Giovanni Vigna

307 papers A* 108A 68B 22C 3Misc 7Journal 49Unranked 45

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	DevOps-Gym: Benchmarking AI Agents in Software DevOps Cycle. CoRR Yuheng Tang, Kaijie Zhu, Bonan Ruan, Chuqi Zhang, Michael Yang, Hongwei Li, Suyue Guo, Tianneng Shi, Zekun Li, Christopher Kruegel, Giovanni Vigna, Dawn Song, William Yang Wang, Lun Wang, Yangruibo Ding, Zhenkai Liang, Wenbo Guo
2026	J	`jnl`	Multi-Agent Taint Specification Extraction for Vulnerability Detection. CoRR Jonah Ghebremichael, Saastha Vasan, Saad Ullah, Greg Tystahl, David Adei, Christopher Kruegel, Giovanni Vigna, William Enck, Alexandros Kapravelos
2025	—	`conf`	A History of Greed: Practical Symbolic Execution for Ethereum Smart Contracts. DIMVA (2) Nicola Ruaro, Fabio Gritti, Robert McLaughlin, Dongyu Meng, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2025	A*	`conf`	A Large-Scale Measurement Study of the PROXY Protocol and its Security Implications. NDSS Stijn Pletinckx, Christopher Kruegel, Giovanni Vigna
2025	A*	`conf`	Approve Once, Regret Forever: On the Exploitation of Ethereum's Approve-TransferFrom Ecosystem. USENIX Security Symposium Nicola Ruaro, Fabio Gritti, Dongyu Meng, Robert McLaughlin, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2025	A*	`conf`	Autonomous Vulnerability Analysis, Triaging, and Repair: A Historical Perspective. CCS Giovanni Vigna
2025	A	`conf`	Beneath the Surface: An Analysis of OEM Customizations on the Android TLS Protocol Stack. EuroS&P Vinuri Bandara, Stijn Pletinckx, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna, Juan Tapiador, Narseo Vallina-Rodriguez
2025	J	`jnl`	From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEs. CoRR Saad Ullah, Praneeth Balasubramanian, Wenbo Guo, Amanda Burnett, Hammond Pearce, Christopher Kruegel, Giovanni Vigna, Gianluca Stringhini
2025	J	`jnl`	MADCAT: Combating Malware Detection Under Concept Drift with Test-Time Adaptation. CoRR Eunjin Roh, Yigitcan Kaya, Christopher Kruegel, Giovanni Vigna, Sanghyun Hong
2025	A*	`conf`	MALintent: Coverage Guided Intent Fuzzing Framework for Android. NDSS Ammar Askar, Fabian Fleischer, Christopher Kruegel, Giovanni Vigna, Taesoo Kim
2025	A	`conf`	SyzGrapher: Resource-Centric Graph-Based Kernel Fuzzing. RAID Marius Fleischer, Harrison Green, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2025	J	`jnl`	When AI Meets the Web: Prompt Injection Risks in Third-Party AI Chatbot Plugins. CoRR Yigitcan Kaya, Anton Landerer, Stijn Pletinckx, Michelle Zimmermann, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	ChainReactor: Automated Privilege Escalation Chain Discovery via AI Planning. USENIX Security Symposium Giulio De Pasquale, Ilya Grishchenko, Riccardo Iesari, Gabriel Pizarro, Lorenzo Cavallaro, Christopher Kruegel, Giovanni Vigna
2024	A	`conf`	DEEPCAPA: Identifying Malicious Capabilities in Windows Malware. ACSAC Saastha Vasan, Hojjat Aghakhani, Stefano Ortolani, Roman Vasilenko, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	GuideEnricher: Protecting the Anonymity of Ethereum Mixing Service Users with Deep Reinforcement Learning. USENIX Security Symposium Ravindu De Silva, Wenbo Guo, Nicola Ruaro, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	Invisible Image Watermarks Are Provably Removable Using Generative AI. NeurIPS Xuandong Zhao, Kexun Zhang, Zihao Su, Saastha Vasan, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna, Yu-Xiang Wang, Lei Li
2024	A*	`conf`	Not your Type! Detecting Storage Collision Vulnerabilities in Ethereum Smart Contracts. NDSS Nicola Ruaro, Fabio Gritti, Robert McLaughlin, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services. USENIX Security Symposium Wil Gibbs, Arvind S. Raj, Jayakrishna Menon Vadayath, Hui Jun Tay, Justin Miller, Akshay Ajayan, Zion Leonahenahe Basque, Audrey Dutcher, Fangzhou Dong, Xavier J. Maso, Giovanni Vigna, Christopher Kruegel, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2024	A*	`conf`	Remote Keylogging Attacks in Multi-user VR Applications. USENIX Security Symposium Zihao Su, Kunlin Cai, Reuben Beeler, Lukas Dresel, Allan Garcia, Ilya Grishchenko, Yuan Tian, Christopher Kruegel, Giovanni Vigna
2024	J	`jnl`	Remote Keylogging Attacks in Multi-user VR Applications. CoRR Zihao Su, Kunlin Cai, Reuben Beeler, Lukas Dresel, Allan Garcia, Ilya Grishchenko, Yuan Tian, Christopher Kruegel, Giovanni Vigna
2024	—	`conf`	The Power of Default: Measuring the Effect of Slippage Tolerance in Decentralized Exchanges. FC (1) Nir Chemaya, Dingyue Liu, Robert McLaughlin, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2024	A*	`conf`	TrojanPuzzle: Covertly Poisoning Code-Suggestion Models. SP Hojjat Aghakhani, Wei Dai, Andre Manoel, Xavier Fernandes, Anant Kharkar, Christopher Kruegel, Giovanni Vigna, David Evans, Ben Zorn, Robert Sim
2024	A	`conf`	Unveiling the Risks of NFT Promotion Scams. ICWSM Sayak Saha Roy, Dipanjan Das, Priyanka Bose, Christopher Kruegel, Giovanni Vigna, Shirin Nilizadeh
2023	A*	`conf`	A Large Scale Study of the Ethereum Arbitrage Ecosystem. USENIX Security Symposium Robert McLaughlin, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	ACTOR: Action-Guided Kernel Fuzzing. USENIX Security Symposium Marius Fleischer, Dipanjan Das, Priyanka Bose, Weiheng Bai, Kangjie Lu, Mathias Payer, Christopher Kruegel, Giovanni Vigna
2023	A	`conf`	Certifiably Vulnerable: Using Certificate Transparency Logs for Target Reconnaissance. EuroS&P Stijn Pletinckx, Thanh-Dat Nguyen, Tobias Fiebig, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	Columbus: Android App Testing Through Systematic Callback Exploration. ICSE Priyanka Bose, Dipanjan Das, Saastha Vasan, Sebastiano Mariani, Ilya Grishchenko, Andrea Continella, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Columbus: Android App Testing Through Systematic Callback Exploration. CoRR Priyanka Bose, Dipanjan Das, Saastha Vasan, Sebastiano Mariani, Ilya Grishchenko, Andrea Continella, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	Confusum Contractum: Confused Deputy Vulnerabilities in Ethereum Smart Contracts. USENIX Security Symposium Fabio Gritti, Nicola Ruaro, Robert McLaughlin, Priyanka Bose, Dipanjan Das, Ilya Grishchenko, Christopher Kruegel, Giovanni Vigna
2023	A	`conf`	Container Orchestration Honeypot: Observing Attacks in the Wild. RAID Noah Spahn, Nils Hanke, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Demystifying NFT Promotion and Phishing Scams. CoRR Sayak Saha Roy, Dipanjan Das, Priyanka Bose, Christopher Kruegel, Giovanni Vigna, Shirin Nilizadeh
2023	J	`jnl`	Exploiting Unfair Advantages: Investigating Opportunistic Trading in the NFT Market. CoRR Priyanka Bose, Dipanjan Das, Fabio Gritti, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Keeping Up with the Emotets: Tracking a Multi-infrastructure Botnet. DTRAP Oleg Boyarchuk, Sebastiano Mariani, Stefano Ortolani, Giovanni Vigna
2023	A	`conf`	Shimware: Toward Practical Security Retrofitting for Monolithic Firmware Images. RAID Eric Gustafson, Paul Grosen, Nilo Redini, Saagar Jha, Andrea Continella, Ruoyu Wang, Kevin Fu, Sara Rampazzi, Christopher Kruegel, Giovanni Vigna
2023	—	`conf`	Street Rep: A Privacy-Preserving Reputation Aggregation System. SecureComm (2) Christophe Hauser, Shirin Nilizadeh, Yan Shoshitaishvili, Ni Trieu, Srivatsan Ravi, Christopher Kruegel, Giovanni Vigna
2023	J	`jnl`	Street Rep: A Privacy-Preserving Reputation Aggregation System. IACR Cryptol. ePrint Arch. Christophe Hauser, Shirin Nilizadeh, Yan Shoshitaishvili, Ni Trieu, Srivatsan Ravi, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	TEEzz: Fuzzing Trusted Applications on COTS Android Devices. SP Marcel Busch, Aravind Machiry, Chad Spensky, Giovanni Vigna, Christopher Kruegel, Mathias Payer
2023	J	`jnl`	Token-Level Fuzzing. CoRR Christopher Salls, Chani Jindal, Jake Corina, Christopher Kruegel, Giovanni Vigna
2023	A*	`conf`	Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities. SP Erik Trickel, Fabio Pagani, Chang Zhu, Lukas Dresel, Giovanni Vigna, Christopher Kruegel, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2023	J	`jnl`	TrojanPuzzle: Covertly Poisoning Code-Suggestion Models. CoRR Hojjat Aghakhani, Wei Dai, Andre Manoel, Xavier Fernandes, Anant Kharkar, Christopher Kruegel, Giovanni Vigna, David Evans, Ben Zorn, Robert Sim
2023	—	`conf`	Venomave: Targeted Poisoning Against Speech Recognition. SaTML Hojjat Aghakhani, Lea Schönherr, Thorsten Eisenhofer, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	DEEPCASE: Semi-Supervised Contextual Analysis of Security Events. SP Thijs van Ede, Hojjat Aghakhani, Noah Spahn, Riccardo Bortolameotti, Marco Cova, Andrea Continella, Maarten van Steen, Andreas Peter, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	Decomperson: How Humans Decompile and What We Can Learn From It. USENIX Security Symposium Kevin Burk, Fabio Pagani, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. USENIX Security Symposium Tobias Scharnowski, Nils Bars, Moritz Schloegel, Eric Gustafson, Marius Muench, Giovanni Vigna, Christopher Kruegel, Thorsten Holz, Ali Abbasi
2022	A*	`conf`	HEAPSTER: Analyzing the Security of Dynamic Allocators for Monolithic Firmware Images. SP Fabio Gritti, Fabio Pagani, Ilya Grishchenko, Lukas Dresel, Nilo Redini, Christopher Kruegel, Giovanni Vigna
2022	B	`conf`	Hybrid Pruning: Towards Precise Pointer and Taint Analysis. DIMVA Dipanjan Das, Priyanka Bose, Aravind Machiry, Sebastiano Mariani, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel
2022	A	`conf`	POPKORN: Popping Windows Kernel Drivers At Scale. ACSAC Rajat Gupta, Lukas Patrick Dresel, Noah Spahn, Giovanni Vigna, Christopher Kruegel, Taesoo Kim
2022	A*	`conf`	Regulator: Dynamic Analysis to Detect ReDoS. USENIX Security Symposium Robert McLaughlin, Fabio Pagani, Noah Spahn, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds. SP Priyanka Bose, Dipanjan Das, Yanju Chen, Yu Feng, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	SYMBEXCEL: Automated Analysis and Understanding of Malicious Excel 4.0 Macros. SP Nicola Ruaro, Fabio Pagani, Stefano Ortolani, Christopher Kruegel, Giovanni Vigna
2022	A*	`conf`	Understanding Security Issues in the NFT Ecosystem. CCS Dipanjan Das, Priyanka Bose, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Bran: Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms. AsiaCCS Dongyu Meng, Michele Guerriero, Aravind Machiry, Hojjat Aghakhani, Priyanka Bose, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability. EuroS&P Hojjat Aghakhani, Dongyu Meng, Yu-Xiang Wang, Christopher Kruegel, Giovanni Vigna
2021	A*	`ed.`	CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, Republic of Korea, November 15 - 19, 2021 CCS Yongdae Kim, Jong Kim, Giovanni Vigna, Elaine Shi
2021	A	`conf`	Conware: Automated Modeling of Hardware Peripherals. AsiaCCS Chad Spensky, Aravind Machiry, Nilo Redini, Colin Unger, Graham Foster, Evan Blasband, Hamed Okhravi, Christopher Kruegel, Giovanni Vigna
2021	A*	`conf`	Diane: Identifying Fuzzing Triggers in Apps to Generate Under-constrained Inputs for IoT Devices. SP Nilo Redini, Andrea Continella, Dipanjan Das, Giulio De Pasquale, Noah Spahn, Aravind Machiry, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	Glitching Demystified: Analyzing Control-flow-based Glitching Attacks and Defenses. DSN Chad Spensky, Aravind Machiry, Nathan Burow, Hamed Okhravi, Rick Housley, Zhongshu Gu, Hani Jamjoom, Christopher Kruegel, Giovanni Vigna
2021	J	`jnl`	One Size Does Not Fit All: A Longitudinal Analysis of Brazilian Financial Malware. ACM Trans. Priv. Secur. Marcus Botacin, Hojjat Aghakhani, Stefano Ortolani, Christopher Kruegel, Giovanni Vigna, Daniela Oliveira, Paulo Lício de Geus, André Grégio
2021	J	`jnl`	SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds. CoRR Priyanka Bose, Dipanjan Das, Yanju Chen, Yu Feng, Christopher Kruegel, Giovanni Vigna
2021	A	`conf`	SyML: Guiding Symbolic Execution Toward Vulnerable States Through Pattern Learning. RAID Nicola Ruaro, Kyle Zeng, Lukas Dresel, Mario Polino, Tiffany Bao, Andrea Continella, Stefano Zanero, Christopher Kruegel, Giovanni Vigna
2021	—	`conf`	Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone. Checkmate@CCS Davide Quarta, Michele Ianni, Aravind Machiry, Yanick Fratantonio, Eric Gustafson, Davide Balzarotti, Martina Lindorfer, Giovanni Vigna, Christopher Kruegel
2021	A*	`conf`	Token-Level Fuzzing. USENIX Security Symposium Christopher Salls, Chani Jindal, Jake Corina, Christopher Kruegel, Giovanni Vigna
2021	J	`jnl`	Toward a Secure Crowdsourced Location Tracking System. CoRR Chinmay Garg, Aravind Machiry, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2021	—	`conf`	Toward a secure crowdsourced location tracking system. WISEC Chinmay Garg, Aravind Machiry, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2021	J	`jnl`	Understanding Security Issues in the NFT Ecosystem. CoRR Dipanjan Das, Priyanka Bose, Nicola Ruaro, Christopher Kruegel, Giovanni Vigna
2020	J	`jnl`	Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability. CoRR Hojjat Aghakhani, Dongyu Meng, Yu-Xiang Wang, Christopher Kruegel, Giovanni Vigna
2020	A*	`ed.`	CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13, 2020 CCS Jay Ligatti, Xinming Ou, Jonathan Katz, Giovanni Vigna
2020	A*	`conf`	Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web. WWW Iskander Sánchez-Rola, Davide Balzarotti, Christopher Kruegel, Giovanni Vigna, Igor Santos
2020	—	`conf`	Exploring Abstraction Functions in Fuzzing. CNS Christopher Salls, Aravind Machiry, Adam Doupé, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. USENIX Security Symposium Abraham A. Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, Mathias Payer
2020	A*	`conf`	Karonte: Detecting Insecure Multi-binary Interactions in Embedded Firmware. SP Nilo Redini, Aravind Machiry, Ruoyu Wang, Chad Spensky, Andrea Continella, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2020	B	`conf`	On the Security of Application Installers and Online Software Repositories. DIMVA Marcus Botacin, Giovanni Bertão, Paulo L. de Geus, André Grégio, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	SPIDER: Enabling Fast Patch Propagation In Related Software Repositories. SP Aravind Machiry, Nilo Redini, Eric Camellini, Christopher Kruegel, Giovanni Vigna
2020	—	`conf`	SYMBION: Interleaving Symbolic with Concrete Execution. CNS Fabio Gritti, Lorenzo Fontana, Eric Gustafson, Fabio Pagani, Andrea Continella, Christopher Kruegel, Giovanni Vigna
2020	—	`conf`	TRUST.IO: Protecting Physical Interfaces on Cyber-physical Systems. CNS Chad Spensky, Aravind Machiry, Marcel Busch, Kevin Leach, Rick Housley, Christopher Kruegel, Giovanni Vigna
2020	A	`conf`	Tracing and Analyzing Web Access Paths Based on User-Side Data Collection: How Do Users Reach Malicious URLs? RAID Takeshi Takahashi, Christopher Kruegel, Giovanni Vigna, Katsunari Yoshioka, Daisuke Inoue
2020	J	`jnl`	VENOMAVE: Clean-Label Poisoning Against Speech Recognition. CoRR Hojjat Aghakhani, Thorsten Eisenhofer, Lea Schönherr, Dorothea Kolossa, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2020	A*	`conf`	When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features. NDSS Hojjat Aghakhani, Fabio Gritti, Francesco Mecca, Martina Lindorfer, Stefano Ortolani, Davide Balzarotti, Giovanni Vigna, Christopher Kruegel
2019	B	`conf`	BinTrimmer: Towards Static Binary Debloating Through Abstract Interpretation. DIMVA Nilo Redini, Ruoyu Wang, Aravind Machiry, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel
2019	—	`conf`	BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. CODASPY Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
2019	J	`jnl`	BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. CoRR Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
2019	—	`conf`	Lightning Talk - Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis. WWW (Companion Volume) Shirin Nilizadeh, Hojjat Aghakhani, Eric Gustafson, Christopher Kruegel, Giovanni Vigna
2019	J	`jnl`	Neurlux: Dynamic Malware Analysis Without Feature Engineering. CoRR Chani Jindal, Christopher Salls, Hojjat Aghakhani, Keith Long, Christopher Kruegel, Giovanni Vigna
2019	A	`conf`	Neurlux: dynamic malware analysis without feature engineering. ACSAC Chani Jindal, Christopher Salls, Hojjat Aghakhani, Keith Long, Christopher Kruegel, Giovanni Vigna
2019	A*	`conf`	PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary. NDSS Dokyung Song, Felicitas Hetzelt, Dipanjan Das, Chad Spensky, Yeoul Na, Stijn Volckaert, Giovanni Vigna, Christopher Kruegel, Jean-Pierre Seifert, Michael Franz
2019	A	`conf`	Sleak: automating address space layout derandomization. ACSAC Christophe Hauser, Jayakrishna Menon, Yan Shoshitaishvili, Ruoyu Wang, Giovanni Vigna, Christopher Kruegel
2019	A*	`conf`	Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis. WWW Shirin Nilizadeh, Hojjat Aghakhani, Eric Gustafson, Christopher Kruegel, Giovanni Vigna
2019	A	`conf`	Toward the Analysis of Embedded Firmware through Automated Re-hosting. RAID Eric Gustafson, Marius Muench, Chad Spensky, Nilo Redini, Aravind Machiry, Yanick Fratantonio, Davide Balzarotti, Aurélien Francillon, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
2018	A*	`conf`	Broken Fingers: On the Usage of the Fingerprint API in Android. NDSS Antonio Bianchi, Yanick Fratantonio, Aravind Machiry, Christopher Kruegel, Giovanni Vigna, Simon Pak Ho Chung, Wenke Lee
2018	—	`conf`	Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates. ANRW Kevin Borgolte, Tobias Fiebig, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2018	A*	`conf`	Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates. NDSS Kevin Borgolte, Tobias Fiebig, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2018	—	`conf`	Detecting Deceptive Reviews Using Generative Adversarial Networks. IEEE Symposium on Security and Privacy Workshops Hojjat Aghakhani, Aravind Machiry, Shirin Nilizadeh, Christopher Kruegel, Giovanni Vigna
2018	J	`jnl`	Detecting Deceptive Reviews using Generative Adversarial Networks. CoRR Hojjat Aghakhani, Aravind Machiry, Shirin Nilizadeh, Christopher Kruegel, Giovanni Vigna
2018	A*	`conf`	Enumerating Active IPv6 Hosts for Large-Scale Security Scans via DNSSEC-Signed Reverse Zones. IEEE Symposium on Security and Privacy Kevin Borgolte, Shuang Hao, Tobias Fiebig, Giovanni Vigna
2018	B	`conf`	GuardION: Practical Mitigation of DMA-Based Rowhammer Attacks on ARM. DIMVA Victor van der Veen, Martina Lindorfer, Yanick Fratantonio, Harikrishnan Padmanabha Pillai, Giovanni Vigna, Christopher Kruegel, Herbert Bos, Kaveh Razavi
2018	A*	`conf`	HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security. USENIX Security Symposium Moritz Eckert, Antonio Bianchi, Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2018	B	`conf`	In rDNS We Trust: Revisiting a Common Data-Source's Reliability. PAM Tobias Fiebig, Kevin Borgolte, Shuang Hao, Christopher Kruegel, Giovanni Vigna, Anja Feldmann
2018	Misc	`conf`	Measuring E-mail header injections on the world wide web. SAC Sai Prashanth Chandramouli, Pierre-Marie Bajan, Christopher Kruegel, Giovanni Vigna, Ziming Zhao, Adam Doupé, Gail-Joon Ahn
2018	J	`jnl`	Mechanical Phish: Resilient Autonomous Hacking. IEEE Secur. Priv. Yan Shoshitaishvili, Antonio Bianchi, Kevin Borgolte, Amat Cama, Jacopo Corbetta, Francesco Disperati, Andrew Dutcher, John Grosen, Paul Grosen, Aravind Machiry, Christopher Salls, Nick Stephens, Ruoyu Wang, Giovanni Vigna
2018	A*	`conf`	MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense. CCS Radhesh Krishnan Konoth, Emanuele Vineti, Veelasha Moonsamy, Martina Lindorfer, Christopher Kruegel, Herbert Bos, Giovanni Vigna
2018	A	`conf`	Peer to Peer Hate: Hate Speech Instigators and Their Targets. ICWSM Mai ElSherief, Shirin Nilizadeh, Dana Nguyen, Giovanni Vigna, Elizabeth M. Belding
2018	J	`jnl`	Peer to Peer Hate: Hate Speech Instigators and Their Targets. CoRR Mai ElSherief, Shirin Nilizadeh, Dana Nguyen, Giovanni Vigna, Elizabeth M. Belding
2018	A*	`conf`	Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks. USENIX Security Symposium Wei Meng, Chenxiong Qian, Shuang Hao, Kevin Borgolte, Giovanni Vigna, Christopher Kruegel, Wenke Lee
2018	A	`conf`	Using Loops For Malware Classification Resilient to Feature-unaware Perturbations. ACSAC Aravind Machiry, Nilo Redini, Eric Gustafson, Yanick Fratantonio, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments. NDSS Aravind Machiry, Eric Gustafson, Chad Spensky, Christopher Salls, Nick Stephens, Ruoyu Wang, Antonio Bianchi, Yung Ryn Choe, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	BootStomp: On the Security of Bootloaders in Mobile Devices. USENIX Security Symposium Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	DIFUZE: Interface Aware Fuzzing for Kernel Drivers. CCS Jake Corina, Aravind Machiry, Christopher Salls, Yan Shoshitaishvili, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers. USENIX Security Symposium Aravind Machiry, Chad Spensky, Jake Corina, Nick Stephens, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	Demystifying DDoS as a Service. IEEE Commun. Mag. Ali Zand, Gaspar Modelo-Howard, Alok Tongaonkar, Sung-Ju Lee, Christopher Kruegel, Giovanni Vigna
2017	A	`conf`	Exploitation and Mitigation of Authentication Schemes Based on Device-Public Information. ACSAC Antonio Bianchi, Eric Gustafson, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2017	A	`conf`	Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions. AsiaCCS Cheng Huang, Shuang Hao, Luca Invernizzi, Jiayong Liu, Yong Fang, Christopher Kruegel, Giovanni Vigna
2017	A	`conf`	How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games. CSF Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, David Brumley
2017	A*	`conf`	Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis. NDSS Andrea Continella, Yanick Fratantonio, Martina Lindorfer, Alessandro Puccetti, Ali Zand, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	On the Privacy and Security of the Ultrasound Ecosystem. Proc. Priv. Enhancing Technol. Vasilios Mavroudis, Shuang Hao, Yanick Fratantonio, Federico Maggi, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	POISED: Spotting Twitter Spam Off the Beaten Paths. CCS Shirin Nilizadeh, Francois Labreche, Alireza Sedighian, Ali Zand, José M. Fernandez, Christopher Kruegel, Gianluca Stringhini, Giovanni Vigna
2017	J	`jnl`	POISED: Spotting Twitter Spam Off the Beaten Paths. CoRR Shirin Nilizadeh, Francois Labreche, Alireza Sedighian, Ali Zand, José M. Fernandez, Christopher Kruegel, Gianluca Stringhini, Giovanni Vigna
2017	A	`conf`	Piston: Uncooperative Remote Runtime Patching. ACSAC Christopher Salls, Yan Shoshitaishvili, Nick Stephens, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	Ramblr: Making Reassembly Great Again. NDSS Ruoyu Wang, Yan Shoshitaishvili, Antonio Bianchi, Aravind Machiry, John Grosen, Paul Grosen, Christopher Kruegel, Giovanni Vigna
2017	A*	`conf`	Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance. CCS Yan Shoshitaishvili, Michael Weissbacher, Lukas Dresel, Christopher Salls, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance. CoRR Yan Shoshitaishvili, Michael Weissbacher, Lukas Dresel, Christopher Salls, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna
2017	—	`conf`	Shell We Play A Game? CTF-as-a-service for Security Education. ASE @ USENIX Security Symposium Erik Trickel, Francesco Disperati, Eric Gustafson, Faezeh Kalantari, Mike Mabey, Naveen Tiwari, Yeganeh Safaei, Adam Doupé, Giovanni Vigna
2017	B	`conf`	Something from Nothing (There): Collecting Global IPv6 Datasets from DNS. PAM Tobias Fiebig, Kevin Borgolte, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2017	J	`jnl`	Towards Detecting Compromised Accounts on Social Networks. IEEE Trans. Dependable Secur. Comput. Manuel Egele, Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2016	A	`conf`	Binary Analysis for Autonomous Hacking: Invited Abstract. AsiaCCS Giovanni Vigna
2016	A*	`conf`	Drammer: Deterministic Rowhammer Attacks on Mobile Platforms. CCS Victor van der Veen, Yanick Fratantonio, Martina Lindorfer, Daniel Gruss, Clémentine Maurice, Giovanni Vigna, Herbert Bos, Kaveh Razavi, Cristiano Giuffrida
2016	A*	`conf`	Driller: Augmenting Fuzzing Through Selective Symbolic Execution. NDSS Nick Stephens, John Grosen, Christopher Salls, Andrew Dutcher, Ruoyu Wang, Jacopo Corbetta, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2016	A*	`conf`	Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy. NDSS Vitor Monte Afonso, Paulo L. de Geus, Antonio Bianchi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna, Adam Doupé, Mario Polino
2016	A*	`conf`	SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis. IEEE Symposium on Security and Privacy Yan Shoshitaishvili, Ruoyu Wang, Christopher Salls, Nick Stephens, Mario Polino, Andrew Dutcher, John Grosen, Siji Feng, Christophe Hauser, Christopher Krügel, Giovanni Vigna
2016	A	`conf`	Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory. RAID Marius Muench, Fabio Pagani, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna, Davide Balzarotti
2016	A*	`conf`	TriggerScope: Towards Detecting Logic Bombs in Android Applications. IEEE Symposium on Security and Privacy Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2015	A	`conf`	BareDroid: Large-Scale Analysis of Android Apps on Real Devices. ACSAC Simone Mutti, Yanick Fratantonio, Antonio Bianchi, Luca Invernizzi, Jacopo Corbetta, Dhilung Kirat, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	CLAPP: characterizing loops in Android applications (invited talk). DeMobile@SIGSOFT FSE Yanick Fratantonio, Aravind Machiry, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	CLAPP: characterizing loops in Android applications. ESEC/SIGSOFT FSE Yanick Fratantonio, Aravind Machiry, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	Drops for Stuff: An Analysis of Reshipping Mule Scams. CCS Shuang Hao, Kevin Borgolte, Nick Nikiforakis, Gianluca Stringhini, Manuel Egele, Michael Eubanks, Brian Krebs, Giovanni Vigna
2015	A*	`conf`	EVILCOHORT: Detecting Communities of Malicious Accounts on Online Services. USENIX Security Symposium Gianluca Stringhini, Pierre Mourlanne, Grégoire Jacob, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework. NDSS Yinzhi Cao, Yanick Fratantonio, Antonio Bianchi, Manuel Egele, Christopher Kruegel, Giovanni Vigna, Yan Chen
2015	J	`jnl`	Evaluating Cybersecurity Education Interventions: Three Case Studies. IEEE Secur. Priv. Jelena Mirkovic, Melissa Dark, Wenliang Du, Giovanni Vigna, Tamara Denning
2015	A*	`conf`	Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware. NDSS Yan Shoshitaishvili, Ruoyu Wang, Christophe Hauser, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	Framing Dependencies Introduced by Underground Commoditization. WEIS Kurt Thomas, Danny Yuxing Huang, David Y. Wang, Elie Bursztein, Chris Grier, Tom Holt, Christopher Kruegel, Damon McCoy, Stefan Savage, Giovanni Vigna
2015	A	`conf`	Grab 'n Run: Secure and Practical Dynamic Code Loading for Android Applications. ACSAC Luca Falsina, Yanick Fratantonio, Stefano Zanero, Christopher Kruegel, Giovanni Vigna, Federico Maggi
2015	A*	`conf`	How the ELF Ruined Christmas. USENIX Security Symposium Alessandro Di Federico, Amat Cama, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2015	A	`conf`	Know Your Achilles' Heel: Automatic Detection of Network Critical Services. ACSAC Ali Zand, Amir Houmansadr, Giovanni Vigna, Richard A. Kemmerer, Christopher Kruegel
2015	A*	`conf`	MalGene: Automatic Extraction of Malware Analysis Evasion Signature. CCS Dhilung Kirat, Giovanni Vigna
2015	A*	`conf`	Meerkat: Detecting Website Defacements through Image-based Object Recognition. USENIX Security Symposium Kevin Borgolte, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	NJAS: Sandboxing Unmodified Applications in non-rooted Devices Running stock Android. SPSM@CCS Antonio Bianchi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2015	B	`conf`	On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. DIMVA Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
2015	J	`jnl`	Portrait of a Privacy Invasion. Proc. Priv. Enhancing Technol. Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2015	—	`conf`	Prison: Tracking Process Interactions to Contain Malware. HPCC/CSS/ICESS Benjamin Caillat, Bob Gilbert, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2015	J	`jnl`	Towards Detecting Compromised Accounts on Social Networks. CoRR Manuel Egele, Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	What the App is That? Deception and Countermeasures in the Android User Interface. IEEE Symposium on Security and Privacy Antonio Bianchi, Jacopo Corbetta, Luca Invernizzi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2015	A*	`conf`	ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities. USENIX Security Symposium Michael Weissbacher, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2014	A*	`conf`	BareCloud: Bare-metal Analysis-based Evasive Malware Detection. USENIX Security Symposium Dhilung Kirat, Giovanni Vigna, Christopher Kruegel
2014	Misc	`conf`	Do you feel lucky?: a large-scale analysis of risk-rewards trade-offs in cyber security. SAC Yan Shoshitaishvili, Luca Invernizzi, Adam Doupé, Giovanni Vigna
2014	A*	`conf`	Execute This! Analyzing Unsafe and Malicious Dynamic Code Loading in Android Applications. NDSS Sebastian Poeplau, Yanick Fratantonio, Antonio Bianchi, Christopher Kruegel, Giovanni Vigna
2014	Misc	`conf`	Extracting probable command and control signatures for detecting botnets. SAC Ali Zand, Giovanni Vigna, Xifeng Yan, Christopher Kruegel
2014	A	`conf`	Eyes of a Human, Eyes of a Program: Leveraging Different Views of the Web for Analysis and Detection. RAID Jacopo Corbetta, Luca Invernizzi, Christopher Krügel, Giovanni Vigna
2014	A*	`conf`	Hulk: Eliciting Malicious Behavior in Browser Extensions. USENIX Security Symposium Alexandros Kapravelos, Chris Grier, Neha Chachra, Christopher Kruegel, Giovanni Vigna, Vern Paxson
2014	A*	`conf`	Nazca: Detecting Malware Distribution in Large-Scale Networks. NDSS Luca Invernizzi, Stanislav Miskovic, Ruben Torres, Christopher Kruegel, Sabyasachi Saha, Giovanni Vigna, Sung-Ju Lee, Marco Mellia
2014	J	`jnl`	On the Workings and Current Practices of Web-Based Device Fingerprinting. IEEE Secur. Priv. Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2014	B	`conf`	PExy: The Other Side of Exploit Kits. DIMVA Giancarlo De Maio, Alexandros Kapravelos, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2014	A	`conf`	Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel. RAID Yinzhi Cao, Yan Shoshitaishvili, Kevin Borgolte, Christopher Krügel, Giovanni Vigna, Yan Chen
2014	—	`conf`	Relevant change detection: a framework for the precise extraction of modified and novel web-based content as a filtering technique for analysis engines. WWW (Companion Volume) Kevin Borgolte, Christopher Kruegel, Giovanni Vigna
2014	A*	`conf`	Rippler: Delay injection for service dependency detection. INFOCOM Ali Zand, Giovanni Vigna, Richard A. Kemmerer, Christopher Kruegel
2014	A*	`conf`	Stranger danger: exploring the ecosystem of ad-based URL shortening services. WWW Nick Nikiforakis, Federico Maggi, Gianluca Stringhini, M. Zubair Rafique, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna, Stefano Zanero
2014	—	`conf`	Ten Years of iCTF: The Good, The Bad, and The Ugly. 3GSE Giovanni Vigna, Kevin Borgolte, Jacopo Corbetta, Adam Doupé, Yanick Fratantonio, Luca Invernizzi, Dhilung Kirat, Yan Shoshitaishvili
2014	A	`conf`	The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements. Internet Measurement Conference Apostolis Zarras, Alexandros Kapravelos, Gianluca Stringhini, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2014	—	`conf`	The Tricks of the Trade: What Makes Spam Campaigns Successful? IEEE Symposium on Security and Privacy Workshops Jane Iedemska, Gianluca Stringhini, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2014	A	`conf`	The harvester, the botmaster, and the spammer: on the relations between the different actors in the spam landscape. AsiaCCS Gianluca Stringhini, Oliver Hohlfeld, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	COMPA: Detecting Compromised Accounts on Social Networks. NDSS Manuel Egele, Gianluca Stringhini, Christopher Krügel, Giovanni Vigna
2013	A*	`conf`	Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. IEEE Symposium on Security and Privacy Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2013	A*	`conf`	Delta: automatic identification of unknown web-based infection campaigns. CCS Kevin Borgolte, Christopher Kruegel, Giovanni Vigna
2013	Misc	`conf`	EARs in the wild: large-scale analysis of execution after redirect vulnerabilities. SAC Pierre Payet, Adam Doupé, Christopher Kruegel, Giovanni Vigna
2013	A	`conf`	Follow the green: growth and dynamics in twitter follower markets. Internet Measurement Conference Gianluca Stringhini, Gang Wang, Manuel Egele, Christopher Kruegel, Giovanni Vigna, Haitao Zheng, Ben Y. Zhao
2013	—	`conf`	Formulating Cyber-Security as Convex Optimization Problems. CPSW@CISS Kyriakos G. Vamvoudakis, João P. Hespanha, Richard A. Kemmerer, Giovanni Vigna
2013	A	`conf`	Message in a bottle: sailing past censorship. ACSAC Luca Invernizzi, Christopher Kruegel, Giovanni Vigna
2013	A	`conf`	Practical Attacks against the I2P Network. RAID Christoph Egger, Johannes Schlumberger, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Revolver: An Automated Approach to the Detection of Evasive Web-based Malware. USENIX Security Symposium Alexandros Kapravelos, Yan Shoshitaishvili, Marco Cova, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Shady paths: leveraging surfing crowds to detect malicious web pages. CCS Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2013	A	`conf`	SigMal: a static signal processing based malware triage. ACSAC Dhilung Kirat, Lakshmanan Nataraj, Giovanni Vigna, B. S. Manjunath
2013	A*	`conf`	Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services. USENIX Security Symposium Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	Two years of short URLs internet measurement: security threats and countermeasures. WWW Federico Maggi, Alessandro Frossi, Stefano Zanero, Gianluca Stringhini, Brett Stone-Gross, Christopher Kruegel, Giovanni Vigna
2013	A*	`conf`	deDacota: toward preventing server-side XSS via automatic code and data separation. CCS Adam Doupé, Weidong Cui, Mariusz H. Jakubowski, Marcus Peinado, Christopher Kruegel, Giovanni Vigna
2012	B	`conf`	A Static, Packer-Agnostic Filter to Detect Similar Malware Samples. DIMVA Grégoire Jacob, Paolo Milani Comparetti, Matthias Neugschwandtner, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	B@bel: Leveraging Email Delivery for Spam Mitigation. USENIX Security Symposium Gianluca Stringhini, Manuel Egele, Apostolis Zarras, Thorsten Holz, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	Blacksheep: detecting compromised hosts in homogeneous crowds. CCS Antonio Bianchi, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2012	A	`conf`	BotFinder: finding bots in network traffic without deep packet inspection. CoNEXT Florian Tegeler, Xiaoming Fu, Giovanni Vigna, Christopher Kruegel
2012	A*	`conf`	Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner. USENIX Security Symposium Adam Doupé, Ludovico Cavedon, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	EvilSeed: A Guided Approach to Finding Malicious Web Pages. IEEE Symposium on Security and Privacy Luca Invernizzi, Paolo Milani Comparetti, Stefano Benvenuti, Christopher Kruegel, Marco Cova, Giovanni Vigna
2012	A	`conf`	FlashDetect: ActionScript 3 Malware Detection. RAID Timon Van Overveldt, Christopher Kruegel, Giovanni Vigna
2012	A	`conf`	Jarhead analysis and detection of malicious Java applets. ACSAC Johannes Schlumberger, Christopher Kruegel, Giovanni Vigna
2012	B	`conf`	Malware Riding Badware: Challenges in Analyzing (Malicious/Benign) Web Applications. RV Giovanni Vigna
2012	A*	`conf`	PUBCRAWL: Protecting Users and Businesses from CRAWLers. USENIX Security Symposium Grégoire Jacob, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2012	—	`conf`	Poultry markets: on the underground economy of twitter followers. WOSN Gianluca Stringhini, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2012	J	`jnl`	Poultry markets: on the underground economy of twitter followers. Comput. Commun. Rev. Gianluca Stringhini, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2012	B	`conf`	Tracking Memory Writes for Malware Classification and Code Reuse Identification. DIMVA André Ricardo Abed Grégio, Paulo Lício de Geus, Christopher Kruegel, Giovanni Vigna
2012	A*	`conf`	You are what you include: large-scale evaluation of remote javascript inclusions. CCS Nick Nikiforakis, Luca Invernizzi, Alexandros Kapravelos, Steven Van Acker, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
2011	J	`jnl`	Analysis of a Botnet Takeover. IEEE Secur. Priv. Brett Stone-Gross, Marco Cova, Bob Gilbert, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	BOTMAGNIFIER: Locating Spambots on the Internet. USENIX Security Symposium Gianluca Stringhini, Thorsten Holz, Brett Stone-Gross, Christopher Kruegel, Giovanni Vigna
2011	A	`conf`	BareBox: efficient malware analysis on bare-metal. ACSAC Dhilung Kirat, Giovanni Vigna, Christopher Kruegel
2011	—	`conf`	Challenges for Dynamic Analysis of iOS Applications. iNetSeC Martin Szydlowski, Manuel Egele, Christopher Kruegel, Giovanni Vigna
2011	A	`conf`	Dymo: Tracking Dynamic Code Identity. RAID Bob Gilbert, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2011	B	`conf`	Escape from Monkey Island: Evading High-Interaction Honeyclients. DIMVA Alexandros Kapravelos, Marco Cova, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	Fear the EAR: discovering and mitigating execution after redirect vulnerabilities. CCS Adam Doupé, Bryce Boe, Christopher Kruegel, Giovanni Vigna
2011	—	`conf`	Getting the Face Behind the Squares: Reconstructing Pixelized Video Streams. WOOT Ludovico Cavedon, Luca Foschini, Giovanni Vigna
2011	A	`conf`	Hit 'em where it hurts: a live security exercise on cyber situational awareness. ACSAC Adam Doupé, Manuel Egele, Benjamin Caillat, Gianluca Stringhini, Gorkem Yakin, Ali Zand, Ludovico Cavedon, Giovanni Vigna
2011	B	`conf`	MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper). DIMVA Greg Banks, Aristide Fattori, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2011	A	`conf`	Nexat: a history-based approach to predict attacker actions. ACSAC Casey Cipriano, Ali Zand, Amir Houmansadr, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	Peering through the iframe. INFOCOM Brett Stone-Gross, Marco Cova, Christopher Kruegel, Giovanni Vigna
2011	A*	`conf`	PiOS: Detecting Privacy Leaks in iOS Applications. NDSS Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
2011	A*	`conf`	Prophiler: a fast filter for the large-scale detection of malicious web pages. WWW Davide Canali, Marco Cova, Giovanni Vigna, Christopher Kruegel
2011	A	`conf`	Shellzer: A Tool for the Dynamic Analysis of Malicious Shellcode. RAID Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna
2011	J	`jnl`	The 2010 International Capture the Flag Competition. IEEE Secur. Priv. Giovanni Vigna
2011	—	`conf`	The Underground Economy of Fake Antivirus Software. WEIS (Springer Volume) Brett Stone-Gross, Ryan Abman, Richard A. Kemmerer, Christopher Kruegel, Douglas G. Steigerwald, Giovanni Vigna
2011	—	`conf`	The Underground Economy of Spam: A Botmaster's Perspective of Coordinating Large-Scale Spam Campaigns. LEET Brett Stone-Gross, Thorsten Holz, Gianluca Stringhini, Giovanni Vigna
2011	A	`conf`	Understanding fraudulent activities in online ad exchanges. Internet Measurement Conference Brett Stone-Gross, Ryan Stevens, Apostolis Zarras, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2010	J	`jnl`	An Experience in Testing the Security of Real-World Electronic Voting Systems. IEEE Trans. Software Eng. Davide Balzarotti, Greg Banks, Marco Cova, Viktoria Felmetsger, Richard A. Kemmerer, William K. Robertson, Fredrik Valeur, Giovanni Vigna
2010	—	`conf`	Are BGP Routers Open to Attack? An Experiment. iNetSec Ludovico Cavedon, Christopher Kruegel, Giovanni Vigna
2010	A	`conf`	Detecting spammers on social networks. ACSAC Gianluca Stringhini, Christopher Kruegel, Giovanni Vigna
2010	A*	`conf`	Detection and analysis of drive-by-download attacks and malicious JavaScript code. WWW Marco Cova, Christopher Krügel, Giovanni Vigna
2010	A*	`conf`	Effective Anomaly Detection with Scarce Training Data. NDSS William K. Robertson, Federico Maggi, Christopher Kruegel, Giovanni Vigna
2010	A*	`conf`	Efficient Detection of Split Personalities in Malware. NDSS Davide Balzarotti, Marco Cova, Christoph Karlberger, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2010	A	`conf`	Network intrusion detection: dead or alive? ACSAC Giovanni Vigna
2010	B	`conf`	Organizing Large Scale Hacking Competitions. DIMVA Nicholas Childers, Bryce Boe, Lorenzo Cavallaro, Ludovico Cavedon, Marco Cova, Manuel Egele, Giovanni Vigna
2010	A*	`conf`	Toward Automated Detection of Logic Vulnerabilities in Web Applications. USENIX Security Symposium Viktoria Felmetsger, Ludovico Cavedon, Christopher Kruegel, Giovanni Vigna
2010	B	`conf`	Why Johnny Can't Pentest: An Analysis of Black-Box Web Vulnerability Scanners. DIMVA Adam Doupé, Marco Cova, Giovanni Vigna
2009	A	`conf`	Analyzing and Detecting Malicious Flash Advertisements. ACSAC Sean Ford, Marco Cova, Christopher Kruegel, Giovanni Vigna
2009	C	`conf`	Automated Spyware Collection and Analysis. ISC Andreas Stamminger, Christopher Kruegel, Giovanni Vigna, Engin Kirda
2009	J	`jnl`	Client-side cross-site scripting protection. Comput. Secur. Engin Kirda, Nenad Jovanovic, Christopher Kruegel, Giovanni Vigna
2009	A	`conf`	Protecting a Moving Target: Addressing Web Application Concept Drift. RAID Federico Maggi, William K. Robertson, Christopher Krügel, Giovanni Vigna
2009	J	`jnl`	Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries. J. Comput. Secur. Giovanni Vigna, Fredrik Valeur, Davide Balzarotti, William K. Robertson, Christopher Kruegel, Engin Kirda
2009	A*	`conf`	Static Enforcement of Web Application Integrity Through Strong Typing. USENIX Security Symposium William K. Robertson, Giovanni Vigna
2009	A*	`conf`	Your botnet is my botnet: analysis of a botnet takeover. CCS Brett Stone-Gross, Marco Cova, Lorenzo Cavallaro, Bob Gilbert, Martin Szydlowski, Richard A. Kemmerer, Christopher Kruegel, Giovanni Vigna
2008	Misc	`conf`	A Parallel Architecture for Stateful, High-Speed Intrusion Detection. ICISS Luca Foschini, Ashish V. Thapliyal, Lorenzo Cavallaro, Christopher Kruegel, Giovanni Vigna
2008	A	`conf`	Are your votes ISSTA Davide Balzarotti, Greg Banks, Marco Cova, Viktoria Felmetsger, Richard A. Kemmerer, William K. Robertson, Fredrik Valeur, Giovanni Vigna
2008	A*	`conf`	ClearShot: Eavesdropping on Keyboard Input from Video. SP Davide Balzarotti, Marco Cova, Giovanni Vigna
2008	A*	`conf`	Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications. SP Davide Balzarotti, Marco Cova, Viktoria Felmetsger, Nenad Jovanovic, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2008	—	`conf`	There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits. WOOT Marco Cova, Christopher Kruegel, Giovanni Vigna
2007	—	`conf`	Catch Me, If You Can: Evading Network Signatures with Web-based Polymorphic Worms. WOOT Matthew Van Gundy, Davide Balzarotti, Giovanni Vigna
2007	A*	`conf`	Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. NDSS Philipp Vogt, Florian Nentwich, Nenad Jovanovic, Engin Kirda, Christopher Krügel, Giovanni Vigna
2007	A	`conf`	Exploiting Execution Context for the Detection of Anomalous System Calls. RAID Darren Mutz, William K. Robertson, Giovanni Vigna, Richard A. Kemmerer
2007	J	`jnl`	Extending .NET security to unmanaged code. Int. J. Inf. Sec. Patrick Klinkoff, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2007	A	`conf`	Feature Omission Vulnerabilities: Thwarting Signature Generation for Polymorphic Worms. ACSAC Matthew Van Gundy, Hao Chen, Zhendong Su, Giovanni Vigna
2007	A	`conf`	Improving Signature Testing through Dynamic Data Flow Analysis. ACSAC Christopher Kruegel, Davide Balzarotti, William K. Robertson, Giovanni Vigna
2007	—	`conf`	Is Code Still Moving Around? Looking Back at a Decade of Code Mobility. ICSE Companion Antonio Carzaniga, Gian Pietro Picco, Giovanni Vigna
2007	A*	`conf`	Multi-module vulnerability analysis of web-based applications. CCS Davide Balzarotti, Marco Cova, Viktoria Felmetsger, Giovanni Vigna
2007	—	`ch.`	Static Disassembly and Code Analysis. Malware Detection Giovanni Vigna
2007	A	`conf`	Swaddler: An Approach for the Anomaly-Based Detection of State Violations in Web Applications. RAID Marco Cova, Davide Balzarotti, Viktoria Felmetsger, Giovanni Vigna
2007	J	`jnl`	Using a virtual security testbed for digital forensic reconstruction. J. Comput. Virol. André Årnes, Paul Haas, Giovanni Vigna, Richard A. Kemmerer
2007	—	`ch.`	Vulnerability Analysis of Web-based Applications. Test and Analysis of Web Services Marco Cova, Viktoria Felmetsger, Giovanni Vigna
2006	Misc	`conf`	An anomaly-driven reverse proxy for web applications. SAC Fredrik Valeur, Giovanni Vigna, Christopher Krügel, Engin Kirda
2006	J	`jnl`	Anomalous system call detection. ACM Trans. Inf. Syst. Secur. Darren Mutz, Fredrik Valeur, Giovanni Vigna, Christopher Krügel
2006	B	`conf`	Digital Forensic Reconstruction and the Virtual Security Testbed ViSe. DIMVA André Årnes, Paul Haas, Giovanni Vigna, Richard A. Kemmerer
2006	C	`conf`	Extending .NET Security to Unmanaged Code. ISC Patrick Klinkoff, Christopher Krügel, Engin Kirda, Giovanni Vigna
2006	Misc	`conf`	Noxes: a client-side solution for mitigating cross-site scripting attacks. SAC Engin Kirda, Christopher Krügel, Giovanni Vigna, Nenad Jovanovic
2006	C	`conf`	SNOOZE: Toward a Stateful NetwOrk prOtocol fuzZEr. ISC Greg Banks, Marco Cova, Viktoria Felmetsger, Kevin C. Almeroth, Richard A. Kemmerer, Giovanni Vigna
2006	A	`conf`	Static Detection of Vulnerabilities in x86 Executables. ACSAC Marco Cova, Viktoria Felmetsger, Greg Banks, Giovanni Vigna
2006	A*	`conf`	Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks. NDSS William K. Robertson, Giovanni Vigna, Christopher Krügel, Richard A. Kemmerer
2006	A	`conf`	Using Hidden Markov Models to Evaluate the Risks of Intrusions. RAID André Årnes, Fredrik Valeur, Giovanni Vigna, Richard A. Kemmerer
2006	B	`conf`	Using Labeling to Prevent Cross-Service Attacks Against Smart Phones. DIMVA Collin Mulliner, Giovanni Vigna, David Dagon, Wenke Lee
2006	A	`conf`	Vulnerability Analysis of MMS User Agents. ACSAC Collin Mulliner, Giovanni Vigna
2005	B	`conf`	A Learning-Based Approach to the Detection of SQL Attacks. DIMVA Fredrik Valeur, Darren Mutz, Giovanni Vigna
2005	J	`jnl`	A multi-model approach to the detection of web-based attacks. Comput. Networks Christopher Krügel, Giovanni Vigna, William K. Robertson
2005	A*	`conf`	Automating Mimicry Attacks Using Static Binary Analysis. USENIX Security Symposium Christopher Kruegel, Engin Kirda, Darren Mutz, William K. Robertson, Giovanni Vigna
2005	B	`conf`	Detecting Malicious JavaScript Code in Mozilla. ICECCS Oystein Hallaraker, Giovanni Vigna
2005	B	`conf`	Exploiting OS-Level Mechanisms to Implement Mobile Code Security. ICECCS Viktoria Felmetsger, Giovanni Vigna
2005	J	`jnl`	Hi-DRA: Intrusion Detection for Internet Security. Proc. IEEE Richard A. Kemmerer, Giovanni Vigna
2005	—	`book`	Intrusion Detection and Correlation - Challenges and Solutions Christopher Kruegel, Fredrik Valeur, Giovanni Vigna
2005	A	`conf`	Polymorphic Worm Detection Using Structural Information of Executables. RAID Christopher Krügel, Engin Kirda, Darren Mutz, William K. Robertson, Giovanni Vigna
2004	J	`jnl`	A Comprehensive Approach to Intrusion Detection Alert Correlation. IEEE Trans. Dependable Secur. Comput. Fredrik Valeur, Giovanni Vigna, Christopher Krügel, Richard A. Kemmerer
2004	A	`conf`	An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks. ACSAC Giovanni Vigna, Sumit Gwalani, Kavitha Srinivasan, Elizabeth M. Belding-Royer, Richard A. Kemmerer
2004	A	`conf`	Detecting Attacks That Exploit Application-Logic Errors Through Application-Level Auditing. ACSAC Jingyu Zhou, Giovanni Vigna
2004	A	`conf`	Detecting Kernel-Level Rootkits Through Binary Analysis. ACSAC Christopher Krügel, William K. Robertson, Giovanni Vigna
2004	B	`conf`	Mobile Agents: Ten Reasons For Failure. Mobile Data Management Giovanni Vigna
2004	A*	`conf`	Static Disassembly of Obfuscated Binaries. USENIX Security Symposium Christopher Krügel, William K. Robertson, Fredrik Valeur, Giovanni Vigna
2004	A*	`conf`	Testing network-based intrusion detection signatures using mutant exploits. CCS Giovanni Vigna, William K. Robertson, Davide Balzarotti
2004	J	`jnl`	Using Alert Verification to Identify Successful Intrusion Attempts. Prax. Inf.verarb. Kommun. Christopher Kruegel, William K. Robertson, Giovanni Vigna
2003	A	`conf`	A Stateful Intrusion Detection System for World-Wide Web Servers. ACSAC Giovanni Vigna, William K. Robertson, Vishal Kher, Richard A. Kemmerer
2003	—	`conf`	A Topological Characterization of TCP/IP Security. FME Giovanni Vigna
2003	A	`conf`	An Experience Developing an IDS Stimulator for the Black-Box Testing of Network Intrusion Detection Systems. ACSAC Darren Mutz, Giovanni Vigna, Richard A. Kemmerer
2003	A*	`conf`	Anomaly detection of web-based attacks. CCS Christopher Krügel, Giovanni Vigna
2003	—	`conf`	Designing and implementing a family of intrusion detection systems. ESEC / SIGSOFT FSE Giovanni Vigna, Fredrik Valeur, Richard A. Kemmerer
2003	A*	`conf`	Detecting Malicious Java Code Using Virtual Machine Auditing. USENIX Security Symposium Sunil Soman, Chandra Krintz, Giovanni Vigna
2003	A*	`conf`	Internet Security and Intrusion Detection. ICSE Richard A. Kemmerer, Giovanni Vigna
2003	A	`conf`	On the Detection of Anomalous System Call Arguments. ESORICS Christopher Krügel, Darren Mutz, Fredrik Valeur, Giovanni Vigna
2003	A	`ed.`	Recent Advances in Intrusion Detection, 6th International Symposium, RAID 2003, Pittsburgh, PA, USA, September 8-10, 2003, Proceedings RAID Giovanni Vigna, Erland Jonsson, Christopher Krügel
2003	—	`conf`	Teaching Network Security Through Live Exercises. World Conference on Information Security Education Giovanni Vigna
2002	—	`conf`	An Intrusion Detection System for Aglets. Mobile Agents Giovanni Vigna, Bryan Cassell, Dave Fayram
2002	A	`conf`	Composable Tools For Network Discovery and Security Analysis. ACSAC Giovanni Vigna, Fredrik Valeur, Jingyu Zhou, Richard A. Kemmerer
2002	B	`conf`	Mnemosyne: Designing and Implementing Network Short-Term Memory. ICECCS Giovanni Vigna, Andrew Mitchel
2002	A	`ed.`	Recent Advances in Intrusion Detection, 5th International Symposium, RAID 2002, Zurich, Switzerland, October 16-18, 2002, Proceedings RAID Andreas Wespi, Giovanni Vigna, Luca Deri
2002	J	`jnl`	STATL: An Attack Language for State-Based Intrusion Detection. J. Comput. Secur. Steven T. Eckmann, Giovanni Vigna, Richard A. Kemmerer
2002	A*	`conf`	Sensor-based intrusion detection for intra-domain distance-vector routing. CCS Vishal Mittal, Giovanni Vigna
2002	—	`conf`	Stateful Intrusion Detection for High-Speed Networks. S&P Christopher Krügel, Fredrik Valeur, Giovanni Vigna, Richard A. Kemmerer
2001	—	`conf`	Designing a Web of Highly-Configurable Intrusion Detection Sensors. Recent Advances in Intrusion Detection Giovanni Vigna, Richard A. Kemmerer, Per Blix
2001	—	`conf`	Evaluating the Security of Three Java-Based Mobile Agent Systems. Mobile Agents Sebastian Fischmeister, Giovanni Vigna, Richard A. Kemmerer
2001	—	`ch.`	Security Testing of an Online Banking Service. E-Commerce Security and Privacy André L. M. dos Santos, Giovanni Vigna, Richard A. Kemmerer
1999	J	`jnl`	NetSTAT: A Network-based Intrusion Detection System. J. Comput. Secur. Giovanni Vigna, Richard A. Kemmerer
1998	—	`conf`	Cryptographic Traces for Mobile Agents. Mobile Agents and Security Giovanni Vigna
1998	—	`ed.`	Mobile Agents and Security Mobile Agents and Security Giovanni Vigna
1998	A	`conf`	NetSTAT: A Network-Based Intrusion Detection Approach. ACSAC Giovanni Vigna, Richard A. Kemmerer
1998	—	`conf`	Towards a Software Engineering Approach to Web Site Development. IWSSD Francesco Coda, Carlo Ghezzi, Giovanni Vigna, Franca Garzotto
1998	J	`jnl`	Understanding Code Mobility. IEEE Trans. Software Eng. Alfonso Fuggetta, Gian Pietro Picco, Giovanni Vigna
1997	A*	`conf`	Designing Distributed Applications with Mobile Code Paradigms. ICSE Antonio Carzaniga, Gian Pietro Picco, Giovanni Vigna
1997	—	`conf`	Mobile Code Paradigms and Technologies: A Case Study. Mobile Agents Carlo Ghezzi, Giovanni Vigna
1997	—	`conf`	Software Engineering Issues for Network Computing. Requirements Targeting Software and Systems Engineering Carlo Ghezzi, Giovanni Vigna
1996	—	`conf`	Analyzing Mobile Code Languages. Mobile Object Systems Gianpaolo Cugola, Carlo Ghezzi, Gian Pietro Picco, Giovanni Vigna
1994	—	`conf`	Designing and Implementing Inter-Client Communication in the O2 Object-Oriented Database Management System. ISOOMS Antonio Carzaniga, Gian Pietro Picco, Giovanni Vigna