Publications

Conference, journal, and workshop papers

An Empirical Analysis of Input Validation Mechanisms in Web Applications and Languages

• Theodoor Scholte, William Robertson, Davide Balzarotti, Engin Kirda
• Proceedings of the ACM Symposium on Applied Computing (SAC)
• March 2012
PDF

An Experience in Testing the Security of a Real-World Electronic Voting System

• Davide Balzarotti, Marco Cova, Viktoria Felmetsger, Richard Kemmerer, William Robertson, Fredrik Valeur, Giovanni Vigna
• IEEE Transactions on Software Engineering 36 (4)
• July 2010
PDF

Effective Anomaly Detection with Scarce Training Data

• William Robertson, Federico Maggi, Christopher Kruegel, Giovanni Vigna
• Proceedings of ISOC Network and Distributed System Security Symposium (NDSS)
• February 2010
PDF

Protecting a Moving Target: Addressing Web Application Concept Drift

• Federico Maggi, William Robertson, Christopher Kruegel, Giovanni Vigna
• Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID)
• September 2009
PDF

Static Enforcement of Web Application Integrity Through Strong Typing

• William Robertson, Giovanni Vigna
• Proceedings of the USENIX Security Symposium
• August 2009
PDF

Detecting and Preventing Attacks Against Web Applications

• William Robertson
• UC Santa Barbara
• June 2009
PDF

Reducing Errors in the Anomaly-based Detection of Web-based Attacks Through the Combined Analysis of Web Requests and SQL Queries

• Giovanni Vigna, Fredrik Valeur, Davide Balzarotti, William Robertson, Christopher Kruegel
• Journal of Computer Security 17 (3)
• May 2009
PDF

Are Your Votes Really Counted? Testing the Security of Real-world Voting Systems

• Davide Balzarotti, Greg Banks, Marco Cova, Viktoria Felmetsger, William Robertson, Fredrik Valeur, Giovanni Vigna, Richard Kemmerer
• Proceedings of the International Symposium on Software Testing and Analysis (ISSTA)
• July 2008
PDF

Improving Signature Testing Through Dynamic Data Flow Analysis

• Davide Balzarotti, William Robertson, Christopher Kruegel, Giovanni Vigna
• Proceedings of the Annual Computer Security Applications Conference (ACSAC)
• December 2007
PDF

Exploiting Execution Context for the Detection of Anomalous System Calls

• Darren Mutz, William Robertson, Giovanni Vigna, Richard Kemmerer
• Proceedings of the International Symposium on Recent Advances on Intrusion Detection (RAID)
• September 2007
PDF