Publications

Conference, journal, and workshop papers

Black-box Attacks Against Neural Binary Function Detection

• Joshua Bundt, Michael Davinroy, Ioannis Agadakos, Alina Oprea, William Robertson
• Proceedings of the International Symposium on Research in Attacks, Intrusions and Defenses (RAID)
• September 2023
PDF

ThreadLock: Native Principal Isolation Through Memory Protection Keys

• William Blair, William Robertson, Manuel Egele
• Proceedings of the ACM Asia Conference on Computer and Communications Security (ASIACCS)
• July 2023
PDF

HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing

• William Blair, Andrea Mambretti, Sajjad Arshad, Michael Weissbacher, William Robertson, Engin Kirda, Manuel Egele
• ACM Transactions on Privacy and Security 25(4)
• November 2022
PDF

MPKAlloc: Efficient Heap Meta-data Integrity Through Hardware Memory Protection Keys

• William Blair, William Robertson, Manuel Egele
• Proceedings of the International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment
• May 2022
PDF

Bypassing Memory Safety Mechanisms through Speculative Control Flow Hijacks

• Andrea Mambretti, Alexandra Sandulescu, Alessandro Sorniotti, William Robertson, Engin Kirda, Anil Kurmus
• Proceedings of the IEEE European Symposium on Security and Privacy (EuroSP)
• September 2021
PDF

Evaluating Synthetic Bugs

• Joshua Bundt, Andrew Fasano, Brendan Dolan-Gavitt, William Robertson, Tim Leek
• Proceedings of the ACM Asia Conference on Computer and Communications Security (ASIACCS)
• June 2021
PDF

SoK: Enabling Security Analyses of Embedded Systems via Rehosting

• Andrew Fasano, Tiemoko Ballo, Marius Muench, Tim Leek, Alexander Olienik, Brendan Dolan-Gavitt, Manuel Egele, Aurélien Francillon, Long Lu, Nick Gregory, Davide Balzarotti, William Robertson
• Proceedings of the ACM Asia Conference on Computer and Communications Security (ASIACCS)
• June 2021
PDF

PyPANDA: Taming the PANDAmonium of Whole System Dynamic Analysis

• Luke Craig, Andrew Fasano, Tiemoko Ballo, Tim Leek, Brendan Dolan-Gavitt, William Robertson
• Proceedings of the Workshop on Binary Analysis Research (BAR), co-located with NDSS
• February 2021
PDF

What's in an Exploit: An Empirical Analysis of Reflected Server XSS Exploitation Techniques

• Ahmet Buyukkayhan, Can Gemicioglu, Tobias Lauinger, Alina Oprea, William Robertson, Engin Kirda
• Proceedings of the International Symposium on Research in Attacks, Intrusions, and Defenses (RAID)
• September 2020
PDF

Cached and Confused: Web Cache Deception in the Wild

• Seyed Ali Mirheidari, Sajjad Arshad, Kaan Onarlioglu, Bruno Crispo, Engin Kirda, William Robertson
• Proceedings of the USENIX Security Symposium
• August 2020
PDF