123 citations · 160 across the 6 of their papers we have counts for
3 papers · 1 filter
Runtime Prevention of Deserialization Attacks
Francois Gauthier, Sora Bae
Untrusted deserialization exploits, where a serialised object graph is used to achieve denial-of-service or arbitrary code execution, have become so prominent that they were introd…
BackREST: A Model-Based Feedback-Driven Greybox Fuzzer for Web Applications
François Gauthier, Behnaz Hassanshahi, Benjamin Selwyn-Smith +3
Following the advent of the American Fuzzy Lop (AFL), fuzzing had a surge in popularity, and modern day fuzzers range from simple blackbox random input generators to complex whiteb…
SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation
Alexander Jordan, François Gauthier, Behnaz Hassanshahi +1
The popularity of the PDF format and the rich JavaScript environment that PDF viewers offer make PDF documents an attractive attack vector for malware developers. PDF documents pre…