Carter Yagemann

Carter Yagemann

Assistant Professor of Computer Science and Engineering at The Ohio State University, specializing in systems and software security, including vulnerability discovery, exploit prevention, fault injection, cyber-physical systems, and financial market security.

Articles

GlitchForge to Appear in HOST 2027

My coauthors and I will be presenting the paper "GlitchForge: A Complete Binary to Hardware Fault Injection Pipeline" at the IEEE International Symposium on Hardware Oriented Security and Trust (HOST'27) in May. Below is a preview of the abstract: This paper presents GlitchForge, an end-to-end analysis workflow for fault injection …

GRAFT to Appear in BigData 2026

My coauthors and I will be presenting the paper "Graph-Augmented Retrieval and Explainable Consequence Planning for Vulnerability Repair" at the IEEE International Conference on Big Data (BigData'26) in December. Below is a preview of the abstract: Automated vulnerability repair (AVR) increasingly relies on large language models (LLMs) to generate patches …

EXHIB to Appear in Smart SP 2026

My coauthors and I will be presenting the paper "EXHIB: A Benchmark for Realistic and Diverse Evaluation of Function Similarity in the Wild" at the 4th EAI International Conference on Security and Privacy in Cyber-Physical Systems and Smart Vehicles (SmartSP'26) in November. Below is a preview of the abstract: Binary …

PathGlow to Appear in DSC 2026

My coauthors and I will be presenting the paper "PathGlow: SSE-Driven on-Demand Data-Flow Analysis for Detecting Path Traversal in Binaries" at the 2026 IEEE Conference on Dependable and Secure Computing (DSC) in October. Below is a preview of the abstract: Taint-style vulnerabilities such as path traversal remain difficult to identify …

Semantic Shields to Appear in Military Cyber Affairs

A journal article written by my coauthors and I will be appearing in Volume 10 of Military Cyber Affairs. Below is a preview of the abstract: Ransomware poses a growing threat to critical infrastructure, where successful attacks can disrupt operational technology (OT) and industrial control systems (ICS) with significant public …

TraceHunter to Appear in ESORICS 2026

My coauthors and I will be presenting the paper "TraceHunter: Efficient Language Agnostic Verification of Constant-Time Cryptographic Implementations via Processor Tracing" at the 31st European Symposium on Research in Computer Security (ESORICS) in September. Below is a preview of the abstract: Timing side-channel attacks pose a persistent threat to cryptographic …

FlipShield to Appear in DRAMSec 2026

My coauthors and I will be presenting the paper "FlipShield: Self-Improving Software Mitigation Against Rowhammer" at the Sixth Workshop on DRAM Security (DRAMSec) this weekend. Below is a preview of the abstract: Secure memory is built on the assumption of correct hardware execution, yet the Rowhammer vulnerability demonstrates that repeated …

Rise of arXiv and the Role of Formal Publications

When I started my Ph.D. in 2016, it was a well-established norm in my area of systems security within computer science that you could defend a dissertation and graduate once you had three top-tier publications (meaning USENIX Security, ACM CCS, IEEE S&P, or NDSS) on a related topic …

ProtoReveal to Appear in ACSAC 2025

My coauthors and I will be presenting the paper "Recovering Peripheral Maps and Protocols to Expedite Firmware Reverse Engineering" at the Annual Computer Security Applications Conference (ACSAC) in December. Below is a preview of the abstract: Reverse engineering firmware binaries is vital to security due to the risks involved with …

VerDiff Vulnerability Presence Verification to Appear in ACSAC 2025

My coauthors and I will be presenting the paper "VerDiff: Vulnerability Presence Verification for Comprehensive Reporting Using Constraint Programming" at the Annual Computer Security Applications Conference (ACSAC) in December. Below is a preview of the abstract: Security practitioners often rely on a collaborative ecosystem of analysts and authorities to publicly …