The HTTP Garden: Discovering Parsing Vulnerabilities in HTTP/1.1 Implementations by Differential Fuzzing of Request Streams. - Ben Kallus; Prashant Anantharaman; Michael E. Locasto; Sean W. Smith (CoRR, 2024)

WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls. - Seyed Ali Akhavani; Bahruz Jabiyev; Ben Kallus; Cem Topcuoglu; Sergey Bratus; Engin Kirda (CoRR, 2025)