| 2011 | A server- and browser-transparent CSRF defense for web 2.0 applications. | Riccardo Pelizzi, R. Sekar |
| 2011 | Private search in the real world. | Vasilis Pappas, Mariana Raykova, Binh Vo, Steven M. Bellovin, Tal Malkin |
| 2011 | "Mix-in-Place" anonymous networking using secure function evaluation. | Nilesh Nipane, Italo Dacosta, Patrick Traynor |
| 2011 | Detecting malware's failover C&C strategies with squeeze. | Matthias Neugschwandtner, Paolo Milani Comparetti, Christian Platzer |
| 2011 | FORECAST: skimming off the malware cream. | Matthias Neugschwandtner, Paolo Milani Comparetti, Grgoire Jacob, Christopher Kruegel |
| 2011 | Automated remote repair for mobile malware. | Yacin Nadji, Jonathon T. Giffin, Patrick Traynor |
| 2011 | Understanding the prevalence and use of alternative plans in malware with network games. | Yacin Nadji, Manos Antonakakis, Roberto Perdisci, Wenke Lee |
| 2011 | Exploring the potential benefits of expanded rate limiting in Tor: slow and steady wins the race with Tortoise. | W. Brad Moore, Chris Wacek, Micah Sherr |
| 2011 | deRop: removing return-oriented programming from malware. | Kangjie Lu, Dabi Zou, Weiping Wen, Debin Gao |
| 2011 | Exposing invisible timing-based traffic watermarks with BACKLIT. | Xiapu Luo, Peng Zhou, Junjie Zhang, Roberto Perdisci, Wenke Lee, Rocky K. C. Chang |
| 2011 | Attacks on WebView in the Android system. | Tongbo Luo, Hao Hao, Wenliang Du, Yifei Wang, Heng Yin |
| 2011 | "Super nodes" in Tor: existence and security implication. | Chenglong Li, Yibo Xue, Yingfei Dong, Dongsheng Wang |
| 2011 | BLOCK: a black-box approach for detection of state violation attacks towards web applications. | Xiaowei Li, Yuan Xue |
| 2011 | Static detection of malicious JavaScript-bearing PDF documents. | Pavel Laskov, Nedim Srndic |
| 2011 | BareBox: efficient malware analysis on bare-metal. | Dhilung Kirat, Giovanni Vigna, Christopher Kruegel |
| 2011 | Improving robustness of DNS to software vulnerabilities. | Ahmed Khurshid, Firat Kiyak, Matthew Caesar |
| 2011 | Smart metering de-pseudonymization. | Marek Jawurek, Martin Johns, Konrad Rieck |
| 2011 | Social snapshots: digital forensics for online social networks. | Markus Huber, Martin Mulazzani, Manuel Leithner, Sebastian Schrittwieser, Gilbert Wondracek, Edgar R. Weippl |
| 2011 | Distilling critical attack graph surface iteratively through minimum-cost SAT solving. | Heqing Huang, Su Zhang, Xinming Ou, Atul Prakash, Karem A. Sakallah |
| 2011 | Detecting and resolving privacy conflicts for collaborative data sharing in online social networks. | Hongxin Hu, Gail-Joon Ahn, Jan Jorgensen |
| 2011 | Facing the facts about image type in recognition-based graphical passwords. | Max Hlywa, Robert Biddle, Andrew S. Patrick |
| 2011 | Tracking payment card data flow using virtual machine state introspection. | Jennia Hizver, Tzi-cker Chiueh |
| 2011 | PhorceField: a phish-proof password ceremony. | Michael Hart, Claude Castille, Manoj Harpalani, Jonathan Toohill, Rob Johnson |
| 2011 | Reliable telemetry in white spaces using remote attestation. | Omid Fatemieh, Michael LeMay, Carl A. Gunter |
| 2011 | Hit 'em where it hurts: a live security exercise on cyber situational awareness. | Adam Doup, Manuel Egele, Benjamin Caillat, Gianluca Stringhini, Gorkem Yakin, Ali Zand, Ludovico Cavedon, Giovanni Vigna |