| 2026 | CHI | Tool-Assisted CVSS Vulnerability Scoring: A Controlled Quantitative Study of Human Assessment. | Siqi Zhang, Minjie Cai, Lianying Zhao, Xavier de Carn de Carnavalet, Fabio Massacci, Mengyuan Zhang |
| 2025 | CHI | Understanding Home Router Configuration Habits & Attitudes. | Junjian Ye, Xavier de Carn de Carnavalet, Lianying Zhao, Lifa Wu, Mengyuan Zhang |
| 2024 | AsiaCCS | Exposed by Default: A Security Analysis of Home Router Default Settings. | Junjian Ye, Xavier de Carn de Carnavalet, Lianying Zhao, Mengyuan Zhang, Lifa Wu, Wei Zhang |
| 2023 | CloudCom | The Flaw Within: Identifying CVSS Score Discrepancies in the NVD. | Siqi Zhang, Minjie Cai, Mengyuan Zhang, Lianying Zhao, Xavier de Carn de Carnavalet |
| 2016 | NDSS | Killed by Proxy: Analyzing Client-end TLS Interception Software. | Xavier de Carn de Carnavalet, Mohammad Mannan |
| 2014 | ACSAC | Challenges and implications of verifiable builds for security-critical open-source software. | Xavier de Carn de Carnavalet, Mohammad Mannan |
| 2014 | NDSS | From Very Weak to Very Strong: Analyzing Password-Strength Meters. | Xavier de Carn de Carnavalet, Mohammad Mannan |