activity
20182026
most citedThou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web

135 citations · 204 across the 16 of their papers we have counts for

collaborators

18 papers

cs.CR2026

Measuring and Evaluating the Performance of Generative AI Models for Scam Detection

Cem Topcuoglu, Seyed Ali Akhavani, Harel Berger +5

Online scams continue to cause substantial financial and personal harm. As a result, detection systems based on Large Language Models (LLMs) have been integrated into security prod…

cs.CR2025★ 4 cited

WAFFLED: Exploiting Parsing Discrepancies to Bypass Web Application Firewalls

Seyed Ali Akhavani, Bahruz Jabiyev, Ben Kallus +3

Web Application Firewalls (WAFs) have been introduced as essential and popular security gates that inspect incoming HTTP traffic to filter out malicious requests and provide defens…

cs.CR2025

PriveShield: Enhancing User Privacy Using Automatic Isolated Profiles in Browsers

Seyed Ali Akhavani, Engin Kirda, Amin Kharraz

Online tracking is a widespread practice on the web with questionable ethics, security, and privacy concerns. While web tracking can offer personalized and curated content to Inter…

cs.RO2024★ 4 cited

Design and Realization of a Benchmarking Testbed for Evaluating Autonomous Platooning Algorithms

Michael Shaham, Risha Ranjan, Engin Kirda +1

Autonomous vehicle platoons present near- and long-term opportunities to enhance operational efficiencies and save lives. The past 30 years have seen rapid development in the auton…

cs.CR2023

AIM: Automatic Interrupt Modeling for Dynamic Firmware Analysis

Bo Feng, Meng Luo, Changming Liu +2

The security of microcontrollers, which drive modern IoT and embedded devices, continues to raise major concerns. Within a microcontroller (MCU), the firmware is a monolithic piece…

cs.CR2022★ 1 cited

Experience Report on the Challenges and Opportunities in Securing Smartphones Against Zero-Click Attacks

Narmeen Shafqat, Cem Topcuoglu, Engin Kirda +1

Zero-click attacks require no user interaction and typically exploit zero-day (i.e., unpatched) vulnerabilities in instant chat applications (such as WhatsApp and iMessage) to gain…