Alexandre Bartel

... and clusters them by semantic intent to mine defensive invariant categories on Ethereum. RAVEN can thus can map Ethereum’s successful defenses.

In this work we present RAVEN, a framework that aligns reverted transactions to the invariant causing the reversion in the smart contract source code, embeds these invariants using our BERT-based fine-tuned model, ...

Our paper "RAVEN: Mining Defensive Patterns in Ethereum via Semantic Transaction Revert Invariants Categories" will be presented at the 19th IEEE International Conference on Software Testing, Verification and Validation (ICST) 2026 this week! @ICSTconf #ICST2026

Tool available here: github.com/software-engin…

In this work, we present CFIghter, the first fully automated system that enables strict, type-based, compiler-based control flow integrity (CFI) in real-world projects by detecting, classifying, and repairing unintended policy violations.

Our paper "CFIghter: Automated Control-Flow Integrity Enablement and Evaluation for Legacy C/C++ Systems" will be presented at the 2026 ACM Secure Development Conference (SecDev '26) in July.

I am looking for a motivated researcher to join my group. This is a 2-year Kempe post-doc scholarship in software security. Contact me for more details! umu.se/en/work-with-u…

Thank you to the opponent Professor @herbertbos , to the grading committee Professor @sjmurdoch , Professor @aurelsec and Professor Johanna Björklund for the stimulating discussions and feedback!

Congratulations Sabine for a successful PhD defense! Sabine's work focuses on Control Flow Integrity, a defense mechanism designed to protect programs from control-flow hijacking attacks. umu.se/en/news/advanc…

I am looking for a motivated student to join my group to work on improving the software patching process. This is a 4-year fully funded Cybercampus PhD position in software security. DM me for more details! With @musardballiu & Emre Süren from KTH & Jonas Andersson from RV.

I am looking for a motivated student to join my group to work on software testing to evaluate the robustness of virtual machines. This is a 4-year fully funded WASP PhD position in software security. DM me for more details! umu.se/en/work-with-u…

Very happy to receive an ACM Computer and Communications Security (CCS 2025) Top Reviewers Award! Special thanks to my amazing team for their help in the review process!

In both cases, it successfully bypasses taint tracking, revealing weaknesses in existing taint tracking systems that depend on fragile assumptions, and emphasizing the need for more robust implementations.

Our paper "Confuse Taint: Exploiting Vulnerabilities to Bypass Dynamic Taint Analysis" will be presented at the 40th IEEE/ACM International Conference on Automated Software Engineering (ASE 2025).

The tool is available here: github.com/software-engin… #ysoserial #java #deserialization #exploit #gadgets

Thereby, our work facilitates a much-needed update to Ysoserial that provides security researchers with a comprehensive overview of deserialization gadget chains.

Our paper "GadgetBuilder: An Overhaul of the Greatest Java Deserialization Exploitation Tool" will be presented at the 30th Nordic Conference on Secure IT Systems (NordSec 2025) in November!