Publications of Fabien Duchène

Load the BibTeX file

International Conferences

1. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. KameleonFuzz: Evolutionary Fuzzing for Black-Box XSS Detection. In Fourth ACM Conference on Data and Application Security and Privacy (CODASPY 2014), March 2014. download
2. Sanjay Rawat, Fabien Duchene, Roland Groz, Jean-Luc Richier. Evolving Indigestible Codes: Fuzzing Interpreters with Genetic Programming. In IEEE Symposium on Computational Intelligence in Cyber Security (CICS 2013), in association with the IEEE Symposium Series on Computational Intelligence (SSCI 2013), Pages 37-39, Singapore, Singapore, 2013.
3. Fabien Duchene. Fuzz in the Dark: Genetic Algorithm for Black-Box Fuzzing. In Black-Hat, São Paulo, Brazil, November 2013.
4. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. LigRE: Reverse-Engineering of Control and Data Flow Models for Black-Box XSS Detection. In Working Conference in Reverse Engineering (WCRE 2013), Volume 20, Pages 252-261, Koblenz-Landau, Germany, October 2013.
5. Fabien Duchene, Roland Groz, Sanjay Rawat, Jean-Luc Richier. XSS Vulnerability Detection Using Model Inference Assisted Evolutionary Fuzzing. In Fifth International Conference on Software Testing, Verification and Validation, ICST 2012, Pages 815-817, Montreal, QC, Canada, April 2012. download

National conferences or workshops

1. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. Fuzzing Intelligent de XSS Type-2 Filtrés selon Darwin: KameleonFuzz. In Symposium sur la Sécurité des Technologies de l'Information et des Communications (SSTIC), Pages 289-311, Rennes, France, June 2013.

Other communications

1. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. KameleonFuzz : The day Darwin drove my XSS Fuzzer!. talk given at the 1st European workshop on Web Application Security Research (WASR), with OWASP AppSecEU, Hamburg, Germany, August 2013.
2. Fabien Duchene. BlackBox Web Vulnerability Detection with Model Inference assisted Evolutionary Fuzzing. 2nd SysSec Workshop, Poster presented at SysSec Workshop, Bochum, Germany, July 2013.
3. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. A Hesitation Step into the BlackBox: Heuristic-Based Web Applications Reverse Engineering. NoSuchCon (NSC), Paris, France, May 2013.
4. Fabien Duchene, Sanjay Rawat, Jean-Luc Richier, Roland Groz. Evolutionary Fuzz Testing Techniques - Advances and Applications (tutorial). the sixth IEEE International Conference on Software Testing, Verification, and Validation (ICST), Luxembourg, March 2013.

Thesis and habilitations

1. Fabien Duchene. Detection of Web Vulnerabilities via Model Inference assisted Evolutionary Fuzzing. PhD Thesis Université de Grenoble, France, June 2014.