Gudifu: Guided Differential Fuzzing for HTTP Request Parsing Discrepancies

Bahruz Jabiyev, Anthony Gavazzi, Kaan Onarlioglu, Engin Kirda

The 27th International Symposium on Research in Attacks, Intrusions and Defenses (RAID), 2024 Sep

Untangle: Multi-Layer Web Server Fingerprinting

Cem Topcuoglu, Kaan Onarlioglu, Bahruz Jabiyev, Engin Kirda

Network and Distributed System Security (NDSS) Symposium, 2024 Feb

FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies

Bahruz Jabiyev, Steven Sprecher, Anthony Gavazzi, Tommaso Innocenti, Kaan Onarlioglu, Engin Kirda

31th USENIX Security Symposium, 2022 Aug

T-Reqs: HTTP Request Smuggling with Differential Fuzzing

Bahruz Jabiyev, Steven Sprecher, Kaan Onarlioglu, Engin Kirda

Conference on Computer and Communications Security (ACM CCS), 2021 Nov

Preventing Server-Side Request Forgery Attacks

Bahruz Jabiyev, Omid Mirzaei, Amin Kharraz, Engin Kirda

36th Annual ACM Symposium on Applied Computing (ACM SAC), 2021 Mar

Game of FAME: Automatic Detection of Fake Memes

Bahruz Jabiyev, Jeremiah Onaolapo, Gianluca Stringhini, Engin Kirda

Conference for Truth and Trust Online (TTO), 2021 Oct

FADE: Detecting Fake News Articles on the Web

Bahruz Jabiyev, Sinan Pehlivanoglu, Kaan Onarlioglu, Engin Kirda

The 16th International Conference on Availability, Reliability and Security (ARES), 2021 Aug