| 2017 | ICSE | Dynamic Encryption Key Security Scheme (DEKSS) for Mobile and Cloud Systems. | Stephen Rodriguez, Paolina Centonze |
| 2016 | ICSE | Cross-platform access-rights analysis of mobile applications. | Walter Squires, Paolina Centonze |
| 2015 | ECOOP | Access-rights Analysis in the Presence of Subjects. | Paolina Centonze, Marco Pistoia, Omer Tripp |
| 2015 | ICSE | Application- and User-Sensitive Privacy Enforcement in Mobile Systems. | Omer Tripp, Marco Pistoia, Paolina Centonze |
| 2015 | MDM | Labyrinth: Visually Configurable Data-Leakage Detection in Mobile Applications. | Marco Pistoia, Omer Tripp, Paolina Centonze, Joseph W. Ligman |
| 2015 | OOPSLA | Automatic detection, correction, and visualization of security vulnerabilities in mobile apps. | Marco Pistoia, Omer Tripp, Pietro Ferrara, Paolina Centonze |
| 2007 | ACSAC | Combining Static and Dynamic Analysis for Automatic Identification of Precise Access-Control Policies. | Paolina Centonze, Robert J. Flynn, Marco Pistoia |
| 2006 | ISSTA | Role-Based access control consistency validation. | Paolina Centonze, Gleb Naumovich, Stephen J. Fink, Marco Pistoia |