activity
20172020
most citedHey Google, What Exactly Do Your Security Patches Tell Us? A Large-Scale Empirical Study on Android Patched Vulnerabilities

13 citations · 18 across the 4 of their papers we have counts for

collaborators

6 papers

cs.CR2020

An Empirical Study of Android Security Bulletins in Different Vendors

Sadegh Farhang, Mehmet Bahadir Kirdan, Aron Laszka +1

Mobile devices encroach on almost every part of our lives, including work and leisure, and contain a wealth of personal and sensitive information. It is, therefore, imperative that…

cs.CR201913 cited

Hey Google, What Exactly Do Your Security Patches Tell Us? A Large-Scale Empirical Study on Android Patched Vulnerabilities

Sadegh Farhang, Mehmet Bahadir Kirdan, Aron Laszka +1

In this paper, we perform a comprehensive study of 2,470 patched Android vulnerabilities that we collect from different data sources such as Android security bulletins, CVEDetails,…

cs.CR2017

An Economic Study of the Effect of Android Platform Fragmentation on Security Updates

Sadegh Farhang, Aron Laszka, Jens Grossklags

Vendors in the Android ecosystem typically customize their devices by modifying Android Open Source Project (AOSP) code, adding in-house developed proprietary software, and pre-ins…

cs.CR2017

Enemy At the Gateways: A Game Theoretic Approach to Proxy Distribution

Milad Nasr, Sadegh Farhang, Amir Houmansadr +1

A core technique used by popular proxy-based circumvention systems like Tor, Psiphon, and Lantern is to secretly share the IP addresses of circumvention proxies with the censored c…

cs.CR2017

On the Economics of Ransomware

Aron Laszka, Sadegh Farhang, Jens Grossklags

While recognized as a theoretical and practical concept for over 20 years, only now ransomware has taken centerstage as one of the most prevalent cybercrimes. Various reports demon…

cs.CR20175 cited

When to Invest in Security? Empirical Evidence and a Game-Theoretic Approach for Time-Based Security

Sadegh Farhang, Jens Grossklags

Games of timing aim to determine the optimal defense against a strategic attacker who has the technical capability to breach a system in a stealthy fashion. Key questions arising a…