Tiffany Bao

52 papers A* 29A 6B 1Journal 9Unranked 7
YearRankTypeTitle / Venue / Authors
2026 A* conf
I Can SE Clearly Now: Investigating the Effectiveness of GUI-based Symbolic Execution for Software Vulnerability Discovery.
CHI
Yi Jou Li, Zeming Yu, James Mattei, Ananta Soneji, Zhibo Sun, Ruoyu Wang, Jaron Mink, Daniel Votipka, Tiffany Bao
2026 J jnl
Pushan: Trace-Free Deobfuscation of Virtualization-Obfuscated Binaries.
CoRR
Ashwin Sudhir, Zion Leonahenahe Basque, Wil Gibbs, Ati Priya Bajaj, Pulkit Singh Singaria, Mitchell Zakocs, Jie Hu, Moritz Schloegel, Tiffany Bao, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2025 A* conf
"It's almost like Frankenstein": Investigating the Complexities of Scientific Collaboration and Privilege Management within Research Computing Infrastructures.
SP
Souradip Nath, Ananta Soneji, Jaejong Baek, Tiffany Bao, Adam Doupé, Carlos E. Rubio-Medrano, Gail-Joon Ahn
2025 J jnl
Generating Synthetic Malware Samples Using Generative AI.
IEEE Access
Tiffany Bao, Kylie Trousil, Quang Duy Tran, Fabio Di Troia, Younghee Park
2025 A* conf
SCAMMAGNIFIER: Piercing the Veil of Fraudulent Shopping Website Campaigns.
NDSS
Marzieh Bitaab, Alireza Karimi, Zhuoer Lyu, Adam Oest, Dhruv Kuchhal, Muhammad Saad, Gail-Joon Ahn, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2025 A* conf
ScamNet: Toward Explainable Large Language Model-Based Fraudulent Shopping Website Detection.
AAAI
Marzieh Bitaab, Alireza Karimi, Zhuoer Lyu, Ahmadreza Mosallanezhad, Adam Oest, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2025 A* conf
System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System.
USENIX Security Symposium
Jennifer Miller, Manas Ghandat, Kyle Zeng, Hongkai Chen, Abdelouahab Benchikh, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2025 A conf
Teamwork Makes the Defense Work: Comprehensive Vulnerability Defense Resource Allocation.
AAMAS
Siyu Liu, Rida A. Bazzi, Fei Fang, Tiffany Bao
2024 A* conf
"Watching over the shoulder of a professional": Why Hackers Make Mistakes and How They Fix Them.
SP
Irina Ford, Ananta Soneji, Faris Bugra Kokulu, Jayakrishna Vadayath, Zion Leonahenahe Basque, Gaurav Vipat, Adam Doupé, Ruoyu Wang, Gail-Joon Ahn, Tiffany Bao, Yan Shoshitaishvili
2024 J jnl
ARVO: Atlas of Reproducible Vulnerabilities for Open Source Software.
CoRR
Xiang Mei, Pulkit Singh Singaria, Jordi Del Castillo, Haoran Xi, Abdelouahab Benchikh, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Hammond Pearce, Brendan Dolan-Gavitt
2024 A* conf
Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation.
USENIX Security Symposium
Zion Leonahenahe Basque, Ati Priya Bajaj, Wil Gibbs, Jude O'Kain, Derron Miao, Tiffany Bao, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2024 A* conf
AirTaint: Making Dynamic Taint Analysis Faster and Easier.
SP
Qian Sang, Yanhao Wang, Yuwei Liu, Xiangkun Jia, Tiffany Bao, Purui Su
2024 A conf
Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry.
AsiaCCS
Rana Pourmohamad, Steven Wirsz, Adam Oest, Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Adam Doupé, Rida A. Bazzi
2024 A conf
From Victims to Defenders: An Exploration of the Phishing Attack Reporting Ecosystem.
RAID
Zhibo Sun, Faris Bugra Kokulu, Penghui Zhang, Adam Oest, Gianluca Stringhini, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2024 A* conf
Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing.
CCS
Arvind S. Raj, Wil Gibbs, Fangzhou Dong, Jayakrishna Menon Vadayath, Michael Tompkins, Steven Wirsz, Yibo Liu, Zhenghao Hu, Chang Zhu, Gokulkrishna Praveen Menon, Brendan Dolan-Gavitt, Adam Doupé, Ruoyu Wang, Yan Shoshitaishvili, Tiffany Bao
2024 — conf
Nothing Personal: Understanding the Spread and Use of Personally Identifiable Information in the Financial Ecosystem.
CODASPY
Mehrnoosh Zaeifi, Faezeh Kalantari, Adam Oest, Zhibo Sun, Gail-Joon Ahn, Yan Shoshitaishvili, Tiffany Bao, Ruoyu Wang, Adam Doupé
2024 B conf
SandPuppy: Deep-State Fuzzing Guided by Automatic Detection of State-Representative Variables.
DIMVA
Vivin Paliath, Erik Trickel, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2024 A* conf
TYGR: Type Inference on Stripped Binaries using Graph Neural Networks.
USENIX Security Symposium
Chang Zhu, Ziyang Li, Anton Xue, Ati Priya Bajaj, Wil Gibbs, Yibo Liu, Rajeev Alur, Tiffany Bao, Hanjun Dai, Adam Doupé, Mayur Naik, Yan Shoshitaishvili, Ruoyu Wang, Aravind Machiry
2024 A* conf
Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation.
USENIX Security Symposium
Ziyi Guo, Dang K. Le, Zhenpeng Lin, Kyle Zeng, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé, Xinyu Xing
2024 J jnl
Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation.
CoRR
Ziyi Guo, Dang K. Le, Zhenpeng Lin, Kyle Zeng, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé, Xinyu Xing
2023 A* conf
Beyond Phish: Toward Detecting Fraudulent e-Commerce Websites at Scale.
SP
Marzieh Bitaab, Haehyun Cho, Adam Oest, Zhuoer Lyu, Wei Wang, Jorij Abraham, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2023 J jnl
Exploring the Limits of ChatGPT in Software Security Applications.
CoRR
Fangzhou Wu, Qingzhao Zhang, Ati Priya Bajaj, Tiffany Bao, Ning Zhang, Ruoyu Wang, Chaowei Xiao
2023 A* conf
Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in User-Space Emulation.
USENIX Security Symposium
Hui Jun Tay, Kyle Zeng, Jayakrishna Menon Vadayath, Arvind S. Raj, Audrey Dutcher, Tejesh Reddy, Wil Gibbs, Zion Leonahenahe Basque, Fangzhou Dong, Zack Smith, Adam Doupé, Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang
2023 A* conf
RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections.
CCS
Kyle Zeng, Zhenpeng Lin, Kangjie Lu, Xinyu Xing, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili, Tiffany Bao
2023 A* conf
Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities.
SP
Erik Trickel, Fabio Pagani, Chang Zhu, Lukas Dresel, Giovanni Vigna, Christopher Kruegel, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2022 A* conf
"Flawed, but like democracy we don't have a better system": The Experts' Insights on the Peer Review Process of Evaluating Security Papers.
SP
Ananta Soneji, Faris Bugra Kokulu, Carlos E. Rubio-Medrano, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé
2022 A* conf
Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs.
USENIX Security Symposium
Jayakrishna Vadayath, Moritz Eckert, Kyle Zeng, Nicolaas Weideman, Gokulkrishna Praveen Menon, Yanick Fratantonio, Davide Balzarotti, Adam Doupé, Tiffany Bao, Ruoyu Wang, Christophe Hauser, Yan Shoshitaishvili
2022 A conf
Context-Auditor: Context-sensitive Content Injection Mitigation.
RAID
Faezeh Kalantari, Mehrnoosh Zaeifi, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé
2022 J jnl
Context-Auditor: Context-sensitive Content Injection Mitigation.
CoRR
Faezeh Kalantari, Mehrnoosh Zaeifi, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé
2022 J jnl
CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing.
IEEE Secur. Priv.
Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2022 A* conf
Expected Exploitability: Predicting the Development of Functional Vulnerability Exploits.
USENIX Security Symposium
Octavian Suciu, Connor Nelson, Zhuoer Lyu, Tiffany Bao, Tudor Dumitras
2022 A* conf
I'm SPARTACUS, No, I'm SPARTACUS: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior.
CCS
Penghui Zhang, Zhibo Sun, Sukwha Kyung, Hans Walter Behrens, Zion Leonahenahe Basque, Haehyun Cho, Adam Oest, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Gail-Joon Ahn, Adam Doupé
2022 — conf
Mitigating Threats Emerging from the Interaction between SDN Apps and SDN (Configuration) Datastore.
CCSW
Sana Habib, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2022 A* conf
Playing for K(H)eaps: Understanding and Improving Linux Kernel Exploit Reliability.
USENIX Security Symposium
Kyle Zeng, Yueqi Chen, Haehyun Cho, Xinyu Xing, Adam Doupé, Yan Shoshitaishvili, Tiffany Bao
2022 A* conf
ViK: practical mitigation of temporal memory safety violations through object ID inspection.
ASPLOS
Haehyun Cho, Jinbum Park, Adam Oest, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 A* conf
CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing.
SP
Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 — conf
Everything You Ever Wanted to Know About Bitcoin Mixers (But Were Afraid to Ask).
Financial Cryptography (1)
Jaswant Pakki, Yan Shoshitaishvili, Ruoyu Wang, Tiffany Bao, Adam Doupé
2021 J jnl
Expected Exploitability: Predicting the Development of Functional Vulnerability Exploits.
CoRR
Octavian Suciu, Connor Nelson, Zhuoer Lyu, Tiffany Bao, Tudor Dumitras
2021 A* conf
Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases.
NDSS
Sung Ta Dinh, Haehyun Cho, Kyle Martin, Adam Oest, Kyle Zeng, Alexandros Kapravelos, Gail-Joon Ahn, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2021 A* conf
Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service.
USENIX Security Symposium
Zhibo Sun, Adam Oest, Penghui Zhang, Carlos E. Rubio-Medrano, Tiffany Bao, Ruoyu Wang, Ziming Zhao, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 — conf
MuTent: Dynamic Android Intent Protection with Ownership-Based Key Distribution and Security Contracts.
HICSS
Pradeep Kumar Duraisamy Soundrapandian, Tiffany Bao, Jaejong Baek, Yan Shoshitaishvili, Adam Doupé, Ruoyu Wang, Gail-Joon Ahn
2021 J jnl
Scam Pandemic: How Attackers Exploit Public Fear through Phishing.
CoRR
Marzieh Bitaab, Haehyun Cho, Adam Oest, Penghui Zhang, Zhibo Sun, Rana Pourmohamad, Doowon Kim, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 A conf
SyML: Guiding Symbolic Execution Toward Vulnerable States Through Pattern Learning.
RAID
Nicola Ruaro, Kyle Zeng, Lukas Dresel, Mario Polino, Tiffany Bao, Andrea Continella, Stefano Zanero, Christopher Kruegel, Giovanni Vigna
2020 — conf
Exploiting Uses of Uninitialized Stack Variables in Linux Kernels to Leak Kernel Pointers.
WOOT @ USENIX Security Symposium
Haehyun Cho, Jinbum Park, Joonwon Kang, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2020 A* conf
HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems.
CCS
Efrén López-Morales, Carlos E. Rubio-Medrano, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang, Tiffany Bao, Gail-Joon Ahn
2020 A* conf
Not All Coverage Measurements Are Equal: Fuzzing by Coverage Accounting for Input Prioritization.
NDSS
Yanhao Wang, Xiangkun Jia, Yuwei Liu, Kyle Zeng, Tiffany Bao, Dinghao Wu, Purui Su
2020 — conf
Scam Pandemic: How Attackers Exploit Public Fear through Phishing.
eCrime
Marzieh Bitaab, Haehyun Cho, Adam Oest, Penghui Zhang, Zhibo Sun, Rana Pourmohamad, Doowon Kim, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2019 A* conf
Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues.
CCS
Faris Bugra Kokulu, Ananta Soneji, Tiffany Bao, Yan Shoshitaishvili, Ziming Zhao, Adam Doupé, Gail-Joon Ahn
2019 — conf
Understanding and Predicting Private Interactions in Underground Forums.
CODASPY
Zhibo Sun, Carlos E. Rubio-Medrano, Ziming Zhao, Tiffany Bao, Adam Doupé, Gail-Joon Ahn
2017 A conf
How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games.
CSF
Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, David Brumley
2017 A* conf
Your Exploit is Mine: Automatic Shellcode Transplant for Remote Exploits.
IEEE Symposium on Security and Privacy
Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, David Brumley
2014 A* conf
BYTEWEIGHT: Learning to Recognize Functions in Binary Code.
USENIX Security Symposium
Tiffany Bao, Jonathan Burket, Maverick Woo, Rafael Turner, David Brumley