Publications

1. CloudFence: Data Flow Tracking as a Cloud Service

   Vasilis Pappas, Vasileios P. Kemerlis, Angeliki Zavou, Michalis Polychronakis, and Angelos D. Keromytis.
   To appear in Proceedings of the 16th International Symposium on Research in Attacks, Intrusions and Defenses (RAID). October 2013, Saint Lucia.

2. CellFlood: Attacking Tor Onion Routers on the Cheap

   Marco V. Barbera, Vasileios P. Kemerlis, Vasilis Pappas, and Angelos D. Keromytis.
   To appear in Proceedings of the 18th European Symposium on Research in Computer Security (ESORICS). September 2013, Egham, UK.

3. Transparent ROP Exploit Mitigation using Indirect Branch Tracing

   Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis.
   To appear in Proceedings of the 22nd USENIX Security Symposium. August 2013, Washington, DC.

4. Cloudopsy: an Autopsy of Data Flows in the Cloud

   Angeliki Zavou, Vasilis Pappas, Vasileios P. Kemerlis, Michalis Polychronakis, Georgios Portokalidis, and Angelos D. Keromytis.
   To appear in Proceedings of the 15th International Conference on Human-Computer Interaction (HCI). July 2013, Las Vegas, NV.

5. Towards a Universal Data Provenance Framework using Dynamic Instrumentation

   Eleni Gessiou, Vasilis Pappas, Elias Athanasopoulos, Angelos D. Keromytis, and Sotiris Ioannidis.
   In Proceedings of the 27th IFIP International Information Security and Privacy Conference (SEC). June 2012, Heraklion, Crete, Greece.

6. Smashing the Gadgets: Hindering Return-Oriented Programming Using In-Place Code Randomization

   Vasilis Pappas, Michalis Polychronakis, and Angelos D. Keromytis.
   In Proceedings of the 33rd IEEE Symposium on Security & Privacy (S&P). May 2012, San Francisco, CA.

7. Private Search in the Real World

   Vasilis Pappas, Mariana Raykova, Binh Vo, Steven M. Bellovin, and Tal Malkin.
   In proceedings of the 27th Annual Computer Security Applications Conference (ACSAC). December 2011, Orlando, Florida.

8. Measuring the Deployment Hiccups of DNSSEC

   Vasilis Pappas and Angelos D. Keromytis.
   In Proceedings of the International Conference on Advances in Computing and Communications (ACC). July 2011, Kochi, India.

9. Evaluation of a Spyware Detection System using Thin Client Computing

   Vasilis Pappas, Brian M. Bowen, and Angelos D. Keromytis.
   In Proceedings of the 13th International Conference on Information Security and Cryptology (ICISC). December 2010, Seoul, Korea.

10. Crimeware Swindling without Virtual Machines

    Vasilis Pappas, Brian M. Bowen, and Angelos D. Keromytis.
    In Proceedings of the 13th Information Security Conference (ISC). October 2010, Boca Raton, FL.

11. iLeak: A Lightweight System for Detecting Inadvertent Information Leaks

    Vasileios P. Kemerlis, Vasilis Pappas, Georgios Portokalidis, and Angelos D. Keromytis.
    In Proceedings of the 6th European Conference on Computer Network Defense (EC2ND), October 2010, Berlin, Germany.

12. xJS: Practical XSS Prevention for Web Application Development

    Elias Athanasopoulos, Vasilis Pappas, Antonis Krithinakis, Spyros Ligouras, Evangelos P. Markatos, Thomas Karagiannis.
    In Proceedings of the USENIX Conference on Web Application Development (WebApps), June 2010, Boston, MA.

13. Code-Injection Attacks in Browsers Supporting Policies

    Elias Athanasopoulos, Vasilis Pappas, and Evangelos P. Markatos.
    In Proceedings of the Third Workshop on Web 2.0 Security & Privacy (W2SP). May 2009, Oakland, CA.

14. Compromising Anonymity Using Packet Spinning

    Vasilis Pappas, Elias Athanasopoulos, Sotiris Ioannidis, and Evangelos P. Markatos.
    In Proceedings of the 11th Information Security Conference (ISC). September 2008, Taipei, Taiwan.