Cristian-Alexandru Staicu

TU Darmstadt
Mornewegstraße 32, room 4.3.04
64295 Darmstadt
Telephone number: +49-6151-1622392

About me

I am a Ph.D. student at TU Darmstadt, advised by Prof. Dr. Michael Pradel. My current research interest is on applying programming language techniques to security problems. In particular, I am working on finding and preventing vulnerabilities specific to server-side JavaScript programs and libraries.


Research Work

  • 2018, USENIX Security 2018, Freezing the Web: A Study of ReDoS Vulnerabilities in JavaScript-based Web Servers, Cristian-Alexandru Staicu, Michael Pradel
    (paper, presentation, reviewed by Bleeping Computer, Naked Security and TU Darmstadt website)
  • 2018, NDSS 2018, Synode: Understanding and Automatically Preventing Injection Attacks on Node.js, Cristian-Alexandru Staicu, Michael Pradel, Ben Livshits
    (paper, presentation, video, reviewed by The Morning Paper)
  • 2017, ASE 2017, Saying ‘Hi!’ Is Not Enough: Mining Inputs for Effective Test Generation, Luca Della Toffola, Cristian-Alexandru Staicu, Michael Pradel
  • 2017, CSUR 2017, A Survey of Dynamic Analysis and Test Generation for JavaScript, Esben Andreasen, Liang Gong, Anders Møller, Michael Pradel, Marija Selakovic, Koushik Sen, Cristian-Alexandru Staicu
  • 2016, SSBSE 2016, Search Based Clustering for Protecting Software with Diversified Updates, Mariano Ceccato, Paolo Falcarin, Alessandro Cabutto, Yosief Weldezghi Frezghi, Cristian-Alexandru Staicu
  • 2016, ICSE 2016, Nomen Est Omen: Exploring and Exploiting Similarities between Argument and Parameter Names, Hui Liu, Qiurong Liu, Cristian-Alexandru Staicu, Michael Pradel, Yue Luo.
    (paper, presentation)
  • 2015, PLDI Student Research Competition, An Empirical Study of Implicit Information Flow.
  • 2014, Master Thesis, Evaluation of HIMMO with Long Identifiers, an Extension of the HIMMO Key Establishment Scheme. I carried out the main part of the work during an internship at Philips Research Eindhoven, being supervised by Oscar García Morchon and Andreas Peter.
  • 2007, Bachelor Thesis, SherlockJ - Unealta de Depanarea Statistic a Programelor Java (in Romanian), supervised by Prof. Marius Minea.


Last updated 17 April, 2018