V. N. Venkatakrishnan

72 papers A* 19A 7B 4C 4Misc 3Journal 15Unranked 18

Year	Rank	Type	Title / Venue / Authors
2025	—	`conf`	Citar: Cyberthreat Intelligence-driven Attack Reconstruction. CODASPY Sutanu Kumar Ghosh, Rigel Gjomemo, V. N. Venkatakrishnan
2025	A*	`conf`	FIXX: FInding eXploits from eXamples. USENIX Security Symposium Neil P. Thimmaiah, Yashashvi J. Dave, Rigel Gjomemo, V. N. Venkatakrishnan
2025	—	`conf`	Real-time Analytics for APT Detection and Threat Hunting Using Cyber-threat Intelligence and Provenance Graphs. IWSPA@CODASPY V. N. Venkatakrishnan
2025	—	`conf`	SemFinder: A Semantics-Based Approach to Enhance Vulnerability Analysis in Web Applications. CODASPY Neil P. Thimmaiah, Rigel Gjomemo, V. N. Venkatakrishnan
2024	A*	`conf`	ReactAppScan: Mining React Application Vulnerabilities via Component Graph. CCS Zhiyong Guo, Mingqing Kang, V. N. Venkatakrishnan, Rigel Gjomemo, Yinzhi Cao
2024	—	`conf`	TIPCE: A Longitudinal Threat Intelligence Platform Comprehensiveness Analysis. CODASPY Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
2023	J	`jnl`	OSTINATO: Cross-host Attack Correlation Through Attack Activity Similarity Detection. CoRR Sutanu Kumar Ghosh, Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
2023	A*	`conf`	Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability. SP Mingqing Kang, Yichao Xu, Song Li, Rigel Gjomemo, Jianwei Hou, V. N. Venkatakrishnan, Yinzhi Cao
2022	Misc	`conf`	Ostinato: Cross-host Attack Correlation Through Attack Activity Similarity Detection. ICISS Sutanu Kumar Ghosh, Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
2021	J	`jnl`	EXTRACTOR: Extracting Attack Behavior from Threat Reports. CoRR Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
2021	A	`conf`	Extractor: Extracting Attack Behavior from Threat Reports. EuroS&P Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
2020	J	`jnl`	Remote Check Truncation Systems: Vulnerability Analysis and Countermeasures. IEEE Access Hafiz Malik, Rigel Gjomemo, V. N. Venkatakrishnan, Rashid Ansari, Aun Irtaza
2019	A*	`conf`	HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows. IEEE Symposium on Security and Privacy Sadegh Momeni Milajerdi, Rigel Gjomemo, Birhanu Eshete, R. Sekar, V. N. Venkatakrishnan
2019	A*	`conf`	POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting. CCS Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
2019	J	`jnl`	POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting. CoRR Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
2018	J	`jnl`	HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows. CoRR Sadegh M. Milajerdi, Rigel Gjomemo, Birhanu Eshete, R. Sekar, V. N. Venkatakrishnan
2018	A*	`conf`	NAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications. USENIX Security Symposium Abeer Alhuzali, Rigel Gjomemo, Birhanu Eshete, V. N. Venkatakrishnan
2018	J	`jnl`	ProPatrol: Attack Investigation via Extracted High-Level Tasks. CoRR Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
2018	J	`jnl`	SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data. CoRR Md Nahid Hossain, Sadegh M. Milajerdi, Junao Wang, Birhanu Eshete, Rigel Gjomemo, R. Sekar, Scott D. Stoller, V. N. Venkatakrishnan
2017	A	`conf`	DynaMiner: Leveraging Offline Infection Analytics for On-the-Wire Malware Detection. DSN Birhanu Eshete, V. N. Venkatakrishnan
2017	A*	`conf`	SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data. USENIX Security Symposium Md Nahid Hossain, Sadegh M. Milajerdi, Junao Wang, Birhanu Eshete, Rigel Gjomemo, R. Sekar, Scott D. Stoller, V. N. Venkatakrishnan
2016	J	`jnl`	Attack Analysis Results for Adversarial Engagement 1 of the DARPA Transparent Computing Program. CoRR Birhanu Eshete, Rigel Gjomemo, Md Nahid Hossain, Sadegh Momeni, R. Sekar, Scott D. Stoller, V. N. Venkatakrishnan, Junao Wang
2016	A*	`conf`	Chainsaw: Chained Automated Workflow-based Exploit Generation. CCS Abeer Alhuzali, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
2016	C	`conf`	Leveraging Static Analysis Tools for Improving Usability of Memory Error Sanitization Compilers. QRS Rigel Gjomemo, Phu H. Phung, Edmund Ballou, Kedar S. Namjoshi, V. N. Venkatakrishnan, Lenore D. Zuck
2016	—	`conf`	Patching Logic Vulnerabilities for Web Applications using LogicPatcher. CODASPY Maliheh Monshizadeh, Prasad Naldurg, V. N. Venkatakrishnan
2015	J	`jnl`	Between Worlds: Securing Mixed JavaScript/ActionScript Multi-Party Web Content. IEEE Trans. Dependable Secur. Comput. Phu H. Phung, Maliheh Monshizadeh, Meera Sridhar, Kevin W. Hamlen, V. N. Venkatakrishnan
2015	B	`conf`	From Verification to Optimizations. VMCAI Rigel Gjomemo, Kedar S. Namjoshi, Phu H. Phung, V. N. Venkatakrishnan, Lenore D. Zuck
2015	—	`conf`	Practical Exploit Generation for Intent Message Vulnerabilities in Android. CODASPY Daniele Gallingani, Rigel Gjomemo, V. N. Venkatakrishnan, Stefano Zanero
2015	A*	`conf`	Vetting SSL Usage in Applications with SSLINT. IEEE Symposium on Security and Privacy Boyuan He, Vaibhav Rastogi, Yinzhi Cao, Yan Chen, V. N. Venkatakrishnan, Runqing Yang, Zhenrui Zhang
2014	J	`jnl`	A Threat Table Based Assessment of Information Security in Telemedicine. Int. J. Heal. Inf. Syst. Informatics John C. Pendergrass, Karen Heart, C. Ranganathan, V. N. Venkatakrishnan
2014	J	`jnl`	Automated detection of parameter tampering opportunities and vulnerabilities in web applications. J. Comput. Secur. Prithvi Bisht, Timothy L. Hinrichs, Nazari Skrupsky, V. N. Venkatakrishnan
2014	—	`conf`	DEICS: Data Erasure in Concurrent Software. NordSec Kalpana Gondi, A. Prasad Sistla, V. N. Venkatakrishnan
2014	—	`conf`	Digital Check Forgery Attacks on Client Check Truncation Systems. Financial Cryptography Rigel Gjomemo, Hafiz Malik, Nilesh Sumb, V. N. Venkatakrishnan, Rashid Ansari
2014	A*	`conf`	MACE: Detecting Privilege Escalation Vulnerabilities in Web Applications. CCS Maliheh Monshizadeh, Prasad Naldurg, V. N. Venkatakrishnan
2014	—	`conf`	Minimizing lifetime of sensitive data in concurrent programs. CODASPY Kalpana Gondi, A. Prasad Sistla, V. N. Venkatakrishnan
2014	J	`jnl`	PeerShark: flow-clustering and conversation-generation for malicious peer-to-peer traffic identification. EURASIP J. Inf. Secur. Pratik Narang, Chittaranjan Hota, V. N. Venkatakrishnan
2014	—	`conf`	WebWinnow: leveraging exploit kit workflows to detect malicious urls. CODASPY Birhanu Eshete, V. N. Venkatakrishnan
2013	—	`conf`	TamperProof: a server-agnostic defense for parameter tampering attacks on web applications. CODASPY Nazari Skrupsky, Prithvi Bisht, Timothy L. Hinrichs, V. N. Venkatakrishnan, Lenore D. Zuck
2013	—	`conf`	WEBLOG: a declarative language for secure web development. PLAS Timothy L. Hinrichs, Daniele Rossetti, Gabriele Petronella, V. N. Venkatakrishnan, A. Prasad Sistla, Lenore D. Zuck
2012	—	`conf`	SWIPE: eager erasure of sensitive data in large scale systems software. CODASPY Kalpana Gondi, Prithvi Bisht, Praveen Venkatachari, A. Prasad Sistla, V. N. Venkatakrishnan
2012	—	`conf`	WAVES: Automatic Synthesis of Client-Side Validation Code for Web Applications. CyberSecurity Nazari Skrupsky, Maliheh Monshizadeh, Prithvi Bisht, Timothy L. Hinrichs, V. N. Venkatakrishnan, Lenore D. Zuck
2011	—	`ch.`	Applications of Formal Methods to Web Application Security. Encyclopedia of Cryptography and Security (2nd Ed.) V. N. Venkatakrishnan
2011	A*	`conf`	WAPTEC: whitebox analysis of web applications for parameter tampering exploit construction. CCS Prithvi Bisht, Timothy L. Hinrichs, Nazari Skrupsky, V. N. Venkatakrishnan
2011	—	`ch.`	Web Browser Security and Privacy. Encyclopedia of Cryptography and Security (2nd Ed.) V. N. Venkatakrishnan
2010	A*	`conf`	AdJail: Practical Enforcement of Confidentiality and Integrity Policies on Web Advertisements. USENIX Security Symposium Mike Ter Louw, Karthik Thotta Ganesh, V. N. Venkatakrishnan
2010	—	`conf`	Automatically Preparing Safe SQL Queries. Financial Cryptography Prithvi Bisht, A. Prasad Sistla, V. N. Venkatakrishnan
2010	J	`jnl`	CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks. ACM Trans. Inf. Syst. Secur. Prithvi Bisht, Parthasarathy Madhusudan, V. N. Venkatakrishnan
2010	A*	`conf`	NoTamper: automatic blackbox detection of parameter tampering opportunities in web applications. CCS Prithvi Bisht, Timothy L. Hinrichs, Nazari Skrupsky, Radoslaw Bobrowicz, V. N. Venkatakrishnan
2010	Misc	`conf`	Strengthening XSRF Defenses for Legacy Web Applications Using Whitebox Analysis and Transformation. ICISS Michelle Zhou, Prithvi Bisht, V. N. Venkatakrishnan
2010	A*	`conf`	TAPS: automatically preparing safe SQL queries. CCS Prithvi Bisht, A. Prasad Sistla, V. N. Venkatakrishnan
2010	Misc	`conf`	WebAppArmor: A Framework for Robust Prevention of Attacks on Web Applications (Invited Paper). ICISS V. N. Venkatakrishnan, Prithvi Bisht, Mike Ter Louw, Michelle Zhou, Kalpana Gondi, Karthik Thotta Ganesh
2009	J	`jnl`	Alcatraz: An Isolated Environment for Experimenting with Untrusted Software. ACM Trans. Inf. Syst. Secur. Zhenkai Liang, Weiqing Sun, V. N. Venkatakrishnan, R. Sekar
2009	A*	`conf`	Blueprint: Robust Prevention of Cross-site Scripting Attacks for Existing Browsers. SP Mike Ter Louw, V. N. Venkatakrishnan
2008	A	`conf`	CMV: automatic verification of complete mediation for java virtual machines. AsiaCCS A. Prasad Sistla, V. N. Venkatakrishnan, Michelle Zhou, Hilary Branske
2008	J	`jnl`	Enhancing web browser security against malware extensions. J. Comput. Virol. Mike Ter Louw, Jin Soon Lim, V. N. Venkatakrishnan
2008	B	`conf`	Expanding Malware Defense by Securing Software Installations. DIMVA Weiqing Sun, R. Sekar, Zhenkai Liang, V. N. Venkatakrishnan
2008	A	`conf`	Preventing Information Leaks through Shadow Executions. ACSAC Roberto Capizzi, Antonio Longo, V. N. Venkatakrishnan, A. Prasad Sistla
2008	B	`conf`	XSS-GUARD: Precise Dynamic Prevention of Cross-Site Scripting Attacks. DIMVA Prithvi Bisht, V. N. Venkatakrishnan
2007	A*	`conf`	CANDID: preventing sql injection attacks using dynamic candidate evaluations. CCS Sruthi Bandhakavi, Prithvi Bisht, P. Madhusudan, V. N. Venkatakrishnan
2007	B	`conf`	Extensible Web Browser Security. DIMVA Mike Ter Louw, Jin Soon Lim, V. N. Venkatakrishnan
2006	A	`conf`	A Framework for Building Privacy-Conscious Composite Web Services. ICWS Wei Xu, V. N. Venkatakrishnan, R. Sekar, I. V. Ramakrishnan
2006	A	`conf`	Data Sandboxing: A Technique for Enforcing Confidentiality Policies. ACSAC Tejas Khatiwala, Raj Swaminathan, V. N. Venkatakrishnan
2006	C	`conf`	Provably Correct Runtime Enforcement of Non-interference Properties. ICICS V. N. Venkatakrishnan, Wei Xu, Daniel C. DuVarney, R. Sekar
2006	—	`conf`	SUEZ: A Distributed Safe Execution Environment for System Administration Trials. LISA Doo San Sim, V. N. Venkatakrishnan
2005	—	`conf`	An approach for realizing privacy-preserving web-based services. WWW (Special interest tracks and posters) Wei Xu, R. Sekar, I. V. Ramakrishnan, V. N. Venkatakrishnan
2005	A*	`conf`	One-Way Isolation: An Effective Approach for Realizing Safe Execution Environments. NDSS Weiqing Sun, Zhenkai Liang, V. N. Venkatakrishnan, R. Sekar
2003	A	`conf`	Isolated Program Execution: An Application Transparent Approach for Executing Untrusted Programs. ACSAC Zhenkai Liang, V. N. Venkatakrishnan, R. Sekar
2003	A*	`conf`	Model-carrying code: a practical approach for safe execution of untrusted applications. SOSP R. Sekar, V. N. Venkatakrishnan, Samik Basu, Sandeep Bhatkar, Daniel C. DuVarney
2003	C	`conf`	SELF: a transparent security extension for ELF binaries. NSPW Daniel C. DuVarney, V. N. Venkatakrishnan, Sandeep Bhatkar
2002	—	`conf`	An Approach for Secure Software Installation. LISA V. N. Venkatakrishnan, R. Sekar, T. Kamat, S. Tsipa, Zhenkai Liang
2002	C	`conf`	Empowering mobile code using expressive security policies. NSPW V. N. Venkatakrishnan, Ram Peri, R. Sekar
2000	A*	`conf`	XMC: A Logic-Programming-Based Verification Toolset. CAV C. R. Ramakrishnan, I. V. Ramakrishnan, Scott A. Smolka, Yifei Dong, Xiaoqun Du, Abhik Roychoudhury, V. N. Venkatakrishnan