Network Security
Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies
Bahruz Jabiyev, Anthony Gavazzi, Kaan Onarlioglu, Engin Kirda
The 27th International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2024 Sep
Untangle: Multi-Layer Web Server Fingerprinting
Cem Topcuoglu, Kaan Onarlioglu, Bahruz Jabiyev, Engin Kirda
Network and Distributed System Security (NDSS) Symposium, 2024 Feb
FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies
Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, Engin Kirda
31th USENIX Security Symposium, 2022 Aug
T-Reqs: HTTP Request Smuggling with Differential Fuzzing
Bahruz Jabiyev, Steven Sprecher, Kaan Onarlioglu, Engin Kirda
Conference on Computer and Communications Security (ACM CCS), 2021 Nov
Preventing Server-Side Request Forgery Attacks
Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz, Engin Kirda
36th Annual ACM Symposium on Applied Computing (ACM SAC), 2021 Mar
Misinformation
Game of FAME: Automatic Detection of Fake Memes
Bahruz Jabiyev, Jeremiah Onaolapo, Gianluca Stringhini, Engin Kirda
Conference for Truth and Trust Online (TTO), 2021 Oct
FADE: Detecting Fake News Articles on the Web
Bahruz Jabiyev, Sinan Pehlivanoglu, Kaan Onarlioglu, Engin Kirda
The 16th International Conference on Availability, Reliability and Security (ARES), 2021 Aug