| 2016 | Leakage-Resilient Layout Randomization for Mobile Devices. | Kjell Braden, Lucas Davi, Christopher Liebchen, Ahmad-Reza Sadeghi, Stephen Crane, Michael Franz, Per Larsen |
| 2016 | Protecting C++ Dynamic Dispatch Through VTable Interleaving. | Dimitar Bounov, Rami Gkhan Kici, Sorin Lerner |
| 2016 | Differentially Private Password Frequency Lists. | Jeremiah Blocki, Anupam Datta, Joseph Bonneau |
| 2016 | Equihash: Asymmetric Proof-of-Work Based on the Generalized Birthday Problem. | Alex Biryukov, Dmitry Khovratovich |
| 2016 | Transcript Collision Attacks: Breaking Authentication in TLS, IKE and SSH. | Karthikeyan Bhargavan, Gatan Leurent |
| 2016 | SIBRA: Scalable Internet Bandwidth Reservation Architecture. | Cristina Basescu, Raphael M. Reischuk, Pawel Szalachowski, Adrian Perrig, Yao Zhang, Hsu-Chun Hsiao, Ayumu Kubota, Jumpei Urakawa |
| 2016 | SKEE: A lightweight Secure Kernel-level Execution Environment for ARM. | Ahmed M. Azab, Kirk Swidowski, Rohan Bhutkar, Jia Ma, Wenbo Shen, Ruowen Wang, Peng Ning |
| 2016 | Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy. | Vitor Monte Afonso, Paulo L. de Geus, Antonio Bianchi, Yanick Fratantonio, Christopher Kruegel, Giovanni Vigna, Adam Doup, Mario Polino |
| 2016 | Who Are You? A Statistical Approach to Measuring User Authenticity. | David Freeman, Sakshi Jain, Markus Drmuth, Battista Biggio, Giorgio Giacinto |
| 2015 | Gracewipe: Secure and Verifiable Deletion under Coercion. | Lianying Zhao, Mohammad Mannan |
| 2015 | VTint: Protecting Virtual Function Tables' Integrity. | Chao Zhang, Chengyu Song, Kevin Zhijie Chen, Zhaofeng Chen, Dawn Song |
| 2015 | FreeSentry: protecting against use-after-free vulnerabilities due to dangling pointers. | Yves Younan |
| 2015 | No More Gotos: Decompilation Using Pattern-Independent Control-Flow Structuring and Semantic-Preserving Transformations. | Khaled Yakdan, Sebastian Eschweiler, Elmar Gerhards-Padilla, Matthew Smith |
| 2015 | DeepDroid: Dynamically Enforcing Enterprise Policy on Android Devices. | Xueqiang Wang, Kun Sun, Yuewu Wang, Jiwu Jing |
| 2015 | Efficient RAM and control flow in verifiable outsourced computation. | Riad S. Wahby, Srinath T. V. Setty, Zuocheng Ren, Andrew J. Blumberg, Michael Walfish |
| 2015 | Parking Sensors: Analyzing and Detecting Parked Domains. | Thomas Vissers, Wouter Joosen, Nick Nikiforakis |
| 2015 | Mind Your Blocks: On the Stealthiness of Malicious BGP Hijacks. | Pierre-Antoine Vervier, Olivier Thonnard, Marc Dacier |
| 2015 | CopperDroid: Automatic Reconstruction of Android Malware Behaviors. | Kimberly Tam, Salahuddin J. Khan, Aristide Fattori, Lorenzo Cavallaro |
| 2015 | Exploiting and Protecting Dynamic Code Generation. | Chengyu Song, Chao Zhang, Tielei Wang, Wenke Lee, David Melski |
| 2015 | Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware. | Yan Shoshitaishvili, Ruoyu Wang, Christophe Hauser, Christopher Kruegel, Giovanni Vigna |
| 2015 | vfGuard: Strict Protection for Virtual Function Calls in COTS C++ Binaries. | Aravind Prakash, Xunchao Hu, Heng Yin |
| 2015 | Securing the Software Defined Network Control Layer. | Phillip A. Porras, Steven Cheung, Martin W. Fong, Keith Skinner, Vinod Yegneswaran |
| 2015 | DEFY: A Deniable, Encrypted File System for Log-Structured Storage. | Timothy Peters, Mark A. Gondree, Zachary N. J. Peterson |
| 2015 | I Do Not Know What You Visited Last Summer: Protecting users from stateful third-party web tracking with TrackingFree browser. | Xiang Pan, Yinzhi Cao, Yan Chen |
| 2015 | Bloom Cookies: Web Search Personalization without User Tracking. | Nitesh Mor, Oriana Riva, Suman Nath, John Kubiatowicz |