Cristian-Alexandru Staicu

Publication Activity (10 Years)

Years Active: 2016-2024
Publications (10 Years): 26

Top Topics

Test Generation

Dynamic Analysis

Information Flows

Top Venues

USENIX Security Symposium

Publications

Masudul Hasan Masud Bhuiyan, Berk Çakar, Ethan H. Burmane, James C. Davis, Cristian-Alexandru Staicu
SoK: A Literature and Engineering Review of Regular Expression Denial of Service. CoRR (2024)
Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru Staicu
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js. USENIX Security Symposium (2023)
Cristian-Alexandru Staicu, Sazzadur Rahaman, Ágnes Kiss, Michael Backes
Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages. USENIX Security Symposium (2023)
Masudul Hasan Masud Bhuiyan, Adithya Srinivas Parthasarathy, Nikos Vasilakis, Michael Pradel, Cristian-Alexandru Staicu
SecBench.js: An Executable Security Benchmark Suite for Server-Side JavaScript. ICSE (2023)
Jeremy Rack, Cristian-Alexandru Staicu
Jack-in-the-box: An Empirical Study of JavaScript Bundling on the Web and its Security Implications. CCS (2023)
Abdullah AlHamdan, Cristian-Alexandru Staicu
SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes. USENIX Security Symposium (2023)
Hossein Hajipour, Ning Yu, Cristian-Alexandru Staicu, Mario Fritz
SimSCOOD: Systematic Analysis of Out-of-Distribution Behavior of Source Code Models. CoRR (2022)
Masudul Hasan Masud Bhuiyan, Cristian-Alexandru Staicu
A Tale of Frozen Clouds: Quantifying the Impact of Algorithmic Complexity Vulnerabilities in Popular Web Servers. CoRR (2022)
Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru Staicu
Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js. CoRR (2022)
Hossein Hajipour, Apratim Bhattacharyya, Cristian-Alexandru Staicu, Mario Fritz
SampleFix: Learning to Generate Functionally Diverse Fixes. PKDD/ECML Workshops (2) (2021)
Nikos Vasilakis, Cristian-Alexandru Staicu, Grigoris Ntousakis, Konstantinos Kallas, Ben Karel, André DeHon, Michael Pradel
Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction. CCS (2021)
Cristian-Alexandru Staicu, Sazzadur Rahaman, Ágnes Kiss, Michael Backes
Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages. CoRR (2021)
Nikos Vasilakis, Cristian-Alexandru Staicu, Greg Ntousakis, Konstantinos Kallas, Ben Karel, André DeHon, Michael Pradel
Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript. CoRR (2020)
Cristian-Alexandru Staicu, Martin Toldam Torp, Max Schäfer, Anders Møller, Michael Pradel
Extracting taint specifications for JavaScript libraries. ICSE (2020)
Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny, Michael Pradel
Small World with High Risks: A Study of Security Threats in the npm Ecosystem. USENIX Security Symposium (2019)
Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny, Michael Pradel
Small World with High Risks: A Study of Security Threats in the npm Ecosystem. CoRR (2019)
Philippe Skolka, Cristian-Alexandru Staicu, Michael Pradel
Anything to Hide? Studying Minified and Obfuscated Code in the Web. WWW (2019)
Cristian-Alexandru Staicu, Michael Pradel
Leaky Images: Targeted Privacy Attacks in the Web. USENIX Security Symposium (2019)
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
An Empirical Study of Information Flows in Real-World JavaScript. CoRR (2019)
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
An Empirical Study of Information Flows in Real-World JavaScript. PLAS@CCS (2019)
Cristian-Alexandru Staicu, Michael Pradel
Freezing the Web: A Study of ReDoS Vulnerabilities in JavaScript-based Web Servers. USENIX Security Symposium (2018)
Cristian-Alexandru Staicu, Michael Pradel, Benjamin Livshits
SYNODE: Understanding and Automatically Preventing Injection Attacks on NODE.JS. NDSS (2018)
Esben Andreasen, Liang Gong, Anders Møller, Michael Pradel, Marija Selakovic, Koushik Sen, Cristian-Alexandru Staicu
A Survey of Dynamic Analysis and Test Generation for JavaScript. ACM Comput. Surv. 50 (5) (2017)
Luca Della Toffola, Cristian-Alexandru Staicu, Michael Pradel
Saying 'hi!' is not enough: mining inputs for effective test generation. ASE (2017)
Hui Liu, Qiurong Liu, Cristian-Alexandru Staicu, Michael Pradel, Yue Luo
Nomen est omen: exploring and exploiting similarities between argument and parameter names. ICSE (2016)
Mariano Ceccato, Paolo Falcarin, Alessandro Cabutto, Yosief Weldezghi Frezghi, Cristian-Alexandru Staicu
Search Based Clustering for Protecting Software with Diversified Updates. SSBSE (2016)