The VAD tree: A process-eye view of physical memory. - Brendan Dolan-Gavitt (Digit. Investig., 2007)

Forensic analysis of the Windows registry in memory. - Brendan Dolan-Gavitt (Digit. Investig., 2008)

Robust signatures for kernel data structures. - Brendan Dolan-Gavitt; Abhinav Srivastava; Patrick Traynor; Jonathon T. Giffin (CCS, 2009)

Virtuoso: Narrowing the Semantic Gap in Virtual Machine Introspection. - Brendan Dolan-Gavitt; Tim Leek; Michael Zhivich; Jonathon T. Giffin; Wenke Lee (IEEE Symposium on Security and Privacy, 2011)

Tappan Zee (north) bridge: mining memory accesses for introspection. - Brendan Dolan-Gavitt; Tim Leek; Josh Hodosh; Wenke Lee (CCS, 2013)

Repeatable Reverse Engineering with PANDA. - Brendan Dolan-Gavitt; Josh Hodosh; Patrick Hulin; Tim Leek; Ryan Whelan (PPREW@ACSAC, 2015)

Understanding and protecting closed-source systems through dynamic analysis. - Brendan Dolan-Gavitt (2015)

LAVA: Large-Scale Automated Vulnerability Addition. - Brendan Dolan-Gavitt; Patrick Hulin; Engin Kirda; Tim Leek; Andrea Mambretti; William K. Robertson; Frederick Ulrich; Ryan Whelan (IEEE Symposium on Security and Privacy, 2016)

Lock-in-Pop: Securing Privileged Operating System Kernels by Keeping on the Beaten Path. - Yiwen Li; Brendan Dolan-Gavitt; Sam Weber 001; Justin Cappos (USENIX ATC, 2017)

AutoCTF: Creating Diverse Pwnables via Automated Bug Injection. - Patrick Hulin; Andy Davis; Rahul Sridhar; Andrew Fasano; Cody Gallagher; Aaron Sedlacek; Tim Leek; Brendan Dolan-Gavitt (WOOT, 2017)

BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain. - Tianyu Gu; Brendan Dolan-Gavitt; Siddharth Garg (CoRR, 2017)

Peeling the Onion's User Experience Layer: Examining Naturalistic Use of the Tor Browser. - Kevin Gallagher 001; Sameer Patil; Brendan Dolan-Gavitt; Damon McCoy; Nasir D. Memon (CCS, 2018)

Malrec: Compact Full-Trace Malware Recording for Retrospective Deep Analysis. - Giorgio Severi; Tim Leek; Brendan Dolan-Gavitt (DIMVA, 2018)

Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks. - Kang Liu 017; Brendan Dolan-Gavitt; Siddharth Garg (RAID, 2018)

Bug synthesis: challenging bug-finding tools with deep faults. - Subhajit Roy 001; Awanish Pandey; Brendan Dolan-Gavitt; Yu Hu (ESEC/SIGSOFT FSE, 2018)

Chaff Bugs: Deterring Attackers by Making Software Buggier. - Zhenghao Hu; Yu Hu; Brendan Dolan-Gavitt (CoRR, 2018)

BadNets: Evaluating Backdooring Attacks on Deep Neural Networks. - Tianyu Gu; Kang Liu 017; Brendan Dolan-Gavitt; Siddharth Garg (IEEE Access, 2019)

The Rode0day to Less-Buggy Programs. - Andrew Fasano; Tim Leek; Brendan Dolan-Gavitt; Josh Bundt (IEEE Secur. Priv., 2019)

HeapExpo: Pinpointing Promoted Pointers to Prevent Use-After-Free Vulnerabilities. - Zekun Shen; Brendan Dolan-Gavitt (ACSAC, 2020)

Automatic Uncovering of Hidden Behaviors From Input Validation in Mobile Apps. - Qingchuan Zhao; Chaoshun Zuo; Brendan Dolan-Gavitt; Giancarlo Pellegrino; Zhiqiang Lin 001 (SP, 2020)

NNoculation: Broad Spectrum and Targeted Treatment of Backdoored DNNs. - Akshaj Kumar Veldanda; Kang Liu 017; Benjamin Tan 001; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; Brendan Dolan-Gavitt; Siddharth Garg (CoRR, 2020)

Evaluating Synthetic Bugs. - Joshua Bundt; Andrew Fasano; Brendan Dolan-Gavitt; William Robertson 002; Tim Leek (AsiaCCS, 2021)

SoK: Enabling Security Analyses of Embedded Systems via Rehosting. - Andrew Fasano; Tiemoko Ballo; Marius Muench; Tim Leek; Alexander Bulekov; Brendan Dolan-Gavitt; Manuel Egele; Aurélien Francillon; Long Lu; Nick Gregory; Davide Balzarotti; William Robertson 002 (AsiaCCS, 2021)

NNoculation: Catching BadNets in the Wild. - Akshaj Kumar Veldanda; Kang Liu 017; Benjamin Tan 001; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; Brendan Dolan-Gavitt; Siddharth Garg (AISec@CCS, 2021)

An Empirical Cybersecurity Evaluation of GitHub Copilot's Code Contributions. - Hammond Pearce; Baleegh Ahmad; Benjamin Tan 001; Brendan Dolan-Gavitt; Ramesh Karri (CoRR, 2021)

Can OpenAI Codex and Other Large Language Models Help Us Fix Security Bugs? - Hammond Pearce; Benjamin Tan 001; Baleegh Ahmad; Ramesh Karri; Brendan Dolan-Gavitt (CoRR, 2021)

Copilot CWE Scenarios Dataset. - Hammond Pearce; Baleegh Ahmad; Benjamin Tan 001; Brendan Dolan-Gavitt; Ramesh Karri (Zenodo, 2021)

Towards Deceptive Defense in Software Security with Chaff Bugs. - Zhenghao Hu; Yu Hu; Brendan Dolan-Gavitt (RAID, 2022)

IRQDebloat: Reducing Driver Attack Surface in Embedded Devices. - Zhenghao Hu; Brendan Dolan-Gavitt (SP, 2022)

Drifuzz: Harvesting Bugs in Device Drivers from Golden Seeds. - Zekun Shen; Ritik Roongta; Brendan Dolan-Gavitt (USENIX Security Symposium, 2022)

Characterizing and Improving Bug-Finders with Synthetic Bugs. - Yu Hu; Zekun Shen; Brendan Dolan-Gavitt (SANER, 2022)

Pop Quiz! Can a Large Language Model Help With Reverse Engineering? - Hammond Pearce; Benjamin Tan 001; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; Brendan Dolan-Gavitt (CoRR, 2022)

Security Implications of Large Language Model Code Assistants: A User Study. - Gustavo Sandoval; Hammond Pearce; Teo Nys; Ramesh Karri; Brendan Dolan-Gavitt; Siddharth Garg (CoRR, 2022)

Beyond the C: Retargetable Decompilation using Neural Machine Translation. - Iman Hosseini; Brendan Dolan-Gavitt (CoRR, 2022)

Code and Dataset for "Examining Zero-Shot Vulnerability Repair with Large Language Models". - Hammond Pearce; Benjamin Tan 001; Baleegh Ahmad; Ramesh Karri; Brendan Dolan-Gavitt (Zenodo, 2022)

Lost at C: Data from the Security-focused User Study. - Gustavo Sandoval; Hammond Pearce; Teo Nys; Ramesh Karri; Siddharth Garg; Brendan Dolan-Gavitt (Zenodo, 2022)

Benchmarking Large Language Models for Automated Verilog RTL Code Generation. - Shailja Thakur; Baleegh Ahmad; Zhenxing Fan; Hammond Pearce; Benjamin Tan 001; Ramesh Karri; Brendan Dolan-Gavitt; Siddharth Garg (DATE, 2023)

Homo in Machina: Improving Fuzz Testing Coverage via Compartment Analysis. - Joshua Bundt; Andrew Fasano; Brendan Dolan-Gavitt; William K. Robertson; Tim Leek (ICST, 2023)

Examining Zero-Shot Vulnerability Repair with Large Language Models. - Hammond Pearce; Benjamin Tan 001; Baleegh Ahmad; Ramesh Karri; Brendan Dolan-Gavitt (SP, 2023)

Lost at C: A User Study on the Security Implications of Large Language Model Code Assistants. - Gustavo Sandoval; Hammond Pearce; Teo Nys; Ramesh Karri; Siddharth Garg; Brendan Dolan-Gavitt (USENIX Security Symposium, 2023)

Can Deepfakes be created on a whim? - Pulak Mehta; Gauri Jagatap; Kevin Gallagher 001; Brian Timmerman; Progga Deb; Siddharth Garg; Rachel Greenstadt; Brendan Dolan-Gavitt (WWW (Companion Volume), 2023)

Can deepfakes be created by novice users? - Pulak Mehta; Gauri Jagatap; Kevin Gallagher 001; Brian Timmerman; Progga Deb; Siddharth Garg; Rachel Greenstadt; Brendan Dolan-Gavitt (CoRR, 2023)

LLM-assisted Generation of Hardware Assertions. - Rahul Kande; Hammond Pearce; Benjamin Tan 001; Brendan Dolan-Gavitt; Shailja Thakur; Ramesh Karri; Jeyavijayan Rajendran (CoRR, 2023)

StarCoder: may the source be with you! - Raymond Li; Loubna Ben Allal; Yangtian Zi; Niklas Muennighoff; Denis Kocetkov; Chenghao Mou; Marc Marone; Christopher Akiki; Jia Li 015; Jenny Chim; Qian Liu 012; Evgenii Zheltonozhskii; et al. (Trans. Mach. Learn. Res., 2023)

Lost at C: Data from the Security-focused User Study. - Gustavo Sandoval; Hammond Pearce; Teo Nys; Ramesh Karri; Siddharth Garg; Brendan Dolan-Gavitt (Zenodo, 2023)

Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing. - Arvind S. Raj; Wil Gibbs; Fangzhou Dong; Jayakrishna Menon Vadayath; Michael Tompkins; Steven Wirsz; Yibo Liu; Zhenghao Hu; Chang Zhu; Gokulkrishna Praveen Menon; Brendan Dolan-Gavitt; Adam Doupé; et al. (CCS, 2024)

Is "AI" Useful for Fuzzing? (Keynote). - Brendan Dolan-Gavitt (FUZZING, 2024)

NYU CTF Bench: A Scalable Open-Source Benchmark Dataset for Evaluating LLMs in Offensive Security. - Minghao Shao; Sofija Jancheska; Meet Udeshi; Brendan Dolan-Gavitt; Haoran Xi; Kimberly Milner; Boyuan Chen 004; Max Yin; Siddharth Garg; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; et al. (NeurIPS, 2024)

An Empirical Evaluation of LLMs for Solving Offensive Security Challenges. - Minghao Shao; Boyuan Chen 004; Sofija Jancheska; Brendan Dolan-Gavitt; Siddharth Garg; Ramesh Karri; Muhammad Shafique 001 (CoRR, 2024)

Model Cascading for Code: Reducing Inference Costs with Model Cascading for LLM Based Code Generation. - Boyuan Chen 004; Mingzhi Zhu; Brendan Dolan-Gavitt; Muhammad Shafique 001; Siddharth Garg (CoRR, 2024)

NYU CTF Dataset: A Scalable Open-Source Benchmark Dataset for Evaluating LLMs in Offensive Security. - Minghao Shao; Sofija Jancheska; Meet Udeshi; Brendan Dolan-Gavitt; Haoran Xi; Kimberly Milner; Boyuan Chen 004; Max Yin; Siddharth Garg; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; et al. (CoRR, 2024)

ARVO: Atlas of Reproducible Vulnerabilities for Open Source Software. - Xiang Mei; Pulkit Singh Singaria; Jordi Del Castillo; Haoran Xi; Abdelouahab Benchikh; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; Hammond Pearce; Brendan Dolan-Gavitt (CoRR, 2024)

EnIGMA: Enhanced Interactive Generative Model Agent for CTF Challenges. - Talor Abramovich; Meet Udeshi; Minghao Shao; Kilian Lieret; Haoran Xi; Kimberly Milner; Sofija Jancheska; John Yang 002; Carlos E. Jimenez; Farshad Khorrami; Prashanth Krishnamurthy; Brendan Dolan-Gavitt; et al. (CoRR, 2024)

(Security) Assertions by Large Language Models. - Rahul Kande; Hammond Pearce; Benjamin Tan 001; Brendan Dolan-Gavitt; Shailja Thakur; Ramesh Karri; Jeyavijayan Rajendran (IEEE Trans. Inf. Forensics Secur., 2024)

VeriGen: A Large Language Model for Verilog Code Generation. - Shailja Thakur; Baleegh Ahmad; Hammond Pearce; Benjamin Tan 001; Brendan Dolan-Gavitt; Ramesh Karri; Siddharth Garg (ACM Trans. Design Autom. Electr. Syst., 2024)

Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions. - Hammond Pearce; Baleegh Ahmad; Benjamin Tan 001; Brendan Dolan-Gavitt; Ramesh Karri (Commun. ACM, 2025)

D-CIPHER: Dynamic Collaborative Intelligent Agents with Planning and Heterogeneous Execution for Enhanced Reasoning in Offensive Security. - Meet Udeshi; Minghao Shao; Haoran Xi; Nanda Rani; Kimberly Milner; Venkata Sai Charan Putrevu; Brendan Dolan-Gavitt; Sandeep Kumar Shukla; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; Muhammad Shafique 001 (CoRR, 2025)

CRAKEN: Cybersecurity LLM Agent with Knowledge-Based Execution. - Minghao Shao; Haoran Xi; Nanda Rani; Meet Udeshi; Venkata Sai Charan Putrevu; Kimberly Milner; Brendan Dolan-Gavitt; Sandeep Kumar Shukla; Prashanth Krishnamurthy; Farshad Khorrami; Ramesh Karri; Muhammad Shafique 001 (CoRR, 2025)

ELFuzz: Efficient Input Generation via LLM-driven Synthesis Over Fuzzer Space. - Chuyang Chen; Brendan Dolan-Gavitt; Zhiqiang Lin 001 (CoRR, 2025)