Nick Nikiforakis

Publication Activity (10 Years)

Years Active: 2010-2024
Publications (10 Years): 66

Top Topics

Web Applications

Detecting Malicious

Technical Support

Top Venues

USENIX Security Symposium

Publications

Brian Kondracki, Nick Nikiforakis
Smudged Fingerprints: Characterizing and Improving the Performance of Web Application Fingerprinting. USENIX Security Symposium (2024)
Chris Tsoukaladelis, Nick Nikiforakis
Manufactured Narratives: On the Potential of Manipulating Social Media to Politicize World Events. SP (Workshops) (2024)
Billy Tsouvalas, Nick Nikiforakis
Knocking on Admin's Door: Protecting Critical Web Applications with Deception. DIMVA (2024)
Johnny So, Michael Ferdman, Nick Nikiforakis
The More Things Change, the More They Stay the Same: Integrity of Modern JavaScript. WWW (2023)
Mir Masood Ali, Binoy Chitale, Mohammad Ghasemisharif, Chris Kanich, Nick Nikiforakis, Jason Polakis
Navigating Murky Waters: Automated Browser Feature Testing for Uncovering Tracking Vectors. NDSS (2023)
Babak Amin Azad, Nick Nikiforakis
Role Models: Role-based Debloating for Web Applications. CODASPY (2023)
Babak Amin Azad, Rasoul Jahanshahi, Chris Tsoukaladelis, Manuel Egele, Nick Nikiforakis
AnimateDead: Debloating Web Applications Using Concolic Execution. USENIX Security Symposium (2023)
Xigao Li, Anurag Yepuri, Nick Nikiforakis
Double and Nothing: Understanding and Detecting Cryptocurrency Giveaway Scams. NDSS (2023)
Rasoul Jahanshahi, Babak Amin Azad, Nick Nikiforakis, Manuel Egele
Minimalist: Semi-automated Debloating of PHP Web Applications through Static Analysis. USENIX Security Symposium (2023)
Xigao Li, Babak Amin Azad, Amir Rahmati, Nick Nikiforakis
Scan Me If You Can: Understanding and Detecting Unwanted Vulnerability Scanning. WWW (2023)
Brian Kondracki, Johnny So, Nick Nikiforakis
Uninvited Guests: Analyzing the Identity and Behavior of Certificate Transparency Bots. USENIX Security Symposium (2022)
Brian Kondracki, Babak Amin Azad, Najmeh Miramirkhani, Nick Nikiforakis
The Droid is in the Details: Environment-aware Evasion of Android Sandboxes. NDSS (2022)
Johnny So, Najmeh Miramirkhani, Michael Ferdman, Nick Nikiforakis
Domains Do Change Their Spots: Quantifying Potential Abuse of Residual Trust. IEEE Symposium on Security and Privacy (2022)
Konstantinos Solomos, Panagiotis Ilia, Soroush Karami, Nick Nikiforakis, Jason Polakis
The Dangers of Human Touch: Fingerprinting Browser Extensions through User Actions. USENIX Security Symposium (2022)
Xingzhi Guo, Brian Kondracki, Nick Nikiforakis, Steven Skiena
Verba Volant, Scripta Volant: Understanding Post-publication Title Changes in News Outlets. WWW (2022)
Konstantinos Solomos, Panagiotis Ilia, Nick Nikiforakis, Jason Polakis
Escaping the Confines of Time: Continuous Browser Extension Fingerprinting Through Ephemeral Modifications. CCS (2022)
Beliz Kaleli, Brian Kondracki, Manuel Egele, Nick Nikiforakis, Gianluca Stringhini
To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media. NDSS (2021)
Janos Szurdi, Meng Luo, Brian Kondracki, Nick Nikiforakis, Nicolas Christin
Where are you taking me?Understanding Abusive Traffic Distribution Systems. WWW (2021)
Timothy Barron, Johnny So, Nick Nikiforakis
Click This, Not That: Extending Web Authentication with Deception. AsiaCCS (2021)
Brian Kondracki, Babak Amin Azad, Oleksii Starov, Nick Nikiforakis
Catching Transparent Phish: Analyzing and Detecting MITM Phishing Toolkits. CCS (2021)
Xigao Li, Babak Amin Azad, Amir Rahmati, Nick Nikiforakis
Good Bot, Bad Bot: Characterizing Automated Browsing Activity. IEEE Symposium on Security and Privacy (2021)
Pierre Laperdrix, Oleksii Starov, Quan Chen, Alexandros Kapravelos, Nick Nikiforakis
Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets. USENIX Security Symposium (2021)
Sebastian Roth, Timothy Barron, Stefano Calzavara, Nick Nikiforakis, Ben Stock
Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. NDSS (2020)
Babak Amin Azad, Oleksii Starov, Pierre Laperdrix, Nick Nikiforakis
Web Runner 2049: Evaluating Third-Party Anti-bot Services. DIMVA (2020)
Babak Amin Azad, Oleksii Starov, Pierre Laperdrix, Nick Nikiforakis
Short Paper - Taming the Shape Shifter: Detecting Anti-fingerprinting Browsers. DIMVA (2020)
Nikolaos Pantelaios, Nick Nikiforakis, Alexandros Kapravelos
You've Changed: Detecting Malicious Browser Extensions through their Update Deltas. CCS (2020)
Brian Kondracki, Assel Aliyeva, Manuel Egele, Jason Polakis, Nick Nikiforakis
Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers. IEEE Symposium on Security and Privacy (2020)
Javad Nejati, Meng Luo, Nick Nikiforakis, Aruna Balasubramanian
Need for Mobile Speed: A Historical Study of Mobile Web Performance. TMA (2020)
Babak Amin Azad, Pierre Laperdrix, Nick Nikiforakis
Less is More: Quantifying the Security Benefits of Debloating Web Applications. USENIX Security Symposium (2019)
Timothy Barron, Najmeh Miramirkhani, Nick Nikiforakis
Now You See It, Now You Don't: A Large-scale Analysis of Early Domain Deletions. RAID (2019)
Tom van Goethem, Najmeh Miramirkhani, Wouter Joosen, Nick Nikiforakis
Purchased Fame: Exploring the Ecosystem of Private Blog Networks. AsiaCCS (2019)
Pierre Laperdrix, Gildas Avoine, Benoit Baudry, Nick Nikiforakis
Morellian Analysis for Browsers: Making Web Authentication Stronger with Canvas Fingerprinting. DIMVA (2019)
Oleksii Starov, Pierre Laperdrix, Alexandros Kapravelos, Nick Nikiforakis
Unnecessarily Identifiable: Quantifying the fingerprintability of browser extensions due to bloat. WWW (2019)
Erik Trickel, Oleksii Starov, Alexandros Kapravelos, Nick Nikiforakis, Adam Doupé
Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting. USENIX Security Symposium (2019)
Meng Luo, Pierre Laperdrix, Nima Honarmand, Nick Nikiforakis
Time Does Not Heal All Wounds: A Longitudinal Analysis of Security-Mechanism Support in Mobile Browsers. NDSS (2019)
Najmeh Miramirkhani, Timothy Barron, Michael Ferdman, Nick Nikiforakis
Panning for gold.com: Understanding the Dynamics of Domain Dropcatching. WWW (2018)
Oleksii Starov, Yuchen Zhou, Xiao Zhang, Najmeh Miramirkhani, Nick Nikiforakis
Betrayed by Your Dashboard: Discovering Malicious Campaigns via Web Analytics. WWW (2018)
Oleksii Starov, Nick Nikiforakis
PrivacyMeter: Designing and Developing a Privacy-Preserving Browser Extension. ESSoS (2018)
Martin Johns, Nick Nikiforakis, Melanie Volkamer, John Wilander
Web Application Security (Dagstuhl Seminar 18321). Dagstuhl Reports 8 (8) (2018)
Bharat Srinivasan, Athanasios Kountouras, Najmeh Miramirkhani, Monjur Alam, Nick Nikiforakis, Manos Antonakakis, Mustaque Ahamad
Exposing Search and Advertisement Abuse Tactics and Infrastructure of Technical Support Scammers. WWW (2018)
Georg Merzdovnik, Markus Huber, Damjan Buhov, Nick Nikiforakis, Sebastian Neuner, Martin Schmiedecker, Edgar R. Weippl
Block Me If You Can: A Large-Scale Study of Tracker-Blocking Tools. EuroS&P (2017)
Panagiotis Kintis, Najmeh Miramirkhani, Charles Lever, Yizheng Chen, Rosa Romero Gómez, Nikolaos Pitropakis, Nick Nikiforakis, Manos Antonakakis
Hiding in Plain Sight: A Longitudinal Study of Combosquatting Abuse. CoRR (2017)
Enrico Mariconti, Jeremiah Onaolapo, Syed Sharique Ahmad, Nicolas Nikiforou, Manuel Egele, Nick Nikiforakis, Gianluca Stringhini
What's in a Name?: Understanding Profile Name Reuse on Twitter. WWW (2017)
Oleksii Starov, Nick Nikiforakis
Extended Tracking Powers: Measuring the Privacy Diffusion Enabled by Browser Extensions. WWW (2017)
Timothy Barron, Nick Nikiforakis
Picky Attackers: Quantifying the Role of System Properties on Intruder Behavior. ACSAC (2017)
Najmeh Miramirkhani, Oleksii Starov, Nick Nikiforakis
Dial One for Scam: A Large-Scale Analysis of Technical Support Scams. NDSS (2017)
Bharat Srinivasan, Athanasios Kountouras, Najmeh Miramirkhani, Monjur Alam, Nick Nikiforakis, Manos Antonakakis, Mustaque Ahamad
By Hook or by Crook: Exposing the Diverse Abuse Tactics of Technical Support Scammers. CoRR (2017)
Oleksii Starov, Nick Nikiforakis
XHOUND: Quantifying the Fingerprintability of Browser Extensions. IEEE Symposium on Security and Privacy (2017)
Panagiotis Kintis, Najmeh Miramirkhani, Charles Lever, Yizheng Chen, Rosa Romero Gómez, Nikolaos Pitropakis, Nick Nikiforakis, Manos Antonakakis
Hiding in Plain Sight: A Longitudinal Study of Combosquatting Abuse. CCS (2017)
Enrico Mariconti, Jeremiah Onaolapo, Syed Sharique Ahmad, Nicolas Nikiforou, Manuel Egele, Nick Nikiforakis, Gianluca Stringhini
What's in a Name? Understanding Profile Name Reuse on Twitter. CoRR (2017)
Nataliia Bielova, Nikolaos Laoutaris, Arvind Narayanan, Nick Nikiforakis
Online Privacy and Web Transparency (Dagstuhl Seminar 17162). Dagstuhl Reports 7 (4) (2017)
Thomas Vissers, Timothy Barron, Tom van Goethem, Wouter Joosen, Nick Nikiforakis
The Wolf of Name Street: Hijacking Domains Through Their Nameservers. CCS (2017)
Meng Luo, Oleksii Starov, Nima Honarmand, Nick Nikiforakis
Hindsight: Understanding the Evolution of UI Vulnerabilities in Mobile Browsers. CCS (2017)
Najmeh Miramirkhani, Mahathi Priya Appini, Nick Nikiforakis, Michalis Polychronakis
Spotless Sandboxes: Evading Malware Analysis Systems Using Wear-and-Tear Artifacts. IEEE Symposium on Security and Privacy (2017)
Oleksii Starov, Phillipa Gill, Nick Nikiforakis
Are You Sure You Want to Contact Us? Quantifying the Leakage of PII via Website Contact Forms. Proc. Priv. Enhancing Technol. 2016 (1) (2016)
M. Zubair Rafique, Tom van Goethem, Wouter Joosen, Christophe Huygens, Nick Nikiforakis
It's Free for a Reason: Exploring the Ecosystem of Free Live Streaming Services. NDSS (2016)
Enrico Mariconti, Jeremiah Onaolapo, Syed Sharique Ahmad, Nicolas Nikiforou, Manuel Egele, Nick Nikiforakis, Gianluca Stringhini
Why allowing profile name reuse is a bad idea. EUROSEC (2016)
Najmeh Miramirkhani, Oleksii Starov, Nick Nikiforakis
Dial One for Scam: Analyzing and Detecting Technical Support Scams. CoRR (2016)
Oleksii Starov, Johannes Dahse, Syed Sharique Ahmad, Thorsten Holz, Nick Nikiforakis
No Honor Among Thieves: A Large-Scale Analysis of Malicious Web Shells. WWW (2016)
Philippe De Ryck, Nick Nikiforakis, Lieven Desmet, Frank Piessens, Wouter Joosen
Protected Web Components: Hiding Sensitive Information in the Shadows. IT Prof. 17 (1) (2015)
Shuang Hao, Kevin Borgolte, Nick Nikiforakis, Gianluca Stringhini, Manuel Egele, Michael Eubanks, Brian Krebs, Giovanni Vigna
Drops for Stuff: An Analysis of Reshipping Mule Scams. CCS (2015)
Thomas Vissers, Wouter Joosen, Nick Nikiforakis
Parking Sensors: Analyzing and Detecting Parked Domains. NDSS (2015)
Tom van Goethem, Wouter Joosen, Nick Nikiforakis
The Clock is Still Ticking: Timing Attacks in the Modern Web. CCS (2015)
Nick Nikiforakis, Wouter Joosen, Benjamin Livshits
PriVaricator: Deceiving Fingerprinters with Little White Lies. WWW (2015)
Thomas Vissers, Tom van Goethem, Wouter Joosen, Nick Nikiforakis
Maneuvering Around Clouds: Bypassing Cloud-based Security Providers. CCS (2015)
Pieter Agten, Wouter Joosen, Frank Piessens, Nick Nikiforakis
Seven Months' Worth of Mistakes: A Longitudinal Study of Typosquatting Abuse. NDSS (2015)
Francesco Gadaleta, Nick Nikiforakis, Yves Younan, Wouter Joosen
Hello rootKitty: A lightweight invariance-enforcing framework. CoRR (2014)
Nick Nikiforakis, Federico Maggi, Gianluca Stringhini, M. Zubair Rafique, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna, Stefano Zanero
Stranger danger: exploring the ecosystem of ad-based URL shortening services. WWW (2014)
Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
On the Workings and Current Practices of Web-Based Device Fingerprinting. IEEE Secur. Priv. 12 (3) (2014)
Nick Nikiforakis, Marco Balduzzi, Lieven Desmet, Frank Piessens, Wouter Joosen
Soundsquatting: Uncovering the Use of Homophones in Domain Squatting. ISC (2014)
Tom van Goethem, Frank Piessens, Wouter Joosen, Nick Nikiforakis
Clubbing Seals: Exploring the Ecosystem of Third-party Security Seals. CCS (2014)
Steven Van Acker, Nick Nikiforakis, Lieven Desmet, Frank Piessens, Wouter Joosen
Monkey-in-the-browser: malware and vulnerabilities in augmented browsing script markets. AsiaCCS (2014)
Francesco Gadaleta, Nick Nikiforakis, Jan Tobias Mühlberg, Wouter Joosen
HyperForce: Hypervisor-enForced Execution of Security-Critical Code. CoRR (2014)
Francesco Gadaleta, Raoul Strackx, Nick Nikiforakis, Frank Piessens, Wouter Joosen
On the effectiveness of virtualization-based security. CoRR (2014)
Tom van Goethem, Ping Chen, Nick Nikiforakis, Lieven Desmet, Wouter Joosen
Large-Scale Security Analysis of the Web: Challenges and Findings. TRUST (2014)
Willem De Groef, Dominique Devriese, Nick Nikiforakis, Frank Piessens
Secure multi-execution of web scripts: Theory and practice. J. Comput. Secur. 22 (4) (2014)
Ping Chen, Nick Nikiforakis, Lieven Desmet, Christophe Huygens
Security Analysis of the Chinese Web: How well is it protected? SafeConfig (2014)
Nick Nikiforakis, Frank Piessens, Wouter Joosen
HeapSentry: Kernel-Assisted Protection against Heap Overflows. DIMVA (2013)
Nick Nikiforakis, Steven Van Acker, Wannes Meert, Lieven Desmet, Frank Piessens, Wouter Joosen
Bitsquatting: exploiting bit-flips for fun, or profit? WWW (2013)
Philippe De Ryck, Nick Nikiforakis, Lieven Desmet, Wouter Joosen
TabShots: client-side detection of tabnabbing attacks. AsiaCCS (2013)
Nick Nikiforakis, Alexandros Kapravelos, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. IEEE Symposium on Security and Privacy (2013)
Gunes Acar, Marc Juárez, Nick Nikiforakis, Claudia Díaz, Seda F. Gürses, Frank Piessens, Bart Preneel
FPDetective: dusting the web for fingerprinters. CCS (2013)
Ping Chen, Nick Nikiforakis, Christophe Huygens, Lieven Desmet
A Dangerous Mix: Large-Scale Analysis of Mixed-Content Websites. ISC (2013)
Francesco Gadaleta, Nick Nikiforakis, Jan Tobias Mühlberg, Wouter Joosen
HyperForce: Hypervisor-enForced Execution of Security-Critical Code. SEC (2012)
Willem De Groef, Dominique Devriese, Nick Nikiforakis, Frank Piessens
FlowFox: a web browser with flexible and precise information flow control. CCS (2012)
Philippe De Ryck, Nick Nikiforakis, Lieven Desmet, Frank Piessens, Wouter Joosen
Serene: Self-Reliant Client-Side Protection against Session Fixation. DAIS (2012)
Nick Nikiforakis, Steven Van Acker, Frank Piessens, Wouter Joosen
Exploring the Ecosystem of Referrer-Anonymizing Services. Privacy Enhancing Technologies (2012)
Pieter Agten, Nick Nikiforakis, Raoul Strackx, Willem De Groef, Frank Piessens
Recent Developments in Low-Level Software Security. WISTP (2012)
Steven Van Acker, Nick Nikiforakis, Lieven Desmet, Wouter Joosen, Frank Piessens
FlashOver: automated discovery of cross-site scripting vulnerabilities in rich internet applications. AsiaCCS (2012)
Sebastian Lekies, Nick Nikiforakis, Walter Tighzert, Frank Piessens, Martin Johns
DEMACRO: Defense against Malicious Cross-Domain Requests. RAID (2012)
Job Noorman, Nick Nikiforakis, Frank Piessens
There Is Safety in Numbers: Preventing Control-Flow Hijacking by Duplication. NordSec (2012)
Nick Nikiforakis, Luca Invernizzi, Alexandros Kapravelos, Steven Van Acker, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna
You are what you include: large-scale evaluation of remote javascript inclusions. CCS (2012)
Nick Nikiforakis, Wouter Joosen, Martin Johns
Abusing locality in shared web hosting. EUROSEC (2011)
Francesco Gadaleta, Nick Nikiforakis, Yves Younan, Wouter Joosen
Hello rootKitty: A Lightweight Invariance-Enforcing Framework. ISC (2011)
John Wilander, Nick Nikiforakis, Yves Younan, Mariam Kamkar, Wouter Joosen
RIPE: runtime intrusion prevention evaluator. ACSAC (2011)
Nick Nikiforakis, Wannes Meert, Yves Younan, Martin Johns, Wouter Joosen
SessionShield: Lightweight Protection against Session Hijacking. ESSoS (2011)
Nick Nikiforakis, Marco Balduzzi, Steven Van Acker, Wouter Joosen, Davide Balzarotti
Exposing the Lack of Privacy in File Hosting Services. LEET (2011)
Steven Van Acker, Nick Nikiforakis, Pieter Philippaerts, Yves Younan, Frank Piessens
ValueGuard: Protection of Native Applications against Data-Only Buffer Overflows. ICISS (2010)
Nick Nikiforakis, Yves Younan, Wouter Joosen
HProxy: Client-Side Detection of SSL Stripping Attacks. DIMVA (2010)