14 citations · 39 across the 7 of their papers we have counts for
5 papers · 1 filter
Following Dragons: Code Review-Guided Fuzzing
Viet Hoang Luu, Amirmohammad Pasdar, Wachiraphan Charoenwet +3
Modern fuzzers scale to large, real-world software but often fail to exercise the program states developers consider most fragile or security-critical. Such states are typically de…
EDEFuzz: A Web API Fuzzer for Excessive Data Exposures
Lianglu Pan, Shaanan Cohney, Toby Murray +1
APIs often transmit far more data to client applications than they need, and in the context of web applications, often do so over public channels. This issue, termed Excessive Data…
COVID Down Under: where did Australia's pandemic apps go wrong?
Shaanan Cohney, Marc Cheong
Governments and businesses worldwide deployed a variety of technological measures to help prevent and track the spread of COVID-19. In Australia, these applications contained usabi…
Watching the watchers: bias and vulnerability in remote proctoring software
Ben Burgess, Avi Ginsberg, Edward W. Felten +1
Educators are rapidly switching to remote proctoring and examination software for their testing needs, both due to the COVID-19 pandemic and the expanding virtualization of the edu…
Virtual Classrooms and Real Harms: Remote Learning at U.S. Universities
Shaanan Cohney, Ross Teixeira, Anne Kohlbrenner +4
Universities have been forced to rely on remote educational technology to facilitate the rapid shift to online learning. In doing so, they acquire new risks of security vulnerabili…