I gave the keynote at SecWeb 2024 focusing specifically on the thread of our work that evolves around VisibleV8. Here are the details of the talk: Unveiling Web Threats: Insights from JavaScript Behavior The web has become an integral part of our daily lives, enabling communication, commerce, and access to information. However, the increasing complexity of web applications and the JavaScript…
Our paper UntrustIDE: Exploiting Weaknesses in VS Code Extensions has received the Distinguished Paper Award at the Network and Distributed System Security Symposium (NDSS), 2024! This was Elizabeth’s first paper and she did a fantastic job! UntrustIDE: Exploiting Weaknesses in VS Code Extensions Elizabeth Lin, Igibek Koishybayev, Trevor Dunlap, William Enck, Alexandros Kapravelos Proceedings of…
Our Frontier proposal on software supply chain security has been funded by NSF! Here are the details: Collaborative Proposal: SaTC: Frontiers: Enabling a Secure and Trustworthy Software Supply Chain The modern world relies on software in almost every human endeavor, and a typical software product includes 80% open source components. Attackers exploit accidentally-injected security vulnerabilities…
Our paper CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing , a collaboration between Arizona State University, Paypal, Samsung Research and North Carolina State University has received the Best Student Paper Award at IEEE Symposium on Security and Privacy 2021! CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing Penghui Zhang, Adam Oest,…
We are organizing an educational Capture The Flag competition as part of my two courses this semester. The CTF will start on April 17th at 1pm EDT and finish on April 27th at 23:59 EDT. We got more than 500 teams registered to play! Join us! More details here: https://hackpack.club/ctf2020/ NCSU CSC news article: https://www.csc.ncsu.edu/news/2323
Our paper about fingerprintable browser extensions was accepted at the WEB Conference (WWW) 2019 .
Quan Chen’s paper got accepted at CCS’18! Stay tuned for a new browser extension analysis system specifically crafted to detect privacy leaks. Mystique: Uncovering Information Leakage from Browser Extensions Quan Chen, Alexandros Kapravelos Proceedings of the ACM Conference on Computer and Communications Security (CCS), 2018 [PDF] [Bibtex] [website] [code] × @inproceedings{mystique-CCS18, title =…
Kyle Martin and Nikos Pantelaios will start their PhD at NCSU in Fall’18. Really excited to work with them and that our group is expanding!
As part of CSC-405, we are organizing a Capture the Flag competition on Friday 4/20 from 1pm - 7pm.
I’m very excited to announce that we formed a team, called the Order of the Overflow, to organize DEF CON CTF in the years to come! The team is a mix of industry and academic people with lots of experience in organizing and participating in CTFs. You can read more about our team and philosophy here . Follow us on twitter and check out the latest DEF CON CTF info on our page .