Publications

Conference, journal, and workshop papers

Surveylance: Automatically Detecting Online Survey Scams

• Amin Kharraz, William Robertson, Engin Kirda
• Proceedings of the IEEE Symposium on Security and Privacy (Oakland)
• May 2018
PDF

ERASER: Your Data Won't Be Back

• Kaan Onarlioglu, William Robertson, Engin Kirda
• Proceedings of the IEEE European Symposium on Security and Privacy (EuroSP)
• April 2018
PDF

Large-Scale Analysis of Style Injection by Relative Path Overwrite

• Sajjad Arshad, Seyed Mirheidari, Tobias Lauinger, Bruno Crispo, Engin Kirda, William Robertson
• Proceedings of the Web Conference (WWW)
• April 2018
PDF

Ex-Ray: Detection of History-Leaking Browser Extensions

• Michael Weissbacher, Enrico Mariconti, Guillermo Suarez de Tangil, Gianluca Stringhini, William Robertson, Engin Kirda
• Proceedings of the Annual Computer Security Applications Conference (ACSAC)
• December 2017
PDF

Lens on the Endpoint: Hunting for Malicious Software through Endpoint Data Analysis

• Ahmet Buyukkayhan, Alina Oprea, Zhou Li, William Robertson
• Proceedings of the International Symposium on Research in Attacks, Intrusions, and Defenses (RAID)
• September 2017
PDF

Game of Registrars: An Empirical Analysis of Post-Expiration Domain Name Takeovers

• Tobias Lauinger, Abdelberi Chaabane, Ahmet Buyukkayhan, Kaan Onarlioglu, William Robertson
• Proceedings of the USENIX Security Symposium
• August 2017
PDF

Semi-automated Discovery of Server-Based Information Oversharing Vulnerabilities in Android Applications

• Wil Koch, Abdelberi Chaabane, Manuel Egele, William Robertson, Engin Kirda
• Proceedings of the International Symposium on Software Testing and Analysis (ISSTA)
• July 2017
PDF

Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web

• Tobias Lauinger, Abdelberi Chaabane, William Robertson, Christo Wilson, Engin Kirda
• Proceedings of the ISOC Network and Distributed System Security Symposium (NDSS)
• February 2017
PDF

WHOIS Lost in Translation: (Mis)Understanding Internet Domain Name Expiration and Re-Registration

• Tobias Lauinger, Kaan Onarlioglu, Abdelberi Chaabane, William Robertson, Engin Kirda
• Proceedings of the ACM Internet Measurement Conference (IMC)
• November 2016
PDF

Identifying Extension-based Ad Injection via Fine-grained Web Content Provenance

• Sajjad Arshad, Amin Kharraz, William Robertson
• Proceedings of the International Conference on Research in Attacks, Intrusions, and Defenses (RAID)
• September 2016
PDF