William K. Robertson

Publication Activity (10 Years)

Years Active: 2003-2024
Publications (10 Years): 42

Top Topics

Integrity Checking

Android Application

Speculative Execution

Graphical User Interfaces

Top Venues

IEEE Symposium on Security and Privacy

Publications

William K. Robertson, Manuel Egele
A Viewpoint: Safer Heaps With Practical Architectural Security Primitives. IEEE Secur. Priv. 22 (4) (2024)
Joshua Bundt, Andrew Fasano, Brendan Dolan-Gavitt, William K. Robertson, Tim Leek
Homo in Machina: Improving Fuzz Testing Coverage via Compartment Analysis. ICST (2023)
Joshua Bundt, Michael Davinroy, Ioannis Agadakos, Alina Oprea, William K. Robertson
Black-box Attacks Against Neural Binary Function Detection. RAID (2023)
William Blair, William K. Robertson, Manuel Egele
ThreadLock: Native Principal Isolation Through Memory Protection Keys. AsiaCCS (2023)
Ioannis Agadakos, Manuel Egele, William K. Robertson
Polytope: Practical Memory Access Control for C++ Applications. CoRR (2022)
Joshua Bundt, Andrew Fasano, Brendan Dolan-Gavitt, William K. Robertson, Tim Leek
Homo in Machina: Improving Fuzz Testing Coverage via Compartment Analysis. CoRR (2022)
Joshua Bundt, Andrew Fasano, Brendan Dolan-Gavitt, William K. Robertson, Tim Leek
Evaluating Synthetic Bugs. CoRR (2022)
William Blair, William K. Robertson, Manuel Egele
MPKAlloc: Efficient Heap Meta-data Integrity Through Hardware Memory Protection Keys. DIMVA (2022)
Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William K. Robertson, Engin Kirda, Anil Kurmus
Bypassing memory safety mechanisms through speculative control flow hijacks. CoRR (2020)
William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William K. Robertson, Engin Kirda, Manuel Egele
HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. CoRR (2020)
Alejandro Mera, Bo Feng, Long Lu, Engin Kirda, William K. Robertson
DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis. CoRR (2020)
Walter Rweyemamu, Tobias Lauinger, Christo Wilson, William K. Robertson, Engin Kirda
Getting Under Alexa's Umbrella: Infiltration Attacks Against Internet Top Domain Lists. ISC (2019)
Seyed Ali Mirheidari, Sajjad Arshad, Kaan Onarlioglu, Bruno Crispo, Engin Kirda, William K. Robertson
Cached and Confused: Web Cache Deception in the Wild. CoRR (2019)
Walter Rweyemamu, Tobias Lauinger, Christo Wilson, William K. Robertson, Engin Kirda
Clustering and the Weekend Effect: Recommendations for the Use of Top Domain Lists in Security Research. PAM (2019)
Florian Quinkert, Tobias Lauinger, William K. Robertson, Engin Kirda, Thorsten Holz
It's Not what It Looks Like: Measuring Attacks and Defensive Registrations of Homograph Domains. CNS (2019)
Andrea Mambretti, Matthias Neugschwandtner, Alessandro Sorniotti, Engin Kirda, William K. Robertson, Anil Kurmus
Speculator: a tool to analyze speculative execution attacks and mitigations. ACSAC (2019)
Muhammad Ahmad Bashir, Sajjad Arshad, Engin Kirda, William K. Robertson, Christo Wilson
A Longitudinal Analysis of the ads.txt Standard. Internet Measurement Conference (2019)
Kaan Onarlioglu, William K. Robertson, Engin Kirda
Eraser: Your Data Won't Be Back. EuroS&P (2018)
Sajjad Arshad, Amin Kharraz, William K. Robertson
Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions. CoRR (2018)
Muhammad Ahmad Bashir, Sajjad Arshad, Engin Kirda, William K. Robertson, Christo Wilson
How Tracking Companies Circumvented Ad Blockers Using WebSockets. Internet Measurement Conference (2018)
Sajjad Arshad, Seyed Ali Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William K. Robertson
Large-Scale Analysis of Style Injection by Relative Path Overwrite. WWW (2018)
Tobias Lauinger, Ahmet Salih Buyukkayhan, Abdelberi Chaabane, William K. Robertson, Engin Kirda
From Deletion to Re-Registration in Zero Seconds: Domain Registrar Behaviour During the Drop. Internet Measurement Conference (2018)
Amin Kharraz, William K. Robertson, Engin Kirda
Protecting against Ransomware: A New Line of Research or Restating Classic Ideas? IEEE Secur. Priv. 16 (3) (2018)
Sajjad Arshad, Amin Kharraz, William K. Robertson
Identifying Extension-based Ad Injection via Fine-grained Web Content Provenance. CoRR (2018)
Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William K. Robertson, Christo Wilson, Engin Kirda
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web. CoRR (2018)
Reza Mirzazade Farkhani, Saman Jafari, Sajjad Arshad, William K. Robertson, Engin Kirda, Hamed Okhravi
On the Effectiveness of Type-based Control Flow Integrity. ACSAC (2018)
Muhammad Ahmad Bashir, Sajjad Arshad, William K. Robertson, Christo Wilson
Tracing Information Flows Between Ad Exchanges Using Retargeted Ads. CoRR (2018)
Sajjad Arshad, Seyed Ali Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William K. Robertson
Large-Scale Analysis of Style Injection by Relative Path Overwrite. CoRR (2018)
Amin Kharraz, William K. Robertson, Engin Kirda
Surveylance: Automatically Detecting Online Survey Scams. IEEE Symposium on Security and Privacy (2018)
Reza Mirzazade Farkhani, Saman Jafari, Sajjad Arshad, William K. Robertson, Engin Kirda, Hamed Okhravi
On the Effectiveness of Type-based Control Flow Integrity. CoRR (2018)
Michael Weissbacher, Enrico Mariconti, Guillermo Suarez-Tangil, Gianluca Stringhini, William K. Robertson, Engin Kirda
Ex-Ray: Detection of History-Leaking Browser Extensions. ACSAC (2017)
Ahmet Salih Buyukkayhan, Alina Oprea, Zhou Li, William K. Robertson
Lens on the Endpoint: Hunting for Malicious Software Through Endpoint Data Analysis. RAID (2017)
Collin Mulliner, William K. Robertson, Engin Kirda
On the misuse of graphical user interface elements to implement security controls. it Inf. Technol. 59 (2) (2017)
William Koch, Abdelberi Chaabane, Manuel Egele, William K. Robertson, Engin Kirda
Semi-automated discovery of server-based information oversharing vulnerabilities in Android applications. ISSTA (2017)
Ahmet Salih Buyukkayhan, Kaan Onarlioglu, William K. Robertson, Engin Kirda
CrossFire: An Analysis of Firefox Extension-Reuse Vulnerabilities. NDSS (2016)
Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
TriggerScope: Towards Detecting Logic Bombs in Android Applications. IEEE Symposium on Security and Privacy (2016)
Brendan Dolan-Gavitt, Patrick Hulin, Engin Kirda, Tim Leek, Andrea Mambretti, William K. Robertson, Frederick Ulrich, Ryan Whelan
LAVA: Large-Scale Automated Vulnerability Addition. IEEE Symposium on Security and Privacy (2016)
Muhammad Ahmad Bashir, Sajjad Arshad, William K. Robertson, Christo Wilson
Tracing Information Flows Between Ad Exchanges Using Retargeted Ads. USENIX Security Symposium (2016)
Sevtap Duman, Kubra Kalkan-Cakmakci, Manuel Egele, William K. Robertson, Engin Kirda
EmailProfiler: Spearphishing Filtering with Header and Stylometric Features of Emails. COMPSAC (2016)
Matthias Neugschwandtner, Collin Mulliner, William K. Robertson, Engin Kirda
Runtime Integrity Checking for Exploit Mitigation on Lightweight Embedded Devices. TRUST (2016)
Amin Kharraz, Sajjad Arshad, Collin Mulliner, William K. Robertson, Engin Kirda
UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. USENIX Security Symposium (2016)
Patrick Carter, Collin Mulliner, Martina Lindorfer, William K. Robertson, Engin Kirda
CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes. Financial Cryptography (2016)
Amin Kharraz, William K. Robertson, Davide Balzarotti, Leyla Bilge, Engin Kirda
Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. DIMVA (2015)
Michael Weissbacher, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities. USENIX Security Symposium (2015)
Ahmet Talha Ozcan, Can Gemicioglu, Kaan Onarlioglu, Michael Weissbacher, Collin Mulliner, William K. Robertson, Engin Kirda
BabelCrypt: The Universal Encryption Layer for Mobile Messaging Applications. Financial Cryptography (2015)
Kaan Onarlioglu, Ahmet Salih Buyukkayhan, William K. Robertson, Engin Kirda
SENTINEL: Securing Legacy Firefox Extensions. Comput. Secur. 49 (2015)
Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. DIMVA (2015)
Collin Mulliner, William K. Robertson, Engin Kirda
Hidden GEMs: Automated Discovery of Access Control Vulnerabilities in Graphical User Interfaces. IEEE Symposium on Security and Privacy (2014)
Amin Kharraz, Engin Kirda, William K. Robertson, Davide Balzarotti, Aurélien Francillon
Optical Delusions: A Study of Malicious QR Codes in the Wild. DSN (2014)
Sevtap Duman, Kaan Onarlioglu, Ali Osman Ulusoy, William K. Robertson, Engin Kirda
TrueClick: automatically distinguishing trick banners from genuine download links. ACSAC (2014)
Collin Mulliner, William K. Robertson, Engin Kirda
VirtualSwindle: an automated attack against in-app billing on android. AsiaCCS (2014)
Michael Weissbacher, Tobias Lauinger, William K. Robertson
Why Is CSP Failing? Trends and Challenges in CSP Adoption. RAID (2014)
Kaan Onarlioglu, Collin Mulliner, William K. Robertson, Engin Kirda
PrivExec: Private Execution as an Operating System Service. IEEE Symposium on Security and Privacy (2013)
Kaan Onarlioglu, Mustafa Battal, William K. Robertson, Engin Kirda
Securing Legacy Firefox Extensions with SENTINEL. DIMVA (2013)
Tobias Lauinger, Kaan Onarlioglu, Chaabane Abdelberi, Engin Kirda, William K. Robertson, Mohamed Ali Kâafar
Holiday Pictures or Blockbuster Movies? Insights into Copyright Infringement in User Uploads to One-Click File Hosters. RAID (2013)
Ting-Fang Yen, Alina Oprea, Kaan Onarlioglu, Todd Leetham, William K. Robertson, Ari Juels, Engin Kirda
Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks. ACSAC (2013)
Aldo Cassola, William K. Robertson, Engin Kirda, Guevara Noubir
A Practical, Targeted, and Stealthy Attack Against WPA Enterprise Authentication. NDSS (2013)
Collin Mulliner, Jon Oberheide, William K. Robertson, Engin Kirda
PatchDroid: scalable third-party security patches for Android devices. ACSAC (2013)
Theodoor Scholte, William K. Robertson, Davide Balzarotti, Engin Kirda
Preventing Input Validation Vulnerabilities in Web Applications through Automated Type Analysis. COMPSAC (2012)
Theodoor Scholte, William K. Robertson, Davide Balzarotti, Engin Kirda
An empirical analysis of input validation mechanisms in web applications and languages. SAC (2012)
Leyla Bilge, Davide Balzarotti, William K. Robertson, Engin Kirda, Christopher Kruegel
Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis. ACSAC (2012)
William K. Robertson, Federico Maggi, Christopher Kruegel, Giovanni Vigna
Effective Anomaly Detection with Scarce Training Data. NDSS (2010)
Davide Balzarotti, Greg Banks, Marco Cova, Viktoria Felmetsger, Richard A. Kemmerer, William K. Robertson, Fredrik Valeur, Giovanni Vigna
An Experience in Testing the Security of Real-World Electronic Voting Systems. IEEE Trans. Software Eng. 36 (4) (2010)
William K. Robertson, Giovanni Vigna
Static Enforcement of Web Application Integrity Through Strong Typing. USENIX Security Symposium (2009)
Giovanni Vigna, Fredrik Valeur, Davide Balzarotti, William K. Robertson, Christopher Kruegel, Engin Kirda
Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries. J. Comput. Secur. 17 (3) (2009)
Federico Maggi, William K. Robertson, Christopher Krügel, Giovanni Vigna
Protecting a Moving Target: Addressing Web Application Concept Drift. RAID (2009)
Davide Balzarotti, Greg Banks, Marco Cova, Viktoria Felmetsger, Richard A. Kemmerer, William K. Robertson, Fredrik Valeur, Giovanni Vigna
counted?: testing the security of real-world electronic voting systems. ISSTA (2008)
Darren Mutz, William K. Robertson, Giovanni Vigna, Richard A. Kemmerer
Exploiting Execution Context for the Detection of Anomalous System Calls. RAID (2007)
Christopher Kruegel, Davide Balzarotti, William K. Robertson, Giovanni Vigna
Improving Signature Testing through Dynamic Data Flow Analysis. ACSAC (2007)
William K. Robertson, Giovanni Vigna, Christopher Krügel, Richard A. Kemmerer
Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks. NDSS (2006)
Christopher Kruegel, Engin Kirda, Darren Mutz, William K. Robertson, Giovanni Vigna
Automating Mimicry Attacks Using Static Binary Analysis. USENIX Security Symposium (2005)
Christopher Krügel, Giovanni Vigna, William K. Robertson
A multi-model approach to the detection of web-based attacks. Comput. Networks 48 (5) (2005)
Christopher Krügel, Engin Kirda, Darren Mutz, William K. Robertson, Giovanni Vigna
Polymorphic Worm Detection Using Structural Information of Executables. RAID (2005)
Giovanni Vigna, William K. Robertson, Davide Balzarotti
Testing network-based intrusion detection signatures using mutant exploits. CCS (2004)
Christopher Krügel, William K. Robertson, Fredrik Valeur, Giovanni Vigna
Static Disassembly of Obfuscated Binaries. USENIX Security Symposium (2004)
Christopher Krügel, William K. Robertson, Giovanni Vigna
Detecting Kernel-Level Rootkits Through Binary Analysis. ACSAC (2004)
Christopher Krügel, William K. Robertson
Alert Verification Determining the Success of Intrusion Attempts. DIMVA (2004)
Christopher Kruegel, William K. Robertson, Giovanni Vigna
Using Alert Verification to Identify Successful Intrusion Attempts. Prax. Inf.verarb. Kommun. 27 (4) (2004)
William K. Robertson, Christopher Krügel, Darren Mutz, Fredrik Valeur
Run-time Detection of Heap-based Overflows. LISA (2003)
Christopher Krügel, Darren Mutz, William K. Robertson, Fredrik Valeur
Bayesian Event Classification for Intrusion Detection. ACSAC (2003)
Giovanni Vigna, William K. Robertson, Vishal Kher, Richard A. Kemmerer
A Stateful Intrusion Detection System for World-Wide Web Servers. ACSAC (2003)
Christopher Krügel, Darren Mutz, William K. Robertson, Fredrik Valeur
Topology-Based Detection of Anomalous BGP Messages. RAID (2003)