Update README.md

Author: mengrj

README.md

@@ -18,8 +18,8 @@ which actions to inject and when, based on the _runtime_ behaviour of the system
 under test.
 
 ## Citing Mallory
-Mallory has been accepted for publication at the 30th ACM Conference on Computer and Communications Security (CCS 2023).
-
+Mallory has been accepted for publication at the 30th ACM Conference on Computer and Communications Security (CCS 2023). 
+The paper is also available on [arXiv](https://arxiv.org/pdf/2305.02601.pdf). If you use this code in your scientific work, please cite the paper as follows:
 ```
 @inproceedings{mallory,
 author={Ruijie Meng, George P{\^i}rlea, Abhik Roychoudhury and Ilya Sergey},