Andrea Mambretti

Publication Activity (10 Years)

Years Active: 2016-2024
Publications (10 Years): 12

Top Topics

Denial Of Service

Top Venues

IEEE Symposium on Security and Privacy

Publications

Hany Ragab, Andrea Mambretti, Anil Kurmus, Cristiano Giuffrida
GhostRace: Exploiting and Mitigating Speculative Race Conditions. USENIX Security Symposium (2024)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. ACM Trans. Priv. Secur. 25 (4) (2022)
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William Robertson, Engin Kirda, Anil Kurmus
Bypassing memory safety mechanisms through speculative control flow hijacks. EuroS&P (2021)
Andrea Mambretti, Pasquale Convertini, Alessandro Sorniotti, Alexandra Sandulescu, Engin Kirda, Anil Kurmus
GhostBuster: understanding and overcoming the pitfalls of transient execution vulnerability checkers. SANER (2021)
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William K. Robertson, Engin Kirda, Anil Kurmus
Bypassing memory safety mechanisms through speculative control flow hijacks. CoRR (2020)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William K. Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. CoRR (2020)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. NDSS (2020)
Andrea Mambretti, Matthias Neugschwandtner, Alessandro Sorniotti, Engin Kirda, William K. Robertson, Anil Kurmus
Speculator: a tool to analyze speculative execution attacks and mitigations. ACSAC (2019)
Andrea Mambretti, Alexandra Sandulescu, Matthias Neugschwandtner, Alessandro Sorniotti, Anil Kurmus
Two methods for exploiting speculative control flow hijacks. WOOT @ USENIX Security Symposium (2019)
Chaima Jemmali, Sara Bunian, Andrea Mambretti, Magy Seif El-Nasr
Educational game design: an empirical study of the effects of narrative. FDG (2018)
Brendan Dolan-Gavitt, Patrick Hulin, Engin Kirda, Tim Leek, Andrea Mambretti, William K. Robertson, Frederick Ulrich, Ryan Whelan
LAVA: Large-Scale Automated Vulnerability Addition. IEEE Symposium on Security and Privacy (2016)
Andrea Mambretti, Kaan Onarlioglu, Collin Mulliner, William Robertson, Engin Kirda, Federico Maggi, Stefano Zanero
Trellis: Privilege Separation for Multi-user Applications Made Easy. RAID (2016)