Publications

@misc{mcfadden2026replicant,
      title={REPLICANT: Learning Policies for Evading and Hardening Malware Detectors},
      author={Shae McFadden and Ilias Tsingenopoulos and Mario D'Onghia and Alexander Herzog and Myles Foley and Chris Hicks and Lorenzo Cavallaro and Fabio Pierazzi},
      year={2026},
      eprint={2608.28499},
      archivePrefix={arXiv},
      primaryClass={cs.LG}
}

@inproceedings{McFadden2026Pitfalls,
      title={SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity},
      author={Shae McFadden and Myles Foley and Elizabeth Bates and Ilias Tsingenopoulos and Sanyam Vyas and Vasilios Mavroudis and Chris Hicks and Fabio Pierazzi},
      booktitle={35th USENIX Security Symposium (USENIX Security 26)},
      year={2026}
}

@article{ristea2026direction,
      title={Direction for Detection: A Survey of Automated Vulnerability Detection and all of its Pain Points},
      author={Dan Ristea and Shae McFadden and Ezzeldin Shereen and Madeleine Dwyer and Sanyam Vyas and Chris Hicks and Vasilios Mavroudis},
      journal={Transactions on Machine Learning Research},
      year={2026}
}

@misc{hicks2026building,
      title={Building Better Environments for Autonomous Cyber Defence},
      author={Chris Hicks and Elizabeth Bates and Shae McFadden and Isaac Symes Thompson and Myles Foley and Ed Chapman and Nickolas Espinosa Dice and Ankita Samaddar and Joshua Sylvester and Himanshu Neema and Nicholas Butts and Nate Foster and Ahmad Ridley and Zoe M and Paul Jones},
      booktitle={Workshop on AI for Critical National Infrastructure (AI4CNI) at AAMAS},
      year={2026}
}

@inproceedings{McFadden2026DRMD,
      title={DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift},
      author={Shae McFadden and Myles Foley and Mario D'Onghia and Chris Hicks and Vasilios Mavroudis and Nicola Paoletti and Fabio Pierazzi},
      booktitle={Proc. of the {AAAI} Conference on Artificial Intelligence},
      year={2026}
}

@article{shereen2026OnePic,
      title={One Pic is All it Takes: Poisoning Visual Document Retrieval Augmented Generation with a Single Image},
      author={Ezzeldin Shereen and Dan Ristea and Shae McFadden and Burak Hasircioglu and Vasilios Mavroudis and Chris Hicks},
      journal={Transactions on Machine Learning Research},
      year={2026}
}

@misc{shereen2025OnePic,
      title={One Pic is All it Takes: Poisoning Visual Document Retrieval Augmented Generation with a Single Image (Short Paper)},
      author={Ezzeldin Shereen and Dan Ristea and Burak Hasircioglu and Shae McFadden and Vasilios Mavroudis and Chris Hicks},
      booktitle={2nd Workshop on Multimodal Augmented Generation via MultimodAl Retrieval},
      year={2025}
}

@inproceedings{mcfadden2024recovery,
  title={The Impact of Active Learning on Availability Data Poisoning for Android Malware Classifiers},
  author={McFadden, Shae and Kan, Zeliang and Cavallaro, Lorenzo and Pierazzi, Fabio},
  booktitle={Proc. of the Annual Computer Security Applications Conference Workshops ({ACSAC Workshops})},
  year={2024}
}

@misc{McFadden2024tesseract,
      title={Impact of "{TESSERACT}: Eliminating Experimental Bias in Malware Classification across Space and Time"},
      author={Shae McFadden and Zeliang Kan and Daniel Arp and Feargus Pendlebury and Roberto Jordaney and Johannes Kinder and Fabio Pierazzi and Lorenzo Cavallaro},
      booktitle={ACSAC Cybersecurity Artifact Competition},
      year={2024}
}

@inproceedings{mcfadden2024wendigo,
  title={Wendigo: Deep Reinforcement Learning for Denial-of-Service Query Discovery in GraphQL},
  author={McFadden, Shae and  Maugeri, Marcello and Hicks,  Chris and Mavroudis, Vasilis and Pierazzi, Fabio},
  booktitle={Proc. of the {IEEE} Workshop on Deep Learning Security and Privacy ({DLSP})},
  year={2024}
}

@misc{kan2024tesseract,
      title={TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version)},
      author={Zeliang Kan and Shae McFadden and Daniel Arp and Feargus Pendlebury and Roberto Jordaney and Johannes Kinder and Fabio Pierazzi and Lorenzo Cavallaro},
      year={2024},
      eprint={2402.01359},
      archivePrefix={arXiv},
      primaryClass={cs.LG}
}

@inproceedings{mcfadden2023rpal,
  title={Poster: RPAL-Recovering Malware Classifiers from Data Poisoning using Active Learning},
  author={McFadden, Shae and Kan, Zeliang and Cavallaro, Lorenzo and Pierazzi, Fabio},
  booktitle={Proc. of {ACM} Conference on Computer and Communications Security ({CCS})},
  year={2023}
}