| 2011 | CCS | Trusted virtual domains on OKL4: secure information sharing on smartphones. | Lucas Davi, Alexandra Dmitrienko, Christoph Kowalski, Marcel Winandy |
| 2011 | CCS | ROPdefender: a detection tool to defend against return-oriented programming attacks. | Lucas Davi, Ahmad-Reza Sadeghi, Marcel Winandy |
| 2011 | DSN | Uni-directional trusted path: Transaction confirmation on just one device. | Atanas Filyanov, Jonathan M. McCune, Ahmad-Reza Sadeghi, Marcel Winandy |
| 2010 | CCS | Return-oriented programming without returns. | Stephen Checkoway, Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Hovav Shacham, Marcel Winandy |
| 2010 | CCS | Trusted virtual domains on OpenSolaris: usable secure desktop environments. | Hans Lhr, Thomas Pppelmann, Johannes Rave, Martin Steegmanns, Marcel Winandy |
| 2009 | CCS | Dynamic integrity measurement and attestation: towards defense against return-oriented programming attacks. | Lucas Davi, Ahmad-Reza Sadeghi, Marcel Winandy |
| 2009 | CCS | TruWallet: trustworthy and migratable wallet-based web authentication. | Sebastian Gajek, Hans Lhr, Ahmad-Reza Sadeghi, Marcel Winandy |
| 2009 | ISPEC | Trusted Privacy Domains - Challenges for Trusted Computing in Privacy-Protecting Information Sharing. | Hans Lhr, Ahmad-Reza Sadeghi, Claire Vishik, Marcel Winandy |
| 2008 | CCS | Flexible and secure enterprise rights management based on trusted virtual domains. | Yacine Gasmi, Ahmad-Reza Sadeghi, Patrick Stewin, Martin Unger, Marcel Winandy, Rani Husseiki, Christian Stble |
| 2008 | GI | Sicherheitsprobleme elektronischer Wahlauszhlungssysteme in der Praxis. | Yacine Gasmi, Christian Hessmann, Martin Pittenauer, Marcel Winandy |
| 2006 | CCS | TCG inside?: a note on TPM specification compliance. | Ahmad-Reza Sadeghi, Marcel Selhorst, Christian Stble, Christian Wachsmann, Marcel Winandy |
| 2003 | COMPSAC | A Protection Environment for Administrators of Windows 2000/XP Against Malicious Program Attacks. | Adrian Spalka, Marcel Winandy |