| 2008 | VeriKey: A Dynamic Certificate Verification System for Public Key Exchanges. | Brett Stone-Gross, David Sigal, Rob Cohn, John Morse, Kevin C. Almeroth, Christopher Kruegel |
| 2008 | Embedded Malware Detection Using Markov n-Grams. | M. Zubair Shafiq, Syed Ali Khayam, Muddassar Farooq |
| 2008 | Learning and Classification of Malware Behavior. | Konrad Rieck, Thorsten Holz, Carsten Willems, Patrick Dssel, Pavel Laskov |
| 2008 | The Quest for Multi-headed Worms. | Van-Hau Pham, Marc Dacier, Guillaume Urvoy-Keller, Taoufik En-Najjary |
| 2008 | FluXOR: Detecting and Monitoring Fast-Flux Service Networks. | Emanuele Passerini, Roberto Paleari, Lorenzo Martignoni, Danilo Bruschi |
| 2008 | On Race Vulnerabilities in Web Applications. | Roberto Paleari, Davide Marrone, Danilo Bruschi, Mattia Monga |
| 2008 | A Tool for Offline and Live Testing of Evasion Resilience in Network Intrusion Detection Systems. | Leo Juan, Christian Kreibich, Chih-Hung Lin, Vern Paxson |
| 2008 | The Contact Surface: A Technique for Exploring Internet Scale Emergent Behaviors. | Carrie Gates, John McHugh |
| 2008 | On the Limits of Information Flow Techniques for Malware Analysis and Containment. | Lorenzo Cavallaro, Prateek Saxena, R. Sekar |
| 2008 | XSS-GUARD: Precise Dynamic Prevention of Cross-Site Scripting Attacks. | Prithvi Bisht, V. N. Venkatakrishnan |
| 2008 | Data Space Randomization. | Sandeep Bhatkar, R. Sekar |
| 2008 | Dynamic Binary Instrumentation-Based Framework for Malware Defense. | Najwa Aaraj, Anand Raghunathan, Niraj K. Jha |
| 2007 | Passive Monitoring of DNS Anomalies. | Bojan Zdrnja, Nevil Brownlee, Duane Wessels |
| 2007 | Characterizing Bots' Remote Control Behavior. | Elizabeth Stinson, John C. Mitchell |
| 2007 | Targeting Physically Addressable Memory. | David R. Piegdon, Lexi Pimenidis |
| 2007 | Characterizing Dark DNS Behavior. | Jon Oberheide, Manish Karir, Zhuoqing Morley Mao |
| 2007 | On the Effects of Learning Set Corruption in Anomaly-Based Detection of Web Defacements. | Eric Medvet, Alberto Bartoli |
| 2007 | On the Effectiveness of Techniques to Detect Phishing Sites. | Christian Ludl, Sean McAllister, Engin Kirda, Christopher Kruegel |
| 2007 | Extensible Web Browser Security. | Mike Ter Louw, Jin Soon Lim, V. N. Venkatakrishnan |
| 2007 | A Study of Malcode-Bearing Documents. | Wei-Jen Li, Salvatore J. Stolfo, Angelos Stavrou, Elli Androulaki, Angelos D. Keromytis |
| 2007 | Distributed Evasive Scan Techniques and Countermeasures. | Min Gyung Kang, Juan Caballero, Dawn Xiaodong Song |
| 2007 | On the Adaptive Real-Time Detection of Fast-Propagating Network Worms. | Jaeyeon Jung, Rodolfo A. Milito, Vern Paxson |
| 2007 | Protecting the Intranet Against "JavaScript Malware" and Related Attacks. | Martin Johns, Justus Winter |
| 2007 | Measurement and Analysis of Autonomous Spreading Malware in a University Environment. | Jan Goebel, Thorsten Holz, Carsten Willems |
| 2007 | Intrusion Detection as Passive Testing: Linguistic Support with TTCN-3 (Extended Abstract). | Krzysztof M. Brzezinski |