Tiffany Bao

Venues

Frequent coauthors

Papers

1. Discovering Blind-Trust Vulnerabilities in PLC Binaries via State Machine RecoveryBibTeX ⧉
   NDSS 2026 ·

   Fangzhou Dong

   ,

   Arvind S. Raj

   ,

   Efrén López-Morales

   ,

   Siyu Liu

   ,

   Yan Shoshitaishvili

   , Tiffany Bao,

   Adam Doupé

   ,

   Muslum Ozgur Ozmen

   ,

   Ruoyu Wang
2. I Can SE Clearly Now: Investigating the Effectiveness of GUI-based Symbolic Execution for Software Vulnerability DiscoveryBibTeX ⧉
   CHI 2026 ·

   Yi Jou Li

   ,

   Zeming Yu

   ,

   James Mattei

   ,

   Ananta Soneji

   ,

   Zhibo Sun

   ,

   Ruoyu Wang

   ,

   Jaron Mink

   ,

   Daniel Votipka

   , Tiffany Bao
3. Oxidizer: Toward Concise and High-fidelity Rust DecompilationBibTeX ⧉
   S&P 2026 ·

   Yibo Liu

   ,

   Zion Leonahenahe Basque

   ,

   Arvind S. Raj

   ,

   Chavin Udomwongsa

   ,

   Chang Zhu

   ,

   Jie Hu

   ,

   Changyu Zhao

   ,

   Fangzhou Dong

   ,

   Adam Doupé

   , Tiffany Bao,

   Yan Shoshitaishvili

   ,

   Ruoyu Wang
4. Responsible Disclosure is a Two-Way Street: Empirically Measuring the Responsible Disclosure Contract in the Firmware EcosystemBibTeX ⧉
   S&P 2026 ·

   Hui Jun Tay

   ,

   Souradip Nath

   ,

   Arvind S. Raj

   ,

   Abhay Bhat

   ,

   Ishan Bansal

   ,

   Audrey Dutcher

   ,

   Moritz Schloegel

   ,

   Adam Doupé

   , Tiffany Bao,

   Yan Shoshitaishvili

   ,

   Ruoyu Wang
5. ropbot: Reimaging Code Reuse Attack SynthesisBibTeX ⧉
   NDSS 2026 ·

   Kyle Zeng

   ,

   Moritz Schloegel

   ,

   Christopher Salls

   ,

   Adam Doupé

   ,

   Ruoyu Wang

   ,

   Yan Shoshitaishvili

   , Tiffany Bao
6. "It's almost like Frankenstein": Investigating the Complexities of Scientific Collaboration and Privilege Management within Research Computing InfrastructuresBibTeX ⧉
   S&P 2025 ·

   Souradip Nath

   ,

   Ananta Soneji

   ,

   Jaejong Baek

   , Tiffany Bao,

   Adam Doupé

   ,

   Carlos E. Rubio-Medrano

   ,

   Gail-Joon Ahn
7. SCAMMAGNIFIER: Piercing the Veil of Fraudulent Shopping Website CampaignsBibTeX ⧉
   NDSS 2025 ·

   Marzieh Bitaab

   ,

   Alireza Karimi

   ,

   Zhuoer Lyu

   ,

   Adam Oest

   ,

   Dhruv Kuchhal

   ,

   Muhammad Saad

   ,

   Gail-Joon Ahn

   ,

   Ruoyu Wang

   , Tiffany Bao,

   Yan Shoshitaishvili

   ,

   Adam Doupé
8. ScamNet: Toward Explainable Large Language Model-Based Fraudulent Shopping Website DetectionBibTeX ⧉
   AAAI 2025 ·

   Marzieh Bitaab

   ,

   Alireza Karimi

   ,

   Zhuoer Lyu

   ,

   Ahmadreza Mosallanezhad

   ,

   Adam Oest

   ,

   Ruoyu Wang

   , Tiffany Bao,

   Yan Shoshitaishvili

   ,

   Adam Doupé
9. System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the SystemBibTeX ⧉
   USENIX Security 2025 ·

   Jennifer Miller

   ,

   Manas Ghandat

   ,

   Kyle Zeng

   ,

   Hongkai Chen

   ,

   Abdelouahab Benchikh

   , Tiffany Bao,

   Ruoyu Wang

   ,

   Adam Doupé

   ,

   Yan Shoshitaishvili
10. Teamwork Makes the Defense Work: Comprehensive Vulnerability Defense Resource AllocationBibTeX ⧉
    AAMAS 2025 ·

    Siyu Liu

    ,

    Rida A. Bazzi

    ,

    Fei Fang

    , Tiffany Bao
11. "Watching over the shoulder of a professional": Why Hackers Make Mistakes and How They Fix ThemBibTeX ⧉
    S&P 2024 ·

    Irina Ford

    ,

    Ananta Soneji

    ,

    Faris Bugra Kokulu

    ,

    Jayakrishna Vadayath

    ,

    Zion Leonahenahe Basque

    ,

    Gaurav Vipat

    ,

    Adam Doupé

    ,

    Ruoyu Wang

    ,

    Gail-Joon Ahn

    , Tiffany Bao,

    Yan Shoshitaishvili
12. Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary DecompilationBibTeX ⧉
    USENIX Security 2024 ·

    Zion Leonahenahe Basque

    ,

    Ati Priya Bajaj

    ,

    Wil Gibbs

    ,

    Jude O'Kain

    ,

    Derron Miao

    , Tiffany Bao,

    Adam Doupé

    ,

    Yan Shoshitaishvili

    ,

    Ruoyu Wang
13. AirTaint: Making Dynamic Taint Analysis Faster and EasierBibTeX ⧉
    S&P 2024 ·

    Qian Sang

    ,

    Yanhao Wang

    ,

    Yuwei Liu

    ,

    Xiangkun Jia

    , Tiffany Bao,

    Purui Su
14. Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and IndustryBibTeX ⧉
    AsiaCCS 2024 ·

    Rana Pourmohamad

    ,

    Steven Wirsz

    ,

    Adam Oest

    , Tiffany Bao,

    Yan Shoshitaishvili

    ,

    Ruoyu Wang

    ,

    Adam Doupé

    ,

    Rida A. Bazzi
15. From Victims to Defenders: An Exploration of the Phishing Attack Reporting EcosystemBibTeX ⧉
    RAID 2024 ·

    Zhibo Sun

    ,

    Faris Bugra Kokulu

    ,

    Penghui Zhang

    ,

    Adam Oest

    ,

    Gianluca Stringhini

    , Tiffany Bao,

    Ruoyu Wang

    ,

    Yan Shoshitaishvili

    ,

    Adam Doupé

    ,

    Gail-Joon Ahn
16. Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust FuzzingBibTeX ⧉
    CCS 2024 ·

    Arvind S. Raj

    ,

    Wil Gibbs

    ,

    Fangzhou Dong

    ,

    Jayakrishna Menon Vadayath

    ,

    Michael Tompkins

    ,

    Steven Wirsz

    ,

    Yibo Liu

    ,

    Zhenghao Hu

    ,

    Chang Zhu

    ,

    Gokulkrishna Praveen Menon

    ,

    Brendan Dolan-Gavitt

    ,

    Adam Doupé

    ,

    Ruoyu Wang

    ,

    Yan Shoshitaishvili

    , Tiffany Bao
17. TYGR: Type Inference on Stripped Binaries using Graph Neural NetworksBibTeX ⧉
    USENIX Security 2024 ·

    Chang Zhu

    ,

    Ziyang Li

    ,

    Anton Xue

    ,

    Ati Priya Bajaj

    ,

    Wil Gibbs

    ,

    Yibo Liu

    ,

    Rajeev Alur

    , Tiffany Bao,

    Hanjun Dai

    ,

    Adam Doupé

    ,

    Mayur Naik

    ,

    Yan Shoshitaishvili

    ,

    Ruoyu Wang

    ,

    Aravind Machiry
18. Take a Step Further: Understanding Page Spray in Linux Kernel ExploitationBibTeX ⧉
    USENIX Security 2024 ·

    Ziyi Guo

    ,

    Dang K. Le

    ,

    Zhenpeng Lin

    ,

    Kyle Zeng

    ,

    Ruoyu Wang

    , Tiffany Bao,

    Yan Shoshitaishvili

    ,

    Adam Doupé

    ,

    Xinyu Xing