Mikhail Shcherbakov

I am a Research Engineer in LangSec (Language-Based Security) group, the Theoretical Computer Science (TCS) division. My research interests include application security, web security, static and dynamic code analysis.

Publications:

• Mikhail Shcherbakov, Code-Reuse Attacks in Managed Programming Languages and Runtimes, Doctoral Thesis in Computer Science, KTH Royal Institute of Technologies, 2024.
• Eric Cornelissen, Mikhail Shcherbakov, and Musard Balliu, GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes, USENIX Security, 2024.
• Mikhail Shcherbakov, Paul Moosbrugger, and Musard Balliu, Unveiling the Invisible: Detection and Evaluation of Prototype Pollution Gadgets with Dynamic Taint Analysis, WWW, 2024.
• Mikhail Shcherbakov, Musard Balliu, and Cristian-Alexandru Staicu, Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js, USENIX Security, 2023.
• Mikhail Shcherbakov and Musard Balliu, SerialDetector: Principled and Practical Exploration of Object Injection Vulnerabilities for the Web, NDSS, 2021
• Musard Balliu, Massimo Merro, Michele Pasqua, and Mikhail Shcherbakov, Friendly fire: cross-app interactions in IoT platforms, ACM TOPS 24 (3), 2021

Awards:

• Third place at Security Applied Research Competition, CSAW'23 Europe in 2023.
• Microsoft Most Valuable Professional (MVP) in 2016, 2017 and 2018.