# adamdoupe.com — llms.txt

> Adam Doupé is an Associate Professor at the School of Computing and Augmented Intelligence at Arizona State University, Director of the Center for Cybersecurity and Trusted Foundations, and co-Director of the Laboratory of Security Engineering For Future Computing (SEFCOM).

This site supports content negotiation via the `Accept: text/markdown` header. AI agents can request any page with `Accept: text/markdown` to receive a clean markdown version instead of HTML.

## Markdown-available pages

- [Homepage](https://adamdoupe.com/)
- [Publications](https://adamdoupe.com/publications/)
- [Teaching](https://adamdoupe.com/teaching/)
- [Research](https://adamdoupe.com/research/)
- [Service](https://adamdoupe.com/service/)
- [Media](https://adamdoupe.com/media/)

## Class pages

- [CSE 365 - Introduction to Information Assurance (Spring 2020)](https://adamdoupe.com/teaching/classes/cse365-intro-information-assurance-s20/)
- [CSE 365 - Introduction to Information Assurance (Fall 2019)](https://adamdoupe.com/teaching/classes/cse365-information-assurance-f19/)
- [CSE 365 - Introduction to Information Assurance (Fall 2018)](https://adamdoupe.com/teaching/classes/cse365-information-assurance-f18/)
- [CSE 691 - Current Topics in Cybersecurity (Spring 2022)](https://adamdoupe.com/teaching/classes/cse691-current-topics-in-cybersecurity-s22/)
- [CSE 545 - Software Security (Spring 2018)](https://adamdoupe.com/teaching/classes/cse545-software-security-s18/)
- [CSE 545 - Software Security (Spring 2017)](https://adamdoupe.com/teaching/classes/cse545-software-security-s17/)
- [CSE 545 - Software Security (Spring 2016)](https://adamdoupe.com/teaching/classes/cse545-software-security-s16/)
- [CSE 465 - Introduction to Information Assurance (Fall 2017)](https://adamdoupe.com/teaching/classes/cse465-information-assurance-f17/)
- [CSE 340 - Principles of Programming Languages (Fall 2016)](https://adamdoupe.com/teaching/classes/cse340-principles-of-programming-languages-f16/)
- [CSE 340 - Principles of Programming Languages (Spring 2016)](https://adamdoupe.com/teaching/classes/cse340-principles-of-programming-languages-s16/)
- [CSE 340 - Principles of Programming Languages (Fall 2015)](https://adamdoupe.com/teaching/classes/cse340-principles-of-programming-languages-f15/)
- [CSE 591 - Security and Vulnerability Analysis (Spring 2015)](https://adamdoupe.com/teaching/classes/cse591-security-and-vulnerability-analysis-s15/)

## Blog posts

- [CVE-2023-23504: XNU Heap Underwrite in dlil.c](https://adamdoupe.com/blog/2023/01/23/cve-2023-23504-xnu-heap-underwrite-in-dlil-dot-c/)
- [CVE-2022-42845: 20-Year-Old XNU Use After Free Vulnerability in ndrv.c](https://adamdoupe.com/blog/2022/12/13/cve-2022-42845-xnu-use-after-free-vulnerability-in-ndrv-dot-c/)
- [Tokyo Western MMA 2016 Walkthrough: Judgement](https://adamdoupe.com/blog/2016/10/07/tokyo-western-mma-2016-walkthrough-judgement/)
- [Talk: A Computer in Every Pocket: Securing Mobile Applications](https://adamdoupe.com/blog/2016/09/09/talk-a-computer-in-every-pocket-securing-mobile-applications/)
- [OWASP Phoenix Talk on Black-Box Web Vulnerability Scanners](https://adamdoupe.com/blog/2016/06/30/owasp-phoenix-talk-on-black-box-web-vulnerability-scanners/)
- [Guest Lecture on Cross-Site Scripting for CSE 466](https://adamdoupe.com/blog/2015/11/18/guest-lecture-on-cross-site-scripting-for-cse-466/)
- [Stored XSS in Popular DOTS Mobile Game](https://adamdoupe.com/blog/2013/09/26/found-stored-xss-in-popular-dots-game/)
- [Agile in the Computer Science Classroom](https://adamdoupe.com/blog/2013/09/10/agile-in-the-cs-classroom/)
- [deDacota: Toward Preventing Server-Side XSS via Automatic Code and Data Separation](https://adamdoupe.com/blog/2013/09/05/dedacota-toward-preventing-server-side-xss-via-automatic-code-and-data-separation/)
- [Back That Data Up: A Cautionary Tale](https://adamdoupe.com/blog/2013/09/02/back-that-data-up-a-cautionary-tale/)
- [Simple Bash Function: SSH and Keep Same Directory](https://adamdoupe.com/blog/2013/07/16/ssh-to-server-in-same-directory/)
- [picoCTF Preparations](https://adamdoupe.com/blog/2013/04/10/picoctf-preparations/)
- [Some Classic Literature Recommendations](https://adamdoupe.com/blog/2013/04/03/some-classic-literature-recommendations/)
- [Overview of Execution After Redirect Web Application Vulnerabilities](https://adamdoupe.com/blog/2011/04/20/overview-of-execution-after-redirect-web-application-vulnerabilities/)
- [Paper Review: Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications.](https://adamdoupe.com/blog/2011/01/27/paper-review-saner-composing-static-and-dynamic-analysis-to-validate-sanitization-in-web-applications/)
- [Compiling Jpcap on 64-bit Ubuntu 10.10](https://adamdoupe.com/blog/2010/10/28/compiling-jpcap-on-64-bit-ubuntu-10-dot-10/)
- [Redirecting a Folder to HTTPS with Apache's Config on Ubuntu](https://adamdoupe.com/blog/2010/10/27/redirecting-a-folder-to-https-with-apaches-config-on-ubuntu/)
- [Configuring Linux Bridge to Act as a Hub](https://adamdoupe.com/blog/2010/10/22/configuring-linux-bridge-to-act-as-a-hub/)
- [Another fire in the Santa Barbara hills!](https://adamdoupe.com/blog/2009/05/05/another-fire-in-the-santa-barbara-hills/)
- [Two chicks at the same time.](https://adamdoupe.com/blog/2009/04/10/two-chicks-at-the-same-time/)
- [Enabling Total DNS on GoDaddy](https://adamdoupe.com/blog/2009/04/07/enabling-total-dns-on-godaddy/)
- [Doing research.](https://adamdoupe.com/blog/2009/04/03/doing-research/)

## Publications (PDFs)

Requesting any publication PDF URL with `Accept: text/markdown` will return a markdown version of the paper (when available).

- [Oxidizer: Toward Concise and High-fidelity Rust Decompilation](https://adamdoupe.com/publications/oxidizer-oakland2026.pdf)
- [Responsible Disclosure is a Two-Way Street: Empirically Measuring the Responsible Disclosure Contract in the Firmware Ecosystem](https://adamdoupe.com/publications/firmware-responsible-disclosure-oakland2026.pdf)
- [Decompiling the Synergy: An Empirical Study of Human–LLM Teaming in Software Reverse Engineering](https://adamdoupe.com/publications/decompiling-synergy-ndss2026.pdf)
- [ropbot: Reimaging Code Reuse Attack Synthesis](https://adamdoupe.com/publications/ropbot-ndss2026.pdf)
- [Discovering Blind-Trust Vulnerabilities in PLC Binaries via State Machine Recovery](https://adamdoupe.com/publications/taveren-ndss2026.pdf)
- [Open Cybersecurity Education: Five Years of pwn.college](https://adamdoupe.com/publications/pwn-college-five-years-sigcse2026.pdf)
- [The Linux Luminarium: Learning Linux by Leveraging Lightweight Labs and Ludicrous Lessons](https://adamdoupe.com/publications/linux-luminarium-sigcse2026.pdf)
- ["It's almost like Frankenstein": Investigating the Complexities of Scientific Collaboration and Privilege Management within Research Computing Infrastructures](https://adamdoupe.com/publications/frankenstein-rci-oakland2025.pdf)
- [System Register Hijacking: Compromising Kernel Integrity By Turning System Registers Against the System](https://adamdoupe.com/publications/system-register-hijacking-usenix2025.pdf)
- [ScamNet: Toward Explainable Large Language Model-based Fraudulent Shopping Website Detection](https://adamdoupe.com/publications/scamnet-aaai2025.pdf)
- [ScamMagnifier: Piercing the Veil of Fraudulent Shopping Website Campaigns](https://adamdoupe.com/publications/scammagnifier-ndss2025.pdf)
- [SENSAI: Large Language Models as Applied Cybersecurity Tutors](https://adamdoupe.com/publications/sensai-cigcse2025.pdf)
- [Browser Polygraph: Efficient Deployment of Coarse-Grained Browser Fingerprints for Web-Scale Detection of Fraud Browsers](https://adamdoupe.com/publications/browser-polygraph-imc2024.pdf)
- [Fuzz to the Future: Uncovering Occluded Future Vulnerabilities via Robust Fuzzing](https://adamdoupe.com/publications/flakjack-ccs24.pdf)
- [Automatically Mitigating Vulnerabilities in Binary Programs via Partially Recompilable Decompilation](https://adamdoupe.com/publications/prd-tdsc2024.pdf)
- [From Victims to Defenders: An Exploration of the Phishing Attack Reporting Ecosystem](https://adamdoupe.com/publications/reporting-gap-raid2024.pdf)
- [Ahoy SAILR! There is No Need to DREAM of C: A Compiler-Aware Structuring Algorithm for Binary Decompilation](https://adamdoupe.com/publications/sailr-usenix2024.pdf)
- ["I feel physically safe but not politically safe": Understanding the Digital Threats and Safety Practices of OnlyFans Creators](https://adamdoupe.com/publications/OF-security-and-privacy-usenix2024.pdf)
- [Operation Mango: Scalable Discovery of Taint-Style Vulnerabilities in Binary Firmware Services](https://adamdoupe.com/publications/mango-usenix2024.pdf)
- [Spider-Scents: Grey-box Database-aware Web Scanning for Stored XSS](https://adamdoupe.com/publications/spider-scents-usenix2024.pdf)
- [Take a Step Further: Understanding Page Spray in Linux Kernel Exploitation](https://adamdoupe.com/publications/page-spray-usenix2024.pdf)
- [TYGR: Type Inference on Stripped Binaries using Graph Neural Networks](https://adamdoupe.com/publications/tygr-usenix2024.pdf)
- [SandPuppy: Deep-State Fuzzing Guided by Automatic Detection of State-Representative Variables](https://adamdoupe.com/publications/sandpuppy-dimva2024.pdf)
- [Deep Dive into Client-Side Anti-Phishing: A Longitudinal Study Bridging Academia and Industry](https://adamdoupe.com/publications/client-side-anti-phishing-asiaccs2024.pdf)
- [Nothing Personal: Understanding the Spread and Use of Personally Identifiable Information in the Financial Ecosystem](https://adamdoupe.com/publications/nothing-personal-codaspy2024.pdf)
- ["Len or index or count, anything but v1": Predicting Variable Names in Decompilation Output with Transfer Learning](https://adamdoupe.com/publications/varbert-oakland2024.pdf)
- ["Watching over the shoulder of a professional": Why Hackers Make Mistakes and How They Fix Them](https://adamdoupe.com/publications/hacker-mistakes-oakland2024.pdf)
- [RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections](https://adamdoupe.com/publications/retspill-ccs2023.pdf)
- [Targeted Privacy Attacks by Fingerprinting Mobile Apps in LTE Radio Layer](https://adamdoupe.com/publications/lte-privacy-dsn2024.pdf)
- [Greenhouse: Single-Service Rehosting of Linux-Based Firmware Binaries in User-Space Emulation](https://adamdoupe.com/publications/greenhouse-usenix2023.pdf)
- [Beyond Phish: Toward Detecting Fraudulent e-Commerce Websites at Scale](https://adamdoupe.com/publications/beyondphish-oakland2023.pdf)
- [Toss a Fault to Your Witcher: Applying Grey-box Coverage-Guided Mutational Fuzzing to Detect SQL and Command Injection Vulnerabilities](https://adamdoupe.com/publications/witcher-oakland2023.pdf)
- [I'm Spartacus, No, I'm Spartacus: Proactively Protecting Users from Phishing by Intentionally Triggering Cloaking Behavior](https://adamdoupe.com/publications/spartacus-ccs2022.pdf)
- [Mitigating Threats Emerging from the Interaction between SDN Apps and SDN (Configuration) Datastore](https://adamdoupe.com/publications/eirene-sdn-threats-ccsw2022.pdf)
- [Context-Auditor: Context-sensitive Content Injection Mitigation](https://adamdoupe.com/publications/context-auditor-raid2022.pdf)
- [Using Deception in Markov Game to Understand Adversarial Behaviors through a Capture-The-Flag Environment](https://adamdoupe.com/publications/deception-in-markov-game-with-CTFs-gamesec2022.pdf)
- [Unleash the Simulacrum: Shifting Browser Realities for Robust Extension-Fingerprinting Prevention](https://adamdoupe.com/publications/simulacrum-usenix22.pdf)
- [Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs](https://adamdoupe.com/publications/arbiter-usenix22.pdf)
- [Playing for K(H)eaps: Understanding and Improving Linux Kernel Exploit Reliability](https://adamdoupe.com/publications/kheaps-exploit-reliability-usenix22.pdf)
- [Improving Source-Code Representations to Enhance Search-based Software Repair](https://adamdoupe.com/publications/prep-gecco2022.pdf)
- ["Flawed, but like democracy we don't have a better system": The Experts' Insights on the Peer Review Process of Evaluating Security Papers](https://adamdoupe.com/publications/peer-review-process-oakland22.pdf)
- [Above and Beyond: Organizational Efforts to Complement U.S. Digital Security Compliance Mandates](https://adamdoupe.com/publications/above-and-beyond-ndss2022.pdf)
- [ViK: Practical Mitigation of Temporal Memory Safety Violations through Object ID Inspection](https://adamdoupe.com/publications/vik-asplos22.pdf)
- [Having Your Cake and Eating It: An Analysis of Concession-Abuse-as-a-Service](https://adamdoupe.com/publications/caaas-usenix21.pdf)
- [Security Analysis on Practices of Certificate Authorities in the HTTPS Phishing Ecosystem](https://adamdoupe.com/publications/certphishing-asiaccs21.pdf)
- [CrawlPhish: Large-scale Analysis of Client-side Cloaking Techniques in Phishing](https://adamdoupe.com/publications/crawlphish-oakland21.pdf)
- [Everything You Ever Wanted to Know About Bitcoin Mixers (But Were Afraid to Ask)](https://adamdoupe.com/publications/bitcoin-mixers-fc2021.pdf)
- [Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases](https://adamdoupe.com/publications/favocado-ndss21.pdf)
- [Software Deception Steering through Version Emulation](https://adamdoupe.com/publications/honey-patching-hiccs20.pdf)
- [Scam Pandemic: How Attackers Exploit Public Fear through Phishing](https://adamdoupe.com/publications/covid-phishing-ecrime20.pdf)
- [HoneyPLC: A Next-Generation Honeypot for Industrial Control Systems](https://adamdoupe.com/publications/honeyplc-ccs2020.pdf)
- [Sunrise to Sunset: Analyzing the End-to-end Life Cycle and Effectiveness of Phishing Attacks at Scale](https://adamdoupe.com/publications/goldenhour-usenix2020.pdf)
- [PhishTime: Continuous Longitudinal Measurement of the Effectiveness of Anti-phishing Blacklists](https://adamdoupe.com/publications/phishtime_usenix_2020.pdf)
- [Exploiting Uses of Uninitialized Stack Variables in Linux Kernels to Leak Kernel Pointers](https://adamdoupe.com/publications/leak-kptr-woot20.pdf)
- [You shall not pass: Mitigating SQL Injection Attacks on Legacy Web Applications](https://adamdoupe.com/publications/asiaccs20-sqlblock.pdf)
- [Exploring Abstraction Functions in Fuzzing](https://adamdoupe.com/publications/fuzzsense-cns20.pdf)
- [SmokeBomb: Effective Mitigation Against Cache Side-channel Attacks on the ARM Architecture](https://adamdoupe.com/publications/smokebomb-mobisys20.pdf)
- [Matched and Mismatched SOCs: A Qualitative Study on Security Operations Center Issues](https://adamdoupe.com/publications/matched-and-mismatched-socs-ccs2019.pdf)
- [Users Really Do Answer Telephone Scams](https://adamdoupe.com/publications/users-really-do-answer-phone-scams-usenix2019.pdf)
- [Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting](https://adamdoupe.com/publications/everyone-is-different-defending-extension-fingerprinting-usenix2019.pdf)
- [PhishFarm: A Scalable Framework for Measuring the Effectiveness of Evasion Techniques Against Browser Phishing Blacklists](https://adamdoupe.com/publications/phishfarm-oakland2019.pdf)
- [iCORE: Continuous and Proactive Extrospection on Multi-core IoT Devices](https://adamdoupe.com/publications/icore-sac19.pdf)
- [Understanding and Detecting Private Interactions in Underground Forums](https://adamdoupe.com/publications/understanding-and-detecting-private-interactions-in-underground-forums-codaspy2019.pdf)
- [Prime+Count: Novel Cross-world Covert Channels on ARM TrustZone](https://adamdoupe.com/publications/prime-count-covert-channel-acsac2018.pdf)
- [Wi Not Calling: Practical Privacy and Availability Attacks in Wi-Fi Calling](https://adamdoupe.com/publications/wi-not-calling-acsac2018.pdf)
- [AIM-SDN: Attacking Information Mismanagement in SDN-datastores](https://adamdoupe.com/publications/aim-sdn-attacking-ccs2018.pdf)
- [Inside a Phisher's Mind: Understanding the Anti-phishing Ecosystem Through Phishing Kit Analysis](https://adamdoupe.com/publications/ecrime2018_phishers_mind_oest.pdf)
- [Measuring E-Mail Header Injections on the World Wide Web](https://adamdoupe.com/publications/email-header-injections-sac2018.pdf)
- [HoneyProxy: Design and Implementation of Next-Generation Honeynet via SDN](https://adamdoupe.com/publications/honeyproxy-cns2017.pdf)
- [A Game Theoretic Approach of Strategy Generation for Moving Target Defense in Web Applications](https://adamdoupe.com/publications/game-theoretic-approach-of-strategy-generation-for-mtd-aamas2017.pdf)
- [Deep Android Malware Detection](https://adamdoupe.com/publications/deep-android-malware-detection-codaspy2017.pdf)
- [Toward Authenticated Caller ID Transmission: The Need for a Standardized Authentication Scheme in Q.731.3 Calling Line Identification Presentation](https://adamdoupe.com/publications/toward-authenticated-caller-id-transmission-itu2016.pdf)
- [Towards Automated Threat Intelligence Fusion](https://adamdoupe.com/publications/towards-automated-threat-intelligence-fusion-cic2016.pdf)
- [dbling: Identifying Extensions Installed on Encrypted Web Thin Clients](https://adamdoupe.com/publications/dbling-identifying-extensions-installed-on-encrypted-web-thing-clients.pdf)
- [State-aware Network Access Management for Software-Defined Networks](https://adamdoupe.com/publications/statemon-state-aware-network-access-management-for-sdn.pdf)
- [Behind Closed Doors: Measurement and Analysis of CryptoLocker Ransoms in Bitcoin](https://adamdoupe.com/publications/behind-closed-doors-ecrime2016.pdf)
- [SoK: Everyone Hates Robocalls: A Survey of Techniques against Telephone Spam](https://adamdoupe.com/publications/sok-everyone-hates-robocalls-oakland2016.pdf)
- [Checking Intent-based Communication in Android with Intent Space Analysis](https://adamdoupe.com/publications/checking-intent-based-communication-in-android-asiaccs2016.pdf)
- [Moving Target Defense for Web Applications using Bayesian Stackelberg Games (Extended Abstract)](https://adamdoupe.com/publications/mtd-web-applications-stackelberg-aamas2016.pdf)
- [Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy](https://adamdoupe.com/publications/going-native-ndss2016.pdf)
- [Toward a Moving Target Defense for Web Applications](https://adamdoupe.com/publications/toward-a-moving-target-defense-for-web-applications.pdf)
- [Federated Access Management for Collaborative Network Environments: Framework and Case Study](https://adamdoupe.com/publications/federated-access-management-sacmat2015.pdf)
- [Do You Feel Lucky? A Large-Scale Analysis of Risk-Rewards Trade-Offs in Cyber Security](https://adamdoupe.com/publications/do-you-feel-lucky-sac2014.pdf)
- [deDacota: Toward Preventing Server-Side XSS via Automatic Code and Data Separation](https://adamdoupe.com/publications/dedacota-ccs2013.pdf)
- [Writing Groups in Computer Science Research Labs](https://adamdoupe.com/publications/writing-groups-in-computer-science-research-labs-fie2013.pdf)
- [EARs in the Wild: Large-Scale Analysis of Execution After Redirect Vulnerabilities](https://adamdoupe.com/publications/ears-in-the-wild-sac2013.pdf)
- [Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner](https://adamdoupe.com/publications/enemy-of-the-state-usenix2012.pdf)
- [Hit 'em Where it Hurts: A Live Security Exercise on Cyber Situational Awareness](https://adamdoupe.com/publications/hit-em-where-it-hurts-acsac2011.pdf)
- [Fear the EAR: Discovering and Mitigating Execution After Redirect Vulnerabilities](https://adamdoupe.com/publications/fear-the-ear-ccs2011.pdf)
- [Why Johnny Can't Pentest: An Analysis of Black-box Web Vulnerability Scanners](https://adamdoupe.com/publications/black-box-scanners-dimva2010.pdf)
- [Revisiting SDN Resilience in Cloud and Enterprise Environments](https://adamdoupe.com/publications/sdn-resilience-ccsw2025.pdf)
- [CacheLight: Defeating the CacheKit Attack](https://adamdoupe.com/publications/cachelight-ashes18.pdf)
- [Challenges and Preparedness of SDN-based Firewalls](https://adamdoupe.com/publications/challenges-sdn-firewalls-sdnnfv2018.pdf)
- [Mutated Policies: Towards Proactive Attribute-based Defenses for Access Control](https://adamdoupe.com/publications/mutated-policies-towards-mtd2017.pdf)
- [Shell We Play A Game? CTF-as-a-service for Security Education](https://adamdoupe.com/publications/shell-we-play-a-game-ctf-as-a-service-ase2017.pdf)
- [Target Fragmentation in Android Apps](https://adamdoupe.com/publications/target-fragmentation-in-android-apps-most2016.pdf)
- [Position Paper: Towards a Moving Target Defense Approach for Attribute-based Access Control](https://adamdoupe.com/publications/towards-mtd-abac-abac2016.pdf)
- [HoneyMix: Toward SDN-based Intelligent Honeynet](https://adamdoupe.com/publications/honeymix-toward-honeynet-sdnnfvsec2016.pdf)
- [A Large-Scale Study of Mobile Web App Security](https://adamdoupe.com/publications/large-scale-study-of-mobile-web-app-security-most2015.pdf)
- [Ten Years of iCTF: The Good, The Bad, and The Ugly](https://adamdoupe.com/publications/10-years-ictf-3gse2014.pdf)
- [Toward Standardization of Authenticated Caller ID Transmission](https://adamdoupe.com/publications/ieee-comm-std-callerid.pdf)
- [E-mail Header Injection Vulnerabilities](https://adamdoupe.com/publications/email-header-injection-vulns-it2017.pdf)
- [Advanced Automated Web Application Vulnerability Analysis](https://adamdoupe.com/publications/advanced-automated-web-application-vulnerability-analysis-dissertation2014.pdf)