| 2026 | SP | CyCoAnalysis: A Dataset of Cybersecurity Conference Metadata for Meta-Science and Policy Decisions. | Marton Bognar, Lieven Desmet, Frank Piessens |
| 2026 | SOUPS | AI've Got a Bad Feeling About This: A Privacy Threat Modeling Framework for GenAI. | Qianying Liao, Jonah Bellemans, Laurens Sion, Xue Jiang, Dmitrii Usynin, Xuebing Zhou, Dimitri Van Landuyt, Lieven Desmet, Wouter Joosen |
| 2025 | ACSAC | On the Potential of LLMs for Offensive Security: Benchmarks vs. Operational Reality. | Ruben Missotten, Vera Rimmer, Wim Mees, Lieven Desmet |
| 2025 | PAM | Partnrka in Crime: Characterizing Deceptive Affiliate Marketing Offers. | Victor Le Pochat, Cameron Ballard, Lieven Desmet, Wouter Joosen, Damon McCoy, Tobias Lauinger |
| 2025 | SOUPS | Shiny Shells, Rusty Cores: A Crowdsourced Security Evaluation of Integrated Web Browsers. | Gertjan Franken, Pieter Claeys, Tom van Goethem, Lieven Desmet |
| 2019 | ACSAC | Premadoma: an operational solution for DNS registries to prevent malicious domain registrations. | Jan Spooren, Thomas Vissers, Peter Janssen, Wouter Joosen, Lieven Desmet |
| 2019 | SAC | Detection of algorithmically generated domain names used by botnets: a dual arms race. | Jan Spooren, Davy Preuveneers, Lieven Desmet, Peter Janssen, Wouter Joosen |
| 2019 | SP | Assessing the Effectiveness of Domain Blacklisting Against Malicious DNS Registrations. | Thomas Vissers, Peter Janssen, Wouter Joosen, Lieven Desmet |
| 2017 | ECSA | The relationship between the cost of cybercrime and web security posture: a case study on Belgian companies. | Ping Chen, Jonas Visschers, Cedric Verstraete, Letizia Paoli, Christophe Huygens, Lieven Desmet, Wouter Joosen |
| 2017 | RAID | Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD. | Thomas Vissers, Jan Spooren, Pieter Agten, Dirk Jumpertz, Peter Janssen, Marc Van Wesemael, Frank Piessens, Wouter Joosen, Lieven Desmet |
| 2016 | WWW | Longitudinal Study of the Use of Client-side Security Mechanisms on the European Web. | Ping Chen, Lieven Desmet, Christophe Huygens, Wouter Joosen |
| 2016 | SAC | Ensuring endpoint authenticity in WebRTC peer-to-peer communication. | Willem De Groef, Deepak Subramanian, Martin Johns, Frank Piessens, Lieven Desmet |
| 2016 | SEC | Advanced or Not? A Comparative Study of the Use of Anti-debugging and Anti-VM Techniques in Generic and Targeted Malware. | Ping Chen, Christophe Huygens, Lieven Desmet, Wouter Joosen |
| 2015 | SAC | SecSess: keeping your session tucked away in your browser. | Philippe De Ryck, Lieven Desmet, Frank Piessens, Wouter Joosen |
| 2014 | CCS | Monkey-in-the-browser: malware and vulnerabilities in augmented browsing script markets. | Steven Van Acker, Nick Nikiforakis, Lieven Desmet, Frank Piessens, Wouter Joosen |
| 2013 | CCS | TabShots: client-side detection of tabnabbing attacks. | Philippe De Ryck, Nick Nikiforakis, Lieven Desmet, Wouter Joosen |
| 2013 | WWW | Bitsquatting: exploiting bit-flips for fun, or profit? | Nick Nikiforakis, Steven Van Acker, Wannes Meert, Lieven Desmet, Frank Piessens, Wouter Joosen |
| 2012 | ACSAC | JSand: complete client-side sandboxing of third-party JavaScript without browser modifications. | Pieter Agten, Steven Van Acker, Yoran Brondsema, Phu H. Phung, Lieven Desmet, Frank Piessens |
| 2012 | CCS | FlashOver: automated discovery of cross-site scripting vulnerabilities in rich internet applications. | Steven Van Acker, Nick Nikiforakis, Lieven Desmet, Wouter Joosen, Frank Piessens |
| 2012 | DAIS | Serene: Self-Reliant Client-Side Protection against Session Fixation. | Philippe De Ryck, Nick Nikiforakis, Lieven Desmet, Frank Piessens, Wouter Joosen |
| 2012 | SECRYPT | A Security Analysis of Emerging Web Standards - HTML5 and Friends, from Specification to Implementation. | Philippe De Ryck, Lieven Desmet, Frank Piessens, Wouter Joosen |
| 2011 | ACSAC | WebJail: least-privilege integration of third-party components in web mashups. | Steven Van Acker, Philippe De Ryck, Lieven Desmet, Frank Piessens, Wouter Joosen |
| 2011 | ESORICS | Automatic and Precise Client-Side Protection against CSRF Attacks. | Philippe De Ryck, Lieven Desmet, Wouter Joosen, Frank Piessens |
| 2011 | Middleware | Deploy, Adjust and Readjust: Supporting Dynamic Reconfiguration of Policy Enforcement. | Gabriela Gheorghe, Bruno Crispo, Roberto Carbone, Lieven Desmet, Wouter Joosen |
| 2009 | CCS | Browser protection against cross-site request forgery. | Wim Maes, Thomas Heyman, Lieven Desmet, Wouter Joosen |
| 2007 | CCS | A flexible security architecture to support third-party applications on mobile devices. | Lieven Desmet, Wouter Joosen, Fabio Massacci, Katsiaryna Naliuka, Pieter Philippaerts, Frank Piessens, Dries Vanoverberghe |
| 2006 | CCS | Bridging the gap between web application firewalls and web applications. | Lieven Desmet, Frank Piessens, Wouter Joosen, Pierre Verbaeten |
| 2004 | Middleware | NeCoMan: middleware for safe distributed service deployment in programmable networks. | Nico Janssens, Lieven Desmet, Sam Michiels, Pierre Verbaeten |