papers
Publications (2)
cs.CR2025
ROSA: Finding Backdoors with Fuzzing
Dimitri Kokkonis, Michaël Marcozzi, Emilien Decoux +1
A code-level backdoor is a hidden access, programmed and concealed within the code of a program. For instance, hard-coded credentials planted in the code of a file server applicati…
cs.CR2026
Not In My Git Yard: Catching Backdoors at Commit and Release Time
Dimitri Kokkonis, Michaël Marcozzi, Stefano Zacchiroli
The paper introduces Lily, a tool that automatically detects hidden backdoors in open‑source code during commit and release stages by combining CI‑compatible fuzzing with code‑chan…
#backdoor detection#continuous integration#fuzz testing#supply chain security