About Me

I am a Cybersecurity PhD candidate at Northeastern in Boston, MA. My research advisor is Engin Kirda. As a research assistant, my main job is to do an academic research to tackle certain problems in the field of cybersecurity. Particularly, I have been focusing on the issues of Internet Safety and Web Security.

Research Interests

In the first two and a half years of my PhD, I did research on misinformation. I tried to tackle multiple challenges including the detection of fake news articles on the web, detection of fake quote memes on the social media and finally understanding manual fact-checking techniques through textual analysis of fact-check reports.

Lately, I have been doing research on Web Security problems. I usually explore attacks targeting web applications and systems, and sometimes work on their prevention.

Publications

FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies [paper] [code]
Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, Engin Kirda
31st USENIX Security Symposium (Security 2022)
Boston, MA, August 2022

T-Reqs: HTTP Request Smuggling with Differential Fuzzing [paper] [code]
Bahruz Jabiyev, Steven Sprecher, Kaan Onarlioglu, Engin Kirda
ACM Conference on Computer and Communications Security (CCS 2021)
Virtual, November 2021

Game of FAME: Automatic Detection of FAke MEmes [paper] [code]
Bahruz Jabiyev, Jeremiah Onaolapo, Gianluca Stringhini, Engin Kirda
Conference for Truth and Trust Online (TTO 2021)
Virtual, October 2021

FADE: Detecting Fake News Articles on the Web [paper] [code]
Bahruz Jabiyev, Sinan Pehlivanoglu, Kaan Onarlioglu, Engin Kirda
16th International Conference on Availability, Reliability and Security (ARES 2021)
Virtual, August 2021

Preventing Server-Side Request Forgery Attacks [paper] [code]
Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz, Engin Kirda
36th ACM Symposium on Applied Computing (SAC 2021)
Virtual, March 2021

Generating Application Layer IDS Rules from Cyber Threat Intelligence [thesis] [code]
Bahruz Jabiyev, Master’s Thesis, June 2016