| 2025 | AsiaCCS | SoK: A Literature and Engineering Review of Regular Expression Denial of Service (ReDoS). | Masudul Hasan Masud Bhuiyan, Berk akar, Ethan H. Burmane, James C. Davis, Cristian-Alexandru Staicu |
| 2025 | IMC | Not All Visitors are Bilingual: A Measurement Study of the Multilingual Web from an Accessibility Perspective. | Masudul Hasan Masud Bhuiyan, Matteo Varvello, Yasir Zaki, Cristian-Alexandru Staicu |
| 2025 | ICSE | Non-Western Perspectives on Web Inclusivity: A Study of Accessibility Practices in the Global South. | Masudul Hasan Masud Bhuiyan, Matteo Varvello, Cristian-Alexandru Staicu, Yasir Zaki |
| 2025 | NDSS | Welcome to Jurassic Park: A Comprehensive Study of Security Risks in Deno and its Ecosystem. | Abdullah AlHamdan, Cristian-Alexandru Staicu |
| 2025 | WWW | Digital Disparities: A Comparative Web Measurement Study Across Economic Boundaries. | Masudul Hasan Masud Bhuiyan, Matteo Varvello, Cristian-Alexandru Staicu, Yasir Zaki |
| 2024 | NAACL | SimSCOOD: Systematic Analysis of Out-of-Distribution Generalization in Fine-tuned Source Code Models. | Hossein Hajipour, Ning Yu, Cristian-Alexandru Staicu, Mario Fritz |
| 2023 | CCS | Jack-in-the-box: An Empirical Study of JavaScript Bundling on the Web and its Security Implications. | Jeremy Rack, Cristian-Alexandru Staicu |
| 2023 | ICSE | SecBench.js: An Executable Security Benchmark Suite for Server-Side JavaScript. | Masudul Hasan Masud Bhuiyan, Adithya Srinivas Parthasarathy, Nikos Vasilakis, Michael Pradel, Cristian-Alexandru Staicu |
| 2021 | CCS | Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction. | Nikos Vasilakis, Cristian-Alexandru Staicu, Grigoris Ntousakis, Konstantinos Kallas, Ben Karel, Andr DeHon, Michael Pradel |
| 2020 | ICSE | Extracting taint specifications for JavaScript libraries. | Cristian-Alexandru Staicu, Martin Toldam Torp, Max Schfer, Anders Mller, Michael Pradel |
| 2019 | CCS | An Empirical Study of Information Flows in Real-World JavaScript. | Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld |
| 2019 | WWW | Anything to Hide? Studying Minified and Obfuscated Code in the Web. | Philippe Skolka, Cristian-Alexandru Staicu, Michael Pradel |
| 2018 | NDSS | SYNODE: Understanding and Automatically Preventing Injection Attacks on NODE.JS. | Cristian-Alexandru Staicu, Michael Pradel, Benjamin Livshits |
| 2016 | ICSE | Nomen est omen: exploring and exploiting similarities between argument and parameter names. | Hui Liu, Qiurong Liu, Cristian-Alexandru Staicu, Michael Pradel, Yue Luo |
| 2016 | SSBSE | Search Based Clustering for Protecting Software with Diversified Updates. | Mariano Ceccato, Paolo Falcarin, Alessandro Cabutto, Yosief Weldezghi Frezghi, Cristian-Alexandru Staicu |