| 2026 | NDSS | Cross-Boundary Mobile Tracking: Exploring Java-to-JavaScript Information Diffusion in WebViews. | Sohom Datta, Michalis Diamantaris, Ahsan Zafar, Junhua Su, Anupam Das, Jason Polakis, Alexandros Kapravelos |
| 2026 | NDSS | Vault Raider: Stealthy UI-based Attacks Against Password Managers in Desktop Environments. | Andrea Infantino, Mir Masood Ali, Kostas Solomos, Jason Polakis |
| 2024 | ACSAC | Harnessing Multiplicity: Granular Browser Extension Fingerprinting through User Configurations. | Konstantinos Solomos, Nick Nikiforakis, Jason Polakis |
| 2023 | ACSAC | When Push Comes to Shove: Empirical Analysis of Web Push Implementations in the Wild. | Alberto Carboneri, Mohammad Ghasemisharif, Soroush Karami, Jason Polakis |
| 2023 | CCS | Read Between the Lines: Detecting Tracking JavaScript with Bytecode Classification. | Mohammad Ghasemisharif, Jason Polakis |
| 2023 | NDSS | Navigating Murky Waters: Automated Browser Feature Testing for Uncovering Tracking Vectors. | Mir Masood Ali, Binoy Chitale, Mohammad Ghasemisharif, Chris Kanich, Nick Nikiforakis, Jason Polakis |
| 2023 | NDSS | ReScan: A Middleware Framework for Realistic and Robust Black-box Web Application Scanning. | Kostas Drakonakis, Sotiris Ioannidis, Jason Polakis |
| 2023 | SP | Fashion Faux Pas: Implicit Stylistic Fingerprints for Bypassing Browsers' Anti-Fingerprinting Defenses. | Xu Lin, Frederico Araujo, Teryl Taylor, Jiyong Jang, Jason Polakis |
| 2022 | CCS | Escaping the Confines of Time: Continuous Browser Extension Fingerprinting Through Ephemeral Modifications. | Konstantinos Solomos, Panagiotis Ilia, Nick Nikiforakis, Jason Polakis |
| 2022 | IMC | Exploring the security and privacy risks of chatbots in messaging services. | Jide S. Edu, Cliona Mulligan, Fabio Pierazzi, Jason Polakis, Guillermo Suarez-Tangil, Jose M. Such |
| 2022 | SP | Towards Automated Auditing for Account and Session Management Flaws in Single Sign-On Deployments. | Mohammad Ghasemisharif, Chris Kanich, Jason Polakis |
| 2021 | CCS | This Sneaky Piggy Went to the Android Ad Market: Misusing Mobile Sensors for Stealthy Data Exfiltration. | Michalis Diamantaris, Serafeim Moustakas, Lichao Sun, Sotiris Ioannidis, Jason Polakis |
| 2021 | NDSS | Awakening the Web's Sleeper Agents: Misusing Service Workers for Privacy Leakage. | Soroush Karami, Panagiotis Ilia, Jason Polakis |
| 2021 | NDSS | Tales of Favicons and Caches: Persistent Tracking in Modern Browsers. | Konstantinos Solomos, John Kristoff, Chris Kanich, Jason Polakis |
| 2021 | PAM | Plight at the End of the Tunnel - Legacy IPv6 Transition Mechanisms in the Wild. | John Kristoff, Mohammad Ghasemisharif, Chris Kanich, Jason Polakis |
| 2020 | CCS | The Cookie Hunter: Automated Black-box Auditing for Web Authentication and Authorization Flaws. | Kostas Drakonakis, Sotiris Ioannidis, Jason Polakis |
| 2020 | CCS | Fill in the Blanks: Empirical Analysis of the Privacy Threats of Browser Form Autofill. | Xu Lin, Panagiotis Ilia, Jason Polakis |
| 2020 | NDSS | Carnus: Exploring the Privacy Threats of Browser Extension Fingerprinting. | Soroush Karami, Panagiotis Ilia, Konstantinos Solomos, Jason Polakis |
| 2020 | SP | Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers. | Brian Kondracki, Assel Aliyeva, Manuel Egele, Jason Polakis, Nick Nikiforakis |
| 2019 | NDSS | Please Forget Where I Was Last Summer: The Privacy Risks of Public Location (Meta)Data. | Kostas Drakonakis, Panagiotis Ilia, Sotiris Ioannidis, Jason Polakis |
| 2019 | WWW | A Large-scale Study on the Risks of the HTML5 WebAPI for Mobile Sensor-based Attacks. | Francesco Marcantoni, Michalis Diamantaris, Sotiris Ioannidis, Jason Polakis |
| 2017 | CCS | In (Cyber)Space Bots Can Hear You Speak: Breaking Audio CAPTCHAs Using OTS Speech Recognition. | Saumya Solanki, Gautam Krishnan, Varshini Sampath, Jason Polakis |
| 2017 | Mobisys | Techu: Open and Privacy-Preserving Crowdsourced GPS for the Masses. | Ioannis Agadakos, Jason Polakis, Georgios Portokalidis |