Publications

(2024). Cross-Origin Web Attacks via HTTP/2 Server Push and Signed HTTP Exchange. NDSS'25.

to be appeared

(2024). Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors. CCS'24.

to be appeared

(2023). Break the Wall from bottom: Automated Discovery of Protocol-Level Evasion Vulnerabilities in Web Application Firewalls. S&P'24.

PDF 引用