Year

Venue

Title

2025

conf/ndss

SCAMMAGNIFIER: Piercing the Veil of Fraudulent Shopping Website Campaigns.

Marzieh Bitaab Alireza Karimi Zhuoer Lyu Adam Oest Dhruv Kuchhal Muhammad Saad Gail-Joon Ahn Ruoyu Wang Tiffany Bao Yan Shoshitaishvili Adam Doupé

2025

conf/uss

System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System.

Jennifer Miller Manas Ghandat Kyle Zeng Hongkai Chen Abdelouahab Benchikh Tiffany Bao Ruoyu Wang Adam Doupé Yan Shoshitaishvili

2024

conf/ccs

When Compiler Optimizations Meet Symbolic Execution: An Empirical Study.

Yue Zhang Melih Sirlanci Ruoyu Wang Zhiqiang Lin

2024

conf/ccs

Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing.

Arvind S. Raj Wil Gibbs Fangzhou Dong Jayakrishna Menon Vadayath Michael Tompkins Steven Wirsz Yibo Liu Zhenghao Hu Chang Zhu Gokulkrishna Praveen Menon Brendan Dolan-Gavitt Adam Doupé Ruoyu Wang Yan Shoshitaishvili Tiffany Bao

2024

conf/uss

Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation.

Ziyi Guo Dang K. Le Zhenpeng Lin Kyle Zeng Ruoyu Wang Tiffany Bao Yan Shoshitaishvili Adam Doupé Xinyu Xing

2024

conf/uss

TYGR: Type Inference on Stripped Binaries using Graph Neural Networks.

Chang Zhu Ziyang Li Anton Xue Ati Priya Bajaj Wil Gibbs Yibo Liu Rajeev Alur Tiffany Bao Hanjun Dai Adam Doupé Mayur Naik Yan Shoshitaishvili Ruoyu Wang Aravind Machiry

2024

conf/uss

Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services.

Wil Gibbs Arvind S. Raj Jayakrishna Menon Vadayath Hui Jun Tay Justin Miller Akshay Ajayan Zion Leonahenahe Basque Audrey Dutcher Fangzhou Dong Xavier J. Maso Giovanni Vigna Christopher Kruegel Adam Doupé Yan Shoshitaishvili Ruoyu Wang

2024

conf/uss

Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation.

Zion Leonahenahe Basque Ati Priya Bajaj Wil Gibbs Jude O'Kain Derron Miao Tiffany Bao Adam Doupé Yan Shoshitaishvili Ruoyu Wang

2024

conf/sp

"Watching over the shoulder of a professional": Why Hackers Make Mistakes and How They Fix Them.

Irina Ford Ananta Soneji Faris Bugra Kokulu Jayakrishna Vadayath Zion Leonahenahe Basque Gaurav Vipat Adam Doupé Ruoyu Wang Gail-Joon Ahn Tiffany Bao Yan Shoshitaishvili

2024

conf/sp

"Len or index or count, anything but v1": Predicting Variable Names in Decompilation Output with Transfer Learning.

Kuntal Kumar Pal Ati Priya Bajaj Pratyay Banerjee Audrey Dutcher Mutsumi Nakamura Zion Leonahenahe Basque Himanshu Gupta Saurabh Arjun Sawant Ujjwala Anantheswaran Yan Shoshitaishvili Adam Doupé Chitta Baral Ruoyu Wang

2024

conf/asiaccs

Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry.

Rana Pourmohamad Steven Wirsz Adam Oest Tiffany Bao Yan Shoshitaishvili Ruoyu Wang Adam Doupé Rida A. Bazzi

2023

conf/ccs

RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections.

Kyle Zeng Zhenpeng Lin Kangjie Lu Xinyu Xing Ruoyu Wang Adam Doupé Yan Shoshitaishvili Tiffany Bao

2023

conf/uss

Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in User-Space Emulation.

Hui Jun Tay Kyle Zeng Jayakrishna Menon Vadayath Arvind S. Raj Audrey Dutcher Tejesh Reddy Wil Gibbs Zion Leonahenahe Basque Fangzhou Dong Zack Smith Adam Doupé Tiffany Bao Yan Shoshitaishvili Ruoyu Wang

2023

conf/uss

MTSan: A Feasible and Practical Memory Sanitizer for Fuzzing COTS Binaries.

Xingman Chen Yinghao Shi Zheyu Jiang Yuan Li Ruoyu Wang Haixin Duan Haoyu Wang Chao Zhang

2023

conf/sp

Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities.

Erik Trickel Fabio Pagani Chang Zhu Lukas Dresel Giovanni Vigna Christopher Kruegel Ruoyu Wang Tiffany Bao Yan Shoshitaishvili Adam Doupé

2023

conf/sp

Beyond Phish: Toward Detecting Fraudulent e-Commerce Websites at Scale.

Marzieh Bitaab Haehyun Cho Adam Oest Zhuoer Lyu Wei Wang Jorij Abraham Ruoyu Wang Tiffany Bao Yan Shoshitaishvili Adam Doupé

2023

conf/dsn

Targeted Privacy Attacks by Fingerprinting Mobile Apps in LTE Radio Layer.

Jaejong Baek Pradeep Kumar Duraisamy Soundrapandian Sukwha Kyung Ruoyu Wang Yan Shoshitaishvili Adam Doupé Gail-Joon Ahn

2022

conf/ccs

I'm SPARTACUS, No, I'm SPARTACUS: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior.

Penghui Zhang Zhibo Sun Sukwha Kyung Hans Walter Behrens Zion Leonahenahe Basque Haehyun Cho Adam Oest Ruoyu Wang Tiffany Bao Yan Shoshitaishvili Gail-Joon Ahn Adam Doupé

2022

conf/uss

Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs.

Jayakrishna Vadayath Moritz Eckert Kyle Zeng Nicolaas Weideman Gokulkrishna Praveen Menon Yanick Fratantonio Davide Balzarotti Adam Doupé Tiffany Bao Ruoyu Wang Christophe Hauser Yan Shoshitaishvili

2022

conf/sp

"Flawed, but like democracy we don't have a better system": The Experts' Insights on the Peer Review Process of Evaluating Security Papers.

Ananta Soneji Faris Bugra Kokulu Carlos E. Rubio-Medrano Tiffany Bao Ruoyu Wang Yan Shoshitaishvili Adam Doupé

2021

conf/uss

Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service.

Zhibo Sun Adam Oest Penghui Zhang Carlos E. Rubio-Medrano Tiffany Bao Ruoyu Wang Ziming Zhao Yan Shoshitaishvili Adam Doupé Gail-Joon Ahn

2021

conf/fc

Everything You Ever Wanted to Know About Bitcoin Mixers (But Were Afraid to Ask).

Jaswant Pakki Yan Shoshitaishvili Ruoyu Wang Tiffany Bao Adam Doupé

2021

conf/sp

CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing.

Penghui Zhang Adam Oest Haehyun Cho Zhibo Sun RC Johnson Brad Wardman Shaown Sarker Alexandros Kapravelos Tiffany Bao Ruoyu Wang Yan Shoshitaishvili Adam Doupé Gail-Joon Ahn

2021

conf/ndss

Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases.

Sung Ta Dinh Haehyun Cho Kyle Martin Adam Oest Kyle Zeng Alexandros Kapravelos Gail-Joon Ahn Tiffany Bao Ruoyu Wang Adam Doupé Yan Shoshitaishvili

2020

conf/ccs

HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems.

Efrén López-Morales Carlos E. Rubio-Medrano Adam Doupé Yan Shoshitaishvili Ruoyu Wang Tiffany Bao Gail-Joon Ahn

2020

conf/sp

Karonte: Detecting Insecure Multi-binary Interactions in Embedded Firmware.

Nilo Redini Aravind Machiry Ruoyu Wang Chad Spensky Andrea Continella Yan Shoshitaishvili Christopher Kruegel Giovanni Vigna

2019

conf/acsac

Sleak: automating address space layout derandomization.

Christophe Hauser Jayakrishna Menon Yan Shoshitaishvili Ruoyu Wang Giovanni Vigna Christopher Kruegel

2018

conf/uss

HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security.

Moritz Eckert Antonio Bianchi Ruoyu Wang Yan Shoshitaishvili Christopher Kruegel Giovanni Vigna

2017

conf/ccs

Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance.

Yan Shoshitaishvili Michael Weissbacher Lukas Dresel Christopher Salls Ruoyu Wang Christopher Kruegel Giovanni Vigna

2017

conf/sp

Your Exploit is Mine: Automatic Shellcode Transplant for Remote Exploits.

Tiffany Bao Ruoyu Wang Yan Shoshitaishvili David Brumley

2017

conf/ndss

Ramblr: Making Reassembly Great Again.

Ruoyu Wang Yan Shoshitaishvili Antonio Bianchi Aravind Machiry John Grosen Paul Grosen Christopher Kruegel Giovanni Vigna

2017

conf/ndss

BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments.

Aravind Machiry Eric Gustafson Chad Spensky Christopher Salls Nick Stephens Ruoyu Wang Antonio Bianchi Yung Ryn Choe Christopher Kruegel Giovanni Vigna

2016

conf/sp

SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis.

Yan Shoshitaishvili Ruoyu Wang Christopher Salls Nick Stephens Mario Polino Andrew Dutcher John Grosen Siji Feng Christophe Hauser Christopher Krügel Giovanni Vigna

2016

conf/ndss

Driller: Augmenting Fuzzing Through Selective Symbolic Execution.

Nick Stephens John Grosen Christopher Salls Andrew Dutcher Ruoyu Wang Jacopo Corbetta Yan Shoshitaishvili Christopher Kruegel Giovanni Vigna

2015

conf/ndss

Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware.

Yan Shoshitaishvili Ruoyu Wang Christophe Hauser Christopher Kruegel Giovanni Vigna

2013

conf/uss

Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services.

Ruoyu Wang Yan Shoshitaishvili Christopher Kruegel Giovanni Vigna