Why Johnny Can't Pentest: An Analysis of Black-Box Web Vulnerability Scanners. - Adam Doupé; Marco Cova; Giovanni Vigna (DIMVA, 2010)

Hit 'em where it hurts: a live security exercise on cyber situational awareness. - Adam Doupé; Manuel Egele; Benjamin Caillat; Gianluca Stringhini; Gorkem Yakin; Ali Zand; Ludovico Cavedon; Giovanni Vigna (ACSAC, 2011)

Fear the EAR: discovering and mitigating execution after redirect vulnerabilities. - Adam Doupé; Bryce Boe; Christopher Kruegel; Giovanni Vigna (CCS, 2011)

Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner. - Adam Doupé; Ludovico Cavedon; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2012)

deDacota: toward preventing server-side XSS via automatic code and data separation. - Adam Doupé; Weidong Cui; Mariusz H. Jakubowski; Marcus Peinado; Christopher Kruegel; Giovanni Vigna (CCS, 2013)

Writing groups in computer science research labs. - Adam Doupé; Janet L. Kayfetz (FIE, 2013)

EARs in the wild: large-scale analysis of execution after redirect vulnerabilities. - Pierre Payet; Adam Doupé; Christopher Kruegel; Giovanni Vigna (SAC, 2013)

Do you feel lucky?: a large-scale analysis of risk-rewards trade-offs in cyber security. - Yan Shoshitaishvili; Luca Invernizzi; Adam Doupé; Giovanni Vigna (SAC, 2014)

Ten Years of iCTF: The Good, The Bad, and The Ugly. - Giovanni Vigna; Kevin Borgolte; Jacopo Corbetta; Adam Doupé; Yanick Fratantonio; Luca Invernizzi; Dhilung Kirat; Yan Shoshitaishvili (3GSE, 2014)

Advanced Automated Web Application Vulnerability Analysis. - Adam Doupé (2014)

Toward a Moving Target Defense for Web Applications. - Marthony Taguinod; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (IRI, 2015)

Federated Access Management for Collaborative Network Environments: Framework and Case Study. - Carlos E. Rubio-Medrano; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (SACMAT, 2015)

Moving Target Defense for Web Applications using Bayesian Stackelberg Games: (Extended Abstract). - Satya Gautam Vadlamudi; Sailik Sengupta; Marthony Taguinod; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn; Subbarao Kambhampati (AAMAS, 2016)

Checking Intent-based Communication in Android with Intent Space Analysis. - Yiming Jing; Gail-Joon Ahn; Adam Doupé; Jeong Hyun Yi (AsiaCCS, 2016)

HoneyMix: Toward SDN-based Intelligent Honeynet. - Wonkyu Han; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (SDN-NFV@CODASPY, 2016)

Position Paper: Towards a Moving Target Defense Approach for Attribute-based Access Control. - Carlos E. Rubio-Medrano; Josephine Lamp; Marthony Taguinod; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (ABAC@CODASPY, 2016)

Towards Automated Threat Intelligence Fusion. - Ajay Modi; Zhibo Sun; Anupam Panwar; Tejas Khairnar; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn; Paul Black (CIC, 2016)

Behind closed doors: measurement and analysis of CryptoLocker ransoms in Bitcoin. - Kevin Liao; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (eCrime, 2016)

Toward authenticated caller ID transmission: The need for a standardized authentication scheme in Q.731.3 calling line identification presentation. - Huahong Tu; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (Kaleidoscope, 2016)

Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy. - Vitor Monte Afonso; Paulo L. de Geus; Antonio Bianchi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna; Adam Doupé; Mario Polino (NDSS, 2016)

State-aware Network Access Management for Software-Defined Networks. - Wonkyu Han; Hongxin Hu; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn; Kuang-Ching Wang; Juan Deng (SACMAT, 2016)

Target Fragmentation in Android Apps. - Patrick Mutchler; Yeganeh Safaei; Adam Doupé; John C. Mitchell (IEEE Symposium on Security and Privacy Workshops, 2016)

SoK: Everyone Hates Robocalls: A Survey of Techniques Against Telephone Spam. - Huahong Tu; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (IEEE Symposium on Security and Privacy, 2016)

Moving Target Defense for Web Applications using Bayesian Stackelberg Games. - Satya Gautam Vadlamudi; Sailik Sengupta; Subbarao Kambhampati; Marthony Taguinod; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (CoRR, 2016)

dbling: Identifying extensions installed on encrypted web thin clients. - Mike Mabey; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (Digit. Investig., 2016)

A Game Theoretic Approach to Strategy Generation for Moving Target Defense in Web Applications. - Sailik Sengupta; Satya Gautam Vadlamudi; Subbarao Kambhampati; Adam Doupé; Ziming Zhao 001; Marthony Taguinod; Gail-Joon Ahn (AAMAS, 2017)

Mutated Policies: Towards Proactive Attribute-based Defenses for Access Control. - Carlos E. Rubio-Medrano; Josephine Lamp; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (MTD@CCS, 2017)

HoneyProxy: Design and implementation of next-generation honeynet via SDN. - Sukwha Kyung; Wonkyu Han; Naveen Tiwari; Vaibhav Hemant Dixit; Lakshmi Srinivas; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (CNS, 2017)

Panel: Trustworthy Data Science. - Adam Doupé (CODASPY, 2017)

Deep Android Malware Detection. - Niall McLaughlin; Jesús Martínez del Rincón; BooJoong Kang; Suleiman Y. Yerima; Paul Miller 003; Sakir Sezer; Yeganeh Safaei; Erik Trickel; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (CODASPY, 2017)

Shell We Play A Game? CTF-as-a-service for Security Education. - Erik Trickel; Francesco Disperati; Eric Gustafson; Faezeh Kalantari; Mike Mabey; Naveen Tiwari; Yeganeh Safaei; Adam Doupé; Giovanni Vigna (ASE @ USENIX Security Symposium, 2017)

Toward Standardization of Authenticated Caller ID Transmission. - Huahong Tu; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (IEEE Commun. Stand. Mag., 2017)

E-mail Header Injection Vulnerabilities. - Sai Prashanth Chandramouli; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (it Inf. Technol., 2017)

Wi Not Calling: Practical Privacy and Availability Attacks in Wi-Fi Calling. - Jaejong Baek; Sukwha Kyung; Haehyun Cho; Ziming Zhao 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (ACSAC, 2018)

Prime+Count: Novel Cross-world Covert Channels on ARM TrustZone. - Haehyun Cho; Penghui Zhang; Donguk Kim 003; Jinbum Park; Choong-Hoon Lee; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (ACSAC, 2018)

AIM-SDN: Attacking Information Mismanagement in SDN-datastores. - Vaibhav Hemant Dixit; Adam Doupé; Yan Shoshitaishvili; Ziming Zhao 001; Gail-Joon Ahn (CCS, 2018)

CacheLight: Defeating the CacheKit Attack. - Mauricio Gutierrez; Ziming Zhao 001; Adam Doupé; Yan Shoshitaishvili; Gail-Joon Ahn (ASHES@CCS, 2018)

Challenges and Preparedness of SDN-based Firewalls. - Vaibhav Hemant Dixit; Sukwha Kyung; Ziming Zhao 001; Adam Doupé; Yan Shoshitaishvili; Gail-Joon Ahn (SDN-NFV@CODASPY, 2018)

SeCore: Continuous Extrospection with High Visibility on Multi-core ARM Platforms. - Penghui Zhang; Bernard Ngabonziza; Haehyun Cho; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (CODASPY, 2018)

Inside a phisher's mind: Understanding the anti-phishing ecosystem through phishing kit analysis. - Adam Oest; Yeganeh Safaei; Adam Doupé; Gail-Joon Ahn; Brad Wardman; Gary Warner (eCrime, 2018)

Challenges, Opportunities and a Framework for Web Environment Forensics. - Mike Mabey; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (IFIP Int. Conf. Digital Forensics, 2018)

Measuring E-mail header injections on the world wide web. - Sai Prashanth Chandramouli; Pierre-Marie Bajan; Christopher Kruegel; Giovanni Vigna; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (SAC, 2018)

Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues. - Faris Bugra Kokulu; Ananta Soneji; Tiffany Bao; Yan Shoshitaishvili; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (CCS, 2019)

Understanding and Predicting Private Interactions in Underground Forums. - Zhibo Sun; Carlos E. Rubio-Medrano; Ziming Zhao 001; Tiffany Bao; Adam Doupé; Gail-Joon Ahn (CODASPY, 2019)

iCore: continuous and proactive extrospection on multi-core IoT devices. - Penghui Zhang; Haehyun Cho; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (SAC, 2019)

History and Future of Automated Vulnerability Analysis. - Adam Doupé (SACMAT, 2019)

PhishFarm: A Scalable Framework for Measuring the Effectiveness of Evasion Techniques against Browser Phishing Blacklists. - Adam Oest; Yeganeh Safaei; Adam Doupé; Gail-Joon Ahn; Brad Wardman; Kevin Tyers (IEEE Symposium on Security and Privacy, 2019)

Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting. - Erik Trickel; Oleksii Starov; Alexandros Kapravelos; Nick Nikiforakis; Adam Doupé (USENIX Security Symposium, 2019)

Users Really Do Answer Telephone Scams. - Huahong Tu; Adam Doupé; Ziming Zhao 001; Gail-Joon Ahn (USENIX Security Symposium, 2019)

You shall not pass: Mitigating SQL Injection Attacks on Legacy Web Applications. - Rasoul Jahanshahi; Adam Doupé; Manuel Egele (AsiaCCS, 2020)

HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems. - Efrén López-Morales; Carlos E. Rubio-Medrano; Adam Doupé; Yan Shoshitaishvili; Ruoyu Wang 001; Tiffany Bao; Gail-Joon Ahn (CCS, 2020)

Exploring Abstraction Functions in Fuzzing. - Christopher Salls; Aravind Machiry; Adam Doupé; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (CNS, 2020)

Scam Pandemic: How Attackers Exploit Public Fear through Phishing. - Marzieh Bitaab; Haehyun Cho; Adam Oest; Penghui Zhang; Zhibo Sun; Rana Pourmohamad; Doowon Kim; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (eCrime, 2020)

SmokeBomb: effective mitigation against cache side-channel attacks on the ARM architecture. - Haehyun Cho; Jinbum Park; Donguk Kim 003; Ziming Zhao 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (MobiSys, 2020)

PhishTime: Continuous Longitudinal Measurement of the Effectiveness of Anti-phishing Blacklists. - Adam Oest; Yeganeh Safaei; Penghui Zhang; Brad Wardman; Kevin Tyers; Yan Shoshitaishvili; Adam Doupé (USENIX Security Symposium, 2020)

Sunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness of Phishing Attacks at Scale. - Adam Oest; Penghui Zhang; Brad Wardman; Eric Nunes; Jakub Burgis; Ali Zand; Kurt Thomas; Adam Doupé; Gail-Joon Ahn (USENIX Security Symposium, 2020)

Exploiting Uses of Uninitialized Stack Variables in Linux Kernels to Leak Kernel Pointers. - Haehyun Cho; Jinbum Park; Joonwon Kang; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (WOOT @ USENIX Security Symposium, 2020)

Introduction to the ACSAC'19 Special Issue - Part 1. - Roberto Perdisci; Martina Lindorfer; Adam Doupé; Andrea Lanzi; Alexandros Kapravelos; Gianluca Stringhini (DTRAP, 2020)

Security Analysis on Practices of Certificate Authorities in the HTTPS Phishing Ecosystem. - Doowon Kim; Haehyun Cho; Yonghwi Kwon 001; Adam Doupé; Sooel Son; Gail-Joon Ahn; Tudor Dumitras (AsiaCCS, 2021)

Everything You Ever Wanted to Know About Bitcoin Mixers (But Were Afraid to Ask). - Jaswant Pakki; Yan Shoshitaishvili; Ruoyu Wang 001; Tiffany Bao; Adam Doupé (Financial Cryptography (1), 2021)

Software Deception Steering through Version Emulation. - Frederico Araujo; Sailik Sengupta; Jiyong Jang; Adam Doupé; Kevin W. Hamlen; Subbarao Kambhampati (HICSS, 2021)

MuTent: Dynamic Android Intent Protection with Ownership-Based Key Distribution and Security Contracts. - Pradeep Kumar Duraisamy Soundrapandian; Tiffany Bao; Jaejong Baek; Yan Shoshitaishvili; Adam Doupé; Ruoyu Wang 001; Gail-Joon Ahn (HICSS, 2021)

Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases. - Sung Ta Dinh; Haehyun Cho; Kyle Martin; Adam Oest; Kyle Zeng; Alexandros Kapravelos; Gail-Joon Ahn; Tiffany Bao; Ruoyu Wang 001; Adam Doupé; Yan Shoshitaishvili (NDSS, 2021)

Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service. - Zhibo Sun; Adam Oest; Penghui Zhang; Carlos E. Rubio-Medrano; Tiffany Bao; Ruoyu Wang 001; Ziming Zhao 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (USENIX Security Symposium, 2021)

Challenges in cybersecurity: Lessons from biological defense systems. - Edward C. Schrom II; Ann Kinzig; Stephanie Forrest; Andrea L. Graham; Simon A. Levin; Carl T. Bergstrom; Carlos Castillo-Chavez; James P. Collins 002; Rob J. De Boer; Adam Doupé; Roya Ensafi; Stuart I. Feldman; et al. (CoRR, 2021)

Introduction to the ACSAC'19 Special Issue - Vol. 2. - Roberto Perdisci; Martina Lindorfer; Adam Doupé; Andrea Lanzi; Alexandros Kapravelos; Gianluca Stringhini (DTRAP, 2021)

ViK: practical mitigation of temporal memory safety violations through object ID inspection. - Haehyun Cho; Jinbum Park; Adam Oest; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (ASPLOS, 2022)

I'm SPARTACUS, No, I'm SPARTACUS: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior. - Penghui Zhang; Zhibo Sun; Sukwha Kyung; Hans Walter Behrens; Zion Leonahenahe Basque; Haehyun Cho; Adam Oest; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Gail-Joon Ahn; Adam Doupé (CCS, 2022)

Mitigating Threats Emerging from the Interaction between SDN Apps and SDN (Configuration) Datastore. - Sana Habib; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé (CCSW, 2022)

Using Deception in Markov Game to Understand Adversarial Behaviors Through a Capture-The-Flag Environment. - Siddhant Bhambri; Purv Chauhan; Frederico Araujo; Adam Doupé; Subbarao Kambhampati (GameSec, 2022)

Improving source-code representations to enhance search-based software repair. - Pemma Reiter; Antonio M. Espinoza; Adam Doupé; Ruoyu Wang 001; Westley Weimer; Stephanie Forrest (GECCO, 2022)

Above and Beyond: Organizational Efforts to Complement U.S. Digital Security Compliance Mandates. - Rock Stevens; Faris Bugra Kokulu; Adam Doupé; Michelle L. Mazurek (NDSS, 2022)

Context-Auditor: Context-sensitive Content Injection Mitigation. - Faezeh Kalantari; Mehrnoosh Zaeifi; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé (RAID, 2022)

"Flawed, but like democracy we don't have a better system": The Experts' Insights on the Peer Review Process of Evaluating Security Papers. - Ananta Soneji; Faris Bugra Kokulu; Carlos E. Rubio-Medrano; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé (SP, 2022)

Unleash the Simulacrum: Shifting Browser Realities for Robust Extension-Fingerprinting Prevention. - Soroush Karami; Faezeh Kalantari; Mehrnoosh Zaeifi; Xavier J. Maso; Erik Trickel; Panagiotis Ilia; Yan Shoshitaishvili; Adam Doupé; Jason Polakis (USENIX Security Symposium, 2022)

Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs. - Jayakrishna Vadayath; Moritz Eckert; Kyle Zeng; Nicolaas Weideman; Gokulkrishna Praveen Menon; Yanick Fratantonio; Davide Balzarotti; Adam Doupé; Tiffany Bao; Ruoyu Wang 001; Christophe Hauser; Yan Shoshitaishvili (USENIX Security Symposium, 2022)

Playing for K(H)eaps: Understanding and Improving Linux Kernel Exploit Reliability. - Kyle Zeng; Yueqi Chen 001; Haehyun Cho; Xinyu Xing 001; Adam Doupé; Yan Shoshitaishvili; Tiffany Bao (USENIX Security Symposium, 2022)

Automatically Mitigating Vulnerabilities in x86 Binary Programs via Partially Recompilable Decompilation. - Pemma Reiter; Hui Jun Tay; Westley Weimer; Adam Doupé; Ruoyu Wang 001; Stephanie Forrest (CoRR, 2022)

CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing. - Penghui Zhang; Adam Oest; Haehyun Cho; Zhibo Sun; RC Johnson; Brad Wardman; Shaown Sarker; Alexandros Kapravelos; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; et al. (IEEE Secur. Priv., 2022)

RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections. - Kyle Zeng; Zhenpeng Lin; Kangjie Lu; Xinyu Xing 001; Ruoyu Wang 001; Adam Doupé; Yan Shoshitaishvili; Tiffany Bao (CCS, 2023)

Targeted Privacy Attacks by Fingerprinting Mobile Apps in LTE Radio Layer. - Jaejong Baek; Pradeep Kumar Duraisamy Soundrapandian; Sukwha Kyung; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (DSN, 2023)

Beyond Phish: Toward Detecting Fraudulent e-Commerce Websites at Scale. - Marzieh Bitaab; Haehyun Cho; Adam Oest; Zhuoer Lyu; Wei Wang; Jorij Abraham; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé (SP, 2023)

Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities. - Erik Trickel; Fabio Pagani; Chang Zhu; Lukas Dresel; Giovanni Vigna; Christopher Kruegel; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé (SP, 2023)

Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in User-Space Emulation. - Hui Jun Tay; Kyle Zeng; Jayakrishna Menon Vadayath; Arvind S. Raj; Audrey Dutcher; Tejesh Reddy; Wil Gibbs; Zion Leonahenahe Basque; Fangzhou Dong; Zack Smith; Adam Doupé; Tiffany Bao; et al. (USENIX Security Symposium, 2023)

Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry. - Rana Pourmohamad; Steven Wirsz; Adam Oest; Tiffany Bao; Yan Shoshitaishvili; Ruoyu Wang 001; Adam Doupé; Rida A. Bazzi (AsiaCCS, 2024)

Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing. - Arvind S. Raj; Wil Gibbs; Fangzhou Dong; Jayakrishna Menon Vadayath; Michael Tompkins; Steven Wirsz; Yibo Liu; Zhenghao Hu; Chang Zhu; Gokulkrishna Praveen Menon; Brendan Dolan-Gavitt; Adam Doupé; et al. (CCS, 2024)

Nothing Personal: Understanding the Spread and Use of Personally Identifiable Information in the Financial Ecosystem. - Mehrnoosh Zaeifi; Faezeh Kalantari; Adam Oest; Zhibo Sun; Gail-Joon Ahn; Yan Shoshitaishvili; Tiffany Bao; Ruoyu Wang 001; Adam Doupé (CODASPY, 2024)

SandPuppy: Deep-State Fuzzing Guided by Automatic Detection of State-Representative Variables. - Vivin Paliath; Erik Trickel; Tiffany Bao; Ruoyu Wang 001; Adam Doupé; Yan Shoshitaishvili (DIMVA, 2024)

Browser Polygraph: Efficient Deployment of Coarse-Grained Browser Fingerprints for Web-Scale Detection of Fraud Browsers. - Faezeh Kalantari; Mehrnoosh Zaeifi; Yeganeh Safaei; Marzieh Bitaab; Adam Oest; Gianluca Stringhini; Yan Shoshitaishvili; Adam Doupé (IMC, 2024)

From Victims to Defenders: An Exploration of the Phishing Attack Reporting Ecosystem. - Zhibo Sun; Faris Bugra Kokulu; Penghui Zhang; Adam Oest; Gianluca Stringhini; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Gail-Joon Ahn (RAID, 2024)

"Watching over the shoulder of a professional": Why Hackers Make Mistakes and How They Fix Them. - Irina Ford; Ananta Soneji; Faris Bugra Kokulu; Jayakrishna Vadayath; Zion Leonahenahe Basque; Gaurav Vipat; Adam Doupé; Ruoyu Wang 001; Gail-Joon Ahn; Tiffany Bao; Yan Shoshitaishvili (SP, 2024)

"Len or index or count, anything but v1": Predicting Variable Names in Decompilation Output with Transfer Learning. - Kuntal Kumar Pal; Ati Priya Bajaj; Pratyay Banerjee; Audrey Dutcher; Mutsumi Nakamura; Zion Leonahenahe Basque; Himanshu Gupta; Saurabh Arjun Sawant; Ujjwala Anantheswaran; Yan Shoshitaishvili; Adam Doupé; Chitta Baral; et al. (SP, 2024)

Spider-Scents: Grey-box Database-aware Web Scanning for Stored XSS. - Eric Olsson 001; Benjamin Eriksson; Adam Doupé; Andrei Sabelfeld (USENIX Security Symposium, 2024)

Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation. - Zion Leonahenahe Basque; Ati Priya Bajaj; Wil Gibbs; Jude O'Kain; Derron Miao; Tiffany Bao; Adam Doupé; Yan Shoshitaishvili; Ruoyu Wang 001 (USENIX Security Symposium, 2024)

Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services. - Wil Gibbs; Arvind S. Raj; Jayakrishna Menon Vadayath; Hui Jun Tay; Justin Miller; Akshay Ajayan; Zion Leonahenahe Basque; Audrey Dutcher; Fangzhou Dong; Xavier J. Maso; Giovanni Vigna; Christopher Kruegel; et al. (USENIX Security Symposium, 2024)

Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation. - Ziyi Guo; Dang K. Le; Zhenpeng Lin; Kyle Zeng; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé; Xinyu Xing 001 (USENIX Security Symposium, 2024)

"I feel physically safe but not politically safe": Understanding the Digital Threats and Safety Practices of OnlyFans Creators. - Ananta Soneji; Vaughn Hamilton; Adam Doupé; Allison McDonald; Elissa M. Redmiles (USENIX Security Symposium, 2024)

TYGR: Type Inference on Stripped Binaries using Graph Neural Networks. - Chang Zhu; Ziyang Li; Anton Xue; Ati Priya Bajaj; Wil Gibbs; Yibo Liu; Rajeev Alur; Tiffany Bao; Hanjun Dai; Adam Doupé; Mayur Naik; Yan Shoshitaishvili; et al. (USENIX Security Symposium, 2024)

ARVO: Atlas of Reproducible Vulnerabilities for Open Source Software. - Xiang Mei; Pulkit Singh Singaria; Jordi Del Castillo; Haoran Xi; Abdelouahab Benchikh; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Hammond Pearce; Brendan Dolan-Gavitt (CoRR, 2024)

ScamNet: Toward Explainable Large Language Model-Based Fraudulent Shopping Website Detection. - Marzieh Bitaab; Alireza Karimi; Zhuoer Lyu; Ahmadreza Mosallanezhad; Adam Oest; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé (AAAI, 2025)

SCAMMAGNIFIER: Piercing the Veil of Fraudulent Shopping Website Campaigns. - Marzieh Bitaab; Alireza Karimi; Zhuoer Lyu; Adam Oest; Dhruv Kuchhal; Muhammad Saad 001; Gail-Joon Ahn; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé (NDSS, 2025)

SENSAI: Large Language Models as Applied Cybersecurity Tutors. - Connor Nelson; Adam Doupé; Yan Shoshitaishvili (SIGCSE (1), 2025)

"It's almost like Frankenstein": Investigating the Complexities of Scientific Collaboration and Privilege Management within Research Computing Infrastructures. - Souradip Nath; Ananta Soneji; Jaejong Baek; Tiffany Bao; Adam Doupé; Carlos E. Rubio-Medrano; Gail-Joon Ahn (SP, 2025)

Automatically Mitigating Vulnerabilities in Binary Programs via Partially Recompilable Decompilation. - Pemma Reiter; Hui Jun Tay; Westley Weimer; Adam Doupé; Ruoyu Wang 001; Stephanie Forrest (IEEE Trans. Dependable Secur. Comput., 2025)