| 2026 | ICISSP | An Analysis of Modern Web Security Vulnerabilities Inside WebAssembly Applications. | Lorenzo Corrias, Lorenzo Pisu, Davide Maiorca, Giorgio Giacinto |
| 2025 | GLOBECOM | Evaluation of Resource-Aware HTTP/3 Proxies for Smuggling Resilience in IoT Environments. | Lorenzo Pisu, Giovanni Pettorru, Leonardo Regano, Davide Maiorca, Giorgio Giacinto, Marco Martal |
| 2025 | RAID | {{alert('CSTI')}}: Large-Scale Detection of Client-Side Template Injection. | Lorenzo Pisu, Davide Balzarotti, Davide Maiorca, Giorgio Giacinto |
| 2024 | NCA | HTTP/3 will not Save you from Request Smuggling: A Methodology to Detect HTTP/3 Header (mis)Validations. | Lorenzo Pisu, Federico Loi, Davide Maiorca, Giorgio Giacinto |
| 2024 | SECRYPT | Do You Trust Your Device? Open Challenges in IoT Security Analysis. | Lorenzo Binosi, Pietro Mazzini, Alessandro Sanna, Michele Carminati, Giorgio Giacinto, Riccardo Lazzeretti, Stefano Zanero, Mario Polino, Emilio Coppa, Davide Maiorca |
| 2024 | SECRYPT | Bringing Binary Exploitation at Port 80: Understanding C Vulnerabilities in WebAssembly. | Emmanuele Massidda, Lorenzo Pisu, Davide Maiorca, Giorgio Giacinto |
| 2022 | DIMVA | Extended Abstract: Effective Call Graph Fingerprinting for the Analysis and Classification of Windows Malware. | Francesco Meloni, Alessandro Sanna, Davide Maiorca, Giorgio Giacinto |
| 2022 | ESORICS | Reach Me if You Can: On Native Vulnerability Reachability in Android Apps. | Luca Borzacchiello, Emilio Coppa, Davide Maiorca, Andrea Columbu, Camil Demetrescu, Giorgio Giacinto |
| 2022 | SECRYPT | A Longitudinal Study of Cryptographic API: A Decade of Android Malware. | Adam Janovsky, Davide Maiorca, Dominik Macko, Vashek Matyas, Giorgio Giacinto |
| 2019 | DIMVA | PowerDrive: Accurate De-obfuscation and Analysis of PowerShell Malware. | Denis Ugarte, Davide Maiorca, Fabrizio Cara, Giorgio Giacinto |
| 2017 | SAC | R-PackDroid: API package-based characterization and detection of mobile ransomware. | Davide Maiorca, Francesco Mercaldo, Giorgio Giacinto, Corrado Aaron Visaggio, Fabio Martinelli |
| 2015 | ACSAC | On the Robustness of Mobile Device Fingerprinting: Can Mobile Users Escape Modern Web-Tracking Mechanisms? | Thomas Hupperich, Davide Maiorca, Marc Khrer, Thorsten Holz, Giorgio Giacinto |
| 2015 | ICISSP | A Structural and Content-based Approach for a Precise and Robust Detection of Malicious PDF Files. | Davide Maiorca, Davide Ariu, Igino Corona, Giorgio Giacinto |
| 2015 | ICISSP | An Evasion Resilient Approach to the Detection of Malicious PDF Files. | Davide Maiorca, Davide Ariu, Igino Corona, Giorgio Giacinto |
| 2014 | CCS | Lux0R: Detection of Malicious PDF-embedded JavaScript code through Discriminant Analysis of API References. | Igino Corona, Davide Maiorca, Davide Ariu, Giorgio Giacinto |
| 2013 | CCS | Looking at the bag is not enough to find the bomb: an evasion of structural methods for malicious PDF files detection. | Davide Maiorca, Igino Corona, Giorgio Giacinto |