Behnaz Hassanshahi

Publication Activity (10 Years)

Years Active: 2013-2023
Publications (10 Years): 20

Top Topics

Injection Attacks

Abstract Interpretation

Malware Detection

Top Venues

Publications

Cristina Cifuentes, François Gauthier, Behnaz Hassanshahi, Padmanabhan Krishnan, Davin McCall
The role of program analysis in security vulnerability detection: Then and now. Comput. Secur. 135 (2023)
Behnaz Hassanshahi, Trong Nhan Mai, Alistair Michael, Benjamin Selwyn-Smith, Sophie Bates, Padmanabhan Krishnan
Macaron: A Logic-based Framework for Software Supply Chain Security Assurance. SCORED@CCS (2023)
François Gauthier, Behnaz Hassanshahi, Benjamin Selwyn-Smith, Trong Nhan Mai, Max Schlüter, Micah Williams
Experience: Model-Based, Feedback-Driven, Greybox Web Fuzzing with BackREST. ECOOP (2022)
Madhurima Chakraborty, Renzo Olivares, Manu Sridharan, Behnaz Hassanshahi
Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs (Artifact). Dagstuhl Artifacts Ser. 8 (2) (2022)
Madhurima Chakraborty, Renzo Olivares, Manu Sridharan, Behnaz Hassanshahi
Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs (Extended Version). CoRR (2022)
Madhurima Chakraborty, Renzo Olivares, Manu Sridharan, Behnaz Hassanshahi
Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs. ECOOP (2022)
Behnaz Hassanshahi, Hyunjun Lee, Paddy Krishnan
Gelato: Feedback-driven and Guided Security Analysis of Client-side Web Applications. SANER (2022)
François Gauthier, Behnaz Hassanshahi, Benjamin Selwyn-Smith, Trong Nhan Mai, Max Schlüter, Micah Williams
BackREST: A Model-Based Feedback-Driven Greybox Fuzzer for Web Applications. CoRR (2021)
Hanlin Wei, Behnaz Hassanshahi, Guangdong Bai, Padmanabhan Krishnan, Kostyantyn Vorobyov
MoScan: a model-based vulnerability scanner for web single sign-on services. ISSTA (2021)
François Gauthier, Alexander Jordan, Padmanabhan Krishnan, Behnaz Hassanshahi, Jörn Guy Süß, Sora Bae, Hyunjun Lee
Trade-offs in managing risk and technical debt in industrial research labs: an experience report. TechDebt@ICSE (2020)
Mazharul Islam, Sazzadur Rahaman, Na Meng, Behnaz Hassanshahi, Padmanabhan Krishnan, Danfeng Yao
Coding Practices and Recommendations of Spring Security for Enterprise Applications. CoRR (2020)
Mazharul Islam, Sazzadur Rahaman, Na Meng, Behnaz Hassanshahi, Padmanabhan Krishnan, Danfeng Daphne Yao
Coding Practices and Recommendations of Spring Security for Enterprise Applications. SecDev (2020)
Behnaz Hassanshahi, Hyunjun Lee, Paddy Krishnan, Jörn Guy Süß
Gelato: Feedback-driven and Guided Security Analysis of Client-side Web Applications. CoRR (2020)
Alexander Jordan, François Gauthier, Behnaz Hassanshahi, David Zhao
Unacceptable Behavior: Robust PDF Malware Detection Using Abstract Interpretation. PLAS@CCS (2019)
Benjamin Barslev Nielsen, Behnaz Hassanshahi, François Gauthier
Nodest: feedback-driven static analysis of Node.js applications. ESEC/SIGSOFT FSE (2019)
Alexander Jordan, François Gauthier, Behnaz Hassanshahi, David Zhao
SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation. CoRR (2018)
François Gauthier, Behnaz Hassanshahi, Alexander Jordan
AFFOGATO: runtime detection of injection attacks for Node.js. ISSTA/ECOOP Workshops (2018)
Behnaz Hassanshahi, Roland H. C. Yap
Android Database Attacks Revisited. AsiaCCS (2017)
Behnaz Hassanshahi, Raghavendra Kagalavadi Ramesh, Padmanabhan Krishnan, Bernhard Scholz, Yi Lu
An efficient tunable selective points-to analysis for large codebases. SOAP@PLDI (2017)
Ting Dai, Xiaolei Li, Behnaz Hassanshahi, Roland H. C. Yap, Zhenkai Liang
RoppDroid: Robust permission re-delegation prevention in Android inter-component communication. Comput. Secur. 68 (2017)
Behnaz Hassanshahi, Yaoqi Jia, Roland H. C. Yap, Prateek Saxena, Zhenkai Liang
Web-to-Application Injection Attacks on Android: Characterization and Detection. ESORICS (2) (2015)
Behnaz Hassanshahi, Roland H. C. Yap
JNICodejail: native code isolation for Java programs. PPPJ (2013)