Soheil Khodayari

CHARON: Polyglot Code Analysis for Detecting Vulnerabilities in Scripting Languages Native Extensions
Do (Not) Follow the White Rabbit: Challenging the Myth of Harmless Open Redirection
Exploration of the Dynamics of Buy and Sale of Social Media Accounts
Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design Patterns
YuraScanner: Leveraging LLMs for Task-driven Web App Scanning
Exploration of the Dynamics of Buy and Sale of Social Media Accounts
The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web
It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses
The State of the SameSite: Studying the Usage, Effectiveness, and Adequacy of SameSite Cookies
JAW: Studying Client-side CSRF with Hybrid Property Graphs and Declarative Traversals
Where We Stand (or Fall): An Analysis of CSRF Defenses in Web Frameworks