ColdPress: An Extensible Malware Analysis Platform for Threat Intelligence
Haoxi Tan, Chandramohan, Mahin, Cifuentes, Cristina, Guangdong Bai, Ryan K. L. Ko, arXiv
Towards Intelligent Application Security
Cristina Cifuentes, Guest lecture at The University of Queensland, The Software Process: 26th March 2021.
Keynote at BSides Canberra (https://www.bsidesau.com.au), 10th April 2021.
Keynote at Infiltrate (https://infiltratecon.com), Spring 2021/TBD.
Keynote at SOAP workshop (https://pldi21.sigplan.org/home/SOAP-2021), 22nd June 2021.
A Latina in Tech
Cristina Cifuentes, iMentor workshop 2020. https://sites.google.com/vt.edu/imentor/programvideos
Dynamic Graph Map Animation.
Seok-Hee Hong, Peter Eades, Marnijati Torkel, Weidong Huang 0001, Cristina Cifuentes, PacificVis
Industrial Experience of Finding Cryptographic Vulnerabilities in Large-scale Codebases
Ya Xiao, Yang Zhao, Nicholas Allen, Danfeng Yao, Cristina Cifuentes, https://arxiv.org/
What is a Secure Programming Language? (POPL presentation)
Cristina Cifuentes, POPL 2020.
What is a Secure Programming Language? (POPL slides)
Cristina Cifuentes, Gavin Bierman, Principles of Programming Languages (POPL) 2020, New Orleans, US. URL: https://popl20.sigplan.org
Women in CS panel
Behnaz Hassanshahi, Cristina Cifuentes, ICFP 2020
What is a Secure Programming Language?
Cristina Cifuentes, Gavin Bierman, 3rd Summit in Advances on Programming Languages (SNAPL), 16-17 May 2019.
What is a Secure Programming Language? (lecture + tutorial)
Cristina Cifuentes, Programming Language Implementation Summer School (PLISS) 2019: https://pliss2019.github.io
It's Time for Secure Languages (SPLASH-I slides)
Cristina Cifuentes, SPLASH-I, Vancouver, Canada.
Machine Learning for Finding Bugs: An Initial Report
Timothy Chappell, Cristina Cifuentes, Paddy Krishnan, Shlomo Geva, IEEE Workshop on Machine Learning Techniques for Software Quality Evaluation (MaLTeSQuE), Klagenfurt, Austria.
Machine Learning for Finding Bugs: An Initial Report (slides)
Cifuentes, Cristina, Krishnan, Padmanabhan, Timothy Chappell, Slides presented at the Workshop on Machine Learning Techniques for Software Quality Evaluation (MaLTeSQuE), 21 February 2017, Klagenfurt, Austria.
An Experience Report: Efficient Analysis using Souffle
Bernhard Scholz, Pavle Subotic, Herbert Jordan, Padmanabhan Krishnan, Raghavendra Kagalavadi Ramesh, Cristina Cifuentes, Designing Code Analysis Frameworks (DECAF @ ISSTA'16) http://karimali.ca/decaf
Are We Ready For Secure Languages? (CurryOn slides)
Cristina Cifuentes, CurryOn 2016
Are We Ready for Secure Languages? (CurryOn presentation)
Cristina Cifuentes, CurryOn 2016, Rome, Italy.
Efficient analysis using Soufflé - An experience report
Cristina Cifuentes, DECAF workshop: http://karimali.ca/decaf
Machine Learning For Finding Bugs in Source Code: An Initial Report
Timothy Chappell, Cristina Cifuentes, Padmanabhan Krishnan, Shlomo Geva, MaLTeSQuE: Workshop on Machine Learning Techniques for Software Quality Evaluation
Parfait Lessons Learnt
Cristina Cifuentes, Nathan Keynes, Manuel Valdiviezo Basauri, Kevin Gough, Diane Corney, DECAF (DEsigning Code Analysis Frameworks) workshop, co-located with ISSTA, Sunday 17th July 2016, Saarland University, Saarbrucken, Germany. URL: http://karimali.ca/decaf
The Parfait Static Code Analysis Framework -- Lessons Learnt
Cristina Cifuentes, Nathan Keynes, Kevin Gough, Diane Corney, Manuel Valdiviezo Basauri, Designing Code Analysis Frameworks (DECAF) workshop, co-located with ISSTA
Frappé - Querying the Linux Kernel Dependency Graph.
Nathan Hawes, Ben Barham, Cristina Cifuentes, GRADES@SIGMOD/PODS
Understanding caller-sensitive method vulnerabilities - a class of access control vulnerabilities in the Java platform.
Cristina Cifuentes, Andrew Gross, Nathan Keynes, SOAP@PLDI
A Method for Scalable and Precise Bug Finding Using Program Analysis and Model Checking.
Manuel Valdiviezo, Cristina Cifuentes, Padmanabhan Krishnan, APLAS
Translating Java into LLVM IR to Detect Security Vulnerabilities
Cristina Cifuentes, Nathan Keynes, John Gough, Diane Corney, Lin Gao, Manuel Valdiviezo, Andrew Gross, 2014 LLVM Developers' Meeting
Finding Java Vulnerabilities with the Parfait Static Code Analysis Tool
Andrew Gross, Cristina Cifuentes, Diane Corney, John Gough, Lin Gao, Manuel Valdiviezo, Nathan Keynes, Asian Symposium on Programming Languages and Systems (APLAS) 2013.
Internal Deployment of the Parfait Static Code Analysis Tool at Oracle - (Invited Talk).
Cristina Cifuentes, Nathan Keynes, APLAS
Path-Sensitive Data Flow Analysis Simplified.
Kirsten Winter, Chenyi Zhang, Ian J. Hayes, Nathan Keynes, Cristina Cifuentes, Lian Li, ICFEM
Precise and scalable context-sensitive pointer analysis via value flow graph.
Lian Li, Cristina Cifuentes, Nathan Keynes, ISMM
Transitioning Parfait into a Development Tool
Cristina Cifuentes, Nathan Keynes, Lian Li, Nathan Hawes, Manuel Valdiviezo, Article, (2012)
Boosting the performance of flow-sensitive points-to analysis using value flow.
Lian Li, Cristina Cifuentes, Nathan Keynes, SIGSOFT FSE
Static deep error checking in large system applications using parfait.
Cristina Cifuentes, Nathan Keynes, Lian Li, Nathan Hawes, Manuel Valdiviezo, Andrew Browne, Jacob Zimmermann, Andrew Craik, Douglas Teoh, Christian Hoermann, SIGSOFT FSE
BegBunch: Benchmarking for C Bug Detection Tools
Cristina Cifuentes, Christian Hoermann, Nathan Keynes, Lian Li, Simon Long, Erica Mealy, Michael Mounteney, Bernhard Scholz, In Proceedings, (2009)
Benchmarking Static C Bug-Checking Tools
Cristina Cifuentes, In Proceedings, (2009)
Improving Software Quality with Parfait
Cristina Cifuentes, Misc, (2009)
Parfait - Designing a Scalable Bug Checker
Cristina Cifuentes, Bernhard Scholz, In Proceedings, (2008)
Parfait - Designing a Scalable Bug Checker.
Cristina Cifuentes, Bernhard Scholz, Scalable Program Analysis 2008
User-Input Dependence Analysis via Graph Reachability
Bernard Scholz, Chenyi Zhang, Cristina Cifuentes, Technical Report, (2008)
Partitioning of Code for a Massively Parallel Machine
Michael Ball, Cristina Cifuentes, Deepankar Bairagi, Technical Report, (2004)
Partitioning of Code for a Massively Parallel Machine.
Michael Ball, Cristina Cifuentes, Deepankar Bairagi, IEEE PACT 2004:225-236
A Transformational Approach to Binary Translation of Delayed Branches with Applications to SPARC® and PA-RISC Instructions Sets
Cristina Cifuentes, Norman Ramsey, Technical Report, (2002)
Experience in the Design, Implementation and Use of a Retargetable Static Binary Translation Framework
Cristina Cifuentes, Mike Van Emmerik, Brian T. Lewis, Norman Ramsey, Technical Report, (2002)
Walkabout-A Retargetable Dynamic Binary Translation Framework
Brian T. Lewis, David Ung, Cristina Cifuentes, Technical Report, (2002)
Interprocedural data flow decompilation.
Cristina Cifuentes, J. Prog. Lang. (JPL) 4(2):77-99 (1996)