Stefan Nagy

Stefan Nagy

Assistant Professor
Kahlert School of Computing
University of Utah
Salt Lake City, Utah
Office: 3446 MEB

Recruiting motivated PhD students and undergrads to join my research group. Get in touch!

About Me

I'm an Assistant Professor in the Kahlert School of Computing at the University of Utah. I earned my Ph.D. in Computer Science from Virginia Tech in 2022 and my Bachelor's from The University of Illinois in 2016.

Broadly, I am interested in security, software, and systems. Some areas I work in include software testing, binary analysis, vulnerability triage, and bug repair. I am especially interested in making efficient and effective quality assurance possible for opaque and otherwise challenging software and systems.

News & Updates

Research Summary

Software Security / Binary Analysis: ACSAC'22 CCS'21, USENIX'21, Oakland'19, ICSE'18
Computer Science Ethics / Education: ISTAS'19, ICDF2C'15
Digital Forensics: SADFE'15, ICDF2C'15



One Fuzz Doesn’t Fit All: Optimizing Directed Fuzzing via Target-tailored Program State Restriction.
Prashast Srivastava, Stefan Nagy, Matthew Hicks, Antonio Bianchi, and Mathias Payer.
Annual Computer Security Applications Conference (ACSAC'22).



Same Coverage, Less Bloat: Accelerating Binary-only Fuzzing with Coverage-preserving Coverage-guided Tracing.
Stefan Nagy, Anh Nguyen-Tuong, Jason Hiser, Jack Davidson, and Matthew Hicks.
ACM Conference on Computer and Communications Security (CCS'21).


Breaking Through Binaries: Compiler-quality Instrumentation for Better Binary-only Fuzzing.
Stefan Nagy, Anh Nguyen-Tuong, Jason Hiser, Jack Davidson, and Matthew Hicks.
USENIX Security Symposium (USENIX'21).


A Case Study on a Sustainable Framework for Ethically Aware Predictive Modeling.
Thomas Lux, Stefan Nagy, Mohammed Almanaa, Sirui Yao, Reid Bixler.
IEEE International Symposium on Technology and Society (ISTAS'19).


Full-speed Fuzzing: Reducing Fuzzing Overhead through Coverage-guided Tracing.
Stefan Nagy, Matthew Hicks.
IEEE Symposium on Security and Privacy (Oakland'19).


Secure Coding Practices in Java: Challenges and Vulnerabilities.
Na Meng, Stefan Nagy, Danfeng Yao, Wenjie Zhuang, Gustavo Argoty.
International Conference on Software Engineering (ICSE'18).


Digital Forensics Education: A Multidisciplinary Curriculum Model.
Imani Palmer, Elaine Wood, Stefan Nagy, Gabriela Garcia, Masooda Bashir, Roy Campbell.
International Conference on Digital Forensics & Cyber Crime (ICDF2C'15).


Schedule-Based Side-Channel Attack in Fixed-Priority Real-time Systems.
Chien-Ying Chen, Amiremad Ghassami, Stefan Nagy, Man-Ki Yoon, Sibin Mohan, Negar Kiyavash, Rakesh B Bobba, Rodolfo Pellizzoni.
Illinois Digital Environment for Access to Learning and Scholarship.


An Empirical Study on Current Models for Reasoning about Digital Evidence.
Stefan Nagy, Imani Palmer, Sathya Sundaramurthy, Xinming Ou, Roy Campbell.
Intl. Conf. on Systematic Approaches to Digital Forensic Engineering (SADFE'15).

Open-source Software

Dr. Disassembler: A platform for transparent and mutable binary disassembly. GitHub
HeXcite (CCS'21): High-Efficiency eXpanded Coverage for Improved Testing of Executables. GitHub
ZAFL (USENIX'21): A compiler-quality binary fuzzing instrumenter. GitLab
UnTracer-AFL (Oakland'19): Fast fuzzing through Coverage-guided Tracing. GitHub
FoRTE-FuzzBench (Oakland'19): An open-source fuzzing benchmark. GitHub
AFL-FID (Oakland'19): A suite of tools for fixed-corpus fuzzing experiments. GitHub
AFL-Dyninst: An improved fork of AFL-Dyninst for binary fuzzing. GitHub

Professional Experience

University of Utah, Assistant Professor [07/2022—now]
Virginia Tech, Grad RA / TA (with Dr. Matthew Hicks) [08/2016—05/2022]
MIT Lincoln Laboratory, Grad Summer Intern [05—08/2021]
Trail of Bits, Grad Winter Intern [12/2020—01/2021]
Antithesis, Grad Summer Intern [05—08/2020]
Kansas State University, Undergrad RA (with Dr. Xinming Ou) [05—08/2015]
University of Illinois, Undergrad RA / TA (with Dr. Roy Campbell) [05/2014—12/2015]


CS 5963 / 6963: Applied Software Security Testing [Fall 2022] Website

Professional Service

External Reviewer
Web Admin