Optical Delusions: A Study of Malicious QR Codes in the Wild. - Amin Kharraz; Engin Kirda; William K. Robertson; Davide Balzarotti; Aurélien Francillon (DSN, 2014)

Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. - Amin Kharraz; William K. Robertson; Davide Balzarotti; Leyla Bilge; Engin Kirda (DIMVA, 2015)

Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions. - Sajjad Arshad; Amin Kharraz; William Robertson 002 (Financial Cryptography, 2016)

Identifying Extension-Based Ad Injection via Fine-Grained Web Content Provenance. - Sajjad Arshad; Amin Kharraz; William Robertson 002 (RAID, 2016)

UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. - Amin Kharraz; Sajjad Arshad; Collin Mulliner; William K. Robertson; Engin Kirda (USENIX Security Symposium, 2016)

Redemption: Real-Time Protection Against Ransomware at End-Hosts. - Amin Kharraz; Engin Kirda (RAID, 2017)

Surveylance: Automatically Detecting Online Survey Scams. - Amin Kharraz; William K. Robertson; Engin Kirda (IEEE Symposium on Security and Privacy, 2018)

Protecting against Ransomware: A New Line of Research or Restating Classic Ideas? - Amin Kharraz; William K. Robertson; Engin Kirda (IEEE Secur. Priv., 2018)

USBESAFE: An End-Point Solution to Protect Against USB-Based Attacks. - Amin Kharraz; Brandon L. Daley; Graham Z. Baker; William Robertson 002; Engin Kirda (RAID, 2019)

Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild. - Amin Kharraz; Zane Ma; Paul Murley; Charles Lever; Joshua Mason; Andrew Miller 001; Nikita Borisov; Manos Antonakakis; Michael D. Bailey (WWW, 2019)

You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures. - Tommaso Innocenti; Seyed Ali Mirheidari; Amin Kharraz; Bruno Crispo; Engin Kirda (DIMVA, 2021)

SCRUTINIZER: Detecting Code Reuse in Malware via Decompilation and Machine Learning. - Omid Mirzaei; Roman Vasilenko; Engin Kirda; Long Lu; Amin Kharraz (DIMVA, 2021)

Preventing server-side request forgery attacks. - Bahruz Jabiyev; Omid Mirzaei; Amin Kharraz; Engin Kirda (SAC, 2021)

WebSocket Adoption and the Landscape of the Real-Time Web. - Paul Murley; Zane Ma; Joshua Mason; Michael D. Bailey; Amin Kharraz (WWW, 2021)

An End-to-End Analysis of Covid-Themed Scams in the Wild. - Behzad Ousat; Mohammad Ali Tofighi; Amin Kharraz (AsiaCCS, 2023)

EnSolver: Uncertainty-Aware CAPTCHA Solver Using Deep Ensembles. - Duc C. Hoang; Cuong V. Nguyen; Amin Kharraz (CoRR, 2023)

Constructs of Deceit: Exploring Nuances in Modern Social Engineering Attacks. - Mohammad Ali Tofighi; Behzad Ousat; Javad Zandi; Esteban Schafir; Amin Kharraz (DIMVA, 2024)

DevPhish: Exploring Social Engineering in Software Supply Chain Attacks on Developers. - Hossein Siadati; Sima Jafarikhah; Elif Sahin; Terrence Brent Hernandez; Elijah Lorenzo Tripp; Denis Khryashchev; Amin Kharraz (UEMCON, 2024)

Breaking the Bot Barrier: Evaluating Adversarial AI Techniques Against Multi-Modal Defense Models. - Behzad Ousat; Dongsheng Luo; Amin Kharraz (WWW (Companion Volume), 2024)

The Matter of Captchas: An Analysis of a Brittle Security Feature on the Modern Web. - Behzad Ousat; Esteban Schafir; Duc C. Hoang; Mohammad Ali Tofighi; Cuong V. Nguyen; Sajjad Arshad; A. Selcuk Uluagac; Amin Kharraz (WWW, 2024)

(In)Security of File Uploads in Node.js. - Harun Oz; Abbas Acar; Ahmet Aris; Güliz Seray Tuncay; Amin Kharraz; A. Selcuk Uluagac (WWW, 2024)

In-Application Defense Against Evasive Web Scans through Behavioral Analysis. - Behzad Ousat; Mahshad Shariatnasab; Esteban Schafir; Farhad Shirani Chaharsooghi; Amin Kharraz (CoRR, 2024)

PriveShield: Enhancing User Privacy Using Automatic Isolated Profiles in Browsers. - Seyed Ali Akhavani; Engin Kirda; Amin Kharraz (CoRR, 2025)

Beyond the Upload Button: A 10-Year Retrospective on Security Issues Within File Upload. - Harun Oz; Güliz Seray Tuncay; Ahmet Aris; Amin Kharraz; Arif Selcuk Uluagac (IEEE Commun. Mag., 2025)

An In-kernel Forensics Engine for Investigating Evasive Attacks. - Javad Zandi; Lalchandra Rampersaud; Amin Kharraz (CoRR, 2025)

Open Source, Open Threats? Investigating Security Challenges in Open-Source Software. - Seyed Ali Akhavani; Behzad Ousat; Amin Kharraz (CoRR, 2025)