Trellis: Privilege Separation for Multi-user Applications Made Easy. - Andrea Mambretti; Kaan Onarlioglu; Collin Mulliner; William Robertson 002; Engin Kirda; Federico Maggi 001; Stefano Zanero (RAID, 2016)

LAVA: Large-Scale Automated Vulnerability Addition. - Brendan Dolan-Gavitt; Patrick Hulin; Engin Kirda; Tim Leek; Andrea Mambretti; William K. Robertson; Frederick Ulrich; Ryan Whelan (IEEE Symposium on Security and Privacy, 2016)

Educational game design: an empirical study of the effects of narrative. - Chaima Jemmali; Sara Bunian; Andrea Mambretti; Magy Seif El-Nasr (FDG, 2018)

Speculator: a tool to analyze speculative execution attacks and mitigations. - Andrea Mambretti; Matthias Neugschwandtner; Alessandro Sorniotti; Engin Kirda; William K. Robertson; Anil Kurmus (ACSAC, 2019)

Two methods for exploiting speculative control flow hijacks. - Andrea Mambretti; Alexandra Sandulescu; Matthias Neugschwandtner; Alessandro Sorniotti; Anil Kurmus (WOOT @ USENIX Security Symposium, 2019)

HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. - William Blair; Andrea Mambretti; Sajjad Arshad; Michael Weissbacher; William Robertson 002; Engin Kirda; Manuel Egele (NDSS, 2020)

Bypassing memory safety mechanisms through speculative control flow hijacks. - Andrea Mambretti; Alexandra Sandulescu; Alessandro Sorniotti; William Robertson 002; Engin Kirda; Anil Kurmus (EuroS&P, 2021)

GhostBuster: understanding and overcoming the pitfalls of transient execution vulnerability checkers. - Andrea Mambretti; Pasquale Convertini; Alessandro Sorniotti; Alexandra Sandulescu; Engin Kirda; Anil Kurmus (SANER, 2021)

HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. - William Blair; Andrea Mambretti; Sajjad Arshad; Michael Weissbacher; William Robertson 002; Engin Kirda; Manuel Egele (ACM Trans. Priv. Secur., 2022)

GhostRace: Exploiting and Mitigating Speculative Race Conditions. - Hany Ragab; Andrea Mambretti; Anil Kurmus; Cristiano Giuffrida (USENIX Security Symposium, 2024)

SoK: Automating Kernel Vulnerability Discovery and Exploit Generation. - Anil Kurmus; Andrea Mambretti; Alessandro Sorniotti; Vincent Lenders; Damian Pfammatter; Bernhard Tellenbach (WOOT, 2025)