SecDev - researchr conference series publications

researchr

You are not signed in
Sign in
Sign up

Viewing Publication 1 - 100 from 258

2026

On the Variability of Source Code in Maven Package RebuildsJens Dietrich 0001, Behnaz Hassanshahi. secdev 2026: 74-80 [doi]

Mapping and Bridging the Software Understanding Gap (Keynote)Sergey Bratus. secdev 2026: 2 [doi]

A Technology-Readiness Evaluation of Private Set IntersectionWout Ceulemans, Pieter Philippaerts, Dimitri Van Landuyt, Wouter Joosen. secdev 2026: 124-134 [doi]

Formal Is Fast: Cryptographic Code in the Age of AI (Keynote)Roderick Chapman. secdev 2026: 1 [doi]

Syntax Is Easy, Semantics Is Hard: Evaluating LLMs for LTL TranslationPriscilla Kyei Danso, Mohammad Saqib Hasan, Niranjan Balasubramanian, Omar Chowdhury. secdev 2026: 152-168 [doi]

A CNN-LSTM Security Model for SCADA NetworkOlga Dye, Brian Dye. secdev 2026: 169-171 [doi]

Reality Check: Independent Evaluation of Modern Grey-Box Fuzzing TechniquesPavel Frolikov. secdev 2026: 147-151 [doi]

OpenClaw RedTeam Recon: A Local OSS-LLM-Powered Autonomous Reconnaissance AgentMarcelo Garcia, Robson de Oliveira Albuquerque. secdev 2026: 181-183 [doi]

SoK: A Comprehensive Analysis of the Current Status of Neural Tangent Generalization Attacks with Research DirectionsThushari Hapuarachchi, Kaiqi Xiong. secdev 2026: 111-123 [doi]

SGX-MB: A Secure Framework for Middleboxes Leveraging Intel SGXMahmoud Hofny, Lianying Zhao, Amr Youssef 0001. secdev 2026: 3-13 [doi]

CFIghter: Automated Control-Flow Integrity Enablement and Evaluation for Legacy C/C++ SystemsSabine Houy, Bruno Kreyssig, Alexandre Bartel. secdev 2026: 30-43 [doi]

Cloud Safety: A Hardware PerspectiveRaghudeep Kannavara, Matthew Dickinson, Monty Wiseman. secdev 2026: 175-180 [doi]

Proceedings of the 2026 ACM Secure Development Conference, SecDev 2026, Montreal, QC, Canada, July 5-6, 2026Raghudeep Kannavara, Z. Berkay Celik, Sazzadur Rahaman, Dimitri Van Landuyt, editors, ACM, 2026. [doi]

Adversarially Mixed Secret Key Generation for Side-Channel Defense for the CloudVenkat Sai Suman Lamba Karanam, Zahmeeth Sayed Sakkaff, Pasindu Balasooriyalage. secdev 2026: 91-97 [doi]

SoK: A Modularized Framework for Symbolic Execution and Application for Usable Tool DesignJames Mattei, Andrew Lin, Jasper Geer, Jie Hu, Moritz Schloegel, Tiffany Bao, Daniel Votipka. secdev 2026: 57-73 [doi]

Augment Mutual TLS Authentication with HW Rooted Identity: Simplified Device Lifecycle and InteroperabilityDhananjay Phadke, Xiling Sun. secdev 2026: 172-174 [doi]

At the Precipice of Integrity Protection using Pointer AuthenticationViorel Preoteasa, Carlos Chinea Perez, Hans Liljestrand, Jan-Erik Ekberg. secdev 2026: 81-90 [doi]

RepliGuard: Policy-Driven Replica Management Framework for Protecting against Acoustic AttacksJennifer Sheldon, Yungwoo Ko, Sri Hrushikesh Varma Bhupathiraju, Sara Osmanovic, Weidong Zhu 0002, Md Jahidul Islam, Sara Rampazzi. secdev 2026: 98-110 [doi]

Origin Story: A Comprehensive Lifecycle Analysis of Same-Origin Policy BugsJakub Szymsza, Gertjan Franken, Vik Vanderlinden, Tom van Goethem, Mathy Vanhoef, Lieven Desmet. secdev 2026: 14-29 [doi]

SafeAIMerge: A Tool for Integrating DAST and LLM-Generated Security Feedback into GitHub Actions WorkflowsArpit Thool, Justin Smith, Chris Brown. secdev 2026: 135-146 [doi]

ASN1spect: Uncovering ASN.1 Compiler-Generated Vulnerabilities in Critical InfrastructureSeaver Thorn, Nathaniel Bennett, Kevin R. B. Butler, Patrick Traynor, William Enck. secdev 2026: 44-56 [doi]

2025

IEEE Secure Development Conference, SecDev 2025, Indianapolis, IN, USA, October 14-16, 2025IEEE, 2025. [doi]

Catching Common Vulnerabilities with Code Language ModelsSyafiq Al Atiiq, Christian Gehrmann 0001, Karim Khalil, Kevin Dahlén. secdev 2025: 45-57 [doi]

Behind the Curtain: A Server-Side View of Web Session SecuritySimone Bozzolan, Stefano Calzavara, Florian Hantke, Ben Stock. secdev 2025: 105-117 [doi]

Time for Actions: A Longitudinal Study of the GitHub Actions MarketplaceNarong Chaiwut, Nick Nikiforakis. secdev 2025: 118-128 [doi]

Comparison of Fully Homomorphic Encryption and Garbled Circuit Techniques in Privacy-Preserving Machine Learning InferenceKalyan Cheerla, Lotfi Ben Othmane, Kirill Morozov. secdev 2025: 29-36 [doi]

Secure and Policy-Aware Serverless Pipelines for Automated Data Governance on Google CloudW.-Y. Chen. secdev 2025: 92-93 [doi]

Invited Tutorial: Macaron - A Comprehensive Framework for Securing and Analyzing the Software Supply ChainBehnaz Hassanshahi, Trong Nhan Mai. secdev 2025: 1-2 [doi]

PathFix: Automated Program Repair with Expected PathXu He, Shu Wang, Kun Sun. secdev 2025: 69-81 [doi]

Catamaran: User Privacy Violation Detection in Mobile LoggingChenxi Hou, Chun Jie Chong, Zhihao Yao 0001, Hui Peng. secdev 2025: 16-28 [doi]

SoK: A Practical Guideline and Taxonomy to LLVM's Control Flow IntegritySabine Houy, Bruno Kreyssig, Timothée Riom, Alexandre Bartel, Patrick D. McDaniel. secdev 2025: 129-141 [doi]

Navigating the Patchwork: Investigating the Availability &Consistency of Security AdvisoriesRonald E. Thompson III, Luke Boshar, Eugene Y. Vasserman, Daniel Votipka. secdev 2025: 145-155 [doi]

User and Entity Behavior Analytics (UEBA) Enhanced Security Anomaly Detection in Enterprise DevSecOps PlatformsAdam Jordan, Yong Chen 0001. secdev 2025: 94-104 [doi]

Obfusc8: LLM-Augmented PowerShell ObfuscationKwangyun Keum, Dheeraj Kumar, Bogdan Barchuk, Sai Chand Boyapati, Rohit Deopura, Amir Rahmati. secdev 2025: 156-168 [doi]

Understanding Minimal-Time Attacks on Reinforcement Learning AgentsVeena Krish, Amir Rahmati. secdev 2025: 186-195 [doi]

Privacy-Preserving Medical Risk Assessment Using Homomorphic EncryptionRaushan Kumar Pandit, Kirill Morozov, Cihan Tunc. secdev 2025: 37-44 [doi]

On the Readiness of Enterprise-Scale Log Analysis Solutions Against Advanced Persistent ThreatsTanmoy Sarkar Pias, Wenjia Song, Tahmina Sultana Priya, Sahil Dudani, Randy C. Marchany, Brad Tilley, Lingxiang Wang, Danfeng Daphne Yao. secdev 2025: 142-144 [doi]

Carot: A Secure RISC-V ECU with Trusted Execution and Moving Target DefenseAhmer Raza, Zhenkai Zhang. secdev 2025: 176-185 [doi]

Tutorial: Understanding Cyber Forensic Data GenerationMichael Reeves, Tyler Morris, Clint Baxley. secdev 2025: 1-4 [doi]

Hardware Security Benchmarks for Open-Source SystemVerilog DesignsJayden Rogers, Niyaz Shakeel, Xiao Tan, Samantha Espinosa, Divya Mankani, Cade Chabra, Kaki Ryan, Cynthia Sturton. secdev 2025: 196-203 [doi]

Secure Development of a Hooking-Based Deception Framework Against Keylogging TechniquesMd Sajidul Islam Sajid, Shihab Ahmed, Ryan Sosnoski. secdev 2025: 82-91 [doi]

PV-Bit: Private Verification of FPGA Bitstreams Via Bitstream Equivalence CheckingAli Asgar Sohanghpurwala, Daniel Gibson, Scott J. Harper, Jonathan Graf, Timothy Dunham. secdev 2025: 204-213 [doi]

Exploiting Intent-Flow State Vulnerabilities in Intent-Based NetworkingAngela Yan, Jiwon Kim 0001, Benjamin E. Ujcich, Dave Jing Tian. secdev 2025: 169-175 [doi]

A First Look at Privacy Compliance of Zoom AppsAndrew York, Mohammed Aldeen, Jingwen Yan, Pranav Silimkhan, Song Liao, Mert D. Pesé, Long Cheng 0005. secdev 2025: 5-15 [doi]

SoK: Understanding CI/CD Security: A Comprehensive Review of Architecture, Attacks, and DefensesRyan Zmuda, Russell Graves, Michael Shepherd, Scott Brookes. secdev 2025: 58-68 [doi]

2024

IEEE Secure Development Conference, SecDev 2024, Pittsburgh, PA, USA, October 7-9, 2024IEEE, 2024. [doi]

Moving from the Developer Machine to IoT Devices: An Empirical StudyMd Rabbi Alam, Jinpeng Wei, Md Sajidul Islam Sajid, Qingyang Wang, Chenglong Fu 0004. secdev 2024: 140-152 [doi]

iConPAL: LLM-guided Policy Authoring Assistant for Configuring IoT DefensesMahbub Alam, Siwei Zhang, Eric Rodriguez, Akib Nafis, Endadul Hoque. secdev 2024: 76-92 [doi]

User Privacy in the Digital Playground: An In-Depth Investigation of Facebook Instant GamesSideeq Bello, Babangida Bappah, Nicholas R. Tanet, Arabelle S. Betzwieser, Aisha I. Ali-Gombe. secdev 2024: 64-75 [doi]

Sharing without Showing: Secure Cloud Analytics with Trusted Execution EnvironmentsMarcus Birgersson, Cyrille Artho, Musard Balliu. secdev 2024: 105-116 [doi]

Reverse Engineering Branch Prediction Capabilities in Modern Micro-ArchitecturesRodrigo Branco, Ben Lee. secdev 2024: 183-185 [doi]

Toward Partial Proofs of VulnerabilitiesJonathan Brossard. secdev 2024: 180-182 [doi]

Community Security Champions: Studying the Most Influential Users on Security Stack ExchangePartha Das Chowdhury, Mohammad Tahaei, Matthew Edwards 0001, Claudia Peersman, Lata Nautiyal, Kopo Marvin Ramokapane, Awais Rashid. secdev 2024: 93-104 [doi]

BliMe LinterHossam ElAtali, Xiaohe Duan, Hans Liljestrand, Meng Xu, N. Asokan. secdev 2024: 46-53 [doi]

A NAND Use Case for Cybersecurity ExperimentsTimothy Fraser, Xuwei Liu, Qingkai Shi, Xiangyu Zhang 0001, Mark Wutka, Daniel Balasubramanian, Hao Chen, Zhong Shao. secdev 2024: 178-179 [doi]

GENIE: Guarding the npm Ecosystem with Semantic Malware DetectionMatías F. Gobbi, Johannes Kinder. secdev 2024: 117-128 [doi]

Lessons Learned and Challenges of Deploying Control Flow Integrity in Complex Software: the Case of OpenJDK's Java Virtual MachineSabine Houy, Alexandre Bartel. secdev 2024: 153-165 [doi]

From automation to CI/CD: a comparative evaluation of threat modeling toolsDimitri Van Landuyt, Laurens Sion, Walewein Philips, Wouter Joosen. secdev 2024: 35-45 [doi]

Verifiable Multi-Agent Multi-Task AssignmentThomas Lavaur, Déborah Conforto Nedelmann, Corentin Chauffaut, Jérôme Lacan, Caroline P. C. Chanel. secdev 2024: 1-12 [doi]

Repairing Infrastructure-as-Code using Large Language ModelsEn Low, Carmen Cheh, Binbin Chen 0001. secdev 2024: 20-27 [doi]

Evasion Attacks on Object Detection Models using Attack TransferabilityArjun E. R. R, Pavan Kulkarni, Yuvaraj Govindarajulu, Harshit Shah, Manojkumar Parmar. secdev 2024: 28-34 [doi]

DeTRAP: RISC-V Return Address Protection With Debug TriggersIsaac Richter, Jie Zhou, John Criswell. secdev 2024: 166-177 [doi]

Designing Secure AI-based Systems: a Multi-Vocal Literature ReviewSimon Schneider, Ananya Saha, Emanuele Mezzi, Katja Tuma, Riccardo Scandariato. secdev 2024: 13-19 [doi]

Understanding the Challenges in Detecting Vulnerabilities of Rust ApplicationsDiane B. Stephens, Kawkab Aldoshan, Mustakimur Rahman Khandaker. secdev 2024: 54-63 [doi]

Octal: Efficient Automatic Data-Oblivious Program Transformations to Eliminate Side-Channel LeakageBiniyam Mengist Tiruye, Lauren Biernacki, Tersiteab Adem, Petros Mola, Todd M. Austin. secdev 2024: 129-139 [doi]

Open Source Software (OSS) Transparency TutorialCarol Woody, Scott Hissam. secdev 2024: 186-187 [doi]

2023

Bridging the Bubbles: Connecting Academia and Industry in Cybersecurity ResearchRasha Kashef 0001, Monika Freunek, Jeff Schwartzentruber, Reza Samavi, Burcu Bulgurcu, A. J. Khan, Marcus Santos. secdev 2023: 207-213 [doi]

Evaluating Container DebloatersMuhammad Hassan 0005, Talha Tahir, Muhammad Farrukh, Abdullah Naveed, Anas Naeem, Fareed Zaffar, Fahad Shaon, Ashish Gehani, Sazzadur Rahaman. secdev 2023: 88-98 [doi]

IEEE Secure Development Conference, SecDev 2023, Atlanta, GA, USA, October 18-20, 2023IEEE, 2023. [doi]

BLADE: Towards Scalable Source Code DebloatingMuaz Ali, Rumaisa Habib, Ashish Gehani, Sazzadur Rahaman, Zartash Afzal Uzmi. secdev 2023: 75-87 [doi]

Model-Agnostic Federated Learning for Privacy-Preserving SystemsHussain M. J. Almohri, Layne T. Watson. secdev 2023: 99-105 [doi]

Misplaced Trust: The Security Flaw in Modern Code Signing ProcessPranshu Bajpai, Raghudeep Kannavara. secdev 2023: 49-50 [doi]

Curbing the Vulnerable Parser: Graded Modal Guardrails for Secure Input HandlingEric Bond, Matthew Heimerdinger. secdev 2023: 126-132 [doi]

Friend or Foe Inside? Exploring In-Process Isolation to Maintain Memory Safety for Unsafe RustMerve Gülmez, Thomas Nyman, Christoph Baumann, Jan Tobias Mühlberg. secdev 2023: 54-66 [doi]

Characterizing Static Analysis Alerts for Terraform Manifests: An Experience ReportHanyang Hu, Yani Bu, Kristen Wong, Gaurav Sood, Karen Smiley, Akond Rahman. secdev 2023: 7-13 [doi]

Assessing the Impact of Efficiently Protecting Ten Million Stack Objects from Memory Errors ComprehensivelyKaiming Huang, Jack Sampson, Trent Jaeger. secdev 2023: 67-74 [doi]

Adaptive Security: Certificate and Key Rotation for Firmware IntegritySunil Joshi, Kenneth G. Crowther, Jarvis Robinson. secdev 2023: 214-215 [doi]

Challenges with Passwordless FIDO2 in an Enterprise Setting: A Usability StudyMichal Kepkowski, Maciej Machulak, Ian D. Wood, Dali Kaafar. secdev 2023: 37-48 [doi]

Securing Your Crypto-API Usage Through Tool Support - A Usability StudyStefan Krüger, Michael Reif, Anna-Katharina Wickert, Sarah Nadi, Karim Ali 0001, Eric Bodden, Yasemin Acar, Mira Mezini, Sascha Fahl. secdev 2023: 14-25 [doi]

Parser Weakness Enumeration: Definition and Preliminary AssessmentDenley Lam, Letitia W. Li, Anthony Gabrielson. secdev 2023: 118-125 [doi]

Triaging Android Systems Using Bayesian Attack GraphsYu Tsung Lee, Rahul George, HaiNing Chen, Kevin Chan, Trent Jaeger. secdev 2023: 171-183 [doi]

11 things about Securing MicroserviceYuvaraj Madheswaran. secdev 2023: 51-53 [doi]

Security and Privacy Threat Analysis for SolidOmid Mirzamohammadi, Kristof Jannes, Laurens Sion, Dimitri Van Landuyt, Aysajan Abidin, Dave Singelée. secdev 2023: 196-206 [doi]

A randomization-based, zero-trust cyberattack detection method for hierarchical systemsSinnott Murphy, Richard Macwan, Vivek Kumar Singh, Chin-Yao Chang. secdev 2023: 145-155 [doi]

PRICAR: Privacy Framework for Vehicular Data Sharing with Third PartiesMert D. Pesé, Jay W. Schauer, Murali Mohan, Cassandra Joseph, Kang G. Shin, John Moore. secdev 2023: 184-195 [doi]

An In-Depth Analysis of Android's Java Class Library: its Evolution and Security ImpactTimothée Riom, Alexandre Bartel. secdev 2023: 133-144 [doi]

Tutorial: The End of Binary Protocol Parser Vulnerabilities : Using RecordFlux and SPARK to implement formally-verified binary formats and communication protocolsAlexander Senier. secdev 2023: 5-6 [doi]

Tutorial: Crypto-Ransomware: Analysis, Defense, and Criminal NegotiationWenjia Song, Arianna Schuler Scott. secdev 2023: 3-4 [doi]

Grading on a Curve: How Rust can Facilitate New Contributors while Decreasing VulnerabilitiesJustin Tracey, Ian Goldberg. secdev 2023: 26-36 [doi]

Fortifying IoT Devices: AI-Driven Intrusion Detection via Memory-Encoded Audio SignalsRamyapandian Vijayakanthan, Karley M. Waguespack, Irfan Ahmed 0001, Aisha I. Ali-Gombe. secdev 2023: 106-117 [doi]

A Lot Less Likely Than I Thought: Introducing Evidence-Based Security Risk Assessment for Healthcare SoftwareCharles Weir, Anna Dyson, Daniel Prince. secdev 2023: 156-170 [doi]

Invited Tutorial: Counteracting Web Application Abuse in MalwareMingxuan Yao, Jonathan Fuller, Ranjita Pai Sridhar, Saumya Agarwal, Amit Kumar Sikder, Brendan Saltaformaggio. secdev 2023: 1-2 [doi]

2022

IEEE Secure Development Conference, SecDev 2022, Atlanta, GA, USA, October 18-20, 2022IEEE, 2022. [doi]

Position Paper: Towards a Hybrid Approach to Protect Against Memory Safety VulnerabilitiesKaled M. Alshmrany, Ahmed Bhayat, Franz Brauße, Lucas C. Cordeiro, Konstantin Korovin, Tom Melham, Mustafa A. Mustafa, Pierre Olivier, Giles Reger, Fedor Shmarov. secdev 2022: 52-58 [doi]

Secure Development Workflows in CI/CD PipelinesPranshu Bajpai, Adam Lewis. secdev 2022: 65-66 [doi]

Tutorial: LLVM for Security PractitionersJohn Criswell, Ethan Johnson, Colin Pronovost. secdev 2022: 1-2 [doi]

Towards cryptographically-authenticated in-memory data structuresSetareh Ghorshi, Lachlan J. Gunn, Hans Liljestrand, N. Asokan. secdev 2022: 30-44 [doi]

A Hierarchical Database of One Million WebsitesJack B. Harrison, Joseph R. Harrison, Madison G. Boswell, Alan J. Michaels. secdev 2022: 67-68 [doi]

Framework to Assess Policy Driven Security Misconfiguration Risks in Cloud Native ApplicationKanchanjot Kaur Phokela, Kapil Singi, Kuntal Dey, Vikrant Kaulgud, Adam P. Burden. secdev 2022: 63-64 [doi]

From Lemons to Peaches: Improving Security ROI through Security Chaos EngineeringKelly Shortridge. secdev 2022: 59-60 [doi]

Sign in or sign up to see more results.

runs on WebDSL