Christopher Krügel

Christopher Krügel, Fabrizio Ferrandi, Engin Kirda, 2007, 2007 Third International Conference on Security and Privacy in Communications Networks and the Workshops - SecureComm 2007.

Detecting System Emulators

Christopher Krügel, Engin Kirda, Thomas Raffetseder, 2007, ISC.

Pixy: a static analysis tool for detecting Web application vulnerabilities

Christopher Krügel, Engin Kirda, Nenad Jovanovic, 2006, 2006 IEEE Symposium on Security and Privacy (S&P'06).

Web service engineering with DIWE

Christopher Krügel, Engin Kirda, Clemens Kerer, 2003, 2003 Proceedings 29th Euromicro Conference.

Comprehensive approach to intrusion detection alert correlation

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2004, IEEE Transactions on Dependable and Secure Computing.

BTLab: A System-Centric, Data-Driven Analysis and Measurement Platform for BitTorrent Clients

Ben Y. Zhao, Christopher Krügel, Engin Kirda, 2011, 2011 Proceedings of 20th International Conference on Computer Communications and Networks (ICCCN).

GuardION: Practical Mitigation of DMA-Based Rowhammer Attacks on ARM

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2018, DIMVA.

CLAPP: characterizing loops in Android applications

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, ESEC/SIGSOFT FSE.

Applying Mobile Agent Technology to Intrusion Detection

Christopher Krügel, Thomas Toth, 2001 .

Are BGP Routers Open to Attack? An Experiment

Christopher Krügel, Giovanni Vigna, Ludovico Cavedon, 2010, iNetSec.

DPS : An Architectural Style for Development of Secure Software

Harald C. Gall, Christopher Krügel, Mehdi Jazayeri, 2002, InfraSec.

Dymo: Tracking Dynamic Code Identity

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2011, RAID.

Your botnet is my botnet: analysis of a botnet takeover

Christopher Krügel, Giovanni Vigna, Brett Stone-Gross, 2009, CCS.

POISED: Spotting Twitter Spam Off the Beaten Paths

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2017, CCS.

Detection and analysis of drive-by-download attacks and malicious JavaScript code

Christopher Krügel, Giovanni Vigna, Marco Cova, 2010, WWW '10.

Gossip: Automatically Identifying Malicious Domains from Mailing List Discussions

Cheng Huang, Christopher Krügel, Giovanni Vigna, 2017, AsiaCCS.

DIFUZE: Interface Aware Fuzzing for Kernel Drivers

Christopher Krügel, Giovanni Vigna, Shuang Hao, 2017, CCS.

NJAS: Sandboxing Unmodified Applications in non-rooted Devices Running stock Android

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, SPSM@CCS.

Preventing Cross Site Request Forgery Attacks

Christopher Krügel, Engin Kirda, Nenad Jovanovic, 2006, 2006 Securecomm and Workshops.

Network attack detection and defense – Manifesto of the Dagstuhl Perspective Workshop, March 2nd–6th, 2008

Georg Carle, Christopher Krügel, Richard A. Kemmerer, 2009, Computer Science - Research and Development.

Noxes: a client-side solution for mitigating cross-site scripting attacks

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2006, SAC '06.

Is the Internet for Porn? An Insight Into the Online Adult Industry

Christopher Krügel, Engin Kirda, Thorsten Holz, 2010, WEIS.

How the ELF Ruined Christmas

Christopher Krügel, Giovanni Vigna, Yan Shoshitaishvili, 2015, USENIX Security Symposium.

Service specific anomaly detection for network intrusion detection

Christopher Krügel, Engin Kirda, Thomas Toth, 2002, SAC '02.

Exploring Multiple Execution Paths for Malware Analysis

Christopher Krügel, Engin Kirda, Andreas Moser, 2007, 2007 IEEE Symposium on Security and Privacy (SP '07).

Effective Anomaly Detection with Scarce Training Data

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2010, NDSS.

Secure Input for Web Applications

Christopher Krügel, Engin Kirda, Martin Szydlowski, 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).

There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits

Christopher Krügel, Giovanni Vigna, Marco Cova, 2008, WOOT.

Grab 'n Run: Secure and Practical Dynamic Code Loading for Android Applications

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, ACSAC.

BootStomp: On the Security of Bootloaders in Mobile Devices

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2017, USENIX Security Symposium.

Analysis of a Botnet Takeover

Christopher Krügel, Giovanni Vigna, Brett Stone-Gross, 2011, IEEE Security & Privacy.

In rDNS We Trust: Revisiting a Common Data-Source's Reliability

Anja Feldmann, Christopher Krügel, Giovanni Vigna, 2018, PAM.

Delta: automatic identification of unknown web-based infection campaigns

Christopher Krügel, Giovanni Vigna, Kevin Borgolte, 2013, CCS.

BootKeeper: Validating Software Integrity Properties on Boot Firmware Images

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2019, CODASPY.

Follow the green: growth and dynamics in twitter follower markets

Gang Wang, Gianluca Stringhini, Ben Y. Zhao, 2013, Internet Measurement Conference.

A multi-model approach to the detection of web-based attacks

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2005, Comput. Networks.

A quantitative study of accuracy in system call-based malware detection

Christopher Krügel, Engin Kirda, Mihai Christodorescu, 2012, ISSTA 2012.

Supporting multi-device enabled Web services: challenges and open problems

Christopher Krügel, Mehdi Jazayeri, Engin Kirda, 2001, Proceedings Tenth IEEE International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises. WET ICE 2001.

PoX: Protecting users from malicious Facebook applications

Christopher Krügel, Engin Kirda, Manuel Egele, 2012, Comput. Commun..

PoX: Protecting users from malicious Facebook applications

Christopher Krügel, Engin Kirda, Manuel Egele, 2011, 2011 IEEE International Conference on Pervasive Computing and Communications Workshops (PERCOM Workshops).

CLAPP: characterizing loops in Android applications (invited talk)

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, DeMobile@SIGSOFT FSE.

Effective and Efficient Malware Detection at the End Host

Christopher Krügel, Engin Kirda, XiaoFeng Wang, 2009, USENIX Security Symposium.

Tracking Memory Writes for Malware Classification and Code Reuse Identification

Christopher Krügel, Giovanni Vigna, André Ricardo Abed Grégio, 2012, DIMVA.

Message in a bottle: sailing past censorship

Christopher Krügel, Giovanni Vigna, Luca Invernizzi, 2013, ACSAC.

Distributed Pattern Detection for Intrusion Detection

Christopher Krügel, Thomas Toth, Christopher Krügel, 2002, NDSS.

DR. CHECKER: A Soundy Analysis for Linux Kernel Drivers

Christopher Krügel, Giovanni Vigna, Aravind Machiry, 2017, USENIX Security Symposium.

Blacksheep: detecting compromised hosts in homogeneous crowds

Christopher Krügel, Giovanni Vigna, Antonio Bianchi, 2012, CCS '12.

Behavioral and Structural Properties of Malicious Code

Christopher Krügel, 2007, Malware Detection.

Peering through the iframe

Christopher Krügel, Giovanni Vigna, Brett Stone-Gross, 2011, 2011 Proceedings IEEE INFOCOM.

TriggerScope: Towards Detecting Logic Bombs in Android Applications

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2016, 2016 IEEE Symposium on Security and Privacy (SP).

On the Workings and Current Practices of Web-Based Device Fingerprinting

Wouter Joosen, Frank Piessens, Christopher Krügel, 2014, IEEE Security & Privacy.

Static Disassembly of Obfuscated Binaries

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2004, USENIX Security Symposium.

On the Security of Application Installers and Online Software Repositories

Christopher Krügel, Giovanni Vigna, André Ricardo Abed Grégio, 2020, DIMVA.

Detecting social cliques for automated privacy control in online social networks

Christopher Krügel, Hakan Yildiz, Christopher Krügel, 2012, 2012 IEEE International Conference on Pervasive Computing and Communications Workshops.

CAPTCHA smuggling: hijacking web browsing sessions to create CAPTCHA farms

Leyla Bilge, Christopher Krügel, Engin Kirda, 2010, SAC '10.

Two years of short URLs internet measurement: security threats and countermeasures

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2013, WWW.

EARs in the wild: large-scale analysis of execution after redirect vulnerabilities

Christopher Krügel, Giovanni Vigna, Adam Doupé, 2013, SAC '13.

On the Privacy and Security of the Ultrasound Ecosystem

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2017, Proc. Priv. Enhancing Technol..

XGuide - A Practical Guide to XML-Based Web Engineering

Christopher Krügel, Engin Kirda, Clemens Kerer, 2002, NETWORKING Workshops.

Automatically Generating Models for Botnet Detection

Leyla Bilge, Christopher Krügel, Engin Kirda, 2009, ESORICS.

Polymorphic Worm Detection Using Structural Information of Executables

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2005, RAID.

You are what you include: large-scale evaluation of remote javascript inclusions

Wouter Joosen, Frank Piessens, Christopher Krügel, 2012, CCS.

PeerPress: utilizing enemies' P2P strength against them

Christopher Krügel, Lingfeng Chen, Guofei Gu, 2012, CCS.

Silverline: toward data confidentiality in storage-intensive cloud applications

Ben Y. Zhao, Christopher Krügel, Krishna P. N. Puttaswamy, 2011, SoCC.

How Shall We Play a Game?: A Game-theoretical Model for Cyber-warfare Games

David Brumley, Christopher Krügel, Giovanni Vigna, 2017, 2017 IEEE 30th Computer Security Foundations Symposium (CSF).

Rise of the HaCRS: Augmenting Autonomous Cyber Reasoning Systems with Human Assistance

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2017, CCS.

EVILCOHORT: Detecting Communities of Malicious Accounts on Online Services

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2015, USENIX Security Symposium.

FlashDetect: ActionScript 3 Malware Detection

Christopher Krügel, Giovanni Vigna, Timon Van Overveldt, 2012, RAID.

BinTrimmer: Towards Static Binary Debloating Through Abstract Interpretation

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2019, DIMVA.

A survey on automated dynamic malware-analysis techniques and tools

Christopher Krügel, Engin Kirda, Theodoor Scholte, 2012, CSUR.

Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner

Christopher Krügel, Giovanni Vigna, Adam Doupé, 2012, USENIX Security Symposium.

On the Effectiveness of Techniques to Detect Phishing Sites

Christopher Krügel, Engin Kirda, Christian Ludl, 2007, DIMVA.

Meerkat: Detecting Website Defacements through Image-based Object Recognition

Christopher Krügel, Giovanni Vigna, Kevin Borgolte, 2015, USENIX Security Symposium.

Dynamic Spyware Analysis

Heng Yin, Dawn Xiaodong Song, Christopher Krügel, 2007, USENIX Annual Technical Conference.

On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, DIMVA.

Accurate Buffer Overflow Detection via Abstract Payload Execution

Christopher Krügel, Thomas Toth, Christopher Krügel, 2002, RAID.

Intrusion Detection and Correlation - Challenges and Solutions

Christopher Krügel, Giovanni Vigna, Fredrik Valeur, 2004, Advances in Information Security.

Jarhead analysis and detection of malicious Java applets

Christopher Krügel, Giovanni Vigna, Johannes Schlumberger, 2012, ACSAC '12.

Shady paths: leveraging surfing crowds to detect malicious web pages

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2013, CCS.

Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2013, USENIX Security Symposium.

The power of procrastination: detection and mitigation of execution-stalling malicious code

Christopher Krügel, Engin Kirda, Clemens Kolbitsch, 2011, CCS '11.

Detecting kernel-level rootkits through binary analysis

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2004, 20th Annual Computer Security Applications Conference.

Clickonomics: Determining the Effect of Anti-Piracy Measures for One-Click Hosting

Christopher Krügel, Tobias Lauinger, Engin Kirda, 2013, NDSS.

Prison: Tracking Process Interactions to Contain Malware

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2015, 2015 IEEE 17th International Conference on High Performance Computing and Communications, 2015 IEEE 7th International Symposium on Cyberspace Safety and Security, and 2015 IEEE 12th International Conference on Embedded Software and Systems.

VeriKey: A Dynamic Certificate Verification System for Public Key Exchanges

Kevin C. Almeroth, Christopher Krügel, Brett Stone-Gross, 2008, DIMVA.

Making browser extensions secure: technical perspective

Christopher Krügel, 2011, CACM.

Rippler: Delay injection for service dependency detection

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2014, IEEE INFOCOM 2014 - IEEE Conference on Computer Communications.

Improving Signature Testing through Dynamic Data Flow Analysis

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).

Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2016, NDSS.

Topology-Based Detection of Anomalous BGP Messages

Christopher Krügel, William K. Robertson, Fredrik Valeur, 2003, RAID.

SPARTA, a Mobile Agent Based Instrusion Detection System

Christopher Krügel, Engin Kirda, Thomas Toth, 2001, Network Security.

Automating Mimicry Attacks Using Static Binary Analysis

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2005, USENIX Security Symposium.

Nexat: a history-based approach to predict attacker actions

Christopher Krügel, Giovanni Vigna, Amir Houmansadr, 2011, ACSAC '11.

Analyzing and Detecting Malicious Flash Advertisements

Christopher Krügel, Giovanni Vigna, Marco Cova, 2009, 2009 Annual Computer Security Applications Conference.

SWAP: Mitigating XSS attacks using a reverse proxy

Christopher Krügel, Engin Kirda, Christian Platzer, 2009, 2009 ICSE Workshop on Software Engineering for Secure Systems.

Escape from Monkey Island: Evading High-Interaction Honeyclients

Christopher Krügel, Giovanni Vigna, Marco Cova, 2011, DIMVA.

Mitigating Drive-By Download Attacks: Challenges and Open Problems

Christopher Krügel, Engin Kirda, Manuel Egele, 2009, iNetSeC.

COMPA: Detecting Compromised Accounts on Social Networks

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2013, NDSS.

BotFinder: finding bots in network traffic without deep packet inspection

Christopher Krügel, Giovanni Vigna, Xiaoming Fu, 2012, CoNEXT '12.

Jini - ein guter Geist für die Gebäudesystemtechnik

Christopher Krügel, Wolfgang Kastner, Heinrich Reiter, 1999, Java-Informations-Tage.

A Static, Packer-Agnostic Filter to Detect Similar Malware Samples

Christopher Krügel, Giovanni Vigna, Grégoire Jacob, 2012, DIMVA.

Static analysis for detecting taint-style vulnerabilities in web applications

Christopher Krügel, Engin Kirda, Nenad Jovanovic, 2010, J. Comput. Secur..

Limits of Static Analysis for Malware Detection

Christopher Krügel, Engin Kirda, Andreas Moser, 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).

Eric Medvet, Christopher Krügel, Engin Kirda, 2008, SecureComm.

Leveraging User Interactions for In-Depth Testing of Web Applications

Christopher Krügel, Engin Kirda, Sean McAllister, 2008, RAID.

Precise alias analysis for static detection of web application vulnerabilities

Christopher Krügel, Engin Kirda, Nenad Jovanovic, 2006, PLAS '06.

Using Loops For Malware Classification Resilient to Feature-unaware Perturbations

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2018, ACSAC.

Portrait of a Privacy Invasion

Christopher Krügel, Giovanni Vigna, Yan Shoshitaishvili, 2015, Proc. Priv. Enhancing Technol..

FIRE: FInding Rogue nEtworks

Kevin C. Almeroth, Christopher Krügel, Brett Stone-Gross, 2009, 2009 Annual Computer Security Applications Conference.

Hulk: Eliciting Malicious Behavior in Browser Extensions

Christopher Krügel, Giovanni Vigna, Vern Paxson, 2014, USENIX Security Symposium.

Rampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks

Christopher Krügel, Giovanni Vigna, Chenxiong Qian, 2018, USENIX Security Symposium.

A solution for the automated detection of clickjacking attacks

Christopher Krügel, Engin Kirda, Marco Balduzzi, 2010, ASIACCS '10.

Using Alert Verification to Identify Successful Intrusion Attempts

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2004, Prax. Inf.verarb. Kommun..

Framing Dependencies Introduced by Underground Commoditization

Christopher Krügel, Giovanni Vigna, Stefan Savage, 2015, WEIS.

An anomaly-driven reverse proxy for web applications

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2006, SAC '06.

Scalable, Behavior-Based Malware Clustering

Christopher Krügel, Engin Kirda, Ulrich Bayer, 2009, NDSS.

Taming Transactions: Towards Hardware-Assisted Control Flow Integrity Using Transactional Memory

Christopher Krügel, Giovanni Vigna, Davide Balzarotti, 2016, RAID.

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2006, NDSS.

Stateful intrusion detection for high-speed network's

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2002, Proceedings 2002 IEEE Symposium on Security and Privacy.

Nazca: Detecting Malware Distribution in Large-Scale Networks

Christopher Krügel, Giovanni Vigna, Sung-Ju Lee, 2014, NDSS.

BareCloud: Bare-metal Analysis-based Evasive Malware Detection

Christopher Krügel, Giovanni Vigna, Dhilung Kirat, 2014, USENIX Security Symposium.

Protecting Users against Phishing Attacks

Christopher Krügel, Engin Kirda, Christopher Krügel, 2006, Comput. J..

Piston: Uncooperative Remote Runtime Patching

Christopher Krügel, Giovanni Vigna, Yan Shoshitaishvili, 2017, ACSAC.

08102 Manifesto -- Perspectives Workshop: Network Attack Detection and Defense

Georg Carle, Christopher Krügel, Richard A. Kemmerer, 2008, Network Attack Detection and Defense.

Measuring E-mail header injections on the world wide web

Christopher Krügel, Giovanni Vigna, Adam Doupé, 2018, SAC.

Fighting malicious code: an eternal struggle

Christopher Krügel, 2014, AsiaCCS.

Toward the Analysis of Embedded Firmware through Automated Re-hosting

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2019, RAID.

Panorama: capturing system-wide information flow for malware detection and analysis

Heng Yin, Dawn Xiaodong Song, Christopher Krügel, 2007, CCS '07.

PUBCRAWL: Protecting Users and Businesses from CRAWLers

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2012, USENIX Security Symposium.

BareDroid: Large-Scale Analysis of Android Apps on Real Devices

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, ACSAC 2015.

Broken Fingers: On the Usage of the Fingerprint API in Android

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2018, NDSS.

Automatic Network Protocol Analysis

Christopher Krügel, Engin Kirda, Gilbert Wondracek, 2008, NDSS.

Extending .NET Security to Unmanaged Code

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2006, ISC.

The Underground Economy of Fake Antivirus Software

Christopher Krügel, Brett Stone-Gross, Richard A. Kemmerer, 2011, WEIS.

Client-side cross-site scripting protection

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2009, Comput. Secur..

Evaluating the impact of automated intrusion response mechanisms

Christopher Krügel, Thomas Toth, Christopher Krügel, 2002, 18th Annual Computer Security Applications Conference, 2002. Proceedings..

The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2014, Internet Measurement Conference.

JACKSTRAWS: Picking Command and Control Connections from Bot Traffic

Christopher Krügel, Thorsten Holz, Grégoire Jacob, 2011, USENIX Security Symposium.

Defending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks

Christopher Krügel, Engin Kirda, Manuel Egele, 2009, DIMVA.

8102 Working Group -- Attack Taxonomy

Marc Dacier, Christopher Krügel, Hervé Debar, 2008, Network Attack Detection and Defense.

Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2007, NDSS.

HeapHopper: Bringing Bounded Model Checking to Heap Implementation Security

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2018, USENIX Security Symposium.

Ramblr: Making Reassembly Great Again

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2017, NDSS.

08102 Working Group -- Requirements for Network Monitoring from an IDS Perspective

Christopher Krügel, Engin Kirda, Falko Dressler, 2008, Network Attack Detection and Defense.

The harvester, the botmaster, and the spammer: on the relations between the different actors in the spam landscape

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2014, AsiaCCS.

Dynamic Analysis of Malicious Code

Christopher Krügel, Engin Kirda, Ulrich Bayer, 2006, Journal in Computer Virology.

BOOMERANG: Exploiting the Semantic Gap in Trusted Execution Environments

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2017, NDSS.

Enforcing dynamic spectrum access with spectrum permits

Lei Yang, Ben Y. Zhao, Christopher Krügel, 2012, 2012 IEEE International Symposium on Dynamic Spectrum Access Networks.

Challenges for Dynamic Analysis of iOS Applications

Christopher Krügel, Giovanni Vigna, Manuel Egele, 2011, iNetSeC.

Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel

Christopher Krügel, Giovanni Vigna, Yan Chen, 2014, RAID.

ViewPoints: differential string analysis for discovering client- and server-side input validation inconsistencies

Alessandro Orso, Christopher Krügel, Tevfik Bultan, 2012, ISSTA 2012.

Prospex: Protocol Specification Extraction

Christopher Krügel, Engin Kirda, Gilbert Wondracek, 2009, 2009 30th IEEE Symposium on Security and Privacy.

Eyes of a Human, Eyes of a Program: Leveraging Different Views of the Web for Analysis and Detection

Christopher Krügel, Giovanni Vigna, Luca Invernizzi, 2014, RAID.

Something from Nothing (There): Collecting Global IPv6 Datasets from DNS

Christopher Krügel, Giovanni Vigna, Kevin Borgolte, 2017, PAM.

Revolver: An Automated Approach to the Detection of Evasive Web-based Malware

Christopher Krügel, Giovanni Vigna, Marco Cova, 2013, USENIX Security Symposium.

Practical Attacks against the I2P Network

Christopher Krügel, Giovanni Vigna, Christoph Egger, 2013, RAID.

Building Anti-Phishing Browser Plug-Ins: An Experience Report

Christopher Krügel, Engin Kirda, Thomas Raffetseder, 2007, Third International Workshop on Software Engineering for Secure Systems (SESS'07: ICSE Workshops 2007).

PExy: The Other Side of Exploit Kits

Christopher Krügel, Giovanni Vigna, Yan Shoshitaishvili, 2014, DIMVA.

Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis

Leyla Bilge, Christopher Krügel, William K. Robertson, 2012, ACSAC '12.

MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper)

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2011, DIMVA.

Fighting Malicious Software

Christopher Krügel, 2012, ICISS.

BareBox: efficient malware analysis on bare-metal

Christopher Krügel, Giovanni Vigna, Dhilung Kirat, 2011, ACSAC '11.

Detecting Deceptive Reviews Using Generative Adversarial Networks

Christopher Krügel, Giovanni Vigna, Shirin Nilizadeh, 2018, 2018 IEEE Security and Privacy Workshops (SPW).

Preserving Location Privacy in Geosocial Applications

Ben Y. Zhao, Divyakant Agrawal, Amr El Abbadi, 2014, IEEE Transactions on Mobile Computing.

Anomaly detection of web-based attacks

Christopher Krügel, Giovanni Vigna, Christopher Krügel, 2003, CCS '03.

Detecting spammers on social networks

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2010, ACSAC '10.

Fear the EAR: discovering and mitigating execution after redirect vulnerabilities

Christopher Krügel, Giovanni Vigna, Adam Doupé, 2011, CCS '11.

BOTMAGNIFIER: Locating Spambots on the Internet

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2011, USENIX Security Symposium.

MineSweeper: An In-depth Look into Drive-by Cryptocurrency Mining and Its Defense

Christopher Krügel, Giovanni Vigna, Herbert Bos, 2018, CCS.

Alert Verification Determining the Success of Intrusion Attempts

Christopher Krügel, William K. Robertson, Christopher Krügel, 2004, DIMVA.

Identifying Dormant Functionality in Malware Programs

Christopher Krügel, Engin Kirda, Stefano Zanero, 2010, 2010 IEEE Symposium on Security and Privacy.

Execute This! Analyzing Unsafe and Malicious Dynamic Code Loading in Android Applications

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2014, NDSS.

Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis

Christopher Krügel, Giovanni Vigna, Shirin Nilizadeh, 2019, WWW.

Stranger danger: exploring the ecosystem of ad-based URL shortening services

Gianluca Stringhini, Wouter Joosen, Frank Piessens, 2014, WWW.

What the App is That? Deception and Countermeasures in the Android User Interface

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, 2015 IEEE Symposium on Security and Privacy.

deDacota: toward preventing server-side XSS via automatic code and data separation

Christopher Krügel, Giovanni Vigna, Adam Doupé, 2013, CCS.

Bayesian event classification for intrusion detection

Christopher Krügel, William K. Robertson, Fredrik Valeur, 2003, 19th Annual Computer Security Applications Conference, 2003. Proceedings..

SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2016, 2016 IEEE Symposium on Security and Privacy (SP).

Extending .NET security to unmanaged code

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2007, International Journal of Information Security.

TRUST.IO: Protecting Physical Interfaces on Cyber-physical Systems

Christopher Krügel, Giovanni Vigna, Kevin Leach, 2020, 2020 IEEE Conference on Communications and Network Security (CNS).

The Tricks of the Trade: What Makes Spam Campaigns Successful?

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2014, 2014 IEEE Security and Privacy Workshops.

Improving the efficiency of dynamic malware analysis

Christopher Krügel, Engin Kirda, Ulrich Bayer, 2010, SAC '10.

Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2015, NDSS.

VENOMAVE: Clean-Label Poisoning Against Speech Recognition pdf

Christopher Krügel, Giovanni Vigna, Dorothea Kolossa, 2020, ArXiv.

Using Static Program Analysis to Aid Intrusion Detection

Christopher Krügel, Engin Kirda, Manuel Egele, 2006, DIMVA.

Anomalous system call detection

Christopher Krügel, Giovanni Vigna, Fredrik Valeur, 2006, TSEC.

Toward Automated Detection of Logic Vulnerabilities in Web Applications

Christopher Krügel, Giovanni Vigna, Viktoria Felmetsger, 2010, USENIX Security Symposium.

Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting

Wouter Joosen, Frank Piessens, Christopher Krügel, 2013, 2013 IEEE Symposium on Security and Privacy.

Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2008, 2008 IEEE Symposium on Security and Privacy (sp 2008).

PeriScope: An Effective Probing and Fuzzing Framework for the Hardware-OS Boundary

Jean-Pierre Seifert, Christopher Krügel, Giovanni Vigna, 2019, NDSS.

Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2017, NDSS.

Driller: Augmenting Fuzzing Through Selective Symbolic Execution

Christopher Krügel, Giovanni Vigna, Ruoyu Wang, 2016, NDSS.

Poultry markets: on the underground economy of twitter followers

Gianluca Stringhini, Christopher Krügel, Giovanni Vigna, 2012, CCRV.

Demystifying DDoS as a Service

Christopher Krügel, Giovanni Vigna, Gaspar Modelo-Howard, 2017, IEEE Communications Magazine.

Cloud Strife: Mitigating the Security Risks of Domain-Validated Certificates

Christopher Krügel, Giovanni Vigna, Kevin Borgolte, 2018, NDSS.

ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2015, USENIX Security Symposium.

Exploiting Redundancy in Natural Language to Penetrate Bayesian Spam Filters

Christopher Krügel, Engin Kirda, Christoph Karlberger, 2007, WOOT.

A Parallel Architecture for Stateful, High-Speed Intrusion Detection

Christopher Krügel, Giovanni Vigna, Luca Foschini, 2008, ICISS.

Flexible, Mobile Agent Based Intrusion Detection for Dynamic Networks

Christopher Krügel, Thomas Toth, 2001 .

Protecting a Moving Target: Addressing Web Application Concept Drift

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2009, RAID.

Mining specifications of malicious behavior

Somesh Jha, Christopher Krügel, Mihai Christodorescu, 2008, ISEC '08.

FORECAST: skimming off the malware cream

Christopher Krügel, Grégoire Jacob, Matthias Neugschwandtner, 2011, ACSAC '11.

EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis

Leyla Bilge, Christopher Krügel, Engin Kirda, 2011, NDSS.

Exploitation and Mitigation of Authentication Schemes Based on Device-Public Information

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2017, ACSAC.

A Practical Attack to De-anonymize Social Network Users

Christopher Krügel, Engin Kirda, Thorsten Holz, 2010, 2010 IEEE Symposium on Security and Privacy.

EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework

Christopher Krügel, Yanick Fratantonio, Giovanni Vigna, 2015, NDSS.

Overbot: a botnet protocol based on Kademlia

Christopher Krügel, Engin Kirda, Guenther Starnberger, 2008, SecureComm.

Know Your Achilles' Heel: Automatic Detection of Network Critical Services

Christopher Krügel, Giovanni Vigna, Richard A. Kemmerer, 2015, ACSAC.

Protecting users against phishing attacks with AntiPhish

Christopher Krügel, Engin Kirda, 2005, 29th Annual International Computer Software and Applications Conference (COMPSAC'05).

SecuBat: a web vulnerability scanner

Christopher Krügel, Engin Kirda, Nenad Jovanovic, 2006, WWW '06.

Extracting probable command and control signatures for detecting botnets

Christopher Krügel, Giovanni Vigna, Xifeng Yan, 2014, SAC.

Behavior-based Spyware Detection

Christopher Krügel, Engin Kirda, Christopher Krügel, 2006, USENIX Security Symposium.

Relevant change detection: a framework for the precise extraction of modified and novel web-based content as a filtering technique for analysis engines

Christopher Krügel, Giovanni Vigna, Kevin Borgolte, 2014, WWW.

Run-time Detection of Heap-based Overflows

Christopher Krügel, William K. Robertson, Fredrik Valeur, 2003, LISA.

AccessMiner: using system-centric models for malware protection

Christopher Krügel, Engin Kirda, Mihai Christodorescu, 2010, CCS '10.

On the Detection of Anomalous System Call Arguments

Christopher Krügel, Giovanni Vigna, Fredrik Valeur, 2003, ESORICS.

Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries

Christopher Krügel, Giovanni Vigna, William K. Robertson, 2009, J. Comput. Secur..

Automated Spyware Collection and Analysis

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2009, ISC.

Inspector Gadget: Automated Extraction of Proprietary Gadgets from Malware Binaries

Christopher Krügel, Engin Kirda, Thorsten Holz, 2010, 2010 IEEE Symposium on Security and Privacy.

08102 Executive Summary -- Perspectives Workshop: Network Attack Detection and Defense

Georg Carle, Christopher Krügel, Richard A. Kemmerer, 2008, Network Attack Detection and Defense.

PiOS: Detecting Privacy Leaks in iOS Applications

Christopher Krügel, Giovanni Vigna, Engin Kirda, 2011, NDSS.

Lightning Talk - Think Outside the Dataset: Finding Fraudulent Reviews using Cross-Dataset Analysis

Christopher Krügel, Giovanni Vigna, Shirin Nilizadeh, 2019, WWW.

SyML: Guiding Symbolic Execution Toward Vulnerable States Through Pattern Learning

Christopher Krügel, Giovanni Vigna, Stefano Zanero, 2021, RAID.

Jini Connectivity for EIB Home and Building Networks : From Design to Implementation

Christopher Krügel, Wolfgang Kastner, 1999 .