Engin Kirda

ORCID

Publication Activity (10 Years)

Years Active: 2000-2024
Publications (10 Years): 76

Top Venues

CoRR

USENIX Security Symposium

ACSAC

IEEE Symposium on Security and Privacy

Publications

Sevtap Duman, Matthias Büchler, Manuel Egele, Engin Kirda
PellucidAttachment: Protecting Users From Attacks via E-Mail Attachments. IEEE Trans. Dependable Secur. Comput. 21 (3) (2024)
Changming Liu, Alejandro Mera, Engin Kirda, Meng Xu, Long Lu
CO3: Concolic Co-execution for Firmware. USENIX Security Symposium (2024)
Meng Luo, Bo Feng, Long Lu, Engin Kirda, Kui Ren
On the Complexity of the Web's PKI: Evaluating Certificate Validation of Mobile Browsers. IEEE Trans. Dependable Secur. Comput. 21 (1) (2024)
Alejandro Mera, Changming Liu, Ruimin Sun, Engin Kirda, Long Lu
SHiFT: Semi-hosted Fuzz Testing for Embedded Applications. USENIX Security Symposium (2024)
Narmeen Shafqat, Cem Topcuoglu, Engin Kirda, Aanjhan Ranganathan
Assessing the Feasibility of the Virtual Smartphone Paradigm in Countering Zero-Click Attacks. HICSS (2024)
Michael Shaham, Risha Ranjan, Engin Kirda, Taskin Padir
Design and Realization of a Benchmarking Testbed for Evaluating Autonomous Platooning Algorithms. CoRR (2024)
Ryan Williams, Anthony Gavazzi, Engin Kirda
Solder: Retrofitting Legacy Code with Cross-Language Patches. SANER (2023)
Tommaso Innocenti, Matteo Golinelli, Kaan Onarlioglu, Seyed Ali Mirheidari, Bruno Crispo, Engin Kirda
OAuth 2.0 Redirect URI Validation Falls Short, Literally. ACSAC (2023)
Bo Feng, Meng Luo, Changming Liu, Long Lu, Engin Kirda
AIM: Automatic Interrupt Modeling for Dynamic Firmware Analysis. CoRR (2023)
Anthony Gavazzi, Ryan Williams, Engin Kirda, Long Lu, Andre King, Andy Davis, Tim Leek
A Study of Multi-Factor and Risk-Based Authentication Availability. USENIX Security Symposium (2023)
Seyed Ali Mirheidari, Matteo Golinelli, Kaan Onarlioglu, Engin Kirda, Bruno Crispo
Web Cache Deception Escalates! USENIX Security Symposium (2022)
Amit Kumar Sikder, Leonardo Babun, Z. Berkay Celik, Hidayet Aksu, Patrick D. McDaniel, Engin Kirda, A. Selcuk Uluagac
Who's Controlling My Device? Multi-User Multi-Device-Aware Access Control System for Shared Smart Home Environment. ACM Trans. Internet Things 3 (4) (2022)
Alejandro Mera, Yi Hui Chen, Ruimin Sun, Engin Kirda, Long Lu
D-Box: DMA-enabled Compartmentalization for Embedded Applications. NDSS (2022)
Alejandro Mera, Yi Hui Chen, Ruimin Sun, Engin Kirda, Long Lu
D-Box: DMA-enabled Compartmentalization for Embedded Applications. CoRR (2022)
Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, Engin Kirda
FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies. USENIX Security Symposium (2022)
Afsah Anwar, Yi Hui Chen, Roy Hodgman, Tom Sellers, Engin Kirda, Alina Oprea
A Recent Year On the Internet: Measuring and Understanding the Threats to Everyday Internet Devices. ACSAC (2022)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. ACM Trans. Priv. Secur. 25 (4) (2022)
Steven Sprecher, Christoph Kerschbaumer, Engin Kirda
SoK: All or Nothing - A Postmortem of Solutions to the Third-Party Script Inclusion Permission Model and a Path Forward. EuroS&P (2022)
Narmeen Shafqat, Cem Topcuoglu, Engin Kirda, Aanjhan Ranganathan
Experience Report on the Challenges and Opportunities in Securing Smartphones Against Zero-Click Attacks. CoRR (2022)
Bahruz Jabiyev, Steven Sprecher, Kaan Onarlioglu, Engin Kirda
T-Reqs: HTTP Request Smuggling with Differential Fuzzing. CCS (2021)
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William Robertson, Engin Kirda, Anil Kurmus
Bypassing memory safety mechanisms through speculative control flow hijacks. EuroS&P (2021)
Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz, Engin Kirda
Preventing server-side request forgery attacks. SAC (2021)
Ege Tekiner, Abbas Acar, A. Selcuk Uluagac, Engin Kirda, Ali Aydin Selçuk
In-Browser Cryptomining for Good: An Untold Story. DAPPS (2021)
Bahruz Jabiyev, Sinan Pehlivanoglu, Kaan Onarlioglu, Engin Kirda
FADE: Detecting Fake News Articles on the Web. ARES (2021)
Alejandro Mera, Bo Feng, Long Lu, Engin Kirda
DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis. IEEE Symposium on Security and Privacy (2021)
Seyed Ali Akhavani, Jordan Jueckstock, Junhua Su, Alexandros Kapravelos, Engin Kirda, Long Lu
Browserprint: an Analysis of the Impact of Browser Features on Fingerprintability and Web Privacy. ISC (2021)
Andrea Mambretti, Pasquale Convertini, Alessandro Sorniotti, Alexandra Sandulescu, Engin Kirda, Anil Kurmus
GhostBuster: understanding and overcoming the pitfalls of transient execution vulnerability checkers. SANER (2021)
Bahruz Jabiyev, Jeremiah Onaolapo, Gianluca Stringhini, Engin Kirda
e-Game of FAME: Automatic Detection of FAke MEmes. TTO (2021)
Ege Tekiner, Abbas Acar, A. Selcuk Uluagac, Engin Kirda, Ali Aydin Selçuk
SoK: Cryptojacking Malware. EuroS&P (2021)
Omid Mirzaei, Roman Vasilenko, Engin Kirda, Long Lu, Amin Kharraz
SCRUTINIZER: Detecting Code Reuse in Malware via Decompilation and Machine Learning. DIMVA (2021)
Tommaso Innocenti, Seyed Ali Mirheidari, Amin Kharraz, Bruno Crispo, Engin Kirda
You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures. DIMVA (2021)
Ege Tekiner, Abbas Acar, A. Selcuk Uluagac, Engin Kirda, Ali Aydin Selçuk
SoK: Cryptojacking Malware. CoRR (2021)
Ahmet Salih Buyukkayhan, Can Gemicioglu, Tobias Lauinger, Alina Oprea, William Robertson, Engin Kirda
What's in an Exploit? An Empirical Analysis of Reflected Server XSS Exploitation Techniques. RAID (2020)
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William K. Robertson, Engin Kirda, Anil Kurmus
Bypassing memory safety mechanisms through speculative control flow hijacks. CoRR (2020)
Seyed Ali Mirheidari, Sajjad Arshad, Kaan Onarlioglu, Bruno Crispo, Engin Kirda, William Robertson
Cached and Confused: Web Cache Deception in the Wild. USENIX Security Symposium (2020)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William K. Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. CoRR (2020)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. NDSS (2020)
Amit Kumar Sikder, Leonardo Babun, Z. Berkay Celik, Abbas Acar, Hidayet Aksu, Patrick D. McDaniel, Engin Kirda, A. Selcuk Uluagac
Kratos: multi-user multi-device-aware access control system for the smart home. WISEC (2020)
Alejandro Mera, Bo Feng, Long Lu, Engin Kirda, William K. Robertson
DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis. CoRR (2020)
Walter Rweyemamu, Tobias Lauinger, Christo Wilson, William K. Robertson, Engin Kirda
Getting Under Alexa's Umbrella: Infiltration Attacks Against Internet Top Domain Lists. ISC (2019)
Seyed Ali Mirheidari, Sajjad Arshad, Kaan Onarlioglu, Bruno Crispo, Engin Kirda, William K. Robertson
Cached and Confused: Web Cache Deception in the Wild. CoRR (2019)
Walter Rweyemamu, Tobias Lauinger, Christo Wilson, William K. Robertson, Engin Kirda
Clustering and the Weekend Effect: Recommendations for the Use of Top Domain Lists in Security Research. PAM (2019)
Amit Kumar Sikder, Leonardo Babun, Z. Berkay Celik, Abbas Acar, Hidayet Aksu, Patrick D. McDaniel, Engin Kirda, A. Selcuk Uluagac
Multi-User Multi-Device-Aware Access Control System for Smart Home. CoRR (2019)
Abbas Acar, Long Lu, A. Selcuk Uluagac, Engin Kirda
An Analysis of Malware Trends in Enterprise Networks. CoRR (2019)
Florian Quinkert, Tobias Lauinger, William K. Robertson, Engin Kirda, Thorsten Holz
It's Not what It Looks Like: Measuring Attacks and Defensive Registrations of Homograph Domains. CNS (2019)
Abbas Acar, Long Lu, A. Selcuk Uluagac, Engin Kirda
An Analysis of Malware Trends in Enterprise Networks. ISC (2019)
Andrea Mambretti, Matthias Neugschwandtner, Alessandro Sorniotti, Engin Kirda, William K. Robertson, Anil Kurmus
Speculator: a tool to analyze speculative execution attacks and mitigations. ACSAC (2019)
Amin Kharraz, Brandon L. Daley, Graham Z. Baker, William Robertson, Engin Kirda
USBESAFE: An End-Point Solution to Protect Against USB-Based Attacks. RAID (2019)
Muhammad Ahmad Bashir, Sajjad Arshad, Engin Kirda, William K. Robertson, Christo Wilson
A Longitudinal Analysis of the ads.txt Standard. Internet Measurement Conference (2019)
Kaan Onarlioglu, William K. Robertson, Engin Kirda
Eraser: Your Data Won't Be Back. EuroS&P (2018)
Muhammad Ahmad Bashir, Sajjad Arshad, Engin Kirda, William K. Robertson, Christo Wilson
How Tracking Companies Circumvented Ad Blockers Using WebSockets. Internet Measurement Conference (2018)
Sajjad Arshad, Seyed Ali Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William K. Robertson
Large-Scale Analysis of Style Injection by Relative Path Overwrite. WWW (2018)
Tobias Lauinger, Ahmet Salih Buyukkayhan, Abdelberi Chaabane, William K. Robertson, Engin Kirda
From Deletion to Re-Registration in Zero Seconds: Domain Registrar Behaviour During the Drop. Internet Measurement Conference (2018)
Amin Kharraz, William K. Robertson, Engin Kirda
Protecting against Ransomware: A New Line of Research or Restating Classic Ideas? IEEE Secur. Priv. 16 (3) (2018)
Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William K. Robertson, Christo Wilson, Engin Kirda
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web. CoRR (2018)
Reza Mirzazade Farkhani, Saman Jafari, Sajjad Arshad, William K. Robertson, Engin Kirda, Hamed Okhravi
On the Effectiveness of Type-based Control Flow Integrity. ACSAC (2018)
Sajjad Arshad, Seyed Ali Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William K. Robertson
Large-Scale Analysis of Style Injection by Relative Path Overwrite. CoRR (2018)
Amin Kharraz, William K. Robertson, Engin Kirda
Surveylance: Automatically Detecting Online Survey Scams. IEEE Symposium on Security and Privacy (2018)
Reza Mirzazade Farkhani, Saman Jafari, Sajjad Arshad, William K. Robertson, Engin Kirda, Hamed Okhravi
On the Effectiveness of Type-based Control Flow Integrity. CoRR (2018)
Michael Weissbacher, Enrico Mariconti, Guillermo Suarez-Tangil, Gianluca Stringhini, William K. Robertson, Engin Kirda
Ex-Ray: Detection of History-Leaking Browser Extensions. ACSAC (2017)
Collin Mulliner, William K. Robertson, Engin Kirda
On the misuse of graphical user interface elements to implement security controls. it Inf. Technol. 59 (2) (2017)
Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William Robertson, Christo Wilson, Engin Kirda
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web. NDSS (2017)
Wojciech Mazurczyk, Maciej Korczynski, Koji Nakao, Engin Kirda, Cristian Hesselman, Katsunari Yoshioka
Traffic Measurements for Cyber Security. IEEE Commun. Mag. 55 (7) (2017)
Engin Kirda
UNVEIL: A large-scale, automated approach to detecting ransomware (keynote). SANER (2017)
Amin Kharraz, Engin Kirda
Redemption: Real-Time Protection Against Ransomware at End-Hosts. RAID (2017)
William Koch, Abdelberi Chaabane, Manuel Egele, William K. Robertson, Engin Kirda
Semi-automated discovery of server-based information oversharing vulnerabilities in Android applications. ISSTA (2017)
Ahmet Salih Buyukkayhan, Kaan Onarlioglu, William K. Robertson, Engin Kirda
CrossFire: An Analysis of Firefox Extension-Reuse Vulnerabilities. NDSS (2016)
Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
TriggerScope: Towards Detecting Logic Bombs in Android Applications. IEEE Symposium on Security and Privacy (2016)
Tobias Lauinger, Kaan Onarlioglu, Abdelberi Chaabane, William Robertson, Engin Kirda
WHOIS Lost in Translation: (Mis)Understanding Domain Name Expiration and Re-Registration. Internet Measurement Conference (2016)
Kaan Onarlioglu, William Robertson, Engin Kirda
Overhaul: Input-Driven Access Control for Better Privacy on Traditional Operating Systems. DSN (2016)
Brendan Dolan-Gavitt, Patrick Hulin, Engin Kirda, Tim Leek, Andrea Mambretti, William K. Robertson, Frederick Ulrich, Ryan Whelan
LAVA: Large-Scale Automated Vulnerability Addition. IEEE Symposium on Security and Privacy (2016)
Sevtap Duman, Kubra Kalkan-Cakmakci, Manuel Egele, William K. Robertson, Engin Kirda
EmailProfiler: Spearphishing Filtering with Header and Stylometric Features of Emails. COMPSAC (2016)
Matthias Neugschwandtner, Collin Mulliner, William K. Robertson, Engin Kirda
Runtime Integrity Checking for Exploit Mitigation on Lightweight Embedded Devices. TRUST (2016)
Amin Kharraz, Sajjad Arshad, Collin Mulliner, William K. Robertson, Engin Kirda
UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. USENIX Security Symposium (2016)
Andrea Mambretti, Kaan Onarlioglu, Collin Mulliner, William Robertson, Engin Kirda, Federico Maggi, Stefano Zanero
Trellis: Privilege Separation for Multi-user Applications Made Easy. RAID (2016)
Patrick Carter, Collin Mulliner, Martina Lindorfer, William K. Robertson, Engin Kirda
CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes. Financial Cryptography (2016)
Amin Kharraz, William K. Robertson, Davide Balzarotti, Leyla Bilge, Engin Kirda
Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. DIMVA (2015)
Aristide Fattori, Andrea Lanzi, Davide Balzarotti, Engin Kirda
Hypervisor-based malware protection with AccessMiner. Comput. Secur. 52 (2015)
Michael Weissbacher, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities. USENIX Security Symposium (2015)
Ahmet Talha Ozcan, Can Gemicioglu, Kaan Onarlioglu, Michael Weissbacher, Collin Mulliner, William K. Robertson, Engin Kirda
BabelCrypt: The Universal Encryption Layer for Mobile Messaging Applications. Financial Cryptography (2015)
Kaan Onarlioglu, Ahmet Salih Buyukkayhan, William K. Robertson, Engin Kirda
SENTINEL: Securing Legacy Firefox Extensions. Comput. Secur. 49 (2015)
Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. DIMVA (2015)
Collin Mulliner, William K. Robertson, Engin Kirda
Hidden GEMs: Automated Discovery of Access Control Vulnerabilities in Graphical User Interfaces. IEEE Symposium on Security and Privacy (2014)
Leyla Bilge, Sevil Sen, Davide Balzarotti, Engin Kirda, Christopher Kruegel
Exposure: A Passive DNS Analysis Service to Detect and Report Malicious Domains. ACM Trans. Inf. Syst. Secur. 16 (4) (2014)
Stevens Le Blond, Adina Uritesc, Cédric Gilbert, Zheng Leong Chua, Prateek Saxena, Engin Kirda
A Look at Targeted Attacks Through the Lense of an NGO. USENIX Security Symposium (2014)
Amin Kharraz, Engin Kirda, William K. Robertson, Davide Balzarotti, Aurélien Francillon
Optical Delusions: A Study of Malicious QR Codes in the Wild. DSN (2014)
Sevtap Duman, Kaan Onarlioglu, Ali Osman Ulusoy, William K. Robertson, Engin Kirda
TrueClick: automatically distinguishing trick banners from genuine download links. ACSAC (2014)
Collin Mulliner, William K. Robertson, Engin Kirda
VirtualSwindle: an automated attack against in-app billing on android. AsiaCCS (2014)
Tobias Lauinger, Martin Szydlowski, Kaan Onarlioglu, Gilbert Wondracek, Engin Kirda, Christopher Krügel
Clickonomics: Determining the Effect of Anti-Piracy Measures for One-Click Hosting. NDSS (2013)
Kaan Onarlioglu, Collin Mulliner, William K. Robertson, Engin Kirda
PrivExec: Private Execution as an Operating System Service. IEEE Symposium on Security and Privacy (2013)
Kaan Onarlioglu, Mustafa Battal, William K. Robertson, Engin Kirda
Securing Legacy Firefox Extensions with SENTINEL. DIMVA (2013)
Engin Kirda
DarkDroid - Exposing the Dark Side of Malicious Mobile Applications. ERCIM News 2013 (93) (2013)
Tobias Lauinger, Kaan Onarlioglu, Chaabane Abdelberi, Engin Kirda, William K. Robertson, Mohamed Ali Kâafar
Holiday Pictures or Blockbuster Movies? Insights into Copyright Infringement in User Uploads to One-Click File Hosters. RAID (2013)
Ting-Fang Yen, Alina Oprea, Kaan Onarlioglu, Todd Leetham, William K. Robertson, Ari Juels, Engin Kirda
Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks. ACSAC (2013)
Aldo Cassola, William K. Robertson, Engin Kirda, Guevara Noubir
A Practical, Targeted, and Stealthy Attack Against WPA Enterprise Authentication. NDSS (2013)
Collin Mulliner, Jon Oberheide, William K. Robertson, Engin Kirda
PatchDroid: scalable third-party security patches for Android devices. ACSAC (2013)
Marco Balduzzi, Jonas Zaddach, Davide Balzarotti, Engin Kirda, Sergio Loureiro
A security analysis of amazon's elastic compute cloud service. SAC (2012)
Theodoor Scholte, Davide Balzarotti, Engin Kirda
Have things changed now? An empirical study on input validation vulnerabilities in web applications. Comput. Secur. 31 (3) (2012)
Grégoire Jacob, Engin Kirda, Christopher Kruegel, Giovanni Vigna
PUBCRAWL: Protecting Users and Businesses from CRAWLers. USENIX Security Symposium (2012)
Theodoor Scholte, William K. Robertson, Davide Balzarotti, Engin Kirda
Preventing Input Validation Vulnerabilities in Web Applications through Automated Type Analysis. COMPSAC (2012)

Engin Kirda.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Engin Kirda