Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Alexander Bulekov

dblp:294/4488 · DBLP profile ↗
← Back
5ranked-venue papers
4as first author
5since 2021 · last 2024
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 5 · 4 first-author · 5 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
4 papers
Systems and software security · 100%
Computer architecture, parallel and distributed computing, and storage systems
2 papers
Cloud and datacenter computing · 100%
Software engineering, system software, and programming languages
2 papers
Operating systems · 100%

Topics — the 8 heaviest of 8, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security › vulnerability discovery
fuzzing
2.032024
HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface · USENIX Security Symposium 2024
No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions · NDSS 2023
Morphuzz: Bending (Input) Space to Fuzz Virtual Devices · USENIX Security Symposium 2022
Systems and software security
vulnerability discovery
2.032024
HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface · USENIX Security Symposium 2024
No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions · NDSS 2023
Morphuzz: Bending (Input) Space to Fuzz Virtual Devices · USENIX Security Symposium 2022
Systems and software security › vulnerability discovery › fuzzing
kernel fuzzing
0.712023
No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions · NDSS 2023
Systems and software security › operating system security
sandboxing
0.512021
Saphire: Sandboxing PHP Applications with Tailored System Call Allowlists · USENIX Security Symposium 2021
Cloud and datacenter computing
virtualization
0.422024
HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface · USENIX Security Symposium 2024
Morphuzz: Bending (Input) Space to Fuzz Virtual Devices · USENIX Security Symposium 2022
Cloud and datacenter computing › virtualization › virtualization security
hypervisor security
0.212024
HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface · USENIX Security Symposium 2024
Operating systems › kernel
linux kernel
0.212023
No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions · NDSS 2023
Operating systems › system security › operating system security
system call filtering
0.112021
Saphire: Sandboxing PHP Applications with Tailored System Call Allowlists · USENIX Security Symposium 2021

Methods — techniques the papers use, named apart from their topics

fuzzing · 1.3
YearPublicationVenuePosition
2024 HYPERPILL: Fuzzing for Hypervisor-bugs by leveraging the Hardware Virtualization Interface
Alexander Bulekov, Qiang Liu 0034, Manuel Egele, Mathias Payer
USENIX Security Symposium1
2023 No Grammar, No Problem: Towards Fuzzing the Linux Kernel without System-Call Descriptions
Alexander Bulekov, Bandan Das, Stefan Hajnoczi, Manuel Egele
NDSS1
2022 Morphuzz: Bending (Input) Space to Fuzz Virtual Devices
Alexander Bulekov, Bandan Das, Stefan Hajnoczi, Manuel Egele
USENIX Security Symposium1
2021 SoK: Enabling Security Analyses of Embedded Systems via Rehosting
abstract
Closely monitoring the behavior of a software system during its execution enables developers and analysts to observe, and ultimately understand, how it works. This kind of dynamic analysis can be instrumental to reverse engineering, vulnerability discovery, exploit development, and debugging. While these analyses are typically well-supported for homogeneous desktop platforms (e.g., x86 desktop PCs), they can rarely be applied in the heterogeneous world of embedded systems. One approach to enable dynamic analyses of embedded systems is to move software stacks from physical systems into virtual environments that sufficiently model hardware behavior. This process which we call "rehosting" poses a significant research challenge with major implications for security analyses. Although rehosting has traditionally been an unscientific and ad-hoc endeavor undertaken by domain experts with varying time and resources at their disposal, researchers are beginning to address rehosting challenges systematically and in earnest. In this paper, we establish that emulation is insufficient to conduct large-scale dynamic analysis of real-world hardware systems and present rehosting as a firmware-centric alternative. Furthermore, we taxonomize preliminary rehosting efforts, identify the fundamental components of the rehosting process, and propose directions for future research.
Andrew Fasano, Tiemoko Ballo, Marius Muench, Tim Leek, Alexander Bulekov, Brendan Dolan-Gavitt, Manuel Egele, Aurélien Francillon, Long Lu, Nick Gregory, Davide Balzarotti, William K. Robertson
AsiaCCS5
2021 Saphire: Sandboxing PHP Applications with Tailored System Call Allowlists
Alexander Bulekov, Rasoul Jahanshahi, Manuel Egele
USENIX Security Symposium1