Ali Akhavani
Ali Akhavani
Home
Publications
Selected Projects
Download CV
Light
Dark
Automatic
Code Signing Hijacks
Evaluating Security Checks Against Malicious Payloads with Forged Signatures
This research investigates how cybercriminals exploit digital code-signing certificates to disguise malicious software as legitimate, trusted programs. By analyzing how modern web browsers and operating systems handle these “signed” threats, the study reveals significant inconsistencies in security responses that leave users vulnerable to deception. To address these gaps, the study demonstrates that a specialized browser extension can effectively narrow the attack surface and provide a more robust defense against certificate-based exploits.
Lalchandra Rampersaud
,
Behzad Ousat
,
Seyed Ali Akhavani
,
Javad Zandi
,
Selcuk Uluagac
,
Amin Kharraz
Last updated on Mar 12, 2026
PDF
DOI