3 papers
cs.CR2025
Testing Access-Control Configuration Changes for Web Applications
Chengcheng Xiang, Li Zhong, Eric Mugnier +3
Access-control misconfigurations are among the main causes of today's data breaches in web applications. However, few techniques are available to support automatic and systematic t…
cs.LO2024
Laurel: Unblocking Automated Verification with Large Language Models
Eric Mugnier, Emmanuel Anaya Gonzalez, Ranjit Jhala +2
Program verifiers such as Dafny automate proofs by outsourcing them to an SMT solver. This automation is not perfect, however, and the solver often requires hints in the form of as…
cs.CR2024
Give and Take: An End-To-End Investigation of Giveaway Scam Conversion Rates
Enze Liu, George Kappos, Eric Mugnier +6
Scams -- fraudulent schemes designed to swindle money from victims -- have existed for as long as recorded history. However, the Internet's combination of low communication cost, g…