Publications

Johnny So, Michael Ferdman, Nick Nikiforakis (2025). What Gets Measured Gets Managed: Mitigating Supply Chain Attacks with a Link Integrity Management System. In Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security.

PDF Cite PDF (extended)

Johnny So (2025). Protecting the Integrity of Modern Web Resources by Leveraging Patterns of Change.

Johnny So, Iskander Sanchez-Rola, Nick Nikiforakis (2025). Lost in the Mists of Time: Expirations in DNS Footprints of Mobile Apps. In Proceedings of the 34th USENIX Security Symposium, 2025.

PDF Cite Artifacts

Johnny So, Michael Ferdman, Nick Nikiforakis (2023). The More Things Change, the More They Stay the Same: Integrity of Modern JavaScript. In Proceedings of the ACM Web Conference (WWW), 2023.

PDF Cite Teaser Media Coverage

Brian Kondracki, Johnny So, Nick Nikiforakis (2022). Uninvited Guests: Analyzing the Identity and Behavior of Certificate Transparency Bots. In Proceedings of the USENIX Security Symposium (USENIX Security), 2022.

PDF Cite Talk NSA 11th Annual Best Scientific Cybersecurity Paper

Johnny So, Najmeh Miramirkhani, Michael Ferdman, Nick Nikiforakis (2021). Domains Do Change Their Spots: Quantifying Potential Abuse of Residual Trust. In Proceedings of the IEEE Symposium on Security and Privacy (IEEE S&P), 2022.

PDF Cite Teaser Talk

Timothy Barron, Johnny So, Nick Nikiforakis (2021). Click This, Not That: Extending Web Authentication with Deception. In ACM Asia Conference on Computer and Communications Security (AsiaCCS), 2021.