Yan Shoshitaishvili

102 papers A* 45A 13B 4Misc 1Journal 17Unranked 20
YearRankTypeTitle / Venue / Authors
2026 J jnl
Do Hackers Dream of Electric Teachers?: A Large-Scale, In-Situ Evaluation of Cybersecurity Student Behaviors and Performance with AI Tutors.
CoRR
Michael Tompkins, Nihaarika Agarwal, Ananta Soneji, Robert Wasinger, Connor Nelson, Kevin Leach, Rakibul Hasan, Adam Doupé, Daniel Votipka, Yan Shoshitaishvili, Jaron Mink
2026 — conf
Open Cybersecurity Education: Five Years of pwn.college.
SIGCSE (1)
Connor Nelson, Robert Wasinger, Adam Doupé, Yan Shoshitaishvili
2026 J jnl
Pushan: Trace-Free Deobfuscation of Virtualization-Obfuscated Binaries.
CoRR
Ashwin Sudhir, Zion Leonahenahe Basque, Wil Gibbs, Ati Priya Bajaj, Pulkit Singh Singaria, Mitchell Zakocs, Jie Hu, Moritz Schloegel, Tiffany Bao, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2026 — conf
The Linux Luminarium: Learning Linux by Leveraging Lightweight Labs and Ludicrous Lessons.
SIGCSE (1)
Yan Shoshitaishvili, Adam Doupé, Connor Nelson
2025 J jnl
BuildBench: Benchmarking LLM Agents on Compiling Real-World Open-Source Software.
CoRR
Zehua Zhang, Ati Priya Bajaj, Divij Handa, Siyu Liu, Arvind S. Raj, Hongkai Chen, Hulin Wang, Yibo Liu, Zion Leonahenahe Basque, Souradip Nath, Vishal Juneja, Nikhil Chapre, Yan Shoshitaishvili, Adam Doupé, Chitta Baral, Ruoyu Wang
2025 J jnl
CTF Archive: Capture, Curate, Learn Forever.
CoRR
Pratham Gupta, Aditya Gabani, Connor Nelson, Yan Shoshitaishvili
2025 — conf
Investigating the Security & Privacy Risks from Unsanctioned Technology Use by Educators.
CHI Extended Abstracts
Easton Kelso, Ananta Soneji, Syed Zami-Ul-Haque Navid, Yan Shoshitaishvili, Sazzadur Rahaman, Rakibul Hasan
2025 J jnl
Investigating the Security & Privacy Risks from Unsanctioned Technology Use by Educators.
CoRR
Easton Kelso, Ananta Soneji, Syed Zami-Ul-Haque Navid, Yan Shoshitaishvili, Sazzadur Rahaman, Rakibul Hasan
2025 A* conf
SCAMMAGNIFIER: Piercing the Veil of Fraudulent Shopping Website Campaigns.
NDSS
Marzieh Bitaab, Alireza Karimi, Zhuoer Lyu, Adam Oest, Dhruv Kuchhal, Muhammad Saad, Gail-Joon Ahn, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2025 — conf
SENSAI: Large Language Models as Applied Cybersecurity Tutors.
SIGCSE (1)
Connor Nelson, Adam Doupé, Yan Shoshitaishvili
2025 A* conf
ScamNet: Toward Explainable Large Language Model-Based Fraudulent Shopping Website Detection.
AAAI
Marzieh Bitaab, Alireza Karimi, Zhuoer Lyu, Ahmadreza Mosallanezhad, Adam Oest, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2025 A* conf
System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System.
USENIX Security Symposium
Jennifer Miller, Manas Ghandat, Kyle Zeng, Hongkai Chen, Abdelouahab Benchikh, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2024 A* conf
"Len or index or count, anything but v1": Predicting Variable Names in Decompilation Output with Transfer Learning.
SP
Kuntal Kumar Pal, Ati Priya Bajaj, Pratyay Banerjee, Audrey Dutcher, Mutsumi Nakamura, Zion Leonahenahe Basque, Himanshu Gupta, Saurabh Arjun Sawant, Ujjwala Anantheswaran, Yan Shoshitaishvili, Adam Doupé, Chitta Baral, Ruoyu Wang
2024 A* conf
"Watching over the shoulder of a professional": Why Hackers Make Mistakes and How They Fix Them.
SP
Irina Ford, Ananta Soneji, Faris Bugra Kokulu, Jayakrishna Vadayath, Zion Leonahenahe Basque, Gaurav Vipat, Adam Doupé, Ruoyu Wang, Gail-Joon Ahn, Tiffany Bao, Yan Shoshitaishvili
2024 J jnl
ARVO: Atlas of Reproducible Vulnerabilities for Open Source Software.
CoRR
Xiang Mei, Pulkit Singh Singaria, Jordi Del Castillo, Haoran Xi, Abdelouahab Benchikh, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Hammond Pearce, Brendan Dolan-Gavitt
2024 A* conf
Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation.
USENIX Security Symposium
Zion Leonahenahe Basque, Ati Priya Bajaj, Wil Gibbs, Jude O'Kain, Derron Miao, Tiffany Bao, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2024 A conf
Browser Polygraph: Efficient Deployment of Coarse-Grained Browser Fingerprints for Web-Scale Detection of Fraud Browsers.
IMC
Faezeh Kalantari, Mehrnoosh Zaeifi, Yeganeh Safaei, Marzieh Bitaab, Adam Oest, Gianluca Stringhini, Yan Shoshitaishvili, Adam Doupé
2024 — conf
DOJO: Applied Cybersecurity Education in the Browser.
SIGCSE (1)
Connor Nelson, Yan Shoshitaishvili
2024 A conf
Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry.
AsiaCCS
Rana Pourmohamad, Steven Wirsz, Adam Oest, Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Adam Doupé, Rida A. Bazzi
2024 A conf
From Victims to Defenders: An Exploration of the Phishing Attack Reporting Ecosystem.
RAID
Zhibo Sun, Faris Bugra Kokulu, Penghui Zhang, Adam Oest, Gianluca Stringhini, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2024 A* conf
Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing.
CCS
Arvind S. Raj, Wil Gibbs, Fangzhou Dong, Jayakrishna Menon Vadayath, Michael Tompkins, Steven Wirsz, Yibo Liu, Zhenghao Hu, Chang Zhu, Gokulkrishna Praveen Menon, Brendan Dolan-Gavitt, Adam Doupé, Ruoyu Wang, Yan Shoshitaishvili, Tiffany Bao
2024 — conf
Nothing Personal: Understanding the Spread and Use of Personally Identifiable Information in the Financial Ecosystem.
CODASPY
Mehrnoosh Zaeifi, Faezeh Kalantari, Adam Oest, Zhibo Sun, Gail-Joon Ahn, Yan Shoshitaishvili, Tiffany Bao, Ruoyu Wang, Adam Doupé
2024 A* conf
Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services.
USENIX Security Symposium
Wil Gibbs, Arvind S. Raj, Jayakrishna Menon Vadayath, Hui Jun Tay, Justin Miller, Akshay Ajayan, Zion Leonahenahe Basque, Audrey Dutcher, Fangzhou Dong, Xavier J. Maso, Giovanni Vigna, Christopher Kruegel, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang
2024 — conf
PWN The Learning Curve: Education-First CTF Challenges.
SIGCSE (1)
Connor Nelson, Yan Shoshitaishvili
2024 B conf
SandPuppy: Deep-State Fuzzing Guided by Automatic Detection of State-Representative Variables.
DIMVA
Vivin Paliath, Erik Trickel, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2024 A* conf
TYGR: Type Inference on Stripped Binaries using Graph Neural Networks.
USENIX Security Symposium
Chang Zhu, Ziyang Li, Anton Xue, Ati Priya Bajaj, Wil Gibbs, Yibo Liu, Rajeev Alur, Tiffany Bao, Hanjun Dai, Adam Doupé, Mayur Naik, Yan Shoshitaishvili, Ruoyu Wang, Aravind Machiry
2024 A* conf
Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation.
USENIX Security Symposium
Ziyi Guo, Dang K. Le, Zhenpeng Lin, Kyle Zeng, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé, Xinyu Xing
2024 J jnl
Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation.
CoRR
Ziyi Guo, Dang K. Le, Zhenpeng Lin, Kyle Zeng, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé, Xinyu Xing
2024 J jnl
The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearning.
CoRR
Nathaniel Li, Alexander Pan, Anjali Gopal, Summer Yue, Daniel Berrios, Alice Gatti, Justin D. Li, Ann-Kathrin Dombrowski, Shashwat Goel, Long Phan, Gabriel Mukobi, Nathan Helm-Burger, Rassin Lababidi, Lennart Justen, Andrew B. Liu, Michael Chen, Isabelle Barrass, Oliver Zhang, Xiaoyuan Zhu, Rishub Tamirisa, Bhrugu Bharathi, Adam Khoja, Zhenqi Zhao, Ariel Herbert-Voss, Cort B. Breuer, Andy Zou, Mantas Mazeika, Zifan Wang, Palash Oswal, Weiran Liu, Adam A. Hunt, Justin Tienken-Harder, Kevin Y. Shih, Kemper Talley, John Guan, Russell Kaplan, Ian Steneker, David Campbell, Brad Jokubaitis, Alex Levinson, Jean Wang, William Qian, Kallol Krishna Karmakar, Steven Basart, Stephen Fitz, Mindy Levine, Ponnurangam Kumaraguru, Uday Kiran Tupakula, Vijay Varadharajan, Yan Shoshitaishvili, Jimmy Ba, Kevin M. Esvelt, Alexandr Wang, Dan Hendrycks
2024 A* conf
The WMDP Benchmark: Measuring and Reducing Malicious Use with Unlearning.
ICML
Nathaniel Li, Alexander Pan, Anjali Gopal, Summer Yue, Daniel Berrios, Alice Gatti, Justin D. Li, Ann-Kathrin Dombrowski, Shashwat Goel, Gabriel Mukobi, Nathan Helm-Burger, Rassin Lababidi, Lennart Justen, Andrew B. Liu, Michael Chen, Isabelle Barrass, Oliver Zhang, Xiaoyuan Zhu, Rishub Tamirisa, Bhrugu Bharathi, Ariel Herbert-Voss, Cort B. Breuer, Andy Zou, Mantas Mazeika, Zifan Wang, Palash Oswal, Weiran Lin, Adam A. Hunt, Justin Tienken-Harder, Kevin Y. Shih, Kemper Talley, John Guan, Ian Steneker, David Campbell, Brad Jokubaitis, Steven Basart, Stephen Fitz, Ponnurangam Kumaraguru, Kallol Krishna Karmakar, Uday Kiran Tupakula, Vijay Varadharajan, Yan Shoshitaishvili, Jimmy Ba, Kevin M. Esvelt, Alexandr Wang, Dan Hendrycks
2024 A* conf
Trust, Because You Can't Verify: Privacy and Security Hurdles in Education Technology Acquisition Practices.
CCS
Easton Kelso, Ananta Soneji, Sazzadur Rahaman, Yan Shoshitaishvili, Rakibul Hasan
2024 J jnl
Trust, Because You Can't Verify:Privacy and Security Hurdles in Education Technology Acquisition Practices.
CoRR
Easton Kelso, Ananta Soneji, Sazzadur Rahaman, Yan Shoshitaishvili, Rakibul Hasan
2023 A* conf
Beyond Phish: Toward Detecting Fraudulent e-Commerce Websites at Scale.
SP
Marzieh Bitaab, Haehyun Cho, Adam Oest, Zhuoer Lyu, Wei Wang, Jorij Abraham, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2023 A* conf
Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in User-Space Emulation.
USENIX Security Symposium
Hui Jun Tay, Kyle Zeng, Jayakrishna Menon Vadayath, Arvind S. Raj, Audrey Dutcher, Tejesh Reddy, Wil Gibbs, Zion Leonahenahe Basque, Fangzhou Dong, Zack Smith, Adam Doupé, Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang
2023 A* conf
RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections.
CCS
Kyle Zeng, Zhenpeng Lin, Kangjie Lu, Xinyu Xing, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili, Tiffany Bao
2023 — conf
Street Rep: A Privacy-Preserving Reputation Aggregation System.
SecureComm (2)
Christophe Hauser, Shirin Nilizadeh, Yan Shoshitaishvili, Ni Trieu, Srivatsan Ravi, Christopher Kruegel, Giovanni Vigna
2023 J jnl
Street Rep: A Privacy-Preserving Reputation Aggregation System.
IACR Cryptol. ePrint Arch.
Christophe Hauser, Shirin Nilizadeh, Yan Shoshitaishvili, Ni Trieu, Srivatsan Ravi, Christopher Kruegel, Giovanni Vigna
2023 A conf
Targeted Privacy Attacks by Fingerprinting Mobile Apps in LTE Radio Layer.
DSN
Jaejong Baek, Pradeep Kumar Duraisamy Soundrapandian, Sukwha Kyung, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2023 A* conf
Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities.
SP
Erik Trickel, Fabio Pagani, Chang Zhu, Lukas Dresel, Giovanni Vigna, Christopher Kruegel, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2022 A* conf
"Flawed, but like democracy we don't have a better system": The Experts' Insights on the Peer Review Process of Evaluating Security Papers.
SP
Ananta Soneji, Faris Bugra Kokulu, Carlos E. Rubio-Medrano, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé
2022 A* conf
Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs.
USENIX Security Symposium
Jayakrishna Vadayath, Moritz Eckert, Kyle Zeng, Nicolaas Weideman, Gokulkrishna Praveen Menon, Yanick Fratantonio, Davide Balzarotti, Adam Doupé, Tiffany Bao, Ruoyu Wang, Christophe Hauser, Yan Shoshitaishvili
2022 A conf
Context-Auditor: Context-sensitive Content Injection Mitigation.
RAID
Faezeh Kalantari, Mehrnoosh Zaeifi, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé
2022 J jnl
Context-Auditor: Context-sensitive Content Injection Mitigation.
CoRR
Faezeh Kalantari, Mehrnoosh Zaeifi, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé
2022 J jnl
CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing.
IEEE Secur. Priv.
Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2022 B conf
Hybrid Pruning: Towards Precise Pointer and Taint Analysis.
DIMVA
Dipanjan Das, Priyanka Bose, Aravind Machiry, Sebastiano Mariani, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel
2022 A* conf
I'm SPARTACUS, No, I'm SPARTACUS: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior.
CCS
Penghui Zhang, Zhibo Sun, Sukwha Kyung, Hans Walter Behrens, Zion Leonahenahe Basque, Haehyun Cho, Adam Oest, Ruoyu Wang, Tiffany Bao, Yan Shoshitaishvili, Gail-Joon Ahn, Adam Doupé
2022 — conf
Mitigating Threats Emerging from the Interaction between SDN Apps and SDN (Configuration) Datastore.
CCSW
Sana Habib, Tiffany Bao, Yan Shoshitaishvili, Adam Doupé
2022 A* conf
Playing for K(H)eaps: Understanding and Improving Linux Kernel Exploit Reliability.
USENIX Security Symposium
Kyle Zeng, Yueqi Chen, Haehyun Cho, Xinyu Xing, Adam Doupé, Yan Shoshitaishvili, Tiffany Bao
2022 A conf
The Convergence of Source Code and Binary Vulnerability Discovery - A Case Study.
AsiaCCS
Alessandro Mantovani, Luca Compagna, Yan Shoshitaishvili, Davide Balzarotti
2022 A* conf
Unleash the Simulacrum: Shifting Browser Realities for Robust Extension-Fingerprinting Prevention.
USENIX Security Symposium
Soroush Karami, Faezeh Kalantari, Mehrnoosh Zaeifi, Xavier J. Maso, Erik Trickel, Panagiotis Ilia, Yan Shoshitaishvili, Adam Doupé, Jason Polakis
2022 A* conf
ViK: practical mitigation of temporal memory safety violations through object ID inspection.
ASPLOS
Haehyun Cho, Jinbum Park, Adam Oest, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 A* conf
CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing.
SP
Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 — conf
Everything You Ever Wanted to Know About Bitcoin Mixers (But Were Afraid to Ask).
Financial Cryptography (1)
Jaswant Pakki, Yan Shoshitaishvili, Ruoyu Wang, Tiffany Bao, Adam Doupé
2021 A* conf
Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases.
NDSS
Sung Ta Dinh, Haehyun Cho, Kyle Martin, Adam Oest, Kyle Zeng, Alexandros Kapravelos, Gail-Joon Ahn, Tiffany Bao, Ruoyu Wang, Adam Doupé, Yan Shoshitaishvili
2021 A* conf
Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service.
USENIX Security Symposium
Zhibo Sun, Adam Oest, Penghui Zhang, Carlos E. Rubio-Medrano, Tiffany Bao, Ruoyu Wang, Ziming Zhao, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2021 — conf
MuTent: Dynamic Android Intent Protection with Ownership-Based Key Distribution and Security Contracts.
HICSS
Pradeep Kumar Duraisamy Soundrapandian, Tiffany Bao, Jaejong Baek, Yan Shoshitaishvili, Adam Doupé, Ruoyu Wang, Gail-Joon Ahn
2021 J jnl
Scam Pandemic: How Attackers Exploit Public Fear through Phishing.
CoRR
Marzieh Bitaab, Haehyun Cho, Adam Oest, Penghui Zhang, Zhibo Sun, Rana Pourmohamad, Doowon Kim, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2020 — conf
Exploiting Uses of Uninitialized Stack Variables in Linux Kernels to Leak Kernel Pointers.
WOOT @ USENIX Security Symposium
Haehyun Cho, Jinbum Park, Joonwon Kang, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2020 — conf
Exploring Abstraction Functions in Fuzzing.
CNS
Christopher Salls, Aravind Machiry, Adam Doupé, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2020 A* conf
HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems.
CCS
Efrén López-Morales, Carlos E. Rubio-Medrano, Adam Doupé, Yan Shoshitaishvili, Ruoyu Wang, Tiffany Bao, Gail-Joon Ahn
2020 A* conf
Karonte: Detecting Insecure Multi-binary Interactions in Embedded Firmware.
SP
Nilo Redini, Aravind Machiry, Ruoyu Wang, Chad Spensky, Andrea Continella, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2020 A* conf
PhishTime: Continuous Longitudinal Measurement of the Effectiveness of Anti-phishing Blacklists.
USENIX Security Symposium
Adam Oest, Yeganeh Safaei, Penghui Zhang, Brad Wardman, Kevin Tyers, Yan Shoshitaishvili, Adam Doupé
2020 — conf
Scam Pandemic: How Attackers Exploit Public Fear through Phishing.
eCrime
Marzieh Bitaab, Haehyun Cho, Adam Oest, Penghui Zhang, Zhibo Sun, Rana Pourmohamad, Doowon Kim, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2020 A conf
SmokeBomb: effective mitigation against cache side-channel attacks on the ARM architecture.
MobiSys
Haehyun Cho, Jinbum Park, Donguk Kim, Ziming Zhao, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2019 B conf
BinTrimmer: Towards Static Binary Debloating Through Abstract Interpretation.
DIMVA
Nilo Redini, Ruoyu Wang, Aravind Machiry, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel
2019 — conf
BootKeeper: Validating Software Integrity Properties on Boot Firmware Images.
CODASPY
Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
2019 J jnl
BootKeeper: Validating Software Integrity Properties on Boot Firmware Images.
CoRR
Ronny Chevalier, Stefano Cristalli, Christophe Hauser, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, Danilo Bruschi, Andrea Lanzi
2019 A* conf
Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues.
CCS
Faris Bugra Kokulu, Ananta Soneji, Tiffany Bao, Yan Shoshitaishvili, Ziming Zhao, Adam Doupé, Gail-Joon Ahn
2019 A conf
Sleak: automating address space layout derandomization.
ACSAC
Christophe Hauser, Jayakrishna Menon, Yan Shoshitaishvili, Ruoyu Wang, Giovanni Vigna, Christopher Kruegel
2018 — conf
A Binary Analysis Approach to Retrofit Security in Input Parsing Routines.
IEEE Symposium on Security and Privacy Workshops
Jayakrishna Menon, Christophe Hauser, Yan Shoshitaishvili, Stephen Schwab
2018 A* conf
AIM-SDN: Attacking Information Mismanagement in SDN-datastores.
CCS
Vaibhav Hemant Dixit, Adam Doupé, Yan Shoshitaishvili, Ziming Zhao, Gail-Joon Ahn
2018 — conf
CacheLight: Defeating the CacheKit Attack.
ASHES@CCS
Mauricio Gutierrez, Ziming Zhao, Adam Doupé, Yan Shoshitaishvili, Gail-Joon Ahn
2018 — conf
Challenges and Preparedness of SDN-based Firewalls.
SDN-NFV@CODASPY
Vaibhav Hemant Dixit, Sukwha Kyung, Ziming Zhao, Adam Doupé, Yan Shoshitaishvili, Gail-Joon Ahn
2018 A* conf
FEAST'18 - 2018 Workshop on Forming an Ecosystem around Software Transformation.
CCS
Yan Shoshitaishvili, Mayur Naik
2018 A* conf
HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security.
USENIX Security Symposium
Moritz Eckert, Antonio Bianchi, Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2018 J jnl
Mechanical Phish: Resilient Autonomous Hacking.
IEEE Secur. Priv.
Yan Shoshitaishvili, Antonio Bianchi, Kevin Borgolte, Amat Cama, Jacopo Corbetta, Francesco Disperati, Andrew Dutcher, John Grosen, Paul Grosen, Aravind Machiry, Christopher Salls, Nick Stephens, Ruoyu Wang, Giovanni Vigna
2018 — ed.
Proceedings of the 2018 Workshop on Forming an Ecosystem Around Software Transformation, FEAST@CCS 2018, Toronto, ON, Canada, October 15-19, 2018
FEAST@CCS
Yan Shoshitaishvili, Mayur Naik
2018 A* conf
T-Fuzz: Fuzzing by Program Transformation.
IEEE Symposium on Security and Privacy
Hui Peng, Yan Shoshitaishvili, Mathias Payer
2018 A conf
Wi Not Calling: Practical Privacy and Availability Attacks in Wi-Fi Calling.
ACSAC
Jaejong Baek, Sukwha Kyung, Haehyun Cho, Ziming Zhao, Yan Shoshitaishvili, Adam Doupé, Gail-Joon Ahn
2017 — conf
Angr - The Next Generation of Binary Analysis.
SecDev
Fish Wang, Yan Shoshitaishvili
2017 A* conf
BootStomp: On the Security of Bootloaders in Mobile Devices.
USENIX Security Symposium
Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2017 — —
Building a Base for Cyber-autonomy.
Yan Shoshitaishvili
2017 A* conf
DIFUZE: Interface Aware Fuzzing for Kernel Drivers.
CCS
Jake Corina, Aravind Machiry, Christopher Salls, Yan Shoshitaishvili, Shuang Hao, Christopher Kruegel, Giovanni Vigna
2017 A conf
How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games.
CSF
Tiffany Bao, Yan Shoshitaishvili, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna, David Brumley
2017 A conf
Piston: Uncooperative Remote Runtime Patching.
ACSAC
Christopher Salls, Yan Shoshitaishvili, Nick Stephens, Christopher Kruegel, Giovanni Vigna
2017 A* conf
Ramblr: Making Reassembly Great Again.
NDSS
Ruoyu Wang, Yan Shoshitaishvili, Antonio Bianchi, Aravind Machiry, John Grosen, Paul Grosen, Christopher Kruegel, Giovanni Vigna
2017 A* conf
Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance.
CCS
Yan Shoshitaishvili, Michael Weissbacher, Lukas Dresel, Christopher Salls, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna
2017 J jnl
Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance.
CoRR
Yan Shoshitaishvili, Michael Weissbacher, Lukas Dresel, Christopher Salls, Ruoyu Wang, Christopher Kruegel, Giovanni Vigna
2017 A* conf
Your Exploit is Mine: Automatic Shellcode Transplant for Remote Exploits.
IEEE Symposium on Security and Privacy
Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, David Brumley
2016 A* conf
Driller: Augmenting Fuzzing Through Selective Symbolic Execution.
NDSS
Nick Stephens, John Grosen, Christopher Salls, Andrew Dutcher, Ruoyu Wang, Jacopo Corbetta, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2016 A* conf
SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis.
IEEE Symposium on Security and Privacy
Yan Shoshitaishvili, Ruoyu Wang, Christopher Salls, Nick Stephens, Mario Polino, Andrew Dutcher, John Grosen, Siji Feng, Christophe Hauser, Christopher Krügel, Giovanni Vigna
2016 A conf
Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory.
RAID
Marius Muench, Fabio Pagani, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna, Davide Balzarotti
2015 A* conf
Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware.
NDSS
Yan Shoshitaishvili, Ruoyu Wang, Christophe Hauser, Christopher Kruegel, Giovanni Vigna
2015 A* conf
How the ELF Ruined Christmas.
USENIX Security Symposium
Alessandro Di Federico, Amat Cama, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2015 J jnl
Portrait of a Privacy Invasion.
Proc. Priv. Enhancing Technol.
Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2014 Misc conf
Do you feel lucky?: a large-scale analysis of risk-rewards trade-offs in cyber security.
SAC
Yan Shoshitaishvili, Luca Invernizzi, Adam Doupé, Giovanni Vigna
2014 B conf
PExy: The Other Side of Exploit Kits.
DIMVA
Giancarlo De Maio, Alexandros Kapravelos, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2014 A conf
Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel.
RAID
Yinzhi Cao, Yan Shoshitaishvili, Kevin Borgolte, Christopher Krügel, Giovanni Vigna, Yan Chen
2014 — conf
Ten Years of iCTF: The Good, The Bad, and The Ugly.
3GSE
Giovanni Vigna, Kevin Borgolte, Jacopo Corbetta, Adam Doupé, Yanick Fratantonio, Luca Invernizzi, Dhilung Kirat, Yan Shoshitaishvili
2013 A* conf
Revolver: An Automated Approach to the Detection of Evasive Web-based Malware.
USENIX Security Symposium
Alexandros Kapravelos, Yan Shoshitaishvili, Marco Cova, Christopher Kruegel, Giovanni Vigna
2013 A* conf
Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services.
USENIX Security Symposium
Ruoyu Wang, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna
2012 A* conf
Blacksheep: detecting compromised hosts in homogeneous crowds.
CCS
Antonio Bianchi, Yan Shoshitaishvili, Christopher Kruegel, Giovanni Vigna