Stefan Nagy

Stefan Nagy

Assistant Professor
Utah School of Computing
Salt Lake City, Utah
Office: 3446 MEB
Email: snagy@cs.utah.edu

Recruiting motivated student researchers to join my lab at the University of Utah. Get in touch!

About Me

I'm an Assistant Professor in the School of Computing at the University of Utah. I earned my Ph.D. in Computer Science from Virginia Tech in 2022 and my Bachelor's from The University of Illinois in 2016.

Broadly, I am interested in security, software, and systems. Some areas I work in include software testing, binary analysis, vulnerability triage, and bug repair. I am especially interested in making efficient and effective quality assurance possible for opaque and otherwise challenging software and systems.

News & Updates

  • 04/2022: I have defended my PhD! Many thanks to my committee members for their support!
  • 03/2022: I will join the Utah School of Computing as an Assistant Professor this coming summer!
  • 01/2022: Check out my guest blog on transparent and mutable disassembly for Trail of Bits!
  • 12/2021: HeXcite's binary fuzzer source code from our CCS'21 paper has been released on GitHub!
  • 08/2021: Proud to be part of Virginia Tech's seven-paper showing at USENIX Security 2021! Go Hokies!
  • 05/2020: AFL++ now supports an afl_untracer mode inspired by UnTracer. Happy fuzzing!
  • 04/2020: Great work by Google Project Zero on fuzzing ImageIO motivated by our Oakland'19 paper!

Research Summary

Software Security / Binary Analysis: CCS'21, USENIX'21, Oakland'19, ICSE'18
Computer Science Ethics / Education: ISTAS'19, ICDF2C'15
Digital Forensics: SADFE'15, ICDF2C'15

Publications

2022 May
2021 November

Same Coverage, Less Bloat: Accelerating Binary-only Fuzzing with Coverage-preserving Coverage-guided Tracing.
Stefan Nagy, Anh Nguyen-Tuong, Jason Hiser, Jack Davidson, and Matthew Hicks.
ACM Conference on Computer and Communications Security (CCS'21).


2021 August

Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing.
Stefan Nagy, Anh Nguyen-Tuong, Jason Hiser, Jack Davidson, and Matthew Hicks.
USENIX Security Symposium (USENIX'21).


2019 November

A Case Study on a Sustainable Framework for Ethically Aware Predictive Modeling.
Thomas Lux, Stefan Nagy, Mohammed Almanaa, Sirui Yao, Reid Bixler.
IEEE International Symposium on Technology and Society (ISTAS'19).


2019 May

Full-speed Fuzzing: Reducing Fuzzing Overhead through Coverage-guided Tracing.
Stefan Nagy, Matthew Hicks.
IEEE Symposium on Security and Privacy (Oakland'19).


2018 May

Secure Coding Practices in Java: Challenges and Vulnerabilities.
Na Meng, Stefan Nagy, Danfeng Yao, Wenjie Zhuang, Gustavo Argoty.
International Conference on Software Engineering (ICSE'18).


2015 October

Digital Forensics Education: A Multidisciplinary Curriculum Model.
Imani Palmer, Elaine Wood, Stefan Nagy, Gabriela Garcia, Masooda Bashir, Roy Campbell.
International Conference on Digital Forensics & Cyber Crime (ICDF2C'15).


2015 October

Schedule-Based Side-Channel Attack in Fixed-Priority Real-time Systems.
Chien-Ying Chen, Amiremad Ghassami, Stefan Nagy, Man-Ki Yoon, Sibin Mohan, Negar Kiyavash, Rakesh B Bobba, Rodolfo Pellizzoni.
Illinois Digital Environment for Access to Learning and Scholarship.


2015 September

An Empirical Study on Current Models for Reasoning about Digital Evidence.
Stefan Nagy, Imani Palmer, Sathya Sundaramurthy, Xinming Ou, Roy Campbell.
Intl. Conf. on Systematic Approaches to Digital Forensic Engineering (SADFE'15).

Open-source Software

Dr. Disassembler: A platform for transparent and mutable binary disassembly. GitHub
HeXcite (CCS'21): High-Efficiency eXpanded Coverage for Improved Testing of Executables. GitHub
ZAFL (USENIX'21): A compiler-quality binary fuzzing instrumenter. GitLab
UnTracer-AFL (Oakland'19): Fast fuzzing through Coverage-guided Tracing. GitHub
FoRTE-FuzzBench (Oakland'19): An open-source fuzzing benchmark. GitHub
AFL-FID (Oakland'19): A suite of tools for fixed-corpus fuzzing experiments. GitHub
AFL-Dyninst: An improved fork of AFL-Dyninst for binary fuzzing. GitHub

Professional Experience

University of Utah, Assistant Professor [07/2022—now]
Virginia Tech, Grad RA / TA (with Dr. Matthew Hicks) [08/2016—05/2022]
MIT Lincoln Laboratory, Grad Summer Intern [05—08/2021]
Trail of Bits, Grad Winter Intern [12/2020—01/2021]
Antithesis, Grad Summer Intern [05—08/2020]
Kansas State University, Undergrad RA (with Dr. Xinming Ou) [05—08/2015]
University of Illinois, Undergrad RA / TA (with Dr. Roy Campbell) [05/2014—12/2015]

Professional Service

Reviewer
External Reviewer
Web Admin