JSHint: Revealing API Usage to Improve Detection of Malicious JavaScript
Shaown Sarker, Kasimir Schulz, Aleksandr Nahapetyan, Anupam Das, Alexandros Kapravelos
Proceedings of the Information Security Conference (ISC), 2024
[PDF]

Characterizing robocalls with multiple vantage point
Sathvik Prasad, Aleksandr Nahapetyan, Bradley Reaves
Proceedings of the IEEE Symposium on Security and Privacy, 2025
[PDF]

On SMS Phishing Tactics and Infrastructure
Aleksandr Nahapetyan, Sathvik Prasad, Kevin Childs, Adam Oest, Yeganeh Ladwig, Alexandros Kapravelos, Brad Reaves
Proceedings of the IEEE Symposium on Security and Privacy, 2024
[PDF]

ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions
Siddharth Muralee, Igibek Koishybayev, Aleksandr Nahapetyan, Greg Tystahl, Brad Reaves, Antonio Bianchi, William Enck, Alexandros Kapravelos, Aravind Machiry
Proceedings of the USENIX Security Symposium, 2023
[PDF] [Code] [Website]

Characterizing the Security of Github CI Workflows
Igibek Koishybayev, Aleksandr Nahapetyan, Raima Zachariah, Siddharth Muralee, Brad Reaves, Alexandros Kapravelos, Aravind Machiry
Proceedings of the USENIX Security Symposium, 2022
[PDF] [Code] [Website]

Poster: Looking at the landscape of SMS Phishing
Aleksandr Nahapetyan, Kevin Childs, Sathvik Prasad, Bradley Reaves and Alexandros Kapravelos
Network and Distributed System Security Symposium (NDSS), 2022
[PDF]