Designing and Implementing Inter-Client Communication in the O2 Object-Oriented Database Management System. - Antonio Carzaniga; Gian Pietro Picco; Giovanni Vigna (ISOOMS, 1994)

Analyzing Mobile Code Languages. - Gianpaolo Cugola; Carlo Ghezzi; Gian Pietro Picco; Giovanni Vigna (Mobile Object Systems, 1996)

Designing Distributed Applications with Mobile Code Paradigms. - Antonio Carzaniga; Gian Pietro Picco; Giovanni Vigna (ICSE, 1997)

Mobile Code Paradigms and Technologies: A Case Study. - Carlo Ghezzi; Giovanni Vigna (Mobile Agents, 1997)

Software Engineering Issues for Network Computing. - Carlo Ghezzi; Giovanni Vigna (Requirements Targeting Software and Systems Engineering, 1997)

NetSTAT: A Network-Based Intrusion Detection Approach. - Giovanni Vigna; Richard A. Kemmerer (ACSAC, 1998)

Towards a Software Engineering Approach to Web Site Development. - Francesco Coda; Carlo Ghezzi; Giovanni Vigna; Franca Garzotto (IWSSD, 1998)

Cryptographic Traces for Mobile Agents. - Giovanni Vigna (Mobile Agents and Security, 1998)

Understanding Code Mobility. - Alfonso Fuggetta; Gian Pietro Picco; Giovanni Vigna (IEEE Trans. Software Eng., 1998)

NetSTAT: A Network-based Intrusion Detection System. - Giovanni Vigna; Richard A. Kemmerer (J. Comput. Secur., 1999)

Evaluating the Security of Three Java-Based Mobile Agent Systems. - Sebastian Fischmeister; Giovanni Vigna; Richard A. Kemmerer (Mobile Agents, 2001)

Designing a Web of Highly-Configurable Intrusion Detection Sensors. - Giovanni Vigna; Richard A. Kemmerer; Per Blix (Recent Advances in Intrusion Detection, 2001)

Security Testing of an Online Banking Service. - André L. M. dos Santos; Giovanni Vigna; Richard A. Kemmerer (E-Commerce Security and Privacy, 2001)

Composable Tools For Network Discovery and Security Analysis. - Giovanni Vigna; Fredrik Valeur; Jingyu Zhou; Richard A. Kemmerer (ACSAC, 2002)

Sensor-based intrusion detection for intra-domain distance-vector routing. - Vishal Mittal; Giovanni Vigna (CCS, 2002)

Mnemosyne: Designing and Implementing Network Short-Term Memory. - Giovanni Vigna; Andrew Mitchel (ICECCS, 2002)

An Intrusion Detection System for Aglets. - Giovanni Vigna; Bryan Cassell; Dave Fayram (Mobile Agents, 2002)

Stateful Intrusion Detection for High-Speed Networks. - Christopher Krügel; Fredrik Valeur; Giovanni Vigna; Richard A. Kemmerer (S&P, 2002)

STATL: An Attack Language for State-Based Intrusion Detection. - Steven T. Eckmann; Giovanni Vigna; Richard A. Kemmerer (J. Comput. Secur., 2002)

An Experience Developing an IDS Stimulator for the Black-Box Testing of Network Intrusion Detection Systems. - Darren Mutz; Giovanni Vigna; Richard A. Kemmerer (ACSAC, 2003)

A Stateful Intrusion Detection System for World-Wide Web Servers. - Giovanni Vigna; William K. Robertson; Vishal Kher; Richard A. Kemmerer (ACSAC, 2003)

Anomaly detection of web-based attacks. - Christopher Krügel; Giovanni Vigna (CCS, 2003)

On the Detection of Anomalous System Call Arguments. - Christopher Krügel; Darren Mutz; Fredrik Valeur; Giovanni Vigna (ESORICS, 2003)

A Topological Characterization of TCP/IP Security. - Giovanni Vigna (FME, 2003)

Internet Security and Intrusion Detection. - Richard A. Kemmerer; Giovanni Vigna (ICSE, 2003)

Teaching Network Security Through Live Exercises. - Giovanni Vigna (World Conference on Information Security Education, 2003)

Designing and implementing a family of intrusion detection systems. - Giovanni Vigna; Fredrik Valeur; Richard A. Kemmerer (ESEC / SIGSOFT FSE, 2003)

Detecting Malicious Java Code Using Virtual Machine Auditing. - Sunil Soman; Chandra Krintz; Giovanni Vigna (USENIX Security Symposium, 2003)

Detecting Kernel-Level Rootkits Through Binary Analysis. - Christopher Krügel; William K. Robertson; Giovanni Vigna (ACSAC, 2004)

An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks. - Giovanni Vigna; Sumit Gwalani; Kavitha Srinivasan; Elizabeth M. Belding-Royer; Richard A. Kemmerer (ACSAC, 2004)

Detecting Attacks That Exploit Application-Logic Errors Through Application-Level Auditing. - Jingyu Zhou; Giovanni Vigna (ACSAC, 2004)

Testing network-based intrusion detection signatures using mutant exploits. - Giovanni Vigna; William K. Robertson; Davide Balzarotti (CCS, 2004)

Mobile Agents: Ten Reasons For Failure. - Giovanni Vigna (Mobile Data Management, 2004)

Static Disassembly of Obfuscated Binaries. - Christopher Krügel; William K. Robertson; Fredrik Valeur; Giovanni Vigna (USENIX Security Symposium, 2004)

Using Alert Verification to Identify Successful Intrusion Attempts. - Christopher Kruegel; William K. Robertson; Giovanni Vigna (Prax. Inf.verarb. Kommun., 2004)

A Comprehensive Approach to Intrusion Detection Alert Correlation. - Fredrik Valeur; Giovanni Vigna; Christopher Krügel; Richard A. Kemmerer (IEEE Trans. Dependable Secur. Comput., 2004)

Intrusion Detection and Correlation - Challenges and Solutions - Christopher Kruegel; Fredrik Valeur; Giovanni Vigna (Springer, 2005)

A Learning-Based Approach to the Detection of SQL Attacks. - Fredrik Valeur; Darren Mutz; Giovanni Vigna (DIMVA, 2005)

Exploiting OS-Level Mechanisms to Implement Mobile Code Security. - Viktoria Felmetsger; Giovanni Vigna (ICECCS, 2005)

Detecting Malicious JavaScript Code in Mozilla. - Oystein Hallaraker; Giovanni Vigna (ICECCS, 2005)

Polymorphic Worm Detection Using Structural Information of Executables. - Christopher Krügel; Engin Kirda; Darren Mutz; William K. Robertson; Giovanni Vigna (RAID, 2005)

Automating Mimicry Attacks Using Static Binary Analysis. - Christopher Kruegel; Engin Kirda; Darren Mutz; William K. Robertson; Giovanni Vigna (USENIX Security Symposium, 2005)

A multi-model approach to the detection of web-based attacks. - Christopher Krügel; Giovanni Vigna; William K. Robertson (Comput. Networks, 2005)

Hi-DRA: Intrusion Detection for Internet Security. - Richard A. Kemmerer; Giovanni Vigna (Proc. IEEE, 2005)

Static Detection of Vulnerabilities in x86 Executables. - Marco Cova; Viktoria Felmetsger; Greg Banks; Giovanni Vigna (ACSAC, 2006)

Vulnerability Analysis of MMS User Agents. - Collin Mulliner; Giovanni Vigna (ACSAC, 2006)

Digital Forensic Reconstruction and the Virtual Security Testbed ViSe. - André Årnes; Paul Haas; Giovanni Vigna; Richard A. Kemmerer (DIMVA, 2006)

Using Labeling to Prevent Cross-Service Attacks Against Smart Phones. - Collin Mulliner; Giovanni Vigna; David Dagon; Wenke Lee (DIMVA, 2006)

SNOOZE: Toward a Stateful NetwOrk prOtocol fuzZEr. - Greg Banks; Marco Cova; Viktoria Felmetsger; Kevin C. Almeroth; Richard A. Kemmerer; Giovanni Vigna (ISC, 2006)

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks. - William K. Robertson; Giovanni Vigna; Christopher Krügel; Richard A. Kemmerer (NDSS, 2006)

Using Hidden Markov Models to Evaluate the Risks of Intrusions. - André Årnes; Fredrik Valeur; Giovanni Vigna; Richard A. Kemmerer (RAID, 2006)

Noxes: a client-side solution for mitigating cross-site scripting attacks. - Engin Kirda; Christopher Krügel; Giovanni Vigna; Nenad Jovanovic (SAC, 2006)

An anomaly-driven reverse proxy for web applications. - Fredrik Valeur; Giovanni Vigna; Christopher Krügel; Engin Kirda (SAC, 2006)

Anomalous system call detection. - Darren Mutz; Fredrik Valeur; Giovanni Vigna; Christopher Krügel (ACM Trans. Inf. Syst. Secur., 2006)

Feature Omission Vulnerabilities: Thwarting Signature Generation for Polymorphic Worms. - Matthew Van Gundy; Hao Chen 003; Zhendong Su 001; Giovanni Vigna (ACSAC, 2007)

Improving Signature Testing through Dynamic Data Flow Analysis. - Christopher Kruegel; Davide Balzarotti; William K. Robertson; Giovanni Vigna (ACSAC, 2007)

Multi-module vulnerability analysis of web-based applications. - Davide Balzarotti; Marco Cova; Viktoria Felmetsger; Giovanni Vigna (CCS, 2007)

Is Code Still Moving Around? Looking Back at a Decade of Code Mobility. - Antonio Carzaniga; Gian Pietro Picco; Giovanni Vigna (ICSE Companion, 2007)

Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. - Philipp Vogt; Florian Nentwich; Nenad Jovanovic; Engin Kirda; Christopher Krügel; Giovanni Vigna (NDSS, 2007)

Swaddler: An Approach for the Anomaly-Based Detection of State Violations in Web Applications. - Marco Cova; Davide Balzarotti; Viktoria Felmetsger; Giovanni Vigna (RAID, 2007)

Exploiting Execution Context for the Detection of Anomalous System Calls. - Darren Mutz; William K. Robertson; Giovanni Vigna; Richard A. Kemmerer (RAID, 2007)

Vulnerability Analysis of Web-based Applications. - Marco Cova; Viktoria Felmetsger; Giovanni Vigna (Test and Analysis of Web Services, 2007)

Catch Me, If You Can: Evading Network Signatures with Web-based Polymorphic Worms. - Matthew Van Gundy; Davide Balzarotti; Giovanni Vigna (WOOT, 2007)

Extending .NET security to unmanaged code. - Patrick Klinkoff; Engin Kirda; Christopher Kruegel; Giovanni Vigna (Int. J. Inf. Sec., 2007)

Using a virtual security testbed for digital forensic reconstruction. - André Årnes; Paul Haas; Giovanni Vigna; Richard A. Kemmerer (J. Comput. Virol., 2007)

Static Disassembly and Code Analysis. - Giovanni Vigna (Malware Detection, 2007)

A Parallel Architecture for Stateful, High-Speed Intrusion Detection. - Luca Foschini 002; Ashish V. Thapliyal; Lorenzo Cavallaro; Christopher Kruegel; Giovanni Vigna (ICISS, 2008)

Are your votes really counted?: testing the security of real-world electronic voting systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (ISSTA, 2008)

Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications. - Davide Balzarotti; Marco Cova; Viktoria Felmetsger; Nenad Jovanovic; Engin Kirda; Christopher Kruegel; Giovanni Vigna (SP, 2008)

ClearShot: Eavesdropping on Keyboard Input from Video. - Davide Balzarotti; Marco Cova; Giovanni Vigna (SP, 2008)

There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits. - Marco Cova; Christopher Kruegel; Giovanni Vigna (WOOT, 2008)

Analyzing and Detecting Malicious Flash Advertisements. - Sean Ford; Marco Cova; Christopher Kruegel; Giovanni Vigna (ACSAC, 2009)

Your botnet is my botnet: analysis of a botnet takeover. - Brett Stone-Gross; Marco Cova; Lorenzo Cavallaro; Bob Gilbert; Martin Szydlowski; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (CCS, 2009)

Automated Spyware Collection and Analysis. - Andreas Stamminger; Christopher Kruegel; Giovanni Vigna; Engin Kirda (ISC, 2009)

Protecting a Moving Target: Addressing Web Application Concept Drift. - Federico Maggi 001; William K. Robertson; Christopher Krügel; Giovanni Vigna (RAID, 2009)

Static Enforcement of Web Application Integrity Through Strong Typing. - William K. Robertson; Giovanni Vigna (USENIX Security Symposium, 2009)

Client-side cross-site scripting protection. - Engin Kirda; Nenad Jovanovic; Christopher Kruegel; Giovanni Vigna (Comput. Secur., 2009)

Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries. - Giovanni Vigna; Fredrik Valeur; Davide Balzarotti; William K. Robertson; Christopher Kruegel; Engin Kirda (J. Comput. Secur., 2009)

Detecting spammers on social networks. - Gianluca Stringhini; Christopher Kruegel; Giovanni Vigna (ACSAC, 2010)

Network intrusion detection: dead or alive? - Giovanni Vigna (ACSAC, 2010)

Organizing Large Scale Hacking Competitions. - Nicholas Childers; Bryce Boe; Lorenzo Cavallaro; Ludovico Cavedon; Marco Cova; Manuel Egele; Giovanni Vigna (DIMVA, 2010)

Why Johnny Can't Pentest: An Analysis of Black-Box Web Vulnerability Scanners. - Adam Doupé; Marco Cova; Giovanni Vigna (DIMVA, 2010)

Are BGP Routers Open to Attack? An Experiment. - Ludovico Cavedon; Christopher Kruegel; Giovanni Vigna (iNetSec, 2010)

Efficient Detection of Split Personalities in Malware. - Davide Balzarotti; Marco Cova; Christoph Karlberger; Engin Kirda; Christopher Kruegel; Giovanni Vigna (NDSS, 2010)

Effective Anomaly Detection with Scarce Training Data. - William K. Robertson; Federico Maggi 001; Christopher Kruegel; Giovanni Vigna (NDSS, 2010)

Toward Automated Detection of Logic Vulnerabilities in Web Applications. - Viktoria Felmetsger; Ludovico Cavedon; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2010)

Detection and analysis of drive-by-download attacks and malicious JavaScript code. - Marco Cova; Christopher Krügel; Giovanni Vigna (WWW, 2010)

An Experience in Testing the Security of Real-World Electronic Voting Systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (IEEE Trans. Software Eng., 2010)

Nexat: a history-based approach to predict attacker actions. - Casey Cipriano; Ali Zand; Amir Houmansadr; Christopher Kruegel; Giovanni Vigna (ACSAC, 2011)

Hit 'em where it hurts: a live security exercise on cyber situational awareness. - Adam Doupé; Manuel Egele; Benjamin Caillat; Gianluca Stringhini; Gorkem Yakin; Ali Zand; Ludovico Cavedon; Giovanni Vigna (ACSAC, 2011)

BareBox: efficient malware analysis on bare-metal. - Dhilung Kirat; Giovanni Vigna; Christopher Kruegel (ACSAC, 2011)

Fear the EAR: discovering and mitigating execution after redirect vulnerabilities. - Adam Doupé; Bryce Boe; Christopher Kruegel; Giovanni Vigna (CCS, 2011)

MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper). - Greg Banks; Aristide Fattori; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (DIMVA, 2011)

Escape from Monkey Island: Evading High-Interaction Honeyclients. - Alexandros Kapravelos; Marco Cova; Christopher Kruegel; Giovanni Vigna (DIMVA, 2011)

Challenges for Dynamic Analysis of iOS Applications. - Martin Szydlowski; Manuel Egele; Christopher Kruegel; Giovanni Vigna (iNetSeC, 2011)

Understanding fraudulent activities in online ad exchanges. - Brett Stone-Gross; Ryan Stevens; Apostolis Zarras; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (Internet Measurement Conference, 2011)

Peering through the iframe. - Brett Stone-Gross; Marco Cova; Christopher Kruegel; Giovanni Vigna (INFOCOM, 2011)

The Underground Economy of Spam: A Botmaster's Perspective of Coordinating Large-Scale Spam Campaigns. - Brett Stone-Gross; Thorsten Holz; Gianluca Stringhini; Giovanni Vigna (LEET, 2011)

PiOS: Detecting Privacy Leaks in iOS Applications. - Manuel Egele; Christopher Kruegel; Engin Kirda; Giovanni Vigna (NDSS, 2011)

Shellzer: A Tool for the Dynamic Analysis of Malicious Shellcode. - Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (RAID, 2011)

Dymo: Tracking Dynamic Code Identity. - Bob Gilbert; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (RAID, 2011)

Getting the Face Behind the Squares: Reconstructing Pixelized Video Streams. - Ludovico Cavedon; Luca Foschini 002; Giovanni Vigna (WOOT, 2011)

BOTMAGNIFIER: Locating Spambots on the Internet. - Gianluca Stringhini; Thorsten Holz; Brett Stone-Gross; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2011)

The Underground Economy of Fake Antivirus Software. - Brett Stone-Gross; Ryan Abman; Richard A. Kemmerer; Christopher Kruegel; Douglas G. Steigerwald; Giovanni Vigna (WEIS (Springer Volume), 2011)

Prophiler: a fast filter for the large-scale detection of malicious web pages. - Davide Canali; Marco Cova; Giovanni Vigna; Christopher Kruegel (WWW, 2011)

Analysis of a Botnet Takeover. - Brett Stone-Gross; Marco Cova; Bob Gilbert; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (IEEE Secur. Priv., 2011)

The 2010 International Capture the Flag Competition. - Giovanni Vigna (IEEE Secur. Priv., 2011)

Jarhead analysis and detection of malicious Java applets. - Johannes Schlumberger; Christopher Kruegel; Giovanni Vigna (ACSAC, 2012)

Blacksheep: detecting compromised hosts in homogeneous crowds. - Antonio Bianchi; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (CCS, 2012)

You are what you include: large-scale evaluation of remote javascript inclusions. - Nick Nikiforakis; Luca Invernizzi; Alexandros Kapravelos; Steven Van Acker; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (CCS, 2012)

BotFinder: finding bots in network traffic without deep packet inspection. - Florian Tegeler; Xiaoming Fu 001; Giovanni Vigna; Christopher Kruegel (CoNEXT, 2012)

Tracking Memory Writes for Malware Classification and Code Reuse Identification. - André Ricardo Abed Grégio; Paulo Lício de Geus; Christopher Kruegel; Giovanni Vigna (DIMVA, 2012)

A Static, Packer-Agnostic Filter to Detect Similar Malware Samples. - Grégoire Jacob; Paolo Milani Comparetti; Matthias Neugschwandtner; Christopher Kruegel; Giovanni Vigna (DIMVA, 2012)

FlashDetect: ActionScript 3 Malware Detection. - Timon Van Overveldt; Christopher Kruegel; Giovanni Vigna (RAID, 2012)

Malware Riding Badware: Challenges in Analyzing (Malicious/Benign) Web Applications. - Giovanni Vigna (RV, 2012)

EvilSeed: A Guided Approach to Finding Malicious Web Pages. - Luca Invernizzi; Paolo Milani Comparetti; Stefano Benvenuti; Christopher Kruegel; Marco Cova; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2012)

Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner. - Adam Doupé; Ludovico Cavedon; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2012)

PUBCRAWL: Protecting Users and Businesses from CRAWLers. - Grégoire Jacob; Engin Kirda; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2012)

B@bel: Leveraging Email Delivery for Spam Mitigation. - Gianluca Stringhini; Manuel Egele; Apostolis Zarras; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2012)

Poultry markets: on the underground economy of twitter followers. - Gianluca Stringhini; Manuel Egele; Christopher Kruegel; Giovanni Vigna (Comput. Commun. Rev., 2012)

Message in a bottle: sailing past censorship. - Luca Invernizzi; Christopher Kruegel; Giovanni Vigna (ACSAC, 2013)

SigMal: a static signal processing based malware triage. - Dhilung Kirat; Lakshmanan Nataraj; Giovanni Vigna; B. S. Manjunath (ACSAC, 2013)

Delta: automatic identification of unknown web-based infection campaigns. - Kevin Borgolte; Christopher Kruegel; Giovanni Vigna (CCS, 2013)

deDacota: toward preventing server-side XSS via automatic code and data separation. - Adam Doupé; Weidong Cui; Mariusz H. Jakubowski; Marcus Peinado; Christopher Kruegel; Giovanni Vigna (CCS, 2013)

Shady paths: leveraging surfing crowds to detect malicious web pages. - Gianluca Stringhini; Christopher Kruegel; Giovanni Vigna (CCS, 2013)

Formulating Cyber-Security as Convex Optimization Problems. - Kyriakos G. Vamvoudakis; João P. Hespanha 001; Richard A. Kemmerer; Giovanni Vigna (CPSW@CISS, 2013)

Follow the green: growth and dynamics in twitter follower markets. - Gianluca Stringhini; Gang Wang 011; Manuel Egele; Christopher Kruegel; Giovanni Vigna; Haitao Zheng 001; Ben Y. Zhao (Internet Measurement Conference, 2013)

COMPA: Detecting Compromised Accounts on Social Networks. - Manuel Egele; Gianluca Stringhini; Christopher Krügel; Giovanni Vigna (NDSS, 2013)

Practical Attacks against the I2P Network. - Christoph Egger 001; Johannes Schlumberger; Christopher Kruegel; Giovanni Vigna (RAID, 2013)

EARs in the wild: large-scale analysis of execution after redirect vulnerabilities. - Pierre Payet; Adam Doupé; Christopher Kruegel; Giovanni Vigna (SAC, 2013)

Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. - Nick Nikiforakis; Alexandros Kapravelos; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2013)

Revolver: An Automated Approach to the Detection of Evasive Web-based Malware. - Alexandros Kapravelos; Yan Shoshitaishvili; Marco Cova; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2013)

Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services. - Ruoyu Wang 001; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2013)

Two years of short URLs internet measurement: security threats and countermeasures. - Federico Maggi 001; Alessandro Frossi; Stefano Zanero; Gianluca Stringhini; Brett Stone-Gross; Christopher Kruegel; Giovanni Vigna (WWW, 2013)

The harvester, the botmaster, and the spammer: on the relations between the different actors in the spam landscape. - Gianluca Stringhini; Oliver Hohlfeld; Christopher Kruegel; Giovanni Vigna (AsiaCCS, 2014)

PExy: The Other Side of Exploit Kits. - Giancarlo De Maio; Alexandros Kapravelos; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (DIMVA, 2014)

The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements. - Apostolis Zarras; Alexandros Kapravelos; Gianluca Stringhini; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (Internet Measurement Conference, 2014)

Rippler: Delay injection for service dependency detection. - Ali Zand; Giovanni Vigna; Richard A. Kemmerer; Christopher Kruegel (INFOCOM, 2014)

Nazca: Detecting Malware Distribution in Large-Scale Networks. - Luca Invernizzi; Stanislav Miskovic; Ruben Torres; Christopher Kruegel; Sabyasachi Saha; Giovanni Vigna; Sung-Ju Lee; Marco Mellia (NDSS, 2014)

Execute This! Analyzing Unsafe and Malicious Dynamic Code Loading in Android Applications. - Sebastian Poeplau; Yanick Fratantonio; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (NDSS, 2014)

Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel. - Yinzhi Cao; Yan Shoshitaishvili; Kevin Borgolte; Christopher Krügel; Giovanni Vigna; Yan Chen 004 (RAID, 2014)

Eyes of a Human, Eyes of a Program: Leveraging Different Views of the Web for Analysis and Detection. - Jacopo Corbetta; Luca Invernizzi; Christopher Krügel; Giovanni Vigna (RAID, 2014)

Do you feel lucky?: a large-scale analysis of risk-rewards trade-offs in cyber security. - Yan Shoshitaishvili; Luca Invernizzi; Adam Doupé; Giovanni Vigna (SAC, 2014)

Extracting probable command and control signatures for detecting botnets. - Ali Zand; Giovanni Vigna; Xifeng Yan; Christopher Kruegel (SAC, 2014)

The Tricks of the Trade: What Makes Spam Campaigns Successful? - Jane Iedemska; Gianluca Stringhini; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy Workshops, 2014)

Hulk: Eliciting Malicious Behavior in Browser Extensions. - Alexandros Kapravelos; Chris Grier; Neha Chachra; Christopher Kruegel; Giovanni Vigna; Vern Paxson (USENIX Security Symposium, 2014)

BareCloud: Bare-metal Analysis-based Evasive Malware Detection. - Dhilung Kirat; Giovanni Vigna; Christopher Kruegel (USENIX Security Symposium, 2014)

Ten Years of iCTF: The Good, The Bad, and The Ugly. - Giovanni Vigna; Kevin Borgolte; Jacopo Corbetta; Adam Doupé; Yanick Fratantonio; Luca Invernizzi; Dhilung Kirat; Yan Shoshitaishvili (3GSE, 2014)

Relevant change detection: a framework for the precise extraction of modified and novel web-based content as a filtering technique for analysis engines. - Kevin Borgolte; Christopher Kruegel; Giovanni Vigna (WWW (Companion Volume), 2014)

Stranger danger: exploring the ecosystem of ad-based URL shortening services. - Nick Nikiforakis; Federico Maggi 001; Gianluca Stringhini; M. Zubair Rafique; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna; Stefano Zanero (WWW, 2014)

On the Workings and Current Practices of Web-Based Device Fingerprinting. - Nick Nikiforakis; Alexandros Kapravelos; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (IEEE Secur. Priv., 2014)

Grab 'n Run: Secure and Practical Dynamic Code Loading for Android Applications. - Luca Falsina; Yanick Fratantonio; Stefano Zanero; Christopher Kruegel; Giovanni Vigna; Federico Maggi 001 (ACSAC, 2015)

BareDroid: Large-Scale Analysis of Android Apps on Real Devices. - Simone Mutti; Yanick Fratantonio; Antonio Bianchi; Luca Invernizzi; Jacopo Corbetta; Dhilung Kirat; Christopher Kruegel; Giovanni Vigna (ACSAC, 2015)

Know Your Achilles' Heel: Automatic Detection of Network Critical Services. - Ali Zand; Amir Houmansadr; Giovanni Vigna; Richard A. Kemmerer; Christopher Kruegel (ACSAC, 2015)

NJAS: Sandboxing Unmodified Applications in non-rooted Devices Running stock Android. - Antonio Bianchi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (SPSM@CCS, 2015)

Drops for Stuff: An Analysis of Reshipping Mule Scams. - Shuang Hao 001; Kevin Borgolte; Nick Nikiforakis; Gianluca Stringhini; Manuel Egele; Michael Eubanks; Brian Krebs; Giovanni Vigna (CCS, 2015)

MalGene: Automatic Extraction of Malware Analysis Evasion Signature. - Dhilung Kirat; Giovanni Vigna (CCS, 2015)

On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. - Yanick Fratantonio; Antonio Bianchi; William K. Robertson; Manuel Egele; Christopher Kruegel; Engin Kirda; Giovanni Vigna (DIMVA, 2015)

Prison: Tracking Process Interactions to Contain Malware. - Benjamin Caillat; Bob Gilbert; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (HPCC/CSS/ICESS, 2015)

EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework. - Yinzhi Cao; Yanick Fratantonio; Antonio Bianchi; Manuel Egele; Christopher Kruegel; Giovanni Vigna; Yan Chen 004 (NDSS, 2015)

Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware. - Yan Shoshitaishvili; Ruoyu Wang 001; Christophe Hauser; Christopher Kruegel; Giovanni Vigna (NDSS, 2015)

CLAPP: characterizing loops in Android applications. - Yanick Fratantonio; Aravind Machiry; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (ESEC/SIGSOFT FSE, 2015)

CLAPP: characterizing loops in Android applications (invited talk). - Yanick Fratantonio; Aravind Machiry; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (DeMobile@SIGSOFT FSE, 2015)

What the App is That? Deception and Countermeasures in the Android User Interface. - Antonio Bianchi; Jacopo Corbetta; Luca Invernizzi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2015)

Meerkat: Detecting Website Defacements through Image-based Object Recognition. - Kevin Borgolte; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2015)

How the ELF Ruined Christmas. - Alessandro Di Federico; Amat Cama; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2015)

EVILCOHORT: Detecting Communities of Malicious Accounts on Online Services. - Gianluca Stringhini; Pierre Mourlanne; Grégoire Jacob; Manuel Egele; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2015)

ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities. - Michael Weissbacher; William K. Robertson; Engin Kirda; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2015)

Framing Dependencies Introduced by Underground Commoditization. - Kurt Thomas; Danny Yuxing Huang; David Y. Wang; Elie Bursztein; Chris Grier; Tom Holt; Christopher Kruegel; Damon McCoy; Stefan Savage; Giovanni Vigna (WEIS, 2015)

Evaluating Cybersecurity Education Interventions: Three Case Studies. - Jelena Mirkovic; Melissa Dark; Wenliang Du; Giovanni Vigna; Tamara Denning (IEEE Secur. Priv., 2015)

Portrait of a Privacy Invasion. - Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (Proc. Priv. Enhancing Technol., 2015)

Drammer: Deterministic Rowhammer Attacks on Mobile Platforms. - Victor van der Veen; Yanick Fratantonio; Martina Lindorfer; Daniel Gruss; Clémentine Maurice; Giovanni Vigna; Herbert Bos; Kaveh Razavi; Cristiano Giuffrida (CCS, 2016)

Binary Analysis for Autonomous Hacking: Invited Abstract. - Giovanni Vigna (AsiaCCS, 2016)

Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy. - Vitor Monte Afonso; Paulo L. de Geus; Antonio Bianchi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna; Adam Doupé; Mario Polino (NDSS, 2016)

Driller: Augmenting Fuzzing Through Selective Symbolic Execution. - Nick Stephens; John Grosen; Christopher Salls; Andrew Dutcher; Ruoyu Wang 001; Jacopo Corbetta; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (NDSS, 2016)

Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory. - Marius Muench; Fabio Pagani; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna; Davide Balzarotti (RAID, 2016)

TriggerScope: Towards Detecting Logic Bombs in Android Applications. - Yanick Fratantonio; Antonio Bianchi; William K. Robertson; Engin Kirda; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2016)

SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis. - Yan Shoshitaishvili; Ruoyu Wang 001; Christopher Salls; Nick Stephens; Mario Polino; Andrew Dutcher; John Grosen; Siji Feng; Christophe Hauser; Christopher Krügel; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2016)

Exploitation and Mitigation of Authentication Schemes Based on Device-Public Information. - Antonio Bianchi; Eric Gustafson; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (ACSAC, 2017)

Piston: Uncooperative Remote Runtime Patching. - Christopher Salls; Yan Shoshitaishvili; Nick Stephens; Christopher Kruegel; Giovanni Vigna (ACSAC, 2017)

DIFUZE: Interface Aware Fuzzing for Kernel Drivers. - Jake Corina; Aravind Machiry; Christopher Salls; Yan Shoshitaishvili; Shuang Hao 001; Christopher Kruegel; Giovanni Vigna (CCS, 2017)

Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions. - Cheng Huang 003; Shuang Hao 001; Luca Invernizzi; Jiayong Liu; Yong Fang 002; Christopher Kruegel; Giovanni Vigna (AsiaCCS, 2017)

POISED: Spotting Twitter Spam Off the Beaten Paths. - Shirin Nilizadeh; Francois Labreche; Alireza Sedighian; Ali Zand; José M. Fernandez 001; Christopher Kruegel; Gianluca Stringhini; Giovanni Vigna (CCS, 2017)

Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance. - Yan Shoshitaishvili; Michael Weissbacher; Lukas Dresel; Christopher Salls; Ruoyu Wang 001; Christopher Kruegel; Giovanni Vigna (CCS, 2017)

How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games. - Tiffany Bao; Yan Shoshitaishvili; Ruoyu Wang 001; Christopher Kruegel; Giovanni Vigna; David Brumley (CSF, 2017)

Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis. - Andrea Continella; Yanick Fratantonio; Martina Lindorfer; Alessandro Puccetti; Ali Zand; Christopher Kruegel; Giovanni Vigna (NDSS, 2017)

BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments. - Aravind Machiry; Eric Gustafson; Chad Spensky; Christopher Salls; Nick Stephens; Ruoyu Wang 001; Antonio Bianchi; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (NDSS, 2017)

Ramblr: Making Reassembly Great Again. - Ruoyu Wang 001; Yan Shoshitaishvili; Antonio Bianchi; Aravind Machiry; John Grosen; Paul Grosen; Christopher Kruegel; Giovanni Vigna (NDSS, 2017)

Something from Nothing (There): Collecting Global IPv6 Datasets from DNS. - Tobias Fiebig; Kevin Borgolte; Shuang Hao 001; Christopher Kruegel; Giovanni Vigna (PAM, 2017)

DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers. - Aravind Machiry; Chad Spensky; Jake Corina; Nick Stephens; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2017)

BootStomp: On the Security of Bootloaders in Mobile Devices. - Nilo Redini; Aravind Machiry; Dipanjan Das 002; Yanick Fratantonio; Antonio Bianchi; Eric Gustafson; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2017)

Shell We Play A Game? CTF-as-a-service for Security Education. - Erik Trickel; Francesco Disperati; Eric Gustafson; Faezeh Kalantari; Mike Mabey; Naveen Tiwari; Yeganeh Safaei; Adam Doupé; Giovanni Vigna (ASE @ USENIX Security Symposium, 2017)

Demystifying DDoS as a Service. - Ali Zand; Gaspar Modelo-Howard; Alok Tongaonkar; Sung-Ju Lee; Christopher Kruegel; Giovanni Vigna (IEEE Commun. Mag., 2017)

On the Privacy and Security of the Ultrasound Ecosystem. - Vasilios Mavroudis; Shuang Hao 001; Yanick Fratantonio; Federico Maggi 001; Christopher Kruegel; Giovanni Vigna (Proc. Priv. Enhancing Technol., 2017)

Towards Detecting Compromised Accounts on Social Networks. - Manuel Egele; Gianluca Stringhini; Christopher Kruegel; Giovanni Vigna (IEEE Trans. Dependable Secur. Comput., 2017)

Using Loops For Malware Classification Resilient to Feature-unaware Perturbations. - Aravind Machiry; Nilo Redini; Eric Gustafson; Yanick Fratantonio; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (ACSAC, 2018)

MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense. - Radhesh Krishnan Konoth; Emanuele Vineti; Veelasha Moonsamy; Martina Lindorfer; Christopher Kruegel; Herbert Bos; Giovanni Vigna (CCS, 2018)

GuardION: Practical Mitigation of DMA-Based Rowhammer Attacks on ARM. - Victor van der Veen; Martina Lindorfer; Yanick Fratantonio; Harikrishnan Padmanabha Pillai; Giovanni Vigna; Christopher Kruegel; Herbert Bos; Kaveh Razavi (DIMVA, 2018)

Peer to Peer Hate: Hate Speech Instigators and Their Targets. - Mai ElSherief; Shirin Nilizadeh; Dana Nguyen; Giovanni Vigna; Elizabeth M. Belding (ICWSM, 2018)

Broken Fingers: On the Usage of the Fingerprint API in Android. - Antonio Bianchi; Yanick Fratantonio; Aravind Machiry; Christopher Kruegel; Giovanni Vigna; Simon Pak Ho Chung; Wenke Lee (NDSS, 2018)

Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates. - Kevin Borgolte; Tobias Fiebig; Shuang Hao 001; Christopher Kruegel; Giovanni Vigna (NDSS, 2018)

In rDNS We Trust: Revisiting a Common Data-Source's Reliability. - Tobias Fiebig; Kevin Borgolte; Shuang Hao 001; Christopher Kruegel; Giovanni Vigna; Anja Feldmann (PAM, 2018)

Measuring E-mail header injections on the world wide web. - Sai Prashanth Chandramouli; Pierre-Marie Bajan; Christopher Kruegel; Giovanni Vigna; Ziming Zhao 001; Adam Doupé; Gail-Joon Ahn (SAC, 2018)

Detecting Deceptive Reviews Using Generative Adversarial Networks. - Hojjat Aghakhani; Aravind Machiry; Shirin Nilizadeh; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy Workshops, 2018)

Enumerating Active IPv6 Hosts for Large-Scale Security Scans via DNSSEC-Signed Reverse Zones. - Kevin Borgolte; Shuang Hao 001; Tobias Fiebig; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2018)

Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks. - Wei Meng 001; Chenxiong Qian; Shuang Hao 001; Kevin Borgolte; Giovanni Vigna; Christopher Kruegel; Wenke Lee (USENIX Security Symposium, 2018)

HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security. - Moritz Eckert; Antonio Bianchi; Ruoyu Wang 001; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2018)

Mechanical Phish: Resilient Autonomous Hacking. - Yan Shoshitaishvili; Antonio Bianchi; Kevin Borgolte; Amat Cama; Jacopo Corbetta; Francesco Disperati; Andrew Dutcher; John Grosen; Paul Grosen; Aravind Machiry; Christopher Salls; Nick Stephens; et al. (IEEE Secur. Priv., 2018)

Sleak: automating address space layout derandomization. - Christophe Hauser; Jayakrishna Menon; Yan Shoshitaishvili; Ruoyu Wang 001; Giovanni Vigna; Christopher Kruegel (ACSAC, 2019)

Neurlux: dynamic malware analysis without feature engineering. - Chani Jindal; Christopher Salls; Hojjat Aghakhani; Keith Long; Christopher Kruegel; Giovanni Vigna (ACSAC, 2019)

BootKeeper: Validating Software Integrity Properties on Boot Firmware Images. - Ronny Chevalier; Stefano Cristalli; Christophe Hauser; Yan Shoshitaishvili; Ruoyu Wang 001; Christopher Kruegel; Giovanni Vigna; Danilo Bruschi; Andrea Lanzi (CODASPY, 2019)

BinTrimmer: Towards Static Binary Debloating Through Abstract Interpretation. - Nilo Redini; Ruoyu Wang 001; Aravind Machiry; Yan Shoshitaishvili; Giovanni Vigna; Christopher Kruegel (DIMVA, 2019)

PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary. - Dokyung Song; Felicitas Hetzelt; Dipanjan Das 002; Chad Spensky; Yeoul Na; Stijn Volckaert; Giovanni Vigna; Christopher Kruegel; Jean-Pierre Seifert; Michael Franz (NDSS, 2019)

Toward the Analysis of Embedded Firmware through Automated Re-hosting. - Eric Gustafson; Marius Muench; Chad Spensky; Nilo Redini; Aravind Machiry; Yanick Fratantonio; Davide Balzarotti; Aurélien Francillon; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (RAID, 2019)

Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis. - Shirin Nilizadeh; Hojjat Aghakhani; Eric Gustafson; Christopher Kruegel; Giovanni Vigna (WWW, 2019)

Lightning Talk - Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis. - Shirin Nilizadeh; Hojjat Aghakhani; Eric Gustafson; Christopher Kruegel; Giovanni Vigna (WWW (Companion Volume), 2019)

SYMBION: Interleaving Symbolic with Concrete Execution. - Fabio Gritti; Lorenzo Fontana; Eric Gustafson; Fabio Pagani; Andrea Continella; Christopher Kruegel; Giovanni Vigna (CNS, 2020)

Exploring Abstraction Functions in Fuzzing. - Christopher Salls; Aravind Machiry; Adam Doupé; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (CNS, 2020)

TRUST.IO: Protecting Physical Interfaces on Cyber-physical Systems. - Chad Spensky; Aravind Machiry; Marcel Busch; Kevin Leach; Rick Housley; Christopher Kruegel; Giovanni Vigna (CNS, 2020)

On the Security of Application Installers and Online Software Repositories. - Marcus Botacin; Giovanni Bertão; Paulo L. de Geus; André Grégio; Christopher Kruegel; Giovanni Vigna (DIMVA, 2020)

When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features. - Hojjat Aghakhani; Fabio Gritti; Francesco Mecca; Martina Lindorfer; Stefano Ortolani; Davide Balzarotti; Giovanni Vigna; Christopher Kruegel (NDSS, 2020)

Tracing and Analyzing Web Access Paths Based on User-Side Data Collection: How Do Users Reach Malicious URLs? - Takeshi Takahashi 001; Christopher Kruegel; Giovanni Vigna; Katsunari Yoshioka; Daisuke Inoue (RAID, 2020)

SPIDER: Enabling Fast Patch Propagation In Related Software Repositories. - Aravind Machiry; Nilo Redini; Eric Camellini; Christopher Kruegel; Giovanni Vigna (SP, 2020)

Karonte: Detecting Insecure Multi-binary Interactions in Embedded Firmware. - Nilo Redini; Aravind Machiry; Ruoyu Wang 001; Chad Spensky; Andrea Continella; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (SP, 2020)

HALucinator: Firmware Re-hosting Through Abstraction Layer Emulation. - Abraham A. Clements; Eric Gustafson; Tobias Scharnowski; Paul Grosen; David Fritz; Christopher Kruegel; Giovanni Vigna; Saurabh Bagchi; Mathias Payer (USENIX Security Symposium, 2020)

Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web. - Iskander Sánchez-Rola; Davide Balzarotti; Christopher Kruegel; Giovanni Vigna; Igor Santos (WWW, 2020)

VENOMAVE: Clean-Label Poisoning Against Speech Recognition. - Hojjat Aghakhani; Thorsten Eisenhofer; Lea Schönherr; Dorothea Kolossa; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (CoRR, 2020)

Bran: Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms. - Dongyu Meng; Michele Guerriero; Aravind Machiry; Hojjat Aghakhani; Priyanka Bose; Andrea Continella; Christopher Kruegel; Giovanni Vigna (AsiaCCS, 2021)

Conware: Automated Modeling of Hardware Peripherals. - Chad Spensky; Aravind Machiry; Nilo Redini; Colin Unger; Graham Foster; Evan Blasband; Hamed Okhravi; Christopher Kruegel; Giovanni Vigna (AsiaCCS, 2021)

Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone. - Davide Quarta; Michele Ianni; Aravind Machiry; Yanick Fratantonio; Eric Gustafson; Davide Balzarotti; Martina Lindorfer; Giovanni Vigna; Christopher Kruegel (Checkmate@CCS, 2021)

Glitching Demystified: Analyzing Control-flow-based Glitching Attacks and Defenses. - Chad Spensky; Aravind Machiry; Nathan Burow; Hamed Okhravi; Rick Housley; Zhongshu Gu; Hani Jamjoom; Christopher Kruegel; Giovanni Vigna (DSN, 2021)

Bullseye Polytope: A Scalable Clean-Label Poisoning Attack with Improved Transferability. - Hojjat Aghakhani; Dongyu Meng; Yu-Xiang Wang 003; Christopher Kruegel; Giovanni Vigna (EuroS&P, 2021)

SyML: Guiding Symbolic Execution Toward Vulnerable States Through Pattern Learning. - Nicola Ruaro; Kyle Zeng; Lukas Dresel; Mario Polino; Tiffany Bao; Andrea Continella; Stefano Zanero; Christopher Kruegel; Giovanni Vigna (RAID, 2021)

Diane: Identifying Fuzzing Triggers in Apps to Generate Under-constrained Inputs for IoT Devices. - Nilo Redini; Andrea Continella; Dipanjan Das 002; Giulio De Pasquale; Noah Spahn; Aravind Machiry; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (SP, 2021)

Token-Level Fuzzing. - Christopher Salls; Chani Jindal; Jake Corina; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2021)

Toward a secure crowdsourced location tracking system. - Chinmay Garg; Aravind Machiry; Andrea Continella; Christopher Kruegel; Giovanni Vigna (WISEC, 2021)

One Size Does Not Fit All: A Longitudinal Analysis of Brazilian Financial Malware. - Marcus Botacin; Hojjat Aghakhani; Stefano Ortolani; Christopher Kruegel; Giovanni Vigna; Daniela Oliveira 001; Paulo Lício de Geus; André Grégio (ACM Trans. Priv. Secur., 2021)

POPKORN: Popping Windows Kernel Drivers At Scale. - Rajat Gupta; Lukas Patrick Dresel; Noah Spahn; Giovanni Vigna; Christopher Kruegel; Taesoo Kim (ACSAC, 2022)

Understanding Security Issues in the NFT Ecosystem. - Dipanjan Das 002; Priyanka Bose; Nicola Ruaro; Christopher Kruegel; Giovanni Vigna (CCS, 2022)

Hybrid Pruning: Towards Precise Pointer and Taint Analysis. - Dipanjan Das 002; Priyanka Bose; Aravind Machiry; Sebastiano Mariani; Yan Shoshitaishvili; Giovanni Vigna; Christopher Kruegel (DIMVA, 2022)

SAILFISH: Vetting Smart Contract State-Inconsistency Bugs in Seconds. - Priyanka Bose; Dipanjan Das 002; Yanju Chen; Yu Feng 001; Christopher Kruegel; Giovanni Vigna (SP, 2022)

DEEPCASE: Semi-Supervised Contextual Analysis of Security Events. - Thijs van Ede; Hojjat Aghakhani; Noah Spahn; Riccardo Bortolameotti; Marco Cova; Andrea Continella; Maarten van Steen; Andreas Peter 001; Christopher Kruegel; Giovanni Vigna (SP, 2022)

HEAPSTER: Analyzing the Security of Dynamic Allocators for Monolithic Firmware Images. - Fabio Gritti; Fabio Pagani; Ilya Grishchenko; Lukas Dresel; Nilo Redini; Christopher Kruegel; Giovanni Vigna (SP, 2022)

SYMBEXCEL: Automated Analysis and Understanding of Malicious Excel 4.0 Macros. - Nicola Ruaro; Fabio Pagani; Stefano Ortolani; Christopher Kruegel; Giovanni Vigna (SP, 2022)

Decomperson: How Humans Decompile and What We Can Learn From It. - Kevin Burk; Fabio Pagani; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2022)

Regulator: Dynamic Analysis to Detect ReDoS. - Robert McLaughlin; Fabio Pagani; Noah Spahn; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2022)

Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing. - Tobias Scharnowski; Nils Bars; Moritz Schloegel; Eric Gustafson; Marius Muench; Giovanni Vigna; Christopher Kruegel; Thorsten Holz; Ali Abbasi 002 (USENIX Security Symposium, 2022)

Understanding Security Issues in the NFT Ecosystem. - Dipanjan Das 002; Priyanka Bose; Nicola Ruaro; Christopher Kruegel; Giovanni Vigna (Zenodo, 2022)

Certifiably Vulnerable: Using Certificate Transparency Logs for Target Reconnaissance. - Stijn Pletinckx; Thanh-Dat Nguyen; Tobias Fiebig; Christopher Kruegel; Giovanni Vigna (EuroS&P, 2023)

Columbus: Android App Testing Through Systematic Callback Exploration. - Priyanka Bose; Dipanjan Das 002; Saastha Vasan; Sebastiano Mariani; Ilya Grishchenko; Andrea Continella; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (ICSE, 2023)

Shimware: Toward Practical Security Retrofitting for Monolithic Firmware Images. - Eric Gustafson; Paul Grosen; Nilo Redini; Saagar Jha; Andrea Continella; Ruoyu Wang 001; Kevin Fu; Sara Rampazzi; Christopher Kruegel; Giovanni Vigna (RAID, 2023)

Container Orchestration Honeypot: Observing Attacks in the Wild. - Noah Spahn; Nils Hanke; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (RAID, 2023)

Venomave: Targeted Poisoning Against Speech Recognition. - Hojjat Aghakhani; Lea Schönherr; Thorsten Eisenhofer; Dorothea Kolossa; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (SaTML, 2023)

TEEzz: Fuzzing Trusted Applications on COTS Android Devices. - Marcel Busch; Aravind Machiry; Chad Spensky; Giovanni Vigna; Christopher Kruegel; Mathias Payer (SP, 2023)

Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities. - Erik Trickel; Fabio Pagani; Chang Zhu; Lukas Dresel; Giovanni Vigna; Christopher Kruegel; Ruoyu Wang 001; Tiffany Bao; Yan Shoshitaishvili; Adam Doupé (SP, 2023)

ACTOR: Action-Guided Kernel Fuzzing. - Marius Fleischer; Dipanjan Das 002; Priyanka Bose; Weiheng Bai; Kangjie Lu; Mathias Payer; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2023)

Confusum Contractum: Confused Deputy Vulnerabilities in Ethereum Smart Contracts. - Fabio Gritti; Nicola Ruaro; Robert McLaughlin; Priyanka Bose; Dipanjan Das 002; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2023)

A Large Scale Study of the Ethereum Arbitrage Ecosystem. - Robert McLaughlin; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2023)

Demystifying NFT Promotion and Phishing Scams. - Sayak Saha Roy; Dipanjan Das 002; Priyanka Bose; Christopher Kruegel; Giovanni Vigna; Shirin Nilizadeh (CoRR, 2023)

Exploiting Unfair Advantages: Investigating Opportunistic Trading in the NFT Market. - Priyanka Bose; Dipanjan Das 002; Fabio Gritti; Nicola Ruaro; Christopher Kruegel; Giovanni Vigna (CoRR, 2023)

Keeping Up with the Emotets: Tracking a Multi-infrastructure Botnet. - Oleg Boyarchuk; Sebastiano Mariani; Stefano Ortolani; Giovanni Vigna (DTRAP, 2023)

Street Rep: A Privacy-Preserving Reputation Aggregation System. - Christophe Hauser; Shirin Nilizadeh; Yan Shoshitaishvili; Ni Trieu; Srivatsan Ravi; Christopher Kruegel; Giovanni Vigna (IACR Cryptol. ePrint Arch., 2023)

DEEPCAPA: Identifying Malicious Capabilities in Windows Malware. - Saastha Vasan; Hojjat Aghakhani; Stefano Ortolani; Roman Vasilenko; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna (ACSAC, 2024)

The Power of Default: Measuring the Effect of Slippage Tolerance in Decentralized Exchanges. - Nir Chemaya; Dingyue Liu; Robert McLaughlin; Nicola Ruaro; Christopher Kruegel; Giovanni Vigna (FC (1), 2024)

Unveiling the Risks of NFT Promotion Scams. - Sayak Saha Roy; Dipanjan Das 002; Priyanka Bose; Christopher Kruegel; Giovanni Vigna; Shirin Nilizadeh (ICWSM, 2024)

Not your Type! Detecting Storage Collision Vulnerabilities in Ethereum Smart Contracts. - Nicola Ruaro; Fabio Gritti; Robert McLaughlin; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna (NDSS, 2024)

Invisible Image Watermarks Are Provably Removable Using Generative AI. - Xuandong Zhao; Kexun Zhang; Zihao Su; Saastha Vasan; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna; Yu-Xiang Wang 003; Lei Li 005 (NeurIPS, 2024)

TrojanPuzzle: Covertly Poisoning Code-Suggestion Models. - Hojjat Aghakhani; Wei Dai 007; Andre Manoel; Xavier Fernandes; Anant Kharkar; Christopher Kruegel; Giovanni Vigna; David Evans 001; Ben Zorn 001; Robert Sim (SP, 2024)

Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services. - Wil Gibbs; Arvind S. Raj; Jayakrishna Menon Vadayath; Hui Jun Tay; Justin Miller; Akshay Ajayan; Zion Leonahenahe Basque; Audrey Dutcher; Fangzhou Dong; Xavier J. Maso; Giovanni Vigna; Christopher Kruegel; et al. (USENIX Security Symposium, 2024)

ChainReactor: Automated Privilege Escalation Chain Discovery via AI Planning. - Giulio De Pasquale; Ilya Grishchenko; Riccardo Iesari; Gabriel Pizarro; Lorenzo Cavallaro; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2024)

GuideEnricher: Protecting the Anonymity of Ethereum Mixing Service Users with Deep Reinforcement Learning. - Ravindu De Silva; Wenbo Guo 002; Nicola Ruaro; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2024)

Remote Keylogging Attacks in Multi-user VR Applications. - Zihao Su; Kunlin Cai; Reuben Beeler; Lukas Dresel; Allan Garcia; Ilya Grishchenko; Yuan Tian 001; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2024)

A History of Greed: Practical Symbolic Execution for Ethereum Smart Contracts. - Nicola Ruaro; Fabio Gritti; Robert McLaughlin; Dongyu Meng; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna (DIMVA (2), 2025)

Beneath the Surface: An Analysis of OEM Customizations on the Android TLS Protocol Stack. - Vinuri Bandara; Stijn Pletinckx; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna; Juan Tapiador; Narseo Vallina-Rodriguez (EuroS&P, 2025)

MALintent: Coverage Guided Intent Fuzzing Framework for Android. - Ammar Askar; Fabian Fleischer; Christopher Kruegel; Giovanni Vigna; Taesoo Kim (NDSS, 2025)

A Large-Scale Measurement Study of the PROXY Protocol and its Security Implications. - Stijn Pletinckx; Christopher Kruegel; Giovanni Vigna (NDSS, 2025)

MADCAT: Combating Malware Detection Under Concept Drift with Test-Time Adaptation. - Eunjin Roh; Yigitcan Kaya; Christopher Kruegel; Giovanni Vigna; Sanghyun Hong 001 (CoRR, 2025)