| 2020 | SEC | Zeek-Osquery: Host-Network Correlation for Advanced Monitoring and Intrusion Detection. | Steffen Haas, Robin Sommer, Mathias Fischer |
| 2016 | ACSAC | Spicy: a unified deep packet inspection framework for safely dissecting all your data. | Robin Sommer, Johanna Amann, Seth Hall |
| 2016 | NSDI | VAST: A Unified Platform for Interactive Network Forensics. | Matthias Vallentin, Vern Paxson, Robin Sommer |
| 2016 | PAM | Exploring Tor's Activity Through Long-Term Passive TLS Traffic Measurement. | Johanna Amann, Robin Sommer |
| 2015 | KDD | On the Reliability of Profile Matching Across Large Online Social Networks. | Oana Goga, Patrick Loiseau, Robin Sommer, Renata Teixeira, Krishna P. Gummadi |
| 2015 | RAID | Providing Dynamic Control to Passive Network Security Monitoring. | Johanna Amann, Robin Sommer |
| 2014 | ACSAC | Through the eye of the PLC: semantic security monitoring for industrial processes. | Dina Hadziosmanovic, Robin Sommer, Emmanuele Zambon, Pieter H. Hartel |
| 2014 | CCS | Beyond Pattern Matching: A Concurrency Model for Stateful Deep Packet Inspection. | Lorenzo De Carli, Robin Sommer, Somesh Jha |
| 2014 | IMC | HILTI: an Abstract Execution Environment for Deep, Stateful Network Traffic Analysis. | Robin Sommer, Matthias Vallentin, Lorenzo De Carli, Vern Paxson |
| 2014 | RAID | Count Me In: Viable Distributed Summary Statistics for Securing High-Speed Networks. | Johanna Amann, Seth Hall, Robin Sommer |
| 2013 | ACSAC | No attack necessary: the surprising dynamics of SSL trust relationships. | B. Amann, Robin Sommer, Matthias Vallentin, Seth Hall |
| 2013 | WWW | Here's my cert, so trust me, maybe?: understanding TLS errors on the web. | Devdatta Akhawe, B. Amann, Matthias Vallentin, Robin Sommer |
| 2013 | WWW | Exploiting innocuous activity for correlating users across sites. | Oana Goga, Howard Lei, Sree Hari Krishnan Parthasarathi, Gerald Friedland, Robin Sommer, Renata Teixeira |
| 2012 | PAM | Investigating IPv6 Traffic - What Happened at the World IPv6 Day? | Nadi Sarrar, Gregor Maier, Bernhard Ager, Robin Sommer, Steve Uhlig |
| 2012 | RAID | A Lone Wolf No More: Supporting Network Intrusion Detection with Real-Time Intelligence. | B. Amann, Robin Sommer, Aashish Sharma, Seth Hall |
| 2011 | DIMVA | An Assessment of Overt Malicious Activity Manifest in Residential Networks. | Gregor Maier, Anja Feldmann, Vern Paxson, Robin Sommer, Matthias Vallentin |
| 2011 | NSPW | Sherlock holmes' evil twin: on the impact of global inference for online privacy. | Gerald Friedland, Gregor Maier, Robin Sommer, Nicholas Weaver |
| 2010 | SP | Outside the Closed World: On Using Machine Learning for Network Intrusion Detection. | Robin Sommer, Vern Paxson |
| 2009 | HOTNETS | Securing Mediated Trace Access Using Black-box Permutation Analysis. | Prateek Mittal, Vern Paxson, Robin Sommer, Mark Winterrowd |
| 2009 | NDSS | Detecting Forged TCP Reset Packets. | Nicholas Weaver, Robin Sommer, Vern Paxson |
| 2008 | RAID | Predicting the Resource Consumption of Network Intrusion Detection Systems. | Holger Dreger, Anja Feldmann, Vern Paxson, Robin Sommer |
| 2008 | SIGCOMM | Enriching network security analysis with time travel. | Gregor Maier, Robin Sommer, Holger Dreger, Anja Feldmann, Vern Paxson, Fabian Schneider |
| 2008 | SIGMETRICS | Predicting the resource consumption of network intrusion detection systems. | Holger Dreger, Anja Feldmann, Vern Paxson, Robin Sommer |
| 2007 | RAID | The NIDS Cluster: Scalable, Stateful Network Intrusion Detection on Commodity Hardware. | Matthias Vallentin, Robin Sommer, Jason Lee, Craig Leres, Vern Paxson, Brian Tierney |
| 2006 | IMC | binpac: a yacc for writing application protocol parsers. | Ruoming Pang, Vern Paxson, Robin Sommer, Larry L. Peterson |
| 2006 | SecureComm | Work in Progress: Bro-LAN Pervasive Network Inspection and Control for LAN Traffic. | Nicholas Weaver, Vern Paxson, Robin Sommer |
| 2005 | ACSAC | Exploiting Independent State For Network Intrusion Detection. | Robin Sommer, Vern Paxson |
| 2005 | DIMVA | Enhancing the Accuracy of Network-Based Intrusion Detection with Host-Based Context. | Holger Dreger, Christian Kreibich, Vern Paxson, Robin Sommer |
| 2005 | IMC | Building a Time Machine for Efficient Recording and Retrieval of High-Volume Network Traffic. | Stefan Kornexl, Vern Paxson, Holger Dreger, Anja Feldmann, Robin Sommer |
| 2004 | CCS | Operational experiences with high-volume network intrusion detection. | Holger Dreger, Anja Feldmann, Vern Paxson, Robin Sommer |
| 2004 | IMC | Packet trace manipulation rramework for test labs. | Andy Rupp, Holger Dreger, Anja Feldmann, Robin Sommer |
| 2003 | CCS | Enhancing byte-level network intrusion detection signatures with context. | Robin Sommer, Vern Paxson |
| 2002 | IMC | NetFlow: information loss or win? | Robin Sommer, Anja Feldmann |