Testing and Explaining the Limits of Machine Learning for Automated Vulnerability Discovery

Proceedings of the 20th USENIX WOOT Conference on Offensive Technologies (WOOT), August 2026

@inproceedings{woot2026-onelogon,
  title     = {{Onelogon: Taking over Active Directory Accounts via Netlogon}},
  author    = {Neff, Alexander and Holl, Tobias and Borgolte, Kevin},
  booktitle = {Proceedings of the 20th USENIX WOOT Conference on Offensive Technologies (WOOT)},
  code      = {https://github.com/rub-softsec/onelogon},
  date      = {2026-08},
  editor    = {Bianchi, Antonio and Classen, Jiska},
  location  = {Baltimore, MD, USA},
  publisher = {USENIX Association}
}

Proceedings of the 48th IEEE/ACM International Conference on Software Engineering (ICSE), April 2026

@inproceedings{icse2026-storfuzz,
  title     = {{StorFuzz: Using Data Diversity to Overcome Fuzzing Plateaus}},
  author    = {Weiß, Leon and Holl, Tobias and Borgolte, Kevin},
  booktitle = {Proceedings of the 48th IEEE/ACM International Conference on Software Engineering (ICSE)},
  code      = {https://github.com/rub-softsec/storfuzz/},
  data      = {https://doi.org/10.5281/zenodo.14979693},
  date      = {2026-04},
  doi       = {10.1145/3744916.3773179},
  editor    = {Mezini, Mira and Zimmermann, Thomas},
  location  = {Rio de Janeiro, Brazil},
  publisher = {Association for Computing Machinery (ACM)/Institute of Electrical and Electronics Engineers (IEEE)},
  volume    = {48}
}

Proceedings of the 5th International Fuzzing Workshop (FUZZING), February 2026

@inproceedings{fuzzing2026-the-things-that-count,
  title     = {{The Things That Count: Coverage Evaluation Under the Microscope (Registered Report)}},
  author    = {Holl, Tobias and Weiß, Leon and Borgolte, Kevin},
  booktitle = {Proceedings of the 5th International Fuzzing Workshop (FUZZING)},
  code      = {https://softsec.link/fz26.cov/},
  date      = {2026-02-27},
  doi       = {10.14722/fuzzing.2026.23030},
  editor    = {Böhme, Marcel and Meng, Ruijie and Padhye, Rohan and Noller, Yannic and Szekeres, László},
  location  = {San Diego, CA, USA},
  publisher = {Internet Society (ISOC)},
  volume    = {5}
}

Proceedings of the 5th International Fuzzing Workshop (FUZZING), February 2026

@inproceedings{fuzzing2026-pogofuzz,
  title     = {{Pogofuzz: Profile-Guided Optimization for Fuzzing (Registered Report)}},
  author    = {Holl, Tobias and Weiß, Leon and Borgolte, Kevin},
  booktitle = {Proceedings of the 5th International Fuzzing Workshop (FUZZING)},
  code      = {https://softsec.link/fz26.pogofuzz/},
  date      = {2026-02-27},
  doi       = {10.14722/fuzzing.2026.23029},
  editor    = {Böhme, Marcel and Meng, Ruijie and Padhye, Rohan and Noller, Yannic and Szekeres, László},
  location  = {San Diego, CA, USA},
  publisher = {Internet Society (ISOC)},
  volume    = {5}
}

Proceedings of the 9th Workshop on Binary Analysis Research (BAR), February 2026

@inproceedings{bar2026-does-representation-matter,
  title     = {{Does Representation Matter? Evaluating IRs for LLM-based Binary Decompilation}},
  author    = {Pelayo-Benedet, Tomás and Borgolte, Kevin and Rodríguez, Ricardo J.},
  booktitle = {Proceedings of the 9th Workshop on Binary Analysis Research (BAR)},
  data      = {https://github.com/rub-softsec/does-representation-matter-dataset},
  date      = {2026-02-27},
  doi       = {10.14722/bar.2026.23077},
  editor    = {Bardin, Sébastien and Hauser, Christophe},
  location  = {San Diego, CA, USA},
  publisher = {Internet Society (ISOC)},
  volume    = {9}
}