Cristian-Alexandru Staicu

41 papers A* 18A 3B 1Journal 14Unranked 4
YearRankTypeTitle / Venue / Authors
2026 J jnl
"Write in English, Nobody Understands Your Language Here": A Study of Non-English Trends in Open-Source Repositories.
CoRR
Masudul Hasan Masud Bhuiyan, Manish Kumar Bala Kumar, Cristian-Alexandru Staicu
2025 A conf
CHARON: Polyglot Code Analysis for Detecting Vulnerabilities in Scripting Languages Native Extensions.
EuroS&P
Raoul Scholtes, Soheil Khodayari, Cristian-Alexandru Staicu, Giancarlo Pellegrino
2025 J jnl
Call Me Maybe: Enhancing JavaScript Call Graph Construction using Graph Neural Networks.
CoRR
Masudul Hasan Masud Bhuiyan, Gianluca De Stefano, Giancarlo Pellegrino, Cristian-Alexandru Staicu
2025 A* conf
Digital Disparities: A Comparative Web Measurement Study Across Economic Boundaries.
WWW
Masudul Hasan Masud Bhuiyan, Matteo Varvello, Cristian-Alexandru Staicu, Yasir Zaki
2025 — conf
Non-Western Perspectives on Web Inclusivity: A Study of Accessibility Practices in the Global South.
SEiGS@ICSE
Masudul Hasan Masud Bhuiyan, Matteo Varvello, Cristian-Alexandru Staicu, Yasir Zaki
2025 J jnl
Non-Western Perspectives on Web Inclusivity: A Study of Accessibility Practices in the Global South.
CoRR
Masudul Hasan Masud Bhuiyan, Matteo Varvello, Cristian-Alexandru Staicu, Yasir Zaki
2025 A conf
Not All Visitors are Bilingual: A Measurement Study of the Multilingual Web from an Accessibility Perspective.
IMC
Masudul Hasan Masud Bhuiyan, Matteo Varvello, Yasir Zaki, Cristian-Alexandru Staicu
2025 J jnl
Not All Visitors are Bilingual: A Measurement Study of the Multilingual Web from an Accessibility Perspective.
CoRR
Masudul Hasan Masud Bhuiyan, Matteo Varvello, Yasir Zaki, Cristian-Alexandru Staicu
2025 A conf
SoK: A Literature and Engineering Review of Regular Expression Denial of Service (ReDoS).
AsiaCCS
Masudul Hasan Masud Bhuiyan, Berk Çakar, Ethan H. Burmane, James C. Davis, Cristian-Alexandru Staicu
2025 J jnl
User Profiles: The Achilles' Heel of Web Browsers.
CoRR
Dolière Francis Somé, Moaz Airan, Zakir Durumeric, Cristian-Alexandru Staicu
2025 A* conf
Welcome to Jurassic Park: A Comprehensive Study of Security Risks in Deno and its Ecosystem.
NDSS
Abdullah AlHamdan, Cristian-Alexandru Staicu
2024 A* conf
A Generalized Approach for Solving Web Form Constraints.
ASE
Björn Karthein, Cristian-Alexandru Staicu, Andreas Zeller
2024 — conf
SimSCOOD: Systematic Analysis of Out-of-Distribution Generalization in Fine-tuned Source Code Models.
NAACL-HLT (Findings)
Hossein Hajipour, Ning Yu, Cristian-Alexandru Staicu, Mario Fritz
2024 J jnl
SoK: A Literature and Engineering Review of Regular Expression Denial of Service.
CoRR
Masudul Hasan Masud Bhuiyan, Berk Çakar, Ethan H. Burmane, James C. Davis, Cristian-Alexandru Staicu
2024 A* conf
Typed and Confused: Studying the Unexpected Dangers of Gradual Typing.
ASE
Dominic Troppmann, Aurore Fass, Cristian-Alexandru Staicu
2023 A* conf
Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages.
USENIX Security Symposium
Cristian-Alexandru Staicu, Sazzadur Rahaman, Ágnes Kiss, Michael Backes
2023 A* conf
Jack-in-the-box: An Empirical Study of JavaScript Bundling on the Web and its Security Implications.
CCS
Jeremy Rack, Cristian-Alexandru Staicu
2023 A* conf
SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes.
USENIX Security Symposium
Abdullah AlHamdan, Cristian-Alexandru Staicu
2023 A* conf
SecBench.js: An Executable Security Benchmark Suite for Server-Side JavaScript.
ICSE
Masudul Hasan Masud Bhuiyan, Adithya Srinivas Parthasarathy, Nikos Vasilakis, Michael Pradel, Cristian-Alexandru Staicu
2023 A* conf
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js.
USENIX Security Symposium
Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru Staicu
2022 J jnl
A Tale of Frozen Clouds: Quantifying the Impact of Algorithmic Complexity Vulnerabilities in Popular Web Servers.
CoRR
Masudul Hasan Masud Bhuiyan, Cristian-Alexandru Staicu
2022 J jnl
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js.
CoRR
Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru Staicu
2022 J jnl
SimSCOOD: Systematic Analysis of Out-of-Distribution Behavior of Source Code Models.
CoRR
Hossein Hajipour, Ning Yu, Cristian-Alexandru Staicu, Mario Fritz
2021 J jnl
Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages.
CoRR
Cristian-Alexandru Staicu, Sazzadur Rahaman, Ágnes Kiss, Michael Backes
2021 A* conf
Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction.
CCS
Nikos Vasilakis, Cristian-Alexandru Staicu, Grigoris Ntousakis, Konstantinos Kallas, Ben Karel, André DeHon, Michael Pradel
2021 — conf
SampleFix: Learning to Generate Functionally Diverse Fixes.
PKDD/ECML Workshops (2)
Hossein Hajipour, Apratim Bhattacharyya, Cristian-Alexandru Staicu, Mario Fritz
2020 — —
Enhancing the Security and Privacy of Full-Stack JavaScript Web Applications.
Cristian-Alexandru Staicu
2020 A* conf
Extracting taint specifications for JavaScript libraries.
ICSE
Cristian-Alexandru Staicu, Martin Toldam Torp, Max Schäfer, Anders Møller, Michael Pradel
2020 J jnl
Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript.
CoRR
Nikos Vasilakis, Cristian-Alexandru Staicu, Greg Ntousakis, Konstantinos Kallas, Ben Karel, André DeHon, Michael Pradel
2019 — conf
An Empirical Study of Information Flows in Real-World JavaScript.
PLAS@CCS
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
2019 J jnl
An Empirical Study of Information Flows in Real-World JavaScript.
CoRR
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
2019 A* conf
Anything to Hide? Studying Minified and Obfuscated Code in the Web.
WWW
Philippe Skolka, Cristian-Alexandru Staicu, Michael Pradel
2019 A* conf
Leaky Images: Targeted Privacy Attacks in the Web.
USENIX Security Symposium
Cristian-Alexandru Staicu, Michael Pradel
2019 A* conf
Small World with High Risks: A Study of Security Threats in the npm Ecosystem.
USENIX Security Symposium
Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny, Michael Pradel
2019 J jnl
Small World with High Risks: A Study of Security Threats in the npm Ecosystem.
CoRR
Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny, Michael Pradel
2018 A* conf
Freezing the Web: A Study of ReDoS Vulnerabilities in JavaScript-based Web Servers.
USENIX Security Symposium
Cristian-Alexandru Staicu, Michael Pradel
2018 A* conf
SYNODE: Understanding and Automatically Preventing Injection Attacks on NODE.JS.
NDSS
Cristian-Alexandru Staicu, Michael Pradel, Benjamin Livshits
2017 J jnl
A Survey of Dynamic Analysis and Test Generation for JavaScript.
ACM Comput. Surv.
Esben Andreasen, Liang Gong, Anders Møller, Michael Pradel, Marija Selakovic, Koushik Sen, Cristian-Alexandru Staicu
2017 A* conf
Saying 'hi!' is not enough: mining inputs for effective test generation.
ASE
Luca Della Toffola, Cristian-Alexandru Staicu, Michael Pradel
2016 A* conf
Nomen est omen: exploring and exploiting similarities between argument and parameter names.
ICSE
Hui Liu, Qiurong Liu, Cristian-Alexandru Staicu, Michael Pradel, Yue Luo
2016 B conf
Search Based Clustering for Protecting Software with Diversified Updates.
SSBSE
Mariano Ceccato, Paolo Falcarin, Alessandro Cabutto, Yosief Weldezghi Frezghi, Cristian-Alexandru Staicu