Publications

@inproceedings{leonelli2025twinfuzzb,

title = {TWINFUZZ: Differential Testing of Video Hardware Acceleration Stacks},

author = {Matteo Leonelli and Addison Crump and Meng Wang and Florian Bauckholt and Keno Hassler and Ali Abbasi and Thorsten Holz},

year  = {2025},

date = {2025-01-01},

booktitle = {Network and Distributed System Security Symposium (NDSS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{leonelli2025twinfuzz,

title = {A Comprehensive Memory Safety Analysis of Bootloaders},

author = {Jianqiang Wang and Meng Wang and Qinying Wang and Nils Langius and Li Shi and Ali Abbasi and Thorsten Holz},

year  = {2025},

date = {2025-01-01},

booktitle = {Network and Distributed System Security Symposium (NDSS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{planta2024let,

title = {Let Me Do It For You: On the Feasibility of Inter-Satellite Friendly Jamming},

author = {Ulysse Planta and Julian Rederlechner and Gabriele Marra and Ali Abbasi},

year  = {2024},

date = {2024-01-01},

booktitle = {2024 Security for Space Systems (3S)},

pages = {1–6},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{marra2024feasibility,

title = {On the Feasibility of CubeSats Application Sandboxing for Space Missions},

author = {Gabriele Marra and Ulysse Planta and Philipp Wüstenberg and Ali Abbasi},

year  = {2024},

date = {2024-01-01},

booktitle = {2nd Workshop on the Security of Space and Satellite Systems at NDSS},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{lopez2024sok,

title = {SoK: Security of Programmable Logic Controllers},

author = {Efrén López-Morales and Ulysse Planta and Carlos Rubio-Medrano and Ali Abbasi and Alvaro A Cardenas},

year  = {2024},

date = {2024-01-01},

booktitle = {33rd USENIX Security Symposium (USENIX Security 24)},

pages = {7103–7122},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{willbold2023space,

title = {Space odyssey: An experimental software security analysis of satellites},

author = {Johannes Willbold and Moritz Schloegel and Manuel Vögele and Maximilian Gerhardt and Thorsten Holz and Ali Abbasi},

year  = {2023},

date = {2023-01-01},

urldate = {2023-01-01},

booktitle = {2023 IEEE Symposium on Security and Privacy (S&P)},

pages = {1–19},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{scharnowski2022fuzzware,

title = {Fuzzware: Using precise MMIO modeling for effective firmware fuzzing},

author = {Tobias Scharnowski and Nils Bars and Moritz Schloegel and Eric Gustafson and Marius Muench and Giovanni Vigna and Christopher Kruegel and Thorsten Holz and Ali Abbasi},

year  = {2022},

date = {2022-01-01},

urldate = {2022-01-01},

booktitle = {31st USENIX Security Symposium (USENIX Security 22)},

pages = {1239–1256},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{schumilo2022nyx,

title = {Nyx-net: network fuzzing with incremental snapshots},

author = {Sergej Schumilo and Cornelius Aschermann and Andrea Jemmett and Ali Abbasi and Thorsten Holz},

year  = {2022},

date = {2022-01-01},

booktitle = {Proceedings of the Seventeenth European Conference on Computer Systems},

pages = {166–180},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{schloegel2022loki,

title = {Loki: Hardening code obfuscation against automated attacks},

author = {Moritz Schloegel and Tim Blazytko and Moritz Contag and Cornelius Aschermann and Julius Basler and Thorsten Holz and Ali Abbasi},

year  = {2022},

date = {2022-01-01},

booktitle = {31st USENIX Security Symposium (USENIX Security 22)},

pages = {3055–3073},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{schumilo2021nyx,

title = {Nyx: Greybox hypervisor fuzzing using fast snapshots and affine types},

author = {Sergej Schumilo and Cornelius Aschermann and Ali Abbasi and Simon Wörner and Thorsten Holz},

year  = {2021},

date = {2021-01-01},

booktitle = {30th USENIX Security Symposium (USENIX Security 21)},

pages = {2597–2614},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{schumilo2020hyper,

title = {HYPER-CUBE: High-Dimensional Hypervisor Fuzzing},

author = {Sergej Schumilo and Cornelius Aschermann and Ali Abbasi and Simon Wörner and Thorsten Holz},

year  = {2020},

date = {2020-01-01},

booktitle = {Network and Distributed System Security Symposium (NDSS)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{blazytko2020aurora,

title = {AURORA: Statistical Crash Analysis for Automated Root Cause Explanation},

author = {Tim Blazytko and Moritz Schlögel and Cornelius Aschermann and Ali Abbasi and Joel Frank and Simon Wörner and Thorsten Holz},

year  = {2020},

date = {2020-01-01},

booktitle = {29th USENIX Security Symposium},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{aschermann2020ijon,

title = {IJON: Exploring Deep State Spaces via Fuzzing},

author = {Cornelius Aschermann and Sergej Schumilo and Ali Abbasi and Thorsten Holz},

year  = {2020},

date = {2020-01-01},

booktitle = {IEEE Symposium on Security and Privacy (Oakland)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{guler2019antifuzz,

title = {ANTIFUZZ: impeding fuzzing audits of binary executables},

author = {Emre Güler and Cornelius Aschermann and Ali Abbasi and Thorsten Holz},

year  = {2019},

date = {2019-01-01},

booktitle = {28th USENIX Security Symposium (USENIX Security 19)},

pages = {1931–1947},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{blazytko2019grimoire,

title = {GRIMOIRE: Synthesizing Structure while Fuzzing},

author = {Tim Blazytko and Matt Bishop and Cornelius Aschermann and Justin Cappos and Moritz Schlögel and Nadia Korshun and Ali Abbasi and Marco Schweighauser and Sebastian Schinzel and Sergej Schumilo and others},

year  = {2019},

date = {2019-01-01},

booktitle = {28th USENIX Security Symposium (USENIX Security 19)},

pages = {1985–2002},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2019challenges,

title = {Challenges in designing exploit mitigations for deeply embedded systems},

author = {Ali Abbasi and Jos Wetzels and Thorsten Holz and Sandro Etalle},

year  = {2019},

date = {2019-01-01},

booktitle = {2019 IEEE European Symposium on Security and Privacy (EuroS&P)},

pages = {31–46},

organization = {IEEE},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2019doors,

title = {Doors of Durin: the Veiled Gate to Siemens S7 Silicon},

author = {Ali Abbasi and Tobias Scharnowski},

year  = {2019},

date = {2019-01-01},

booktitle = {Black Hat Europe},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{wetzels2018dissecting,

title = {Dissecting QNX},

author = {Jos Wetzels and Ali Abbasi},

year  = {2018},

date = {2018-01-01},

booktitle = {Proc. Blackhat Briefings},

pages = {1–22},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{green2017significance,

title = {On the significance of process comprehension for conducting targeted ICS attacks},

author = {Benjamin Green and Marina Krotofil and Ali Abbasi},

year  = {2017},

date = {2017-01-01},

booktitle = {Proceedings of the 2017 Workshop on Cyber-Physical Systems Security and PrivaCy},

pages = {57–67},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2017shield,

title = {Shield: Configurable Code-Reuse Attacks Mitigation For Embedded Systems},

author = {Ali Abbasi and Jos Wetzels and Wouter Bokslag and Emmanuele Zambon and Sandro Etalle},

year  = {2017},

date = {2017-01-01},

booktitle = {International Conference on Network and System Security},

pages = {694–709},

organization = {Springer International Publishing Cham},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2017ecfi,

title = {ECFI: Asynchronous control flow integrity for programmable logic controllers},

author = {Ali Abbasi and Thorsten Holz and Emmanuele Zambon and Sandro Etalle},

year  = {2017},

date = {2017-01-01},

booktitle = {Proceedings of the 33rd Annual Computer Security Applications Conference},

pages = {437–448},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2017stealth,

title = {Stealth low-level manipulation of programmable logic controllers i/o by pin control exploitation},

author = {Ali Abbasi and Majid Hashemi and Emmanuele Zambon and Sandro Etalle},

year  = {2017},

date = {2017-01-01},

booktitle = {Critical Information Infrastructures Security: 11th International Conference, CRITIS 2016, Paris, France, October 10–12, 2016, Revised Selected Papers 11},

pages = {1–12},

organization = {Springer International Publishing},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2014emulation,

title = {On emulation-based network intrusion detection systems},

author = {Ali Abbasi and Jos Wetzels and Wouter Bokslag and Emmanuele Zambon and Sandro Etalle},

year  = {2014},

date = {2014-01-01},

booktitle = {International Conference on Recent Advances in Intrusion Detection},

pages = {384–404},

organization = {Springer, Cham},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{abbasi2014apts,

title = {APTs way: evading Your EBNIDS},

author = {Ali Abbasi and Jos Wetzel},

year  = {2014},

date = {2014-01-01},

booktitle = {Black Hat Europe},

pages = {1–87},

organization = {Black Hat},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{beresford2013project,

title = {Project IRUS: multifaceted approach to attacking and defending ICS},

author = {Dilloni Beresford and Ali Beresford Abbasi},

year  = {2013},

date = {2013-01-01},

booktitle = {SCADA Security Scientific Symposium (S4)},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}

@inproceedings{jafarian2011gray,

title = {A gray-box DPDA-based intrusion detection technique using system-call monitoring},

author = {Jafar Haadi Jafarian and Ali Abbasi and Siavash Safaei Sheikhabadi},

year  = {2011},

date = {2011-01-01},

booktitle = {Proceedings of the 8th Annual Collaboration, Electronic messaging, Anti-Abuse and Spam Conference},

pages = {1–12},

keywords = {},

pubstate = {published},

tppubtype = {inproceedings}

}