FADE: Detecting Fake News Articles on the Web. - Bahruz Jabiyev; Sinan Pehlivanoglu; Kaan Onarlioglu; Engin Kirda (ARES, 2021)

T-Reqs: HTTP Request Smuggling with Differential Fuzzing. - Bahruz Jabiyev; Steven Sprecher; Kaan Onarlioglu; Engin Kirda (CCS, 2021)

Preventing server-side request forgery attacks. - Bahruz Jabiyev; Omid Mirzaei; Amin Kharraz; Engin Kirda (SAC, 2021)

e-Game of FAME: Automatic Detection of FAke MEmes. - Bahruz Jabiyev; Jeremiah Onaolapo; Gianluca Stringhini; Engin Kirda (TTO, 2021)

FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies. - Bahruz Jabiyev; Steven Sprecher; Anthony Gavazzi; Tommaso Innocenti; Kaan Onarlioglu; Engin Kirda (USENIX Security Symposium, 2022)

Untangle: Multi-Layer Web Server Fingerprinting. - Cem Topcuoglu; Kaan Onarlioglu; Bahruz Jabiyev; Engin Kirda (NDSS, 2024)

Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies. - Bahruz Jabiyev; Anthony Gavazzi; Kaan Onarlioglu; Engin Kirda (RAID, 2024)

WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls. - Seyed Ali Akhavani; Bahruz Jabiyev; Ben Kallus; Cem Topcuoglu; Sergey Bratus; Engin Kirda (CoRR, 2025)