SPCA: Stream Parser Confusion Attack for Web Application Firewall Evasion in HTTP/2.

@inproceedings{choi-2026-spca, author = {Kyungrok Choi and Woonghee Lee and Junbeom Hur}, editor = {Hakim Hacid and Yoelle Maarek and Francesco Bonchi and Ido Guy and Emine Yilmaz}, title = {{SPCA: Stream Parser Confusion Attack for Web Application Firewall Evasion in HTTP/2}}, booktitle = {{Proceedings of the ACM Web Conference 2026, WWW 2026, Dubai, United Arab Emirates, originally scheduled for April 13-17, 2026, rescheduled for June 29 - July 3, 2026}}, pages = {3229--3239}, publisher = {ACM}, year = {2026}, url = {https://doi.org/10.1145/3774904.3792517}, doi = {https://doi.org/10.1145/3774904.3792517} }