Vulnerability Extrapolation: Assisted Discovery of Vulnerabilities Using Machine Learning. - Fabian Yamaguchi; Felix "FX" Lindner; Konrad Rieck (WOOT, 2011)

Generalized vulnerability extrapolation using abstract syntax trees. - Fabian Yamaguchi; Markus Lottmann; Konrad Rieck (ACSAC, 2012)

Structural detection of android malware using embedded call graphs. - Hugo Gascon; Fabian Yamaguchi; Daniel Arp; Konrad Rieck (AISec, 2013)

Chucky: exposing missing checks in source code for vulnerability discovery. - Fabian Yamaguchi; Christian Wressnegger; Hugo Gascon; Konrad Rieck (CCS, 2013)

Modeling and Discovering Vulnerabilities with Code Property Graphs. - Fabian Yamaguchi; Nico Golde; Daniel Arp; Konrad Rieck (IEEE Symposium on Security and Privacy, 2014)

Torben: A Practical Side-Channel Attack for Deanonymizing Tor Communication. - Daniel Arp; Fabian Yamaguchi; Konrad Rieck (AsiaCCS, 2015)

VCCFinder: Finding Potential Vulnerabilities in Open-Source Projects to Assist Code Audits. - Henning Perl; Sergej Dechand; Matthew Smith 001; Daniel Arp; Fabian Yamaguchi; Konrad Rieck; Sascha Fahl; Yasemin Acar (CCS, 2015)

Pulsar: Stateful Black-Box Fuzzing of Proprietary Network Protocols. - Hugo Gascon; Christian Wressnegger; Fabian Yamaguchi; Daniel Arp; Konrad Rieck (SecureComm, 2015)

Automatic Inference of Search Patterns for Taint-Style Vulnerabilities. - Fabian Yamaguchi; Alwin Maier; Hugo Gascon; Konrad Rieck (IEEE Symposium on Security and Privacy, 2015)

De-anonymizing Programmers via Code Stylometry. - Aylin Caliskan Islam; Richard E. Harang; Andrew Liu; Arvind Narayanan; Clare R. Voss; Fabian Yamaguchi; Rachel Greenstadt (USENIX Security Symposium, 2015)

Pattern-Based Vulnerability Discovery. - Fabian Yamaguchi (2015)

Twice the Bits, Twice the Trouble: Vulnerabilities Induced by Migrating to 64-Bit Platforms. - Christian Wressnegger; Fabian Yamaguchi; Alwin Maier; Konrad Rieck (CCS, 2016)

Towards Vulnerability Discovery Using Staged Program Analysis. - Bhargava Shastry; Fabian Yamaguchi; Konrad Rieck; Jean-Pierre Seifert (DIMVA, 2016)

Comprehensive Analysis and Detection of Flash-Based Malware. - Christian Wressnegger; Fabian Yamaguchi; Daniel Arp; Konrad Rieck (DIMVA, 2016)

From Malware Signatures to Anti-Virus Assisted Attacks. - Christian Wressnegger; Kevin Freeman; Fabian Yamaguchi; Konrad Rieck (CoRR, 2016)

Die Codeanalyseplattform "Octopus". - Fabian Yamaguchi; Konrad Rieck (Datenschutz und Datensicherheit, 2016)

Automatically Inferring Malware Signatures for Anti-Virus Assisted Attacks. - Christian Wressnegger; Kevin Freeman; Fabian Yamaguchi; Konrad Rieck (AsiaCCS, 2017)

Efficient and Flexible Discovery of PHP Application Vulnerabilities. - Michael Backes 001; Konrad Rieck; Malte Skoruppa; Ben Stock; Fabian Yamaguchi (EuroS&P, 2017)

Static Program Analysis as a Fuzzing Aid. - Bhargava Shastry; Markus Leutner; Tobias Fiebig; Kashyap Thimmaraju; Fabian Yamaguchi; Konrad Rieck; Stefan Schmid 001; Jean-Pierre Seifert; Anja Feldmann (RAID, 2017)

Static Exploration of Taint-Style Vulnerabilities Found by Fuzzing. - Bhargava Shastry; Federico Maggi 001; Fabian Yamaguchi; Konrad Rieck; Jean-Pierre Seifert (WOOT, 2017)

Leveraging Flawed Tutorials for Seeding Large-Scale Web Vulnerability Discovery. - Tommi Unruh; Bhargava Shastry; Malte Skoruppa; Federico Maggi 001; Konrad Rieck; Jean-Pierre Seifert; Fabian Yamaguchi (WOOT, 2017)

64-Bit Migration Vulnerabilities. - Christian Wressnegger; Fabian Yamaguchi; Alwin Maier; Konrad Rieck (it Inf. Technol., 2017)

Pattern-based methods for vulnerability discovery. - Fabian Yamaguchi (it Inf. Technol., 2017)

When Coding Style Survives Compilation: De-anonymizing Programmers from Executable Binaries. - Aylin Caliskan; Fabian Yamaguchi; Edwin Dauber; Richard E. Harang; Konrad Rieck; Rachel Greenstadt; Arvind Narayanan (NDSS, 2018)

Testability Tarpits: the Impact of Code Patterns on the Security Testing of Web Applications. - Feras Al Kassar; Giulia Clerici; Luca Compagna; Davide Balzarotti; Fabian Yamaguchi (NDSS, 2022)

Learning Type Inference for Enhanced Dataflow Analysis. - Lukas Seidel; Sedick David Baker Effendi; Xavier Pinho; Konrad Rieck; Brink van der Merwe; Fabian Yamaguchi (ESORICS (4), 2023)

Scalable Language Agnostic Taint Tracking using Explicit Data Dependencies. - Sedick David Baker Effendi; Xavier Pinho; Andrei Michael Dreyer; Fabian Yamaguchi (SOAP@PLDI, 2025)