| Web-to-application injection attacks on android: Characterization and detection B Hassanshahi, Y Jia, RHC Yap, P Saxena, Z Liang Computer Security--ESORICS 2015: 20th European Symposium on Research in …, 2015 | 54 | 2015 |
| Nodest: feedback-driven static analysis of Node. js applications BB Nielsen, B Hassanshahi, F Gauthier Proceedings of the 2019 27th ACM Joint Meeting on European Software …, 2019 | 53 | 2019 |
| AFFOGATO: runtime detection of injection attacks for Node. js F Gauthier, B Hassanshahi, A Jordan Companion Proceedings for the ISSTA/ECOOP 2018 Workshops, 94-99, 2018 | 36 | 2018 |
| An efficient tunable selective points-to analysis for large codebases B Hassanshahi, RK Ramesh, P Krishnan, B Scholz, Y Lu Proceedings of the 6th ACM SIGPLAN International Workshop on State Of the …, 2017 | 35 | 2017 |
| Android Database Attacks Revisited B Hassanshahi, RHC Yap Proceedings of the 2017 ACM on Asia Conference on Computer and …, 2017 | 18 | 2017 |
| Gelato: Feedback-driven and guided security analysis of client-side web applications B Hassanshahi, H Lee, P Krishnan 2022 IEEE International Conference on Software Analysis, Evolution and …, 2022 | 16 | 2022 |
| Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs M Chakraborty, R Olivares, M Sridharan, B Hassanshahi 36th European Conference on Object-Oriented Programming (ECOOP 2022), 2022 | 14 | 2022 |
| Coding practices and recommendations of spring security for enterprise applications M Islam, S Rahaman, N Meng, B Hassanshahi, P Krishnan, DD Yao 2020 IEEE Secure Development (SecDev), 49-57, 2020 | 14 | 2020 |
| MoScan: a model-based vulnerability scanner for web single sign-on services H Wei, B Hassanshahi, G Bai, P Krishnan, K Vorobyov Proceedings of the 30th ACM SIGSOFT International Symposium on Software …, 2021 | 12 | 2021 |
| BackREST: A Model-Based Feedback-Driven Greybox Fuzzer for Web Applications F Gauthier, B Hassanshahi, B Selwyn-Smith, TN Mai, M Schlüter, ... arXiv preprint arXiv:2108.08455, 2021 | 11 | 2021 |
| Experience: Model-Based, Feedback-Driven, Greybox Web Fuzzing with BackREST F Gauthier, B Hassanshahi, B Selwyn-Smith, TN Mai, M Schlüter, ... 36th European Conference on Object-Oriented Programming (ECOOP 2022), 2022 | 10 | 2022 |
| SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation A Jordan, F Gauthier, B Hassanshahi, D Zhao arXiv preprint arXiv:1810.12490, 2018 | 10 | 2018 |
| The role of program analysis in security vulnerability detection: Then and now C Cifuentes, F Gauthier, B Hassanshahi, P Krishnan, D McCall Computers & security 135, 103463, 2023 | 9 | 2023 |
| Roppdroid: Robust permission re-delegation prevention in android inter-component communication T Dai, X Li, B Hassanshahi, RHC Yap, Z Liang Computers & Security 68, 98-111, 2017 | 7 | 2017 |
| Unacceptable Behavior: Robust PDF Malware Detection Using Abstract Interpretation A Jordan, F Gauthier, B Hassanshahi, D Zhao Proceedings of the 14th ACM SIGSAC Workshop on Programming Languages and …, 2019 | 6 | 2019 |
| Macaron: A Logic-based Framework for Software Supply Chain Security Assurance B Hassanshahi, TN Mai, A Michael, B Selwyn-Smith, S Bates, P Krishnan Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research …, 2023 | 5 | 2023 |
| Automatic Root Cause Quantification for Missing Edges in JavaScript Call Graphs (Extended Version) M Chakraborty, R Olivares, M Sridharan, B Hassanshahi arXiv preprint arXiv:2205.06780, 2022 | 4 | 2022 |
| Trade-offs in managing risk and technical debt in industrial research labs: an experience report F Gauthier, A Jordan, P Krishnan, B Hassanshahi, JG Süß, S Bae, H Lee Proceedings of the 3rd International Conference on Technical Debt, 98-102, 2020 | 4 | 2020 |
| Application programming interface specification inference F Gauthier, B Hassanshahi, MM Schlüter US Patent 11,755,744, 2023 | 3 | 2023 |
| Feedback-directed static analysis B Hassanshahi, BB Nielsen US Patent 10,783,245, 2020 | 2 | 2020 |
François GauthierSenior Principal Researcher, Oracle LabsVerified email at oracle.com