLAPP: characterizing loops in Android applications (invited talk). DeMobile@SIGSOFT FSE Yanick Fratantonio, Aravind Machiry, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	CLAPP: characterizing loops in Android applications. ESEC/SIGSOFT FSE Yanick Fratantonio, Aravind Machiry, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	EVILCOHORT: Detecting Communities of Malicious Accounts on Online Services. USENIX Security Symposium Gianluca Stringhini, Pierre Mourlanne, Grégoire Jacob, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework. NDSS Yinzhi Cao, Yanick Fratantonio, Antonio Bianchi, Manuel Egele, Christopher Kruegel, Giovanni Vigna, Yan Chen
2015	A*	`conf`	Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware. NDSS Yan Shoshitaishvili, Ruoyu Wang, Christophe Hauser, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	Framing Dependencies Introduced by Underground Commoditization. WEIS Kurt Thomas, Danny Yuxing Huang, David Y. Wang, Elie Bursztein, Chris Grier, Tom Holt, Christopher Kruegel, Damon McCoy, Stefan Savage, Giovanni Vigna
2015	A	`conf`	Grab 'n Run: Secure and Practical Dynamic Code Loading for Android Applications. ACSAC Luca Falsina, Yanick Fratantonio, Stefano Zanero, Christopher Kruegel, Giovanni Vigna, Federico Maggi
2015	A*	`conf`	How the ELF Ruined Christmas. USENIX Security Symposium Alessandro Di Federico, Amat Cama, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2015	A	`conf`	Know Your Achilles' Heel: Automatic Detection of Network Critical Services. ACSAC Ali Zand, Amir Houmansadr, Giovanni Vigna, Richard A. Kemmerer, Christopher Kruegel
2015	A*	`conf`	Meerkat: Detecting Website Defacements through Image-based Object Recognition. USENIX Security Symposium Kevin Borgolte, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	NJAS: Sandboxing Unmodified Applications in non-rooted Devices Running stock Android. SPSM@CCS Antonio Bianchi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2015	B	`conf`	On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. DIMVA Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
2015	J	`jnl`	Portrait of a Privacy Invasion. Proc. Priv. Enhancing Technol. Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	Prison: Tracking Process Interactions to Contain Malware. HPCC/CSS/ICESS Benjamin Caillat, Bob Gilbert, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2015	A*	`ed.`	Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, Denver, CO, USA, October 12-16, 2015 CCS Indrajit Ray, Ninghui Li, Christopher Kruegel
2015	J	`jnl`	Towards Detecting Compromised Accounts on Social Networks. CoRR Manuel Egele, Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	What the App is That? Deception and Countermeasures in the Android User Interface. IEEE Symposium on Security and Privacy Antonio Bianchi, Jacopo Corbetta, Luca Invernizzi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities. USENIX Security Symposium Michael Weissbacher, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2014	A*	`conf`	BareCloud: Bare-metal Analysis-based Evasive Malware Detection. USENIX Security Symposium Dhilung Kirat, Giovanni Vigna, Christopher Kruegel
2014	A*	`conf`	Execute This! Analyzing Unsafe and Malicious Dynamic Code Loading in Android Applications. NDSS Sebastian Poeplau, Yanick Fratantonio, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2014	J	`jnl`	Exposure: A Passive DNS Analysis Service to Detect and Report Malicious Domains. ACM Trans. Inf. Syst. Secur. Leyla Bilge, Sevil Sen, Davide Balzarotti, Engin Kirda, Christopher Kruegel
2014	Misc	`conf`	Extracting probable command and control signatures for detecting botnets. SAC Ali Zand, Giovanni Vigna, Xifeng Yan, Christopher Kruegel
2014	A	`conf`	Fighting malicious code: an eternal struggle. AsiaCCS Christopher Kruegel
2014	A*	`conf`	Hulk: Eliciting Malicious Behavior in Browser Extensions. USENIX Security Symposium Alexandros Kapravelos, Chris Grier, Neha Chachra, Christopher Kruegel, Giovanni Vigna, Vern Paxson
2014	A*	`conf`	Nazca: Detecting Malware Distribution in Large-Scale Networks. NDSS Luca Invernizzi, Stanislav Miskovic, Ruben Torres, Christopher Kruegel, Sabyasachi Saha, Giovanni Vigna, Sung-Ju Lee, Marco Mellia
2014	J	`jnl`	On the Workings and Current Practices of Web-Based Device Fingerprinting. IEEE Secur. Priv. Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2014	B	`conf`	PExy: The Other Side of Exploit Kits. DIMVA Giancarlo De Maio, Alexandros Kapravelos, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2014	J	`jnl`	Preserving Location Privacy in Geosocial Applications. IEEE Trans. Mob. Comput. Krishna P. N. Puttaswamy, Shiyuan Wang, Troy Steinbauer, Divyakant Agrawal, Amr El Abbadi, Christopher Kruegel, Ben Y. Zhao
2014	—	`conf`	Relevant change detection: a framework for the precise extraction of modified and novel web-based content as a filtering technique for analysis engines. WWW (Companion Volume) Kevin Borgolte, Christopher Kruegel, Giovanni Vigna
2014	A*	`conf`	Rippler: Delay injection for service dependency detection. INFOCOM Ali Zand, Giovanni Vigna, Richard A. Kemmerer, Christopher Kruegel
2014	A*	`conf`	Stranger danger: exploring the ecosystem of ad-based URL shortening services. WWW Nick Nikiforakis, Federico Maggi, Gianluca Stringhini, M. Zubair Rafique, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna, Stefano Zanero
2014	A	`conf`	The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements. Internet Measurement Conference Apostolis Zarras, Alexandros Kapravelos, Gianluca Stringhini, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2014	—	`conf`	The Tricks of the Trade: What Makes Spam Campaigns Successful? IEEE Symposium on Security and Privacy Workshops Jane Iedemska, Gianluca Stringhini, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2014	A	`conf`	The harvester, the botmaster, and the spammer: on the relations between the different actors in the spam landscape. AsiaCCS Gianluca Stringhini, Oliver Hohlfeld, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	An empirical study of cryptographic misuse in android applications. CCS Manuel Egele, David Brumley, Yanick Fratantonio, Christopher Kruegel
2013	A*	`conf`	Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. IEEE Symposium on Security and Privacy Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2013	A*	`conf`	Delta: automatic identification of unknown web-based infection campaigns. CCS Kevin Borgolte, Christopher Kruegel, Giovanni Vigna
2013	Misc	`conf`	EARs in the wild: large-scale analysis of execution after redirect vulnerabilities. SAC Pierre Payet, Adam Doupé, Christopher Kruegel, Giovanni Vigna
2013	A	`conf`	Follow the green: growth and dynamics in twitter follower markets. Internet Measurement Conference Gianluca Stringhini, Gang Wang, Manuel Egele, Christopher Kruegel, Giovanni Vigna, Haitao Zheng, Ben Y. Zhao
2013	A	`conf`	Message in a bottle: sailing past censorship. ACSAC Luca Invernizzi, Christopher Kruegel, Giovanni Vigna
2013	A	`conf`	Practical Attacks against the I2P Network. RAID Christoph Egger, Johannes Schlumberger, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Revolver: An Automated Approach to the Detection of Evasive Web-based Malware. USENIX Security Symposium Alexandros Kapravelos, Yan Shoshitaishvili, Marco Cova, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Shady paths: leveraging surfing crowds to detect malicious web pages. CCS Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services. USENIX Security Symposium Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Two years of short URLs internet measurement: security threats and countermeasures. WWW Federico Maggi, Alessandro Frossi, Stefano Zanero, Gianluca Stringhini, Brett Stone-Gross, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	deDacota: toward preventing server-side XSS via automatic code and data separation. CCS Adam Doupé, Weidong Cui, Mariusz H. Jakubowski, Marcus Peinado, Christopher Kruegel, Giovanni Vigna
2012	B	`conf`	A Static, Packer-Agnostic Filter to Detect Similar Malware Samples. DIMVA Grégoire Jacob, Paolo Milani Comparetti, Matthias Neugschwandtner, Christopher Kruegel, Giovanni Vigna
2012	A	`conf`	A quantitative study of accuracy in system call-based malware detection. ISSTA Davide Canali, Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda
2012	J	`jnl`	A survey on automated dynamic malware-analysis techniques and tools. ACM Comput. Surv. Manuel Egele, Theodoor Scholte, Engin Kirda, Christopher Kruegel
2012	A*	`conf`	B@bel: Leveraging Email Delivery for Spam Mitigation. USENIX Security Symposium Gianluca Stringhini, Manuel Egele, Apostolis Zarras, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	Blacksheep: detecting compromised hosts in homogeneous crowds. CCS Antonio Bianchi, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2012	A	`conf`	BotFinder: finding bots in network traffic without deep packet inspection. CoNEXT Florian Tegeler, Xiaoming Fu, Giovanni Vigna, Christopher Kruegel
2012	—	`conf`	Detecting social cliques for automated privacy control in online social networks. PerCom Workshops Hakan Yildiz, Christopher Kruegel
2012	A	`conf`	Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis. ACSAC Leyla Bilge, Davide Balzarotti, William K. Robertson, Engin Kirda, Christopher Kruegel
2012	A*	`conf`	Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner. USENIX Security Symposium Adam Doupé, Ludovico Cavedon, Christopher Kruegel, Giovanni Vigna
2012	B	`conf`	Enforcing dynamic spectrum access with spectrum permits. MobiHoc Lei Yang, Zengbin Zhang, Ben Y. Zhao, Christopher Kruegel, Haitao Zheng
2012	A*	`conf`	EvilSeed: A Guided Approach to Finding Malicious Web Pages. IEEE Symposium on Security and Privacy Luca Invernizzi, Paolo Milani Comparetti, Stefano Benvenuti, Christopher Kruegel, Marco Cova, Giovanni Vigna
2012	Misc	`conf`	Fighting Malicious Software. ICISS Christopher Kruegel
2012	A	`conf`	FlashDetect: ActionScript 3 Malware Detection. RAID Timon Van Overveldt, Christopher Kruegel, Giovanni Vigna
2012	A	`conf`	Jarhead analysis and detection of malicious Java applets. ACSAC Johannes Schlumberger, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	PUBCRAWL: Protecting Users and Businesses from CRAWLers. USENIX Security Symposium Grégoire Jacob, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	PeerPress: utilizing enemies' P2P strength against them. CCS Zhaoyan Xu, Lingfeng Chen, Guofei Gu, Christopher Kruegel
2012	J	`jnl`	PoX: Protecting users from malicious Facebook applications. Comput. Commun. Manuel Egele, Andreas Moser, Christopher Kruegel, Engin Kirda
2012	—	`conf`	Poultry markets: on the underground economy of twitter followers. WOSN Gianluca Stringhini, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2012	J	`jnl`	Poultry markets: on the underground economy of twitter followers. Comput. Commun. Rev. Gianluca Stringhini, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2012	B	`conf`	Tracking Memory Writes for Malware Classification and Code Reuse Identification. DIMVA André Ricardo Abed Grégio, Paulo Lício de Geus, Christopher Kruegel, Giovanni Vigna
2012	A	`conf`	ViewPoints: differential string analysis for discovering client- and server-side input validation inconsistencies. ISSTA Muath Alkhalaf, Shauvik Roy Choudhary, Mattia Fazzini, Tevfik Bultan, Alessandro Orso, Christopher Kruegel
2012	A*	`conf`	You are what you include: large-scale evaluation of remote javascript inclusions. CCS Nick Nikiforakis, Luca Invernizzi, Alexandros Kapravelos, Steven Van Acker, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2011	—	`ed.`	4th USENIX Workshop on Large-Scale Exploits and Emergent Threats, LEET '11, Boston, MA, USA, March 29, 2011 LEET Christopher Kruegel
2011	J	`jnl`	Analysis of a Botnet Takeover. IEEE Secur. Priv. Brett Stone-Gross, Marco Cova, Bob Gilbert, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	BOTMAGNIFIER: Locating Spambots on the Internet. USENIX Security Symposium Gianluca Stringhini, Thorsten Holz, Brett Stone-Gross, Christopher Kruegel, Giovanni Vigna
2011	B	`conf`	BTLab: A System-Centric, Data-Driven Analysis and Measurement Platform for BitTorrent Clients. ICCCN Martin Szydlowski, Ben Y. Zhao, Engin Kirda, Christopher Kruegel
2011	A	`conf`	BareBox: efficient malware analysis on bare-metal. ACSAC Dhilung Kirat, Giovanni Vigna, Christopher Kruegel
2011	—	`conf`	Challenges for Dynamic Analysis of iOS Applications. iNetSeC Martin Szydlowski, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2011	A	`conf`	Dymo: Tracking Dynamic Code Identity. RAID Bob Gilbert, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis. NDSS Leyla Bilge, Engin Kirda, Christopher Kruegel, Marco Balduzzi
2011	B	`conf`	Escape from Monkey Island: Evading High-Interaction Honeyclients. DIMVA Alexandros Kapravelos, Marco Cova, Christopher Kruegel, Giovanni Vigna
2011	A	`conf`	FORECAST: skimming off the malware cream. ACSAC Matthias Neugschwandtner, Paolo Milani Comparetti, Grégoire Jacob, Christopher Kruegel
2011	A*	`conf`	Fear the EAR: discovering and mitigating execution after redirect vulnerabilities. CCS Adam Doupé, Bryce Boe, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	JACKSTRAWS: Picking Command and Control Connections from Bot Traffic. USENIX Security Symposium Grégoire Jacob, Ralf Hund, Christopher Kruegel, Thorsten Holz
2011	B	`conf`	MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper). DIMVA Greg Banks, Aristide Fattori, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2011	J	`jnl`	Making browser extensions secure: technical perspective. Commun. ACM Christopher Kruegel
2011	A	`conf`	Nexat: a history-based approach to predict attacker actions. ACSAC Casey Cipriano, Ali Zand, Amir Houmansadr, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	Peering through the iframe. INFOCOM Brett Stone-Gross, Marco Cova, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	PiOS: Detecting Privacy Leaks in iOS Applications. NDSS Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
2011	—	`conf`	PoX: Protecting users from malicious Facebook applications. PerCom Workshops Manuel Egele, Andreas Moser, Christopher Kruegel, Engin Kirda
2011	A*	`conf`	Prophiler: a fast filter for the large-scale detection of malicious web pages. WWW Davide Canali, Marco Cova, Giovanni Vigna, Christopher Kruegel
2011	A	`conf`	Shellzer: A Tool for the Dynamic Analysis of Malicious Shellcode. RAID Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2011	—	`conf`	Silverline: toward data confidentiality in storage-intensive cloud applications. SoCC Krishna P. N. Puttaswamy, Christopher Kruegel, Ben Y. Zhao
2011	—	`conf`	The Underground Economy of Fake Antivirus Software. WEIS Brett Stone-Gross, Ryan Abman, Richard A. Kemmerer, Christopher Kruegel, Douglas G. Steigerwald
2011	—	`conf`	The Underground Economy of Fake Antivirus Software. WEIS (Springer Volume) Brett Stone-Gross, Ryan Abman, Richard A. Kemmerer, Christopher Kruegel, Douglas G. Steigerwald, Giovanni Vigna
2011	A*	`conf`	The power of procrastination: detection and mitigation of execution-stalling malicious code. CCS Clemens Kolbitsch, Engin Kirda, Christopher Kruegel
2011	A	`conf`	Understanding fraudulent activities in online ad exchanges. Internet Measurement Conference Brett Stone-Gross, Ryan Stevens, Apostolis Zarras, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2010	A*	`conf`	A Practical Attack to De-anonymize Social Network Users. IEEE Symposium on Security and Privacy Gilbert Wondracek, Thorsten Holz, Engin Kirda, Christopher Kruegel
2010	A	`conf`	A solution for the automated detection of clickjacking attacks. AsiaCCS Marco Balduzzi, Manuel Egele, Engin Kirda, Davide Balzarotti, Christopher Kruegel
2010	A	`conf`	Abusing Social Networks for Automated User Profiling. RAID Marco Balduzzi, Christian Platzer, Thorsten Holz, Engin Kirda, Davide Balzarotti, Christopher Kruegel
2010	A*	`conf`	AccessMiner: using system-centric models for malware protection. CCS Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda
2010	—	`conf`	Are BGP Routers Open to Attack? An Experiment. iNetSec Ludovico Cavedon, Christopher Kruegel, Giovanni Vigna
2010	Misc	`conf`	CAPTCHA smuggling: hijacking web browsing sessions to create CAPTCHA farms. SAC Manuel Egele, Leyla Bilge, Engin Kirda, Christopher Kruegel
2010	A	`conf`	Detecting spammers on social networks. ACSAC Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2010	A*	`conf`	Effective Anomaly Detection with Scarce Training Data. NDSS William K. Robertson, Federico Maggi, Christopher Kruegel, Giovanni Vigna
2010	A*	`conf`	Efficient Detection of Split Personalities in Malware. NDSS Davide Balzarotti, Marco Cova, Christoph Karlberger, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2010	A*	`conf`	Identifying Dormant Functionality in Malware Programs. IEEE Symposium on Security and Privacy Paolo Milani Comparetti, Guido Salvaneschi, Engin Kirda, Clemens Kolbitsch, Christopher Kruegel, Stefano Zanero
2010	Misc	`conf`	Improving the efficiency of dynamic malware analysis. SAC Ulrich Bayer, Engin Kirda, Christopher Kruegel
2010	A*	`conf`	Inspector Gadget: Automated Extraction of Proprietary Gadgets from Malware Binaries. IEEE Symposium on Security and Privacy Clemens Kolbitsch, Thorsten Holz, Christopher Kruegel, Engin Kirda
2010	—	`conf`	Is the Internet for Porn? An Insight Into the Online Adult Industry. WEIS Gilbert Wondracek, Thorsten Holz, Christian Platzer, Engin Kirda, Christopher Kruegel
2010	J	`jnl`	Static analysis for detecting taint-style vulnerabilities in web applications. J. Comput. Secur. Nenad Jovanovic, Christopher Kruegel, Engin Kirda
2010	A*	`conf`	Toward Automated Detection of Logic Vulnerabilities in Web Applications. USENIX Security Symposium Viktoria Felmetsger, Ludovico Cavedon, Christopher Kruegel, Giovanni Vigna
2009	A	`conf`	Analyzing and Detecting Malicious Flash Advertisements. ACSAC Sean Ford, Marco Cova, Christopher Kruegel, Giovanni Vigna
2009	C	`conf`	Automated Spyware Collection and Analysis. ISC Andreas Stamminger, Christopher Kruegel, Giovanni Vigna, Engin Kirda
2009	A	`conf`	Automatically Generating Models for Botnet Detection. ESORICS Peter Wurzinger, Leyla Bilge, Thorsten Holz, Jan Goebel, Christopher Kruegel, Engin Kirda
2009	J	`jnl`	Client-side cross-site scripting protection. Comput. Secur. Engin Kirda, Nenad Jovanovic, Christopher Kruegel, Giovanni Vigna
2009	B	`conf`	Defending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks. DIMVA Manuel Egele, Peter Wurzinger, Christopher Kruegel, Engin Kirda
2009	A*	`conf`	Effective and Efficient Malware Detection at the End Host. USENIX Security Symposium Clemens Kolbitsch, Paolo Milani Comparetti, Christopher Kruegel, Engin Kirda, Xiao-yong Zhou, Xiaofeng Wang
2009	A	`conf`	FIRE: FInding Rogue nEtworks. ACSAC Brett Stone-Gross, Christopher Kruegel, Kevin C. Almeroth, Andreas Moser, Engin Kirda
2009	—	`conf`	Mitigating Drive-By Download Attacks: Challenges and Open Problems. iNetSeC Manuel Egele, Engin Kirda, Christopher Kruegel
2009	J	`jnl`	Network attack detection and defense - Manifesto of the Dagstuhl Perspective Workshop, March 2nd-6th, 2008. Comput. Sci. Res. Dev. Georg Carle, Falko Dressler, Richard A. Kemmerer, Hartmut König, Christopher Kruegel, Pavel Laskov
2009	J	`jnl`	On looking FORWARD. ERCIM News Sotiris Ioannidis, Evangelos P. Markatos, Christopher Kruegel
2009	J	`jnl`	Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries. J. Comput. Secur. Giovanni Vigna, Fredrik Valeur, Davide Balzarotti, William K. Robertson, Christopher Kruegel, Engin Kirda
2009	—	`conf`	SWAP: Mitigating XSS attacks using a reverse proxy. SESS@ICSE Peter Würzinger, Christian Platzer, Christian Ludl, Engin Kirda, Christopher Kruegel
2009	A*	`conf`	Your botnet is my botnet: analysis of a botnet takeover. CCS Brett Stone-Gross, Marco Cova, Lorenzo Cavallaro, Bob Gilbert, Martin Szydlowski, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2008	—	`conf`	08102 Executive Summary -- Perspectives Workshop: Network Attack Detection and Defense. Network Attack Detection and Defense Georg Carle, Falko Dressler, Richard A. Kemmerer, Hartmut König, Christopher Kruegel
2008	—	`conf`	08102 Manifesto -- Perspectives Workshop: Network Attack Detection and Defense. Network Attack Detection and Defense Georg Carle, Falko Dressler, Richard A. Kemmerer, Hartmut König, Christopher Kruegel, Pavel Laskov
2008	—	`conf`	08102 Working Group -- Requirements for Network Monitoring from an IDS Perspective. Network Attack Detection and Defense Lothar Braun, Falko Dressler, Thorsten Holz, Engin Kirda, Jan Kohlrausch, Christopher Kruegel, Tobias Limmer, Konrad Rieck, James P. G. Sterbenz
2008	—	`conf`	8102 Working Group -- Attack Taxonomy. Network Attack Detection and Defense Marc Dacier, Hervé Debar, Thorsten Holz, Engin Kirda, Jan Kohlrausch, Christopher Kruegel, Konrad Rieck, James P. G. Sterbenz
2008	Misc	`conf`	A Parallel Architecture for Stateful, High-Speed Intrusion Detection. ICISS Luca Foschini, Ashish V. Thapliyal, Lorenzo Cavallaro, Christopher Kruegel, Giovanni Vigna
2008	A	`conf`	Leveraging User Interactions for In-Depth Testing of Web Applications. RAID Sean McAllister, Engin Kirda, Christopher Kruegel
2008	—	`conf`	Mining specifications of malicious behavior. ISEC Mihai Christodorescu, Somesh Jha, Christopher Kruegel
2008	C	`conf`	Overbot: a botnet protocol based on Kademlia. SecureComm Guenther Starnberger, Christopher Kruegel, Engin Kirda
2008	—	`ed.`	Perspectives Workshop: Network Attack Detection and Defense, 2.3. - 6.3.2008 Network Attack Detection and Defense Georg Carle, Falko Dressler, Richard A. Kemmerer, Hartmut König, Christopher Kruegel
2008	A*	`conf`	Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications. SP Davide Balzarotti, Marco Cova, Viktoria Felmetsger, Nenad Jovanovic, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2008	—	`conf`	There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits. WOOT Marco Cova, Christopher Kruegel, Giovanni Vigna
2008	B	`conf`	VeriKey: A Dynamic Certificate Verification System for Public Key Exchanges. DIMVA Brett Stone-Gross, David Sigal, Rob Cohn, John Morse, Kevin C. Almeroth, Christopher Kruegel
2008	C	`conf`	Visual-similarity-based phishing detection. SecureComm Eric Medvet, Engin Kirda, Christopher Kruegel
2007	C	`conf`	A layout-similarity-based approach for detecting phishing pages. SecureComm Angelo P. E. Rosiello, Engin Kirda, Christopher Kruegel, Fabrizio Ferrandi
2007	—	`ch.`	Behavioral and Structural Properties of Malicious Code. Malware Detection Christopher Kruegel
2007	—	`conf`	Building Anti-Phishing Browser Plug-Ins: An Experience Report. SESS@ICSE Thomas Raffetseder, Engin Kirda, Christopher Kruegel
2007	—	`conf`	Dynamic Spyware Analysis. USENIX ATC Manuel Egele, Christopher Kruegel, Engin Kirda, Heng Yin, Dawn Xiaodong Song
2007	—	`conf`	Exploiting Redundancy in Natural Language to Penetrate Bayesian Spam Filters. WOOT Christoph Karlberger, Günther Bayler, Christopher Kruegel, Engin Kirda
2007	J	`jnl`	Extending .NET security to unmanaged code. Int. J. Inf. Sec. Patrick Klinkoff, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2007	A	`conf`	Improving Signature Testing through Dynamic Data Flow Analysis. ACSAC Christopher Kruegel, Davide Balzarotti, William K. Robertson, Giovanni Vigna
2007	A	`conf`	Limits of Static Analysis for Malware Detection. ACSAC Andreas Moser, Christopher Kruegel, Engin Kirda
2007	—	`conf`	Mining specifications of malicious behavior. ESEC/SIGSOFT FSE Mihai Christodorescu, Somesh Jha, Christopher Kruegel
2007	B	`conf`	On the Effectiveness of Techniques to Detect Phishing Sites. DIMVA Christian Ludl, Sean McAllister, Engin Kirda, Christopher Kruegel
2007	A*	`conf`	Panorama: capturing system-wide information flow for malware detection and analysis. CCS Heng Yin, Dawn Xiaodong Song, Manuel Egele, Christopher Kruegel, Engin Kirda
2007	A	`conf`	Secure Input for Web Applications. ACSAC Martin Szydlowski, Christopher Kruegel, Engin Kirda
2006	A*	`conf`	Behavior-based Spyware Detection. USENIX Security Symposium Engin Kirda, Christopher Kruegel
2006	—	`conf`	Precise alias analysis for static detection of web application vulnerabilities. PLAS Nenad Jovanovic, Christopher Kruegel, Engin Kirda
2006	C	`conf`	Preventing Cross Site Request Forgery Attacks. SecureComm Nenad Jovanovic, Engin Kirda, Christopher Kruegel
2005	A*	`conf`	Automating Mimicry Attacks Using Static Binary Analysis. USENIX Security Symposium Christopher Kruegel, Engin Kirda, Darren Mutz, William K. Robertson, Giovanni Vigna
2005	—	`book`	Intrusion Detection and Correlation - Challenges and Solutions Christopher Kruegel, Fredrik Valeur, Giovanni Vigna
2004	J	`jnl`	Using Alert Verification to Identify Successful Intrusion Attempts. Prax. Inf.verarb. Kommun. Christopher Kruegel, William K. Robertson, Giovanni Vigna