Realistic Passive Packet Loss Measurement for High-Speed Networks. - Ales Friedl; Sven Ubik; Alexandros Kapravelos; Michalis Polychronakis; Evangelos P. Markatos (TMA, 2009)

FleXConf: A Flexible Conference Assistant Using Context-Aware Notification Services. - Nikos Armenatzoglou; Yannis Marketakis; Lito Kriara; Elias Apostolopoulos; Vicky Papavasiliou; Dimitris Kampas; Alexandros Kapravelos; Eythimis Kartsonakis; Giorgos Linardakis; Sofia Nikitaki; Antonis Bikakis; Grigoris Antoniou (OTM Workshops, 2009)

D(e|i)aling with VoIP: Robust Prevention of DIAL Attacks. - Alexandros Kapravelos; Iasonas Polakis; Elias Athanasopoulos; Sotiris Ioannidis; Evangelos P. Markatos (ESORICS, 2010)

Escape from Monkey Island: Evading High-Interaction Honeyclients. - Alexandros Kapravelos; Marco Cova; Christopher Kruegel; Giovanni Vigna (DIMVA, 2011)

You are what you include: large-scale evaluation of remote javascript inclusions. - Nick Nikiforakis; Luca Invernizzi; Alexandros Kapravelos; Steven Van Acker; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (CCS, 2012)

Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. - Nick Nikiforakis; Alexandros Kapravelos; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2013)

Revolver: An Automated Approach to the Detection of Evasive Web-based Malware. - Alexandros Kapravelos; Yan Shoshitaishvili; Marco Cova; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2013)

PExy: The Other Side of Exploit Kits. - Giancarlo De Maio; Alexandros Kapravelos; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (DIMVA, 2014)

The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements. - Apostolis Zarras; Alexandros Kapravelos; Gianluca Stringhini; Thorsten Holz; Christopher Kruegel; Giovanni Vigna (Internet Measurement Conference, 2014)

Hulk: Eliciting Malicious Behavior in Browser Extensions. - Alexandros Kapravelos; Chris Grier; Neha Chachra; Christopher Kruegel; Giovanni Vigna; Vern Paxson (USENIX Security Symposium, 2014)

On the Workings and Current Practices of Web-Based Device Fingerprinting. - Nick Nikiforakis; Alexandros Kapravelos; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (IEEE Secur. Priv., 2014)

Ad Injection at Scale: Assessing Deceptive Advertisement Modifications. - Kurt Thomas; Elie Bursztein; Chris Grier; Grant Ho; Nav Jagpal; Alexandros Kapravelos; Damon McCoy; Antonio Nappa; Vern Paxson; Paul Pearce; Niels Provos; Moheeb Abu Rajab (IEEE Symposium on Security and Privacy, 2015)

Analyzing and Defending Against Evolving Web Threats. - Alexandros Kapravelos (2015)

Cloak of Visibility: Detecting When Machines Browse a Different Web. - Luca Invernizzi; Kurt Thomas; Alexandros Kapravelos; Oxana Comanescu; Jean-Michel Picod; Elie Bursztein (IEEE Symposium on Security and Privacy, 2016)

Mystique: Uncovering Information Leakage from Browser Extensions. - Quan Chen; Alexandros Kapravelos (CCS, 2018)

Wild Extensions: Discovering and Analyzing Unlisted Chrome Extensions. - Aidan Beggs; Alexandros Kapravelos (DIMVA, 2019)

VisibleV8: In-browser Monitoring of JavaScript in the Wild. - Jordan Jueckstock; Alexandros Kapravelos (Internet Measurement Conference, 2019)

Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting. - Erik Trickel; Oleksii Starov; Alexandros Kapravelos; Nick Nikiforakis; Adam Doupé (USENIX Security Symposium, 2019)

Unnecessarily Identifiable: Quantifying the fingerprintability of browser extensions due to bloat. - Oleksii Starov; Pierre Laperdrix; Alexandros Kapravelos; Nick Nikiforakis (WWW, 2019)

The Blind Men and the Internet: Multi-Vantage Point Web Measurements. - Jordan Jueckstock; Shaown Sarker; Peter Snyder; Panagiotis Papadopoulos; Matteo Varvello; Benjamin Livshits; Alexandros Kapravelos (CoRR, 2019)

You've Changed: Detecting Malicious Browser Extensions through their Update Deltas. - Nikolaos Pantelaios; Nick Nikiforakis; Alexandros Kapravelos (CCS, 2020)

Hiding in Plain Site: Detecting JavaScript Obfuscation through Concealed Browser API Usage. - Shaown Sarker; Jordan Jueckstock; Alexandros Kapravelos (Internet Measurement Conference, 2020)

Mininode: Reducing the Attack Surface of Node.js Applications. - Igibek Koishybayev; Alexandros Kapravelos (RAID, 2020)

Improving Web Content Blocking With Event-Loop-Turn Granularity JavaScript Signatures. - Quan Chen; Peter Snyder; Ben Livshits; Alexandros Kapravelos (CoRR, 2020)

There's No Trick, Its Just a Simple Trick: A Web-Compat and Privacy Improving Approach to Third-party Web Storage. - Jordan Jueckstock; Peter Snyder; Shaown Sarker; Alexandros Kapravelos; Benjamin Livshits (CoRR, 2020)

Introduction to the ACSAC'19 Special Issue - Part 1. - Roberto Perdisci; Martina Lindorfer; Adam Doupé; Andrea Lanzi; Alexandros Kapravelos; Gianluca Stringhini (DTRAP, 2020)

Browserprint: an Analysis of the Impact of Browser Features on Fingerprintability and Web Privacy. - Seyed Ali Akhavani; Jordan Jueckstock; Junhua Su; Alexandros Kapravelos; Engin Kirda; Long Lu (ISC, 2021)

Favocado: Fuzzing the Binding Code of JavaScript Engines Using Semantically Correct Test Cases. - Sung Ta Dinh; Haehyun Cho; Kyle Martin; Adam Oest; Kyle Zeng; Alexandros Kapravelos; Gail-Joon Ahn; Tiffany Bao; Ruoyu Wang 001; Adam Doupé; Yan Shoshitaishvili (NDSS, 2021)

Detecting Filter List Evasion with Event-Loop-Turn Granularity JavaScript Signatures. - Quan Chen; Peter Snyder; Ben Livshits; Alexandros Kapravelos (SP, 2021)

Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets. - Pierre Laperdrix; Oleksii Starov; Quan Chen; Alexandros Kapravelos; Nick Nikiforakis (USENIX Security Symposium, 2021)

Cookie Swap Party: Abusing First-Party Cookies for Web Tracking. - Quan Chen; Panagiotis Ilia; Michalis Polychronakis; Alexandros Kapravelos (WWW, 2021)

Towards Realistic and ReproducibleWeb Crawl Measurements. - Jordan Jueckstock; Shaown Sarker; Peter Snyder; Aidan Beggs; Panagiotis Papadopoulos; Matteo Varvello; Benjamin Livshits; Alexandros Kapravelos (WWW, 2021)

Categorizing Service Worker Attacks and Mitigations. - Karthika Subramani; Jordan Jueckstock; Alexandros Kapravelos; Roberto Perdisci (CoRR, 2021)

Introduction to the ACSAC'19 Special Issue - Vol. 2. - Roberto Perdisci; Martina Lindorfer; Adam Doupé; Andrea Lanzi; Alexandros Kapravelos; Gianluca Stringhini (DTRAP, 2021)

SoK: Workerounds - Categorizing Service Worker Attacks and Mitigations. - Karthika Subramani; Jordan Jueckstock; Alexandros Kapravelos; Roberto Perdisci (EuroS&P, 2022)

yoU aRe a Liar: //A Unified Framework for Cross-Testing URL Parsers. - Dashmeet Kaur Ajmani; Igibek Koishybayev; Alexandros Kapravelos (SP (Workshops), 2022)

Characterizing the Security of Github CI Workflows. - Igibek Koishybayev; Aleksandr Nahapetyan; Raima Zachariah; Siddharth Muralee; Bradley Reaves; Alexandros Kapravelos; Aravind Machiry (USENIX Security Symposium, 2022)

Measuring the Privacy vs. Compatibility Trade-off in Preventing Third-Party Stateful Tracking. - Jordan Jueckstock; Peter Snyder; Shaown Sarker; Alexandros Kapravelos; Benjamin Livshits (WWW, 2022)

CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing. - Penghui Zhang; Adam Oest; Haehyun Cho; Zhibo Sun; RC Johnson; Brad Wardman; Shaown Sarker; Alexandros Kapravelos; Tiffany Bao; Ruoyu Wang 001; Yan Shoshitaishvili; Adam Doupé; et al. (IEEE Secur. Priv., 2022)

ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions. - Siddharth Muralee; Igibek Koishybayev; Aleksandr Nahapetyan; Greg Tystahl; Bradley Reaves; Antonio Bianchi; William Enck; Alexandros Kapravelos; Aravind Machiry (USENIX Security Symposium, 2023)

Automatic Discovery of Emerging Browser Fingerprinting Techniques. - Junhua Su; Alexandros Kapravelos (WWW, 2023)

S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit. - Mindy Tran; Yasemin Acar; Michel Cucker; William Enck; Alexandros Kapravelos; Christian Kästner; Laurie A. Williams (CoRR, 2023)

S3C2 Summit 2023-02: Industry Secure Supply Chain Summit. - Trevor Dunlap; Yasemin Acar; Michel Cucker; William Enck; Alexandros Kapravelos; Christian Kästner; Laurie A. Williams (CoRR, 2023)

S3C2 Summit 2023-06: Government Secure Supply Chain Summit. - William Enck; Yasemin Acar; Michel Cukier; Alexandros Kapravelos; Christian Kästner; Laurie A. Williams (CoRR, 2023)

Automated Generation of Behavioral Signatures for Malicious Web Campaigns. - Shaown Sarker; William Melicher; Oleksii Starov; Anupam Das 001; Alexandros Kapravelos (ISC (2), 2024)

JSHint: Revealing API Usage to Improve Detection of Malicious JavaScript. - Shaown Sarker; Kasimir Schulz; Aleksandr Nahapetyan; Anupam Das 001; Alexandros Kapravelos (ISC (2), 2024)

UntrustIDE: Exploiting Weaknesses in VS Code Extensions. - Elizabeth Lin; Igibek Koishybayev; Trevor Dunlap; William Enck; Alexandros Kapravelos (NDSS, 2024)

On SMS Phishing Tactics and Infrastructure. - Aleksandr Nahapetyan; Sathvik Prasad; Kevin Childs; Adam Oest; Yeganeh Ladwig; Alexandros Kapravelos; Bradley Reaves (SP, 2024)

FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques. - Nikolaos Pantelaios; Alexandros Kapravelos (USENIX Security Symposium, 2024)

Manifest V3 Unveiled: Navigating the New Era of Browser Extensions. - Nikolaos Pantelaios; Alexandros Kapravelos (CoRR, 2024)

S3C2 Summit 2024-03: Industry Secure Supply Chain Summit. - Greg Tystahl; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

S3C2 Summit 2023-11: Industry Secure Supply Chain Summit. - Nusrat Zahan; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2024)

4.5 Million (Suspected) Fake Stars in GitHub: A Growing Spiral of Popularity Contests, Scams, and Malware. - Hao He 012; Haoqin Yang; Philipp Burckhardt; Alexandros Kapravelos; Bogdan Vasilescu; Christian Kästner (CoRR, 2024)

WRIT: Web Request Integrity and Attestation Against Malicious Browser Extensions. - Giorgos Vasiliadis; Apostolos Karampelas; Alexandros Shevtsov; Panagiotis Papadopoulos; Sotiris Ioannidis; Alexandros Kapravelos (IEEE Trans. Dependable Secur. Comput., 2024)

An Empirical Study on Reproducible Packaging in Open-Source Ecosystems. - Giacomo Benedetti; Oreofe Solarin; Courtney Miller; Greg Tystahl; William Enck; Christian Kästner; Alexandros Kapravelos; Alessio Merlo; Luca Verderame (ICSE, 2025)

S3C2 Summit 2024-08: Government Secure Supply Chain Summit. - Courtney Miller; William Enck; Yasemin Acar; Michel Cukier; Alexandros Kapravelos; Christian Kästner; Dominik Wermke; Laurie A. Williams (CoRR, 2025)

S3C2 Summit 2024-09: Industry Secure Software Supply Chain Summit. - Imranur Rahman; Yasemin Acar; Michel Cukier; William Enck; Christian Kästner; Alexandros Kapravelos; Dominik Wermke; Laurie A. Williams (CoRR, 2025)

SoK: Advances and Open Problems in Web Tracking. - Yash Vekaria; Yohan Beugin; Shaoor Munir; Gunes Acar; Nataliia Bielova; Steven Englehardt; Umar Iqbal 002; Alexandros Kapravelos; Pierre Laperdrix; Nick Nikiforakis; Jason Polakis; Franziska Roesner; et al. (CoRR, 2025)

Research Directions in Software Supply Chain Security. - Laurie A. Williams; Giacomo Benedetti; Sivana Hamer; Ranindya Paramitha; Imranur Rahman; Mahzabin Tamanna; Greg Tystahl; Nusrat Zahan; Patrick Morrison; Yasemin Acar; Michel Cukier; Christian Kästner; et al. (ACM Trans. Softw. Eng. Methodol., 2025)