| Accurate Real-Time Labeling of Application Traffic | 2022 IEEE 47th Conference on Local Computer Networks (LCN) | SCOUT |
| DISTINCT: Identity Theft using In-Browser Communications in Dual-Window Single Sign-On | 2022 ACM SIGSAC Conference on Computer and Communications Security | SES |
| We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets | USENIX Security’23 | SEAN |
| Content-Type: multipart/oracle – Tapping into Format Oracles in Email End-to-End Encryption | USENIX Security’23 | SEAN |
| Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML Signatures | USENIX Security’23 | |