Publications

Silent Bugs Matter: A Study of Compiler-Introduced Security Bugs
WarpAttack: Bypassing CFI with Compiler-Introduced double-fetch
POMP++: Facilitating Postmortem Program Diagnosis with Value-set Analysis