Publications

Cornucopia - A Framework for Feedback Guided Generation of Binaries.
V. Singhal, A. Pillai, C. Saumya, M. Kulkarni, Aravind Machiry
ASE 2022 - Proceedings of the 37th ACM International Conference on Automated Software Engineering.

TEEzz - Fuzzing Trusted Applications on COTS Android Devices.
M. Busch, M. Payer, Aravind Machiry , C. Kruegel, G. Vigna, C. Spensky
S&P 2023- 44th IEEE Symposium on Security and Privacy.

Characterizing the Security of Github CI Workflows.
I. Koishybayev, A. Nahapetyan, R. Zachariah, S. Muralee, B. Reaves, A. Kapravelos, Aravind Machiry
USENIX Security 2022 - Proceedings of the 31st USENIX Security Symposium.

PacJam - Securing Dependencies Continuously via Package-Oriented Debloating.
P. Pashakhanloo, Aravind Machiry, H. Choi, A. Canino, K. Heo, I. Lee, M. Naik
Asia CCS 2022 - ACM ASIA Conference on Computer and Communications Security.

C to Checked C by 3C.
Aravind Machiry, J. Kastner, M. McCutchen, A. Eline, K. Headley, M. Hicks
OOPSLA 2022- Object-oriented Programming, Systems, Languages, and Applications.

Tarnhelm - Isolated, Transparent and Confidential Execution of Arbitrary Code in ARM’s TrustZone.
D. Quarta, M. Ianni, Aravind Machiry, Y. Fratantonio, E. Gustafson, D. Balzarotti, M. Lindorfer, C.Kruegel, and G. Vigna
CheckMate 2021- Workshop on Research on Offensive and Defensive Techniques in the Context of Man At The End Attacks.

Toward a Secure Crowdsourced Location Tracking System.
C. Garg, Aravind Machiry, A. Continella, C. Kruegel, and G. Vigna
WiSec 2021- ACM Conference on Security and Privacy in Wireless and Mobile Networks.

ARBITRAR - User-Guided API Misuse Detection.
Z. Li, Aravind Machiry , B. Chen, M. Naik, K. Wang, L. Song
S&P 2021- 42nd IEEE Symposium on Security and Privacy.

Glitching Demystified - Analyzing Control-flow-based Glitching Attacks and Defenses.
C. Spensky, Aravind Machiry, N. Burow, H. Okhravi, R. Housley, Z. Gu, H. Jamjoom, C. Kruegel and G. Vigna
DSN 2021 - 51st International Conference on Dependable Systems and Networks.

DIANE - Identifying Fuzzing Triggers in Apps to Generate Under-constrained Inputs for IoT Devices.
N. Redini, A. Continella, D. Das, G.De Pasquale, N. Spahn, Aravind Machiry, A. Bianchi, C. Kruegel, and G. Vigna
S&P 2021- 42nd IEEE Symposium on Security and Privacy.

Bran - Reduce Vulnerability Search Space in Large Open Source Repositories by Learning Bug Symptoms
D. Meng, M. Guerriero, Aravind Machiry, H. Aghakhani, P. Bose, A. Continella, C. Kruegel and G. Vigna
Asia CCS 2021 - ACM ASIA Conference on Computer and Communications Security

Conware - Automated Modeling of Hardware Peripherals
C. Spensky, Aravind Machiry , N. Redini, C. Unger, G. Foster, E. Balsband, H. Okhravi, C. Kruegel and G. Vigna
Asia CCS 2021 - ACM ASIA Conference on Computer and Communications Security

Exploring Abstraction Functions in Fuzzing.
C. Salls, Aravind Machiry , A. Doupe, Y. Shoshitaishvili, C. Kruegel, G. Vigna
CNS 2020-IEEE Conference on Communications and Network Security (CNS) (IEEE CNS 2020)

TRUST.IO - Protecting Physical Interfaces on Cyber-physical Systems.
C. Spensky, Aravind Machiry , M. Busch, K. Leach, R. Housley, C. Kruegel, G. Vigna
CNS 2020-IEEE Conference on Communications and Network Security (CNS) (IEEE CNS 2020)

SPIDER - Enabling Fast Patch Propagation in Related Software Repositories.
Aravind Machiry, N. Redini, E. Camellini, C. Kruegel and G.Vigna.
S&P 2020- 41st IEEE Symposium on Security and Privacy.

KARONTE - Detecting Insecure Multi-binary Interactions in Embedded Firmware.
N. Redini, Aravind Machiry, R. Wang, C. Spensky, A. Continella, Y. Shoshitaishvili, C. Kruegel and G.Vigna.
S&P 2020- 41st IEEE Symposium on Security and Privacy.

(POSTER) Automated conversion of legacy code to Checked C.
Aravind Machiry, H. Touma, R. Chen, M. Hicks.
SecDev 2019- IEEE Secure Development Conference.

Toward the Analysis of Embedded Firmware through Automated Re-hosting.
E. Gustafson, M. Muench, C. Spensky, N. Redini, Aravind Machiry , Y. Fratantonio, D. Balzarotti, A. Francillon, Y. E. Choe, C. Kruegel, G. Vigna.
RAID 2019- 22nd International Symposium on Research in Attacks, Intrusions and Defenses.

BinTrimmer - Towards Static Binary Debloating Through Abstract Interpretation.
N. Redini, R. Wang, Aravind Machiry, Y. Shoshitaishvili, C. Kruegel and G. Vigna.
DIMVA 2019- 16th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment.

Automatically Generating a Sound and Complete Dataset for Evaluating Static Analysis Tools.
Aravind Machiry, N. Redini, E. Gustafson, H. Aghakhani, C. Kruegel and G. Vigna.
BAR 2019- 2nd Binary Analysis Research Workshop.

Using Loops For Malware Classification Resilient to Feature-unaware Perturbations.
Aravind Machiry, N. Redini, E. Gustafson, Y. Fratantonio, Y. E. Choe, C. Kruegel and G. Vigna.
ACSAC 2018 - 34th Annual Application Security Application Conference 2018.

Detecting Deceptive Reviews using Generative Adversarial Networks.
H. Aghakhani, Aravind Machiry, S. Nilizadeh, C. Kruegel and G. Vigna.
IEEE S&P DLS Workshop 2018 - 1st Deep Learning and Security Workshop, IEEE Security and Privacy.

Broken Fingers - On the Usage of the Fingerprint API in Android.
A. Bianchi, Y. Fratantonio, Aravind Machiry, C. Kruegel, G. Vigna, S. Chung, W. Lee.
NDSS 2018 - Proceedings of the ISOC Network and Distributed System Security Symposium.

BootStomp - On the Security of Bootloaders in Mobile Devices.
N. Redini, Aravind Machiry, D. Das, Y. Fratantonio, A. Bianchi, E. Gustafson, Y. Shoshitaishvili, C. Kruegel, G. Vigna.
34C3 - Chaos Communication Congress 2017.

DIFUZE - Interface Aware Fuzzing for Kernel Drivers.
J. Corina, Aravind Machiry, C. Salls, Y. Shoshitaishvili, S. Hao, C. Kruegel, and G. Vigna.
CCS 2017 - Proceedings of the 24th ACM Conference on Computer and Communications Security.

DR.CHECKER - A Soundy Analysis for Linux Kernel Drivers.
Aravind Machiry, C. Spensky, J. Corina, N. Stephens, C. Kruegel, G. Vigna.
USENIX Security 2017 - Proceedings of the 26th USENIX Security Symposium.

BootStomp - On the Security of Bootloaders in Mobile Devices.
N. Redini, Aravind Machiry, D. Das, Y. Fratantonio, A. Bianchi, E. Gustafson, Y. Shoshitaishvili, C. Kruegel, G. Vigna.
USENIX Security 2017 - Proceedings of the 26th USENIX Security Symposium.

BOOMERANG - Exploiting the Semantic Gap in Trusted Execution Environments.
Aravind Machiry, E. Gustafson, C. Spensky, C. Salls, N. D. Stephens, R. Wang, A. Bianchi, Y. E. Choe, C. Kruegel, G. Vigna.
NDSS 2017 - Proceedings of the ISOC Network and Distributed System Security Symposium.

Ramblr - Making Reassembly Great Again.
R. Wang, Y. Shoshitaishvili, A. Bianchi, Aravind Machiry, J. Grosen, P. Grosen, C. Kruegel, G. Vigna.
NDSS 2017 - Proceedings of the ISOC Network and Distributed System Security Symposium.

Cyber Grand Shellphish.
A. Bianchi, K. Borgolte, J. Corbetta, F. Disperati, A. Dutcher, J. Grosen, P. Grosen, Aravind Machiry, C. Salls, N. Stephens, G. Vigna, R. Wang (Authors listed alphabetically) .
PHRACK

CLAPP - Characterizing Loops in Android Applications.
Y. Fratantonio, Aravind Machiry, A. Bianchi, C. Kruegel, G. Vigna.
FSE 2015 - ACM Symposium on Foundations of Software Engineering.

CLAPP - Characterizing Loops in Android Applications (Invited Talk)
Y. Fratantonio, Aravind Machiry, A. Bianchi, C. Kruegel, G. Vigna.
DeMobile 2015 - Proceedings of the International Workshop on Software Development Lifecycle for Mobile.

Dynodroid - An Input Generation System for Android Apps.
Aravind Machiry, Rohan Tahiliani, Mayur Naik.
FSE 2013 - ACM Symposium on Foundations of Software Engineering.