Behnaz Hassanshahi

According to our database, Behnaz Hassanshahi authored at least 21 papers between 2013 and 2023.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2023

The role of program analysis in security vulnerability detection: Then and now.

Cristina Cifuentes, François Gauthier, Behnaz Hassanshahi, Padmanabhan Krishnan, Davin McCall

Comput. Secur., December, 2023

Macaron: A Logic-based Framework for Software Supply Chain Security Assurance.

Behnaz Hassanshahi, Trong Nhan Mai, Alistair Michael, Benjamin Selwyn-Smith, Sophie Bates, Padmanabhan Krishnan

Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, 2023

2022

Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs (Artifact).

Madhurima Chakraborty, Renzo Olivares, Manu Sridharan, Behnaz Hassanshahi

Dagstuhl Artifacts Ser., 2022

Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs (Extended Version).

Madhurima Chakraborty, Renzo Olivares, Manu Sridharan, Behnaz Hassanshahi

CoRR, 2022

Gelato: Feedback-driven and Guided Security Analysis of Client-side Web Applications.

Behnaz Hassanshahi, Hyunjun Lee, Paddy Krishnan

Proceedings of the IEEE International Conference on Software Analysis, 2022

Experience: Model-Based, Feedback-Driven, Greybox Web Fuzzing with BackREST.

François Gauthier, Behnaz Hassanshahi, Benjamin Selwyn-Smith, Trong Nhan Mai, Max Schlüter, Micah Williams

Proceedings of the 36th European Conference on Object-Oriented Programming, 2022

Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs.

Madhurima Chakraborty, Renzo Olivares, Manu Sridharan, Behnaz Hassanshahi

Proceedings of the 36th European Conference on Object-Oriented Programming, 2022

2021

BackREST: A Model-Based Feedback-Driven Greybox Fuzzer for Web Applications.

François Gauthier, Behnaz Hassanshahi, Benjamin Selwyn-Smith, Trong Nhan Mai, Max Schlüter, Micah Williams

CoRR, 2021

MoScan: a model-based vulnerability scanner for web single sign-on services.

Hanlin Wei, Behnaz Hassanshahi, Guangdong Bai, Padmanabhan Krishnan, Kostyantyn Vorobyov

Proceedings of the ISSTA '21: 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, 2021

2020

Gelato: Feedback-driven and Guided Security Analysis of Client-side Web Applications.

Behnaz Hassanshahi, Hyunjun Lee, Paddy Krishnan, Jörn Guy Süß

CoRR, 2020

Coding Practices and Recommendations of Spring Security for Enterprise Applications.

Mazharul Islam, Sazzadur Rahaman, Na Meng, Behnaz Hassanshahi, Padmanabhan Krishnan, Danfeng Daphne Yao

Proceedings of the IEEE Secure Development, SecDev 2020, Atlanta, GA, USA, 2020

Trade-offs in managing risk and technical debt in industrial research labs: an experience report.

François Gauthier, Alexander Jordan, Padmanabhan Krishnan, Behnaz Hassanshahi, Jörn Guy Süß, Sora Bae, Hyunjun Lee

Proceedings of the TechDebt '20: International Conference on Technical Debt, 2020

2019

Nodest: feedback-driven static analysis of Node.js applications.

Benjamin Barslev Nielsen, Behnaz Hassanshahi, François Gauthier

Proceedings of the ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, 2019

Unacceptable Behavior: Robust PDF Malware Detection Using Abstract Interpretation.

Alexander Jordan, François Gauthier, Behnaz Hassanshahi, David Zhao

Proceedings of the 14th ACM SIGSAC Workshop on Programming Languages and Analysis for Security, 2019

2018

SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation.

Alexander Jordan, François Gauthier, Behnaz Hassanshahi, David Zhao

CoRR, 2018

AFFOGATO: runtime detection of injection attacks for Node.js.

François Gauthier, Behnaz Hassanshahi, Alexander Jordan

Proceedings of the Companion Proceedings for the ISSTA/ECOOP 2018 Workshops, 2018

2017

RoppDroid: Robust permission re-delegation prevention in Android inter-component communication.

Ting Dai, Xiaolei Li, Behnaz Hassanshahi, Roland H. C. Yap, Zhenkai Liang

Comput. Secur., 2017

An efficient tunable selective points-to analysis for large codebases.

Behnaz Hassanshahi, Raghavendra Kagalavadi Ramesh, Padmanabhan Krishnan, Bernhard Scholz, Yi Lu

Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the Art in Program Analysis, 2017

Android Database Attacks Revisited.

Behnaz Hassanshahi, Roland H. C. Yap

Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, 2017

2015

Web-to-Application Injection Attacks on Android: Characterization and Detection.

Behnaz Hassanshahi, Yaoqi Jia, Roland H. C. Yap, Prateek Saxena, Zhenkai Liang

Proceedings of the Computer Security - ESORICS 2015, 2015

2013

JNICodejail: native code isolation for Java programs.

Behnaz Hassanshahi, Roland H. C. Yap

Proceedings of the 2013 International Conference on Principles and Practices of Programming on the Java Platform: Virtual Machines, 2013