| 2013 | NDSS | Practical Timing Side Channel Attacks Against Kernel Space ASLR. | Ralf Hund, Carsten Willems, Thorsten Holz |
| 2013 | SP | Practical Timing Side Channel Attacks against Kernel Space ASLR. | Ralf Hund, Carsten Willems, Thorsten Holz |
| 2012 | ACSAC | Using memory management to detect and extract illegitimate code for malware analysis. | Carsten Willems, Felix C. Freiling, Thorsten Holz |
| 2012 | ACSAC | Down to the bare metal: using processor features for binary analysis. | Carsten Willems, Ralf Hund, Andreas Fobian, Dennis Felsch, Thorsten Holz, Amit Vasudevan |
| 2012 | SP | Don't Trust Satellite Phones: A Security Analysis of Two Satphone Standards. | Benedikt Driessen, Ralf Hund, Carsten Willems, Christof Paar, Thorsten Holz |
| 2011 | RAID | Automated Identification of Cryptographic Primitives in Binary Programs. | Felix Grbert, Carsten Willems, Thorsten Holz |
| 2008 | DIMVA | Learning and Classification of Malware Behavior. | Konrad Rieck, Thorsten Holz, Carsten Willems, Patrick Dssel, Pavel Laskov |
| 2007 | DIMVA | Measurement and Analysis of Autonomous Spreading Malware in a University Environment. | Jan Goebel, Thorsten Holz, Carsten Willems |