V. N. Venkatakrishnan

Publication Activity (10 Years)

Years Active: 2000-2024
Publications (10 Years): 24

Top Topics

Web Applications

Detect Malicious

Information Flows

Top Venues

IEEE Symposium on Security and Privacy

Publications

Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
TIPCE: A Longitudinal Threat Intelligence Platform Comprehensiveness Analysis. CODASPY (2024)
Mingqing Kang, Yichao Xu, Song Li, Rigel Gjomemo, Jianwei Hou, V. N. Venkatakrishnan, Yinzhi Cao
Scaling JavaScript Abstract Interpretation to Detect and Exploit Node.js Taint-style Vulnerability. SP (2023)
Sutanu Kumar Ghosh, Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
OSTINATO: Cross-host Attack Correlation Through Attack Activity Similarity Detection. CoRR (2023)
Sutanu Kumar Ghosh, Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
Ostinato: Cross-host Attack Correlation Through Attack Activity Similarity Detection. ICISS (2022)
Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
Extractor: Extracting Attack Behavior from Threat Reports. EuroS&P (2021)
Kiavash Satvat, Rigel Gjomemo, V. N. Venkatakrishnan
EXTRACTOR: Extracting Attack Behavior from Threat Reports. CoRR (2021)
Hafiz Malik, Rigel Gjomemo, V. N. Venkatakrishnan, Rashid Ansari, Aun Irtaza
Remote Check Truncation Systems: Vulnerability Analysis and Countermeasures. IEEE Access 8 (2020)
Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting. CoRR (2019)
Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
POIROT: Aligning Attack Behavior with Kernel Audit Records for Cyber Threat Hunting. CCS (2019)
Sadegh Momeni Milajerdi, Rigel Gjomemo, Birhanu Eshete, R. Sekar, V. N. Venkatakrishnan
HOLMES: Real-Time APT Detection through Correlation of Suspicious Information Flows. IEEE Symposium on Security and Privacy (2019)
Md Nahid Hossain, Sadegh M. Milajerdi, Junao Wang, Birhanu Eshete, Rigel Gjomemo, R. Sekar, Scott D. Stoller, V. N. Venkatakrishnan
SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data. CoRR (2018)
Abeer Alhuzali, Rigel Gjomemo, Birhanu Eshete, V. N. Venkatakrishnan
NAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications. USENIX Security Symposium (2018)
Sadegh M. Milajerdi, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
ProPatrol: Attack Investigation via Extracted High-Level Tasks. CoRR (2018)
Sadegh M. Milajerdi, Rigel Gjomemo, Birhanu Eshete, R. Sekar, V. N. Venkatakrishnan
HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows. CoRR (2018)
Birhanu Eshete, V. N. Venkatakrishnan
DynaMiner: Leveraging Offline Infection Analytics for On-the-Wire Malware Detection. DSN (2017)
Md Nahid Hossain, Sadegh M. Milajerdi, Junao Wang, Birhanu Eshete, Rigel Gjomemo, R. Sekar, Scott D. Stoller, V. N. Venkatakrishnan
SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data. USENIX Security Symposium (2017)
Maliheh Monshizadeh, Prasad Naldurg, V. N. Venkatakrishnan
Patching Logic Vulnerabilities for Web Applications using LogicPatcher. CODASPY (2016)
Birhanu Eshete, Rigel Gjomemo, Md Nahid Hossain, Sadegh Momeni, R. Sekar, Scott D. Stoller, V. N. Venkatakrishnan, Junao Wang
Attack Analysis Results for Adversarial Engagement 1 of the DARPA Transparent Computing Program. CoRR (2016)
Rigel Gjomemo, Phu H. Phung, Edmund Ballou, Kedar S. Namjoshi, V. N. Venkatakrishnan, Lenore D. Zuck
Leveraging Static Analysis Tools for Improving Usability of Memory Error Sanitization Compilers. QRS (2016)
Abeer Alhuzali, Birhanu Eshete, Rigel Gjomemo, V. N. Venkatakrishnan
Chainsaw: Chained Automated Workflow-based Exploit Generation. CCS (2016)
Daniele Gallingani, Rigel Gjomemo, V. N. Venkatakrishnan, Stefano Zanero
Practical Exploit Generation for Intent Message Vulnerabilities in Android. CODASPY (2015)
Phu H. Phung, Maliheh Monshizadeh, Meera Sridhar, Kevin W. Hamlen, V. N. Venkatakrishnan
Between Worlds: Securing Mixed JavaScript/ActionScript Multi-Party Web Content. IEEE Trans. Dependable Secur. Comput. 12 (4) (2015)
Rigel Gjomemo, Kedar S. Namjoshi, Phu H. Phung, V. N. Venkatakrishnan, Lenore D. Zuck
From Verification to Optimizations. VMCAI (2015)
Boyuan He, Vaibhav Rastogi, Yinzhi Cao, Yan Chen, V. N. Venkatakrishnan, Runqing Yang, Zhenrui Zhang
Vetting SSL Usage in Applications with SSLINT. IEEE Symposium on Security and Privacy (2015)
Kalpana Gondi, A. Prasad Sistla, V. N. Venkatakrishnan
Minimizing lifetime of sensitive data in concurrent programs. CODASPY (2014)
Prithvi Bisht, Timothy L. Hinrichs, Nazari Skrupsky, V. N. Venkatakrishnan
Automated detection of parameter tampering opportunities and vulnerabilities in web applications. J. Comput. Secur. 22 (3) (2014)
John C. Pendergrass, Karen Heart, C. Ranganathan, V. N. Venkatakrishnan
A Threat Table Based Assessment of Information Security in Telemedicine. Int. J. Heal. Inf. Syst. Informatics 9 (4) (2014)
Maliheh Monshizadeh, Prasad Naldurg, V. N. Venkatakrishnan
MACE: Detecting Privilege Escalation Vulnerabilities in Web Applications. CCS (2014)
Rigel Gjomemo, Hafiz Malik, Nilesh Sumb, V. N. Venkatakrishnan, Rashid Ansari
Digital Check Forgery Attacks on Client Check Truncation Systems. Financial Cryptography (2014)
Birhanu Eshete, V. N. Venkatakrishnan
WebWinnow: leveraging exploit kit workflows to detect malicious urls. CODASPY (2014)
Kalpana Gondi, A. Prasad Sistla, V. N. Venkatakrishnan
DEICS: Data Erasure in Concurrent Software. NordSec (2014)
Pratik Narang, Chittaranjan Hota, V. N. Venkatakrishnan
PeerShark: flow-clustering and conversation-generation for malicious peer-to-peer traffic identification. EURASIP J. Inf. Secur. 2014 (2014)
Nazari Skrupsky, Prithvi Bisht, Timothy L. Hinrichs, V. N. Venkatakrishnan, Lenore D. Zuck
TamperProof: a server-agnostic defense for parameter tampering attacks on web applications. CODASPY (2013)
Timothy L. Hinrichs, Daniele Rossetti, Gabriele Petronella, V. N. Venkatakrishnan, A. Prasad Sistla, Lenore D. Zuck
WEBLOG: a declarative language for secure web development. PLAS (2013)
Nazari Skrupsky, Maliheh Monshizadeh, Prithvi Bisht, Timothy L. Hinrichs, V. N. Venkatakrishnan, Lenore D. Zuck
WAVES: Automatic Synthesis of Client-Side Validation Code for Web Applications. CyberSecurity (2012)
Kalpana Gondi, Prithvi Bisht, Praveen Venkatachari, A. Prasad Sistla, V. N. Venkatakrishnan
SWIPE: eager erasure of sensitive data in large scale systems software. CODASPY (2012)
Prithvi Bisht, Timothy L. Hinrichs, Nazari Skrupsky, V. N. Venkatakrishnan
WAPTEC: whitebox analysis of web applications for parameter tampering exploit construction. CCS (2011)
Prithvi Bisht, Timothy L. Hinrichs, Nazari Skrupsky, Radoslaw Bobrowicz, V. N. Venkatakrishnan
NoTamper: automatic blackbox detection of parameter tampering opportunities in web applications. CCS (2010)
V. N. Venkatakrishnan, Prithvi Bisht, Mike Ter Louw, Michelle Zhou, Kalpana Gondi, Karthik Thotta Ganesh
WebAppArmor: A Framework for Robust Prevention of Attacks on Web Applications (Invited Paper). ICISS (2010)
Prithvi Bisht, Parthasarathy Madhusudan, V. N. Venkatakrishnan
CANDID: Dynamic candidate evaluations for automatic prevention of SQL injection attacks. ACM Trans. Inf. Syst. Secur. 13 (2) (2010)
Michelle Zhou, Prithvi Bisht, V. N. Venkatakrishnan
Strengthening XSRF Defenses for Legacy Web Applications Using Whitebox Analysis and Transformation. ICISS (2010)
Prithvi Bisht, A. Prasad Sistla, V. N. Venkatakrishnan
Automatically Preparing Safe SQL Queries. Financial Cryptography (2010)
Mike Ter Louw, Karthik Thotta Ganesh, V. N. Venkatakrishnan
AdJail: Practical Enforcement of Confidentiality and Integrity Policies on Web Advertisements. USENIX Security Symposium (2010)
Prithvi Bisht, A. Prasad Sistla, V. N. Venkatakrishnan
TAPS: automatically preparing safe SQL queries. CCS (2010)
Mike Ter Louw, V. N. Venkatakrishnan
Blueprint: Robust Prevention of Cross-site Scripting Attacks for Existing Browsers. IEEE Symposium on Security and Privacy (2009)
Zhenkai Liang, Weiqing Sun, V. N. Venkatakrishnan, R. Sekar
Alcatraz: An Isolated Environment for Experimenting with Untrusted Software. ACM Trans. Inf. Syst. Secur. 12 (3) (2009)
Prithvi Bisht, V. N. Venkatakrishnan
XSS-GUARD: Precise Dynamic Prevention of Cross-Site Scripting Attacks. DIMVA (2008)
A. Prasad Sistla, V. N. Venkatakrishnan, Michelle Zhou, Hilary Branske
CMV: automatic verification of complete mediation for java virtual machines. AsiaCCS (2008)
Mike Ter Louw, Jin Soon Lim, V. N. Venkatakrishnan
Enhancing web browser security against malware extensions. J. Comput. Virol. 4 (3) (2008)
Weiqing Sun, R. Sekar, Zhenkai Liang, V. N. Venkatakrishnan
Expanding Malware Defense by Securing Software Installations. DIMVA (2008)
Roberto Capizzi, Antonio Longo, V. N. Venkatakrishnan, A. Prasad Sistla
Preventing Information Leaks through Shadow Executions. ACSAC (2008)
Sruthi Bandhakavi, Prithvi Bisht, P. Madhusudan, V. N. Venkatakrishnan
CANDID: preventing sql injection attacks using dynamic candidate evaluations. CCS (2007)
Mike Ter Louw, Jin Soon Lim, V. N. Venkatakrishnan
Extensible Web Browser Security. DIMVA (2007)
Doo San Sim, V. N. Venkatakrishnan
SUEZ: A Distributed Safe Execution Environment for System Administration Trials. LISA (2006)
Tejas Khatiwala, Raj Swaminathan, V. N. Venkatakrishnan
Data Sandboxing: A Technique for Enforcing Confidentiality Policies. ACSAC (2006)
Wei Xu, V. N. Venkatakrishnan, R. Sekar, I. V. Ramakrishnan
A Framework for Building Privacy-Conscious Composite Web Services. ICWS (2006)
V. N. Venkatakrishnan, Wei Xu, Daniel C. DuVarney, R. Sekar
Provably Correct Runtime Enforcement of Non-interference Properties. ICICS (2006)
Weiqing Sun, Zhenkai Liang, V. N. Venkatakrishnan, R. Sekar
One-Way Isolation: An Effective Approach for Realizing Safe Execution Environments. NDSS (2005)
Wei Xu, R. Sekar, I. V. Ramakrishnan, V. N. Venkatakrishnan
An approach for realizing privacy-preserving web-based services. WWW (Special interest tracks and posters) (2005)
Daniel C. DuVarney, V. N. Venkatakrishnan, Sandeep Bhatkar
SELF: a transparent security extension for ELF binaries. NSPW (2003)
Zhenkai Liang, V. N. Venkatakrishnan, R. Sekar
Isolated Program Execution: An Application Transparent Approach for Executing Untrusted Programs. ACSAC (2003)
R. Sekar, V. N. Venkatakrishnan, Samik Basu, Sandeep Bhatkar, Daniel C. DuVarney
Model-carrying code: a practical approach for safe execution of untrusted applications. SOSP (2003)
V. N. Venkatakrishnan, Ram Peri, R. Sekar
Empowering mobile code using expressive security policies. NSPW (2002)
V. N. Venkatakrishnan, R. Sekar, T. Kamat, S. Tsipa, Zhenkai Liang
An Approach for Secure Software Installation. LISA (2002)
C. R. Ramakrishnan, I. V. Ramakrishnan, Scott A. Smolka, Yifei Dong, Xiaoqun Du, Abhik Roychoudhury, V. N. Venkatakrishnan
XMC: A Logic-Programming-Based Verification Toolset. CAV (2000)