| 2026 | NDSS | Unveiling BYOVD Threats: Malware's Use and Abuse of Kernel Drivers. | Andrea Monzani, Antonio Parata, Andrea Oliveri, Simone Aonzo, Davide Balzarotti, Andrea Lanzi |
| 2021 | ESORICS | PoW-How: An Enduring Timing Side-Channel to Evade Online Malware Sandboxes. | Antonio Nappa, Panagiotis Papadopoulos, Matteo Varvello, Daniel Aceituno Gomez, Juan Tapiador, Andrea Lanzi |
| 2020 | TrustCom | Towards a Theory of Special-Purpose Program Obfuscation. | Muhammad Rizwan Asghar, Steven D. Galbraith, Andrea Lanzi, Giovanni Russello, Lukas Zobernig |
| 2019 | ACSAC | Detecting (absent) app-to-app authentication on cross-device short-distance channels. | Stefano Cristalli, Long Lu, Danilo Bruschi, Andrea Lanzi |
| 2018 | CCS | ClickShield: Are You Hiding Something? Towards Eradicating Clickjacking on Android. | Andrea Possemato, Andrea Lanzi, Simon Pak Ho Chung, Wenke Lee, Yanick Fratantonio |
| 2018 | RAID | Trusted Execution Path for Protecting Java Applications Against Deserialization of Untrusted Data. | Stefano Cristalli, Edoardo Vignati, Danilo Bruschi, Andrea Lanzi |
| 2017 | IFM | Formal Verification of ARP (Address Resolution Protocol) Through SMT-Based Model Checking - A Case Study -. | Danilo Bruschi, Andrea Di Pasquale, Silvio Ghilardi, Andrea Lanzi, Elena Pagani |
| 2016 | DIMVA | Subverting Operating System Properties Through Evolutionary DKOM Attacks. | Mariano Graziano, Lorenzo Flore, Andrea Lanzi, Davide Balzarotti |
| 2016 | DSN | Measuring the Role of Greylisting and Nolisting in Fighting Spam. | Fabio Pagani, Matteo De Astis, Mariano Graziano, Andrea Lanzi, Davide Balzarotti |
| 2014 | CCS | On the feasibility of software attacks on commodity virtual machine monitors via direct device assignment. | Gbor Pk, Andrea Lanzi, Abhinav Srivastava, Davide Balzarotti, Aurlien Francillon, Christoph Neumann |
| 2013 | DIMVA | PeerRush: Mining for Unwanted P2P Traffic. | Babak Rahbarinia, Roberto Perdisci, Andrea Lanzi, Kang Li |
| 2013 | RAID | Hypervisor Memory Forensics. | Mariano Graziano, Andrea Lanzi, Davide Balzarotti |
| 2012 | ISSTA | A quantitative study of accuracy in system call-based malware detection. | Davide Canali, Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda |
| 2011 | DIMVA | Operating System Interface Obfuscation and the Revealing of Hidden Operations. | Abhinav Srivastava, Andrea Lanzi, Jonathon T. Giffin, Davide Balzarotti |
| 2010 | ACSAC | G-Free: defeating return-oriented programming through gadget-less binaries. | Kaan Onarlioglu, Leyla Bilge, Andrea Lanzi, Davide Balzarotti, Engin Kirda |
| 2010 | CCS | AccessMiner: using system-centric models for malware protection. | Andrea Lanzi, Davide Balzarotti, Christopher Kruegel, Mihai Christodorescu, Engin Kirda |
| 2009 | CCS | Secure in-VM monitoring using hardware virtualization. | Monirul Islam Sharif, Wenke Lee, Weidong Cui, Andrea Lanzi |
| 2009 | NDSS | K-Tracer: A System for Extracting Kernel Malware Behavior. | Andrea Lanzi, Monirul Islam Sharif, Wenke Lee |
| 2009 | SP | Automatic Reverse Engineering of Malware Emulators. | Monirul Islam Sharif, Andrea Lanzi, Jonathon T. Giffin, Wenke Lee |
| 2008 | ACSAC | McBoost: Boosting Scalability in Malware Collection and Analysis Using Statistical Classification of Executables. | Roberto Perdisci, Andrea Lanzi, Wenke Lee |
| 2008 | ICSE | LISABETH: automated content-based signature generator for zero-day polymorphic worms. | Lorenzo Cavallaro, Andrea Lanzi, Luca Mayer, Mattia Monga |
| 2008 | NDSS | Impeding Malware Analysis Using Conditional Code Obfuscation. | Monirul Islam Sharif, Andrea Lanzi, Jonathon T. Giffin, Wenke Lee |
| 2008 | RAID | System Call API Obfuscation (Extended Abstract). | Abhinav Srivastava, Andrea Lanzi, Jonathon T. Giffin |
| 2007 | DIMVA | Static Analysis on x86 Executables for Preventing Automatic Mimicry Attacks. | Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi |
| 2007 | IPCCC | An Efficient Technique for Preventing Mimicry and Impossible Paths Execution Attacks. | Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi |
| 2007 | IPCCC | Diversified Process Replic for Defeating Memory Error Exploits. | Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi |
| 2007 | ICSE | A Smart Fuzzer for x86 Executables. | Andrea Lanzi, Lorenzo Martignoni, Mattia Monga, Roberto Paleari |
| 2005 | ACSAC | Replay Attack in TCG Specification and Solution. | Danilo Bruschi, Lorenzo Cavallaro, Andrea Lanzi, Mattia Monga |