Skip to content

Engin Kirda

Publication record assembled from the DBLP archive of ranked conferences.

Papers indexed

126

Venues

27

Active years

2001–2026

Best venue rank

A*

Where they publish

Papers

126 indexed papers, newest first.

YearVenueTitleAuthors
2026COMPSACMeasuring and Evaluating the Performance of Generative Ai Models for Scam Detection.Cem Topcuoglu, Seyed Ali Akhavani, Harel Berger, Sadia Afroz, Michalis Pachilakis, Vibhor Sehgal, Leyla Bilge, Engin Kirda
2025ACSACWAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls.Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus, Cem Topcuoglu, Sergey Bratus, Engin Kirda
2025NDSSSecure IP Address Allocation at Cloud Scale.Eric Pauley, Kyle Domico, Blaine Hoak, Ryan Sheatsley, Quinn Burke, Yohan Beugin, Engin Kirda, Patrick D. McDaniel
2025RAIDH2Fuzz: Guided, Black-box, Differential Fuzzing for HTTP/2-to-HTTP/1 Conversion Anomalies.Anthony Gavazzi, Weixin Kong, Engin Kirda
2025SP"Only as Strong as the Weakest Link": On the Security of Brokered Single Sign-On on the Web.Tommaso Innocenti, Louis Jannett, Christian Mainka, Vladislav Mladenov, Engin Kirda
2024NDSSUntangle: Multi-Layer Web Server Fingerprinting.Cem Topcuoglu, Kaan Onarlioglu, Bahruz Jabiyev, Engin Kirda
2024NSSEnhancing Network Security Through Vulnerability Monitoring.Ryan Williams, Anthony Gavazzi, Engin Kirda
2024RAIDGudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies.Bahruz Jabiyev, Anthony Gavazzi, Kaan Onarlioglu, Engin Kirda
2023ACSACOAuth 2.0 Redirect URI Validation Falls Short, Literally.Tommaso Innocenti, Matteo Golinelli, Kaan Onarlioglu, Seyed Ali Mirheidari, Bruno Crispo, Engin Kirda
2022ACSACA Recent Year On the Internet: Measuring and Understanding the Threats to Everyday Internet Devices.Afsah Anwar, Yi Hui Chen, Roy Hodgman, Tom Sellers, Engin Kirda, Alina Oprea
2022NDSSD-Box: DMA-enabled Compartmentalization for Embedded Applications.Alejandro Mera, Yi Hui Chen, Ruimin Sun, Engin Kirda, Long Lu
2021CCST-Reqs: HTTP Request Smuggling with Differential Fuzzing.Bahruz Jabiyev, Steven Sprecher, Kaan Onarlioglu, Engin Kirda
2021DIMVAYou've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures.Tommaso Innocenti, Seyed Ali Mirheidari, Amin Kharraz, Bruno Crispo, Engin Kirda
2021DIMVASCRUTINIZER: Detecting Code Reuse in Malware via Decompilation and Machine Learning.Omid Mirzaei, Roman Vasilenko, Engin Kirda, Long Lu, Amin Kharraz
2021SACPreventing server-side request forgery attacks.Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz, Engin Kirda
2021SPDICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis.Alejandro Mera, Bo Feng, Long Lu, Engin Kirda
2020NDSSHotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing.William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
2020RAIDWhat's in an Exploit? An Empirical Analysis of Reflected Server XSS Exploitation Techniques.Ahmet Salih Buyukkayhan, Can Gemicioglu, Tobias Lauinger, Alina Oprea, William Robertson, Engin Kirda
2019ACSACSpeculator: a tool to analyze speculative execution attacks and mitigations.Andrea Mambretti, Matthias Neugschwandtner, Alessandro Sorniotti, Engin Kirda, William K. Robertson, Anil Kurmus
2019IMCA Longitudinal Analysis of the ads.txt Standard.Muhammad Ahmad Bashir, Sajjad Arshad, Engin Kirda, William K. Robertson, Christo Wilson
2019PAMClustering and the Weekend Effect: Recommendations for the Use of Top Domain Lists in Security Research.Walter Rweyemamu, Tobias Lauinger, Christo Wilson, William K. Robertson, Engin Kirda
2019RAIDUSBESAFE: An End-Point Solution to Protect Against USB-Based Attacks.Amin Kharraz, Brandon L. Daley, Graham Z. Baker, William Robertson, Engin Kirda
2018ACSACOn the Effectiveness of Type-based Control Flow Integrity.Reza Mirzazade Farkhani, Saman Jafari, Sajjad Arshad, William K. Robertson, Engin Kirda, Hamed Okhravi
2018IMCHow Tracking Companies Circumvented Ad Blockers Using WebSockets.Muhammad Ahmad Bashir, Sajjad Arshad, Engin Kirda, William K. Robertson, Christo Wilson
2018IMCFrom Deletion to Re-Registration in Zero Seconds: Domain Registrar Behaviour During the Drop.Tobias Lauinger, Ahmet Salih Buyukkayhan, Abdelberi Chaabane, William K. Robertson, Engin Kirda
2018WWWLarge-Scale Analysis of Style Injection by Relative Path Overwrite.Sajjad Arshad, Seyed Ali Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William K. Robertson
2018SPSurveylance: Automatically Detecting Online Survey Scams.Amin Kharraz, William K. Robertson, Engin Kirda
2017ACSACEx-Ray: Detection of History-Leaking Browser Extensions.Michael Weissbacher, Enrico Mariconti, Guillermo Suarez-Tangil, Gianluca Stringhini, William K. Robertson, Engin Kirda
2017ISSTASemi-automated discovery of server-based information oversharing vulnerabilities in Android applications.William Koch, Abdelberi Chaabane, Manuel Egele, William K. Robertson, Engin Kirda
2017NDSSThou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web.Tobias Lauinger, Abdelberi Chaabane, Sajjad Arshad, William Robertson, Christo Wilson, Engin Kirda
2017RAIDRedemption: Real-Time Protection Against Ransomware at End-Hosts.Amin Kharraz, Engin Kirda
2016COMPSACEmailProfiler: Spearphishing Filtering with Header and Stylometric Features of Emails.Sevtap Duman, Kubra Kalkan-Cakmakci, Manuel Egele, William K. Robertson, Engin Kirda
2016DSNOverhaul: Input-Driven Access Control for Better Privacy on Traditional Operating Systems.Kaan Onarlioglu, William Robertson, Engin Kirda
2016FCCuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes.Patrick Carter, Collin Mulliner, Martina Lindorfer, William K. Robertson, Engin Kirda
2016IMCWHOIS Lost in Translation: (Mis)Understanding Domain Name Expiration and Re-Registration.Tobias Lauinger, Kaan Onarlioglu, Abdelberi Chaabane, William Robertson, Engin Kirda
2016NDSSCrossFire: An Analysis of Firefox Extension-Reuse Vulnerabilities.Ahmet Salih Buyukkayhan, Kaan Onarlioglu, William K. Robertson, Engin Kirda
2016RAIDTrellis: Privilege Separation for Multi-user Applications Made Easy.Andrea Mambretti, Kaan Onarlioglu, Collin Mulliner, William Robertson, Engin Kirda, Federico Maggi, Stefano Zanero
2016SPLAVA: Large-Scale Automated Vulnerability Addition.Brendan Dolan-Gavitt, Patrick Hulin, Engin Kirda, Tim Leek, Andrea Mambretti, William K. Robertson, Frederick Ulrich, Ryan Whelan
2016SPTriggerScope: Towards Detecting Logic Bombs in Android Applications.Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2015DIMVAOn the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users.Yanick Fratantonio, Antonio Bianchi, William K. Robertson, Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
2015DIMVACutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks.Amin Kharraz, William K. Robertson, Davide Balzarotti, Leyla Bilge, Engin Kirda
2015FCBabelCrypt: The Universal Encryption Layer for Mobile Messaging Applications.Ahmet Talha Ozcan, Can Gemicioglu, Kaan Onarlioglu, Michael Weissbacher, Collin Mulliner, William K. Robertson, Engin Kirda
2014ACSACTrueClick: automatically distinguishing trick banners from genuine download links.Sevtap Duman, Kaan Onarlioglu, Ali Osman Ulusoy, William K. Robertson, Engin Kirda
2014CCSVirtualSwindle: an automated attack against in-app billing on android.Collin Mulliner, William K. Robertson, Engin Kirda
2014DSNOptical Delusions: A Study of Malicious QR Codes in the Wild.Amin Kharraz, Engin Kirda, William K. Robertson, Davide Balzarotti, Aurlien Francillon
2014SPHidden GEMs: Automated Discovery of Access Control Vulnerabilities in Graphical User Interfaces.Collin Mulliner, William K. Robertson, Engin Kirda
2013ACSACPatchDroid: scalable third-party security patches for Android devices.Collin Mulliner, Jon Oberheide, William K. Robertson, Engin Kirda
2013ACSACBeehive: large-scale log analysis for detecting suspicious activity in enterprise networks.Ting-Fang Yen, Alina Oprea, Kaan Onarlioglu, Todd Leetham, William K. Robertson, Ari Juels, Engin Kirda
2013DIMVASecuring Legacy Firefox Extensions with SENTINEL.Kaan Onarlioglu, Mustafa Battal, William K. Robertson, Engin Kirda
2013NDSSA Practical, Targeted, and Stealthy Attack Against WPA Enterprise Authentication.Aldo Cassola, William K. Robertson, Engin Kirda, Guevara Noubir
2013NDSSClickonomics: Determining the Effect of Anti-Piracy Measures for One-Click Hosting.Tobias Lauinger, Martin Szydlowski, Kaan Onarlioglu, Gilbert Wondracek, Engin Kirda, Christopher Krgel
2013RAIDHoliday Pictures or Blockbuster Movies? Insights into Copyright Infringement in User Uploads to One-Click File Hosters.Tobias Lauinger, Kaan Onarlioglu, Chaabane Abdelberi, Engin Kirda, William K. Robertson, Mohamed Ali Kafar
2013SPPrivExec: Private Execution as an Operating System Service.Kaan Onarlioglu, Collin Mulliner, William K. Robertson, Engin Kirda
2012ACSACDisclosure: detecting botnet command and control servers through large-scale NetFlow analysis.Leyla Bilge, Davide Balzarotti, William K. Robertson, Engin Kirda, Christopher Kruegel
2012COMPSACPreventing Input Validation Vulnerabilities in Web Applications through Automated Type Analysis.Theodoor Scholte, William K. Robertson, Davide Balzarotti, Engin Kirda
2012DSNA security analysis of Amazon's Elastic Compute Cloud service.Engin Kirda
2012ISSTAA quantitative study of accuracy in system call-based malware detection.Davide Canali, Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda
2012NDSSInsights into User Behavior in Dealing with Internet Attacks.Kaan Onarlioglu, Utku Ozan Yilmaz, Engin Kirda, Davide Balzarotti
2012RAIDPaying for Piracy? An Analysis of One-Click Hosters' Controversial Reward Schemes.Tobias Lauinger, Engin Kirda, Pietro Michiardi
2012SACA security analysis of amazon's elastic compute cloud service.Marco Balduzzi, Jonas Zaddach, Davide Balzarotti, Engin Kirda, Sergio Loureiro
2012SACAn empirical analysis of input validation mechanisms in web applications and languages.Theodoor Scholte, William K. Robertson, Davide Balzarotti, Engin Kirda
2011CCSThe power of procrastination: detection and mitigation of execution-stalling malicious code.Clemens Kolbitsch, Engin Kirda, Christopher Kruegel
2011DIMVAReverse Social Engineering Attacks in Online Social Networks.Danesh Irani, Marco Balduzzi, Davide Balzarotti, Engin Kirda, Calton Pu
2011FCQuo Vadis? A Study of the Evolution of Input Validation Vulnerabilities in Web Applications.Theodoor Scholte, Davide Balzarotti, Engin Kirda
2011ICCCNBTLab: A System-Centric, Data-Driven Analysis and Measurement Platform for BitTorrent Clients.Martin Szydlowski, Ben Y. Zhao, Engin Kirda, Christopher Kruegel
2011NDSSAutomated Discovery of Parameter Pollution Vulnerabilities in Web Applications.Marco Balduzzi, Carmen Torrano Gimenez, Davide Balzarotti, Engin Kirda
2011NDSSEXPOSURE: Finding Malicious Domains Using Passive DNS Analysis.Leyla Bilge, Engin Kirda, Christopher Kruegel, Marco Balduzzi
2011NDSSPiOS: Detecting Privacy Leaks in iOS Applications.Manuel Egele, Christopher Kruegel, Engin Kirda, Giovanni Vigna
2011PERCOMPoX: Protecting users from malicious Facebook applications.Manuel Egele, Andreas Moser, Christopher Kruegel, Engin Kirda
2010ACSACG-Free: defeating return-oriented programming through gadget-less binaries.Kaan Onarlioglu, Leyla Bilge, Andrea Lanzi, Davide Balzarotti, Engin Kirda
2010CCSA solution for the automated detection of clickjacking attacks.Marco Balduzzi, Manuel Egele, Engin Kirda, Davide Balzarotti, Christopher Kruegel
2010CCSAccessMiner: using system-centric models for malware protection.Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda
2010DSNExploiting diverse observation perspectives to get insights on the malware landscape.Corrado Leita, Ulrich Bayer, Engin Kirda
2010NDSSEfficient Detection of Split Personalities in Malware.Davide Balzarotti, Marco Cova, Christoph Karlberger, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2010RAIDAbusing Social Networks for Automated User Profiling.Marco Balduzzi, Christian Platzer, Thorsten Holz, Engin Kirda, Davide Balzarotti, Christopher Kruegel
2010SACImproving the efficiency of dynamic malware analysis.Ulrich Bayer, Engin Kirda, Christopher Kruegel
2010SACCAPTCHA smuggling: hijacking web browsing sessions to create CAPTCHA farms.Manuel Egele, Leyla Bilge, Engin Kirda, Christopher Kruegel
2010SPIdentifying Dormant Functionality in Malware Programs.Paolo Milani Comparetti, Guido Salvaneschi, Engin Kirda, Clemens Kolbitsch, Christopher Kruegel, Stefano Zanero
2010SPInspector Gadget: Automated Extraction of Proprietary Gadgets from Malware Binaries.Clemens Kolbitsch, Thorsten Holz, Christopher Kruegel, Engin Kirda
2010SPA Practical Attack to De-anonymize Social Network Users.Gilbert Wondracek, Thorsten Holz, Engin Kirda, Christopher Kruegel
2009ACSACFIRE: FInding Rogue nEtworks.Brett Stone-Gross, Christopher Kruegel, Kevin C. Almeroth, Andreas Moser, Engin Kirda
2009DIMVADefending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks.Manuel Egele, Peter Wurzinger, Christopher Kruegel, Engin Kirda
2009ESORICSAchieving Life-Cycle Compliance of Service-Oriented Architectures: Open Issues and Challenges.Theodoor Scholte, Engin Kirda
2009ESORICSAutomatically Generating Models for Botnet Detection.Peter Wurzinger, Leyla Bilge, Thorsten Holz, Jan Goebel, Christopher Kruegel, Engin Kirda
2009ICSESWAP: Mitigating XSS attacks using a reverse proxy.Peter Wrzinger, Christian Platzer, Christian Ludl, Engin Kirda, Christopher Kruegel
2009NDSSScalable, Behavior-Based Malware Clustering.Ulrich Bayer, Paolo Milani Comparetti, Clemens Hlauschek, Christopher Krgel, Engin Kirda
2009WWWAll your contacts are belong to us: automated identity theft attacks on social networks.Leyla Bilge, Thorsten Strufe, Davide Balzarotti, Engin Kirda
2009SPProspex: Protocol Specification Extraction.Paolo Milani Comparetti, Gilbert Wondracek, Christopher Krgel, Engin Kirda
2008NDSSAutomatic Network Protocol Analysis.Gilbert Wondracek, Paolo Milani Comparetti, Christopher Krgel, Engin Kirda
2008RAIDLeveraging User Interactions for In-Depth Testing of Web Applications.Sean McAllister, Engin Kirda, Christopher Kruegel
2008SPSaner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications.Davide Balzarotti, Marco Cova, Viktoria Felmetsger, Nenad Jovanovic, Engin Kirda, Christopher Kruegel, Giovanni Vigna
2008SecureCommVisual-similarity-based phishing detection.Eric Medvet, Engin Kirda, Christopher Kruegel
2008SecureCommOverbot: a botnet protocol based on Kademlia.Guenther Starnberger, Christopher Kruegel, Engin Kirda
2007ACSACLimits of Static Analysis for Malware Detection.Andreas Moser, Christopher Kruegel, Engin Kirda
2007ACSACSecure Input for Web Applications.Martin Szydlowski, Christopher Kruegel, Engin Kirda
2007CCSPanorama: capturing system-wide information flow for malware detection and analysis.Heng Yin, Dawn Xiaodong Song, Manuel Egele, Christopher Kruegel, Engin Kirda
2007DIMVAOn the Effectiveness of Techniques to Detect Phishing Sites.Christian Ludl, Sean McAllister, Engin Kirda, Christopher Kruegel
2007ICSEBuilding Anti-Phishing Browser Plug-Ins: An Experience Report.Thomas Raffetseder, Engin Kirda, Christopher Kruegel
2007NDSSCross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis.Philipp Vogt, Florian Nentwich, Nenad Jovanovic, Engin Kirda, Christopher Krgel, Giovanni Vigna
2007SPExploring Multiple Execution Paths for Malware Analysis.Andreas Moser, Christopher Krgel, Engin Kirda
2007USENIXDynamic Spyware Analysis.Manuel Egele, Christopher Kruegel, Engin Kirda, Heng Yin, Dawn Xiaodong Song
2007SecureCommA layout-similarity-based approach for detecting phishing pages.Angelo P. E. Rosiello, Engin Kirda, Christopher Kruegel, Fabrizio Ferrandi
2006DIMVAUsing Static Program Analysis to Aid Intrusion Detection.Manuel Egele, Martin Szydlowski, Engin Kirda, Christopher Krgel
2006PLDIPrecise alias analysis for static detection of web application vulnerabilities.Nenad Jovanovic, Christopher Kruegel, Engin Kirda
2006WWWSecuBat: a web vulnerability scanner.Stefan Kals, Engin Kirda, Christopher Krgel, Nenad Jovanovic
2006SACNoxes: a client-side solution for mitigating cross-site scripting attacks.Engin Kirda, Christopher Krgel, Giovanni Vigna, Nenad Jovanovic
2006SACAn anomaly-driven reverse proxy for web applications.Fredrik Valeur, Giovanni Vigna, Christopher Krgel, Engin Kirda
2006SPPixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper).Nenad Jovanovic, Christopher Krgel, Engin Kirda
2006SecureCommPreventing Cross Site Request Forgery Attacks.Nenad Jovanovic, Engin Kirda, Christopher Kruegel
2005COMPSACProtecting Users Against Phishing Attacks with AntiPhish.Engin Kirda, Christopher Krgel
2005RAIDPolymorphic Worm Detection Using Structural Information of Executables.Christopher Krgel, Engin Kirda, Darren Mutz, William K. Robertson, Giovanni Vigna
2004CaiSEDIWE: A Framework for Constructing Device-Independent Web Applications.Engin Kirda, Clemens Kerer
2004ICWEXGuide - Concurrent Web Engineering with Contracts.Clemens Kerer, Engin Kirda
2003CaiSEOMNIX: A Topology-Independent P2P Middleware.Roman Kurmanowytsch, Engin Kirda, Clemens Kerer, Schahram Dustdar
2003SEKEIntegrating Publish/Subscribe into a Mobile Teamwork Support Platform.Sagar Chaki, Pascal Fenkam, Harald C. Gall, Somesh Jha, Engin Kirda, Helmut Veith
2003WETICESupporting Collaboration in the Development of Tools and Dies in Manufacturing Networks.Zorlu Yalniz, Engin Kirda
2002COMPSACMOTION: A Peer-to-Peer Platform for Mobile Teamwork Support.Engin Kirda, Harald C. Gall, Pascal Fenkam, Gerald Reif
2002NetworkingXGuide - A Practical Guide to XML-Based Web Engineering.Clemens Kerer, Engin Kirda, Christopher Krgel
2002SACService specific anomaly detection for network intrusion detection.Christopher Krgel, Thomas Toth, Engin Kirda
2002SEKEA service architecture for mobile teamwork.Engin Kirda, Pascal Fenkam, Gerald Reif, Harald C. Gall
2002WETICETowards an Access Control System for Mobile Peer-to-Peer Collaborative Environments.Pascal Fenkam, Schahram Dustdar, Engin Kirda, Gerald Reif, Harald C. Gall
2002WETICEEvaluation of a Publish/Subscribe System for Collaborative and Mobile Working.Pascal Fenkam, Engin Kirda, Schahram Dustdar, Harald C. Gall, Gerald Reif
2001COMPSACBuilding and Managing XML/XSL-powered Web Sites: an Experience Report.Clemens Kerer, Engin Kirda, Mehdi Jazayeri, Roman Kurmanowytsch
2001ICSEWeb Engineering Device Independent Web Services.Engin Kirda
2001WETICESupporting Multi-Device Enabled Web Services: Challenges and Open Problems.Engin Kirda, Clemens Kerer, Mehdi Jazayeri, Christopher Krgel
2001WETICEA Web-Based Peer-to-Peer Architecture for Collaborative Nomadic Working.Gerald Reif, Engin Kirda, Harald C. Gall, Pascal Fenkam, Gian Pietro Picco, Gianpaolo Cugola