VirusTotal provides malware labels from a large set of anti-malware engines, and is heavily
used by researchers for malware annotation and system evaluation. Since different engines …

Browser fingerprinting is an invasive and opaque stateless tracking technique. Browser
vendors, academics, and standards bodies have long struggled to provide meaningful …

Advanced persistent threat (APT) attacks pose significant security threats to governments
and large enterprises. Endpoint detection and response (EDR) methods, which are standard …

Online scan engines such as VirusTotal are heavily used by researchers to label malicious
URLs and files. Unfortunately, it is not well understood how the labels are generated and …

Auditing, a central pillar of operating system security, has only recently come into its own as
an active area of public research. This resurgent interest is due in large part to the notion of …

User demand for blocking advertising and tracking online is large and growing. Existing
tools, both deployed and described in research, have proven useful, but lack either the …

Causality analysis automates attack forensic and facilitates behavioral detection by
associating causally related but temporally distant system events. Despite its proven …

Modern web security and privacy research depends on accurate measurement of an often
evasive and hostile web. No longer just a network of static, hyperlinked documents, the …

Web tracking and advertising (WTA) nowadays are ubiquitously performed on the web,
continuously compromising users' privacy. Existing defense solutions, such as widely …

Malicious ads often use social engineering (SE) tactics to coax users into downloading
unwanted software, purchasing fake products or services, or giving up valuable personal …