| 2024 | AsiaCCS | FakeX: A Framework for Detecting Fake Reviews of Browser Extensions. | Eric Olsson, Benjamin Eriksson, Pablo Picazo-Sanchez, Lukas Andersson, Andrei Sabelfeld |
| 2023 | CCS | Poster: Data Minimization by Construction for Trigger-Action Applications. | Mohammad M. Ahmadpanah, Daniel Hedin, Andrei Sabelfeld |
| 2023 | CCS | Black Ostrich: Web Application Scanning with String Solvers. | Benjamin Eriksson, Amanda Stjerna, Riccardo De Masellis, Philipp Rmmer, Andrei Sabelfeld |
| 2023 | SP | LazyTAP: On-Demand Data Minimization for Trigger-Action Applications. | Mohammad M. Ahmadpanah, Daniel Hedin, Andrei Sabelfeld |
| 2022 | ACSAC | No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns. | Pablo Picazo-Sanchez, Benjamin Eriksson, Andrei Sabelfeld |
| 2022 | ICISSP | DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication. | Pablo Picazo-Sanchez, Maximilian Algehed, Andrei Sabelfeld |
| 2022 | SAC | Hardening the security analysis of browser extensions. | Benjamin Eriksson, Pablo Picazo-Sanchez, Andrei Sabelfeld |
| 2022 | SAS | SecWasm: Information Flow Control for WebAssembly. | Iulia Bastys, Maximilian Algehed, Alexander Sjsten, Andrei Sabelfeld |
| 2022 | SECRYPT | CatNap: Leveraging Generic MPC for Actively Secure Privacy-enhancing Proximity Testing with a Napping Party. | Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld |
| 2021 | SP | Data Privacy in Trigger-Action Systems. | Yunang Chen, Amrita Roy Chowdhury, Ruizhe Wang, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes |
| 2021 | SP | Black Widow: Blackbox Data-driven Web Scanning. | Benjamin Eriksson, Giancarlo Pellegrino, Andrei Sabelfeld |
| 2020 | CANS | HMAC and "Secure Preferences": Revisiting Chromium-Based Browsers Security. | Pablo Picazo-Sanchez, Gerardo Schneider, Andrei Sabelfeld |
| 2020 | ESORICS | Where Are You Bob? Privacy-Preserving Proximity Testing with a Napping Party. | Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld |
| 2020 | WWW | AutoNav: Evaluation and Automatization of Web Navigation Policies. | Benjamin Eriksson, Andrei Sabelfeld |
| 2019 | CCS | An Empirical Study of Information Flows in Real-World JavaScript. | Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld |
| 2019 | NDSS | Latex Gloves: Protecting Browser Extensions from Probing and Revelation Attacks. | Alexander Sjsten, Steven Van Acker, Pablo Picazo-Sanchez, Andrei Sabelfeld |
| 2019 | VEHITS | On the Road with Third-party Apps: Security Analysis of an In-vehicle App Platform. | Benjamin Eriksson, Jonas Groth, Andrei Sabelfeld |
| 2018 | ACSAC | Raising the Bar: Evaluating Origin-wide Security Manifests. | Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld |
| 2018 | CCS | If This Then What?: Controlling Flows in IoT Apps. | Iulia Bastys, Musard Balliu, Andrei Sabelfeld |
| 2018 | CCS | Prudent Design Principles for Information Flow Control. | Iulia Bastys, Frank Piessens, Andrei Sabelfeld |
| 2018 | FORTE | Information Flow Tracking for Side-Effectful Libraries. | Alexander Sjsten, Daniel Hedin, Andrei Sabelfeld |
| 2017 | ESORICS | We Are Family: Relating Information-Flow Trackers. | Musard Balliu, Daniel Schoepe, Andrei Sabelfeld |
| 2017 | PDP | Privacy-Preserving Location-Proximity for Mobile Apps. | Simonas Stirbys, Omar Abu Nabah, Per A. Hallgren, Andrei Sabelfeld |
| 2017 | SAC | Measuring login webpage security. | Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld |
| 2016 | ACSAC | Location-enhanced authentication using the IoT: because you cannot be in two places at once. | Ioannis Agadakos, Per A. Hallgren, Dimitrios Damopoulos, Andrei Sabelfeld, Georgios Portokalidis |
| 2016 | CCS | Data Exfiltration in the Face of CSP. | Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld |
| 2016 | ESORICS | Let's Face It: Faceted Values for Taint Tracking. | Daniel Schoepe, Musard Balliu, Frank Piessens, Andrei Sabelfeld |
| 2015 | DIMVA | May I? - Content Security Policy Endorsement for Browser Extensions. | Daniel Hausknecht, Jonas Magazinius, Andrei Sabelfeld |
| 2015 | LPAR | Value Sensitivity and Observable Abstract Values for Information Flow Control. | Luciano Bello, Daniel Hedin, Andrei Sabelfeld |
| 2015 | ProvSec | BetterTimes - Privacy-Assured Outsourced Multiplications for Additively Homomorphic Encryption on Finite Fields. | Per A. Hallgren, Martn Ochoa, Andrei Sabelfeld |
| 2015 | PST | InnerCircle: A parallelizable decentralized privacy-preserving location proximity protocol. | Per A. Hallgren, Martn Ochoa, Andrei Sabelfeld |
| 2015 | SYNASC | Web Application Security Using JSFlow. | Daniel Hedin, Andrei Sabelfeld |
| 2014 | ICFP | SeLINQ: tracking information across application-database boundaries. | Daniel Schoepe, Daniel Hedin, Andrei Sabelfeld |
| 2014 | SAC | JSFlow: tracking information flow in JavaScript and its APIs. | Daniel Hedin, Arnar Birgisson, Luciano Bello, Andrei Sabelfeld |
| 2013 | CCS | Polyglots: crossing origins by crossing formats. | Jonas Magazinius, Billy K. Rios, Andrei Sabelfeld |
| 2013 | PLDI | GlassTube: a lightweight approach to web application integrity. | Per A. Hallgren, Daniel T. Mauritzson, Andrei Sabelfeld |
| 2012 | ESORICS | Boosting the Permissiveness of Dynamic Information-Flow Tracking by Testing. | Arnar Birgisson, Daniel Hedin, Andrei Sabelfeld |
| 2011 | APLAS | Decentralized Delimited Release. | Jonas Magazinius, Aslan Askarov, Andrei Sabelfeld |
| 2011 | ESORICS | Multi-run Security. | Arnar Birgisson, Andrei Sabelfeld |
| 2011 | PLDI | Capabilities for information flow. | Arnar Birgisson, Alejandro Russo, Andrei Sabelfeld |
| 2011 | PLDI | Limiting information leakage in event-based communication. | Willard Rafnsson, Andrei Sabelfeld |
| 2010 | CCS | A lattice-based approach to mashup security. | Jonas Magazinius, Aslan Askarov, Andrei Sabelfeld |
| 2010 | ICISS | Unifying Facets of Information Integrity. | Arnar Birgisson, Alejandro Russo, Andrei Sabelfeld |
| 2010 | SEC | On-the-fly Inlining of Dynamic Security Monitors. | Jonas Magazinius, Alejandro Russo, Andrei Sabelfeld |
| 2009 | ESORICS | Tracking Information Flow in Dynamic Tree Structures. | Alejandro Russo, Andrei Sabelfeld, Andrey Chudnov |
| 2009 | PLDI | Catch me if you can: permissive yet secure error handling. | Aslan Askarov, Andrei Sabelfeld |
| 2008 | ESORICS | Termination-Insensitive Noninterference Leaks More Than Just a Bit. | Aslan Askarov, Sebastian Hunt, Andrei Sabelfeld, David Sands |
| 2007 | ESORICS | Security of Multithreaded Programs by Compilation. | Gilles Barthe, Tamara Rezk, Alejandro Russo, Andrei Sabelfeld |
| 2007 | PLDI | Localized delimited release: combining the what and where dimensions of information release. | Aslan Askarov, Andrei Sabelfeld |
| 2007 | SP | Gradual Release: Unifying Declassification, Encryption and Key Release Policies. | Aslan Askarov, Andrei Sabelfeld |
| 2006 | SAS | Cryptographically-Masked Flows. | Aslan Askarov, Daniel Hedin, Andrei Sabelfeld |
| 2005 | ESORICS | Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study. | Aslan Askarov, Andrei Sabelfeld |
| 2005 | FOSSACS | Bridging Language-Based and Process Calculi Security. | Riccardo Focardi, Sabina Rossi, Andrei Sabelfeld |
| 2002 | SAS | Securing Communication in a Concurrent Language. | Andrei Sabelfeld, Heiko Mantel |
| 1999 | ESOP | A Per Model of Secure Information Flow in Sequential Programs. | Andrei Sabelfeld, David Sands |
| 1997 | ICFP | Simple Semantic Analysis Problems for Functional Programs. | Viktor K. Sabelfeld, Andrei Sabelfeld |