JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals S Khodayari, G Pellegrino 30th USENIX Security Symposium (USENIX Security'21), 2021 | 50 | 2021 |
Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks X Likaj, S Khodayari, G Pellegrino 24th International Symposium on Research in Attacks, Intrusions and Defenses …, 2021 | 32 | 2021 |
The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies S Khodayari, G Pellegrino 43rd IEEE Symposium on Security and Privacy (S&P'22), 2022 | 31 | 2022 |
Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks A Sudhodanan, S Khodayari, J Caballero Network and Distributed System Security Symposium (NDSS), 2020 | 29 | 2020 |
It's (DOM) Clobbering Time: Attack Techniques, Prevalence and Defenses S Khodayari, G Pellegrini 44th IEEE Symposium on Security and Privacy (S&P'23), 2023 | 12 | 2023 |
The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web S Khodayari, T Barber, G Pellegrino 45th IEEE Symposium on Security and Privacy (S&P'24), 2024 | 6 | 2024 |
Do (Not) Follow the White Rabbit: Challenging the Myth of Harmless Open Redirection S Khodayari, K Glauber, G Pellegrino Network and Distributed System Security Symposium (NDSS), 2025 | | 2025 |
YURASCANNER: Leveraging LLMs for Task-driven Web App Scanning A Stafeev, T Recktenwald, G De Stefano, S Khodayari, G Pellegrino Network and Distributed System Security Symposium (NDSS), 2025 | | 2025 |
Exploration of the Dynamics of Buy and Sale of Social Media Accounts M Beluri, B Acharya, S Khodayari, G Stivala, G Pellegrino, T Holz arXiv preprint arXiv:2412.14985, 2024 | | 2024 |
Security Testing at Scale: Studying Emerging Client-side Vulnerabilities in the Modern Web S Khodayari Saarland University: https://dx.doi.org/10.22028/D291-42757, 2024 | | 2024 |
A Framework for Testing Web Applications for Cross-Origin State Inference (COSI) Attacks S Khodayari ETSI_Informatica, 2019 | | 2019 |