Simple Semantic Analysis Problems for Functional Programs. - Viktor K. Sabelfeld; Andrei Sabelfeld (ICFP, 1997)

Probabilistic Noninterference for Multi-Threaded Programs. - Andrei Sabelfeld; David Sands 001 (CSFW, 2000)

A Generic Approach to the Security of Multi-Threaded Programs. - Heiko Mantel; Andrei Sabelfeld (CSFW, 2001)

The Impact of Synchronisation on Secure Information Flow in Concurrent Programs. - Andrei Sabelfeld (Ershov Memorial Conference, 2001)

A Per Model of Secure Information Flow in Sequential Programs. - Andrei Sabelfeld; David Sands 001 (High. Order Symb. Comput., 2001)

Securing Communication in a Concurrent Language. - Andrei Sabelfeld; Heiko Mantel (SAS, 2002)

03411 Final Report - Language Based Security. - Anindya Banerjee 001; Heiko Mantel; David A. Naumann; Andrei Sabelfeld (Language Based Security, 2003)

03411 Abstracts Collection - Language Based Security. - Anindya Banerjee 001; Heiko Mantel; David A. Naumann; Andrei Sabelfeld (Language Based Security, 2003)

Confidentiality for Multithreaded Programs via Bisimulation. - Andrei Sabelfeld (Ershov Memorial Conference, 2003)

A Model for Delimited Information Release. - Andrei Sabelfeld; Andrew C. Myers (ISSS, 2003)

A Unifying Approach to the Security of Distributed and Multi-Threaded Programs. - Heiko Mantel; Andrei Sabelfeld (J. Comput. Secur., 2003)

Language-based information-flow security. - Andrei Sabelfeld; Andrew C. Myers (IEEE J. Sel. Areas Commun., 2003)

Enforcing Robust Declassification. - Andrew C. Myers; Andrei Sabelfeld; Steve Zdancewic (CSFW, 2004)

Dimensions and Principles of Declassification. - Andrei Sabelfeld; David Sands 001 (CSFW, 2005)

Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study. - Aslan Askarov; Andrei Sabelfeld (ESORICS, 2005)

Bridging Language-Based and Process Calculi Security. - Riccardo Focardi; Sabina Rossi; Andrei Sabelfeld (FoSSaCS, 2005)

"Language-Based Security". - Martín Abadi; Greg Morrisett; Andrei Sabelfeld (J. Funct. Program., 2005)

Closing Internal Timing Channels by Transformation. - Alejandro Russo; John Hughes 001; David A. Naumann; Andrei Sabelfeld (ASIAN, 2006)

Securing Interaction between Threads and the Scheduler. - Alejandro Russo; Andrei Sabelfeld (CSFW, 2006)

Security for Multithreaded Programs Under Cooperative Scheduling. - Alejandro Russo; Andrei Sabelfeld (Ershov Memorial Conference, 2006)

Enforcing Robust Declassification and Qualified Robustness. - Andrew C. Myers; Andrei Sabelfeld; Steve Zdancewic (J. Comput. Secur., 2006)

Dimensions of Declassification in Theory and Practice. - Andrei Sabelfeld (ASIAN, 2007)

07091 Executive Summary - Mobility, Ubiquity and Security. - Gilles Barthe; Heiko Mantel; Peter Müller 001; Andrew C. Myers; Andrei Sabelfeld (Mobility, Ubiquity and Security, 2007)

07091 Abstracts Collection - Mobility, Ubiquity and Security. - Gilles Barthe; Heiko Mantel; Peter Müller 001; Andrew C. Myers; Andrei Sabelfeld (Mobility, Ubiquity and Security, 2007)

Localized delimited release: combining the what and where dimensions of information release. - Aslan Askarov; Andrei Sabelfeld (PLAS, 2007)

Gradual Release: Unifying Declassification, Encryption and Key Release Policies. - Aslan Askarov; Andrei Sabelfeld (S&P, 2007)

Termination-Insensitive Noninterference Leaks More Than Just a Bit. - Aslan Askarov; Sebastian Hunt; Andrei Sabelfeld; David Sands 001 (ESORICS, 2008)

Cryptographically-masked flows. - Aslan Askarov; Daniel Hedin; Andrei Sabelfeld (Theor. Comput. Sci., 2008)

Tight Enforcement of Information-Release Policies for Dynamic Languages. - Aslan Askarov; Andrei Sabelfeld (CSF, 2009)

Securing Timeout Instructions in Web Applications. - Alejandro Russo; Andrei Sabelfeld (CSF, 2009)

From Dynamic to Static and Back: Riding the Roller Coaster of Information-Flow Control Research. - Andrei Sabelfeld; Alejandro Russo (Ershov Memorial Conference, 2009)

Tracking Information Flow in Dynamic Tree Structures. - Alejandro Russo; Andrei Sabelfeld; Andrey Chudnov (ESORICS, 2009)

Catch me if you can: permissive yet secure error handling. - Aslan Askarov; Andrei Sabelfeld (PLAS, 2009)

Declassification: Dimensions and principles. - Andrei Sabelfeld; David Sands 001 (J. Comput. Secur., 2009)

Securing interaction between threads and the scheduler in the presence of synchronization. - Alejandro Russo; Andrei Sabelfeld (J. Log. Algebraic Methods Program., 2009)

A lattice-based approach to mashup security. - Jonas Magazinius; Aslan Askarov; Andrei Sabelfeld (AsiaCCS, 2010)

Dynamic vs. Static Flow-Sensitive Security Analysis. - Alejandro Russo; Andrei Sabelfeld (CSF, 2010)

Unifying Facets of Information Integrity. - Arnar Birgisson; Alejandro Russo; Andrei Sabelfeld (ICISS, 2010)

Securing Class Initialization. - Keiko Nakata 001; Andrei Sabelfeld (IFIPTM, 2010)

Preface. - Andrei Sabelfeld (J. Comput. Secur., 2010)

Security of multithreaded programs by compilation. - Gilles Barthe; Tamara Rezk; Alejandro Russo; Andrei Sabelfeld (ACM Trans. Inf. Syst. Secur., 2010)

Implicit flows in malicious and nonmalicious code. - Alejandro Russo; Andrei Sabelfeld; Keqin Li 002 (Logics and Languages for Reliability and Security, 2010)

Decentralized Delimited Release. - Jonas Magazinius; Aslan Askarov; Andrei Sabelfeld (APLAS, 2011)

Multi-run Security. - Arnar Birgisson; Andrei Sabelfeld (ESORICS, 2011)

Capabilities for information flow. - Arnar Birgisson; Alejandro Russo; Andrei Sabelfeld (PLAS, 2011)

Limiting information leakage in event-based communication. - Willard Rafnsson; Andrei Sabelfeld (PLAS, 2011)

Information-Flow Security for a Core of JavaScript. - Daniel Hedin; Andrei Sabelfeld (CSF, 2012)

Securing Interactive Programs. - Willard Rafnsson; Daniel Hedin; Andrei Sabelfeld (CSF, 2012)

Boosting the Permissiveness of Dynamic Information-Flow Tracking by Testing. - Arnar Birgisson; Daniel Hedin; Andrei Sabelfeld (ESORICS, 2012)

On-the-fly inlining of dynamic security monitors. - Jonas Magazinius; Alejandro Russo; Andrei Sabelfeld (Comput. Secur., 2012)

Web Application Security (Dagstuhl Seminar 12401). - Lieven Desmet; Martin Johns; Benjamin Livshits; Andrei Sabelfeld (Dagstuhl Reports, 2012)

A Perspective on Information-Flow Control. - Daniel Hedin; Andrei Sabelfeld (Software Safety and Security, 2012)

Polyglots: crossing origins by crossing formats. - Jonas Magazinius; Billy K. Rios; Andrei Sabelfeld (CCS, 2013)

GlassTube: a lightweight approach to web application integrity. - Per A. Hallgren; Daniel T. Mauritzson; Andrei Sabelfeld (PLAS, 2013)

Securing Class Initialization in Java-like Languages. - Willard Rafnsson; Keiko Nakata 001; Andrei Sabelfeld (IEEE Trans. Dependable Secur. Comput., 2013)

Compositional Information-Flow Security for Interactive Systems. - Willard Rafnsson; Andrei Sabelfeld (CSF, 2014)

Architectures for Inlining Security Monitors in Web Applications. - Jonas Magazinius; Daniel Hedin; Andrei Sabelfeld (ESSoS, 2014)

SeLINQ: tracking information across application-database boundaries. - Daniel Schoepe; Daniel Hedin; Andrei Sabelfeld (ICFP, 2014)

JSFlow: tracking information flow in JavaScript and its APIs. - Daniel Hedin; Arnar Birgisson; Luciano Bello; Andrei Sabelfeld (SAC, 2014)

Preface. - Lieven Desmet; Martin Johns; Benjamin Livshits; Andrei Sabelfeld (J. Comput. Secur., 2014)

Password Meters and Generators on the Web: From Large-Scale Empirical Study to Getting It Right. - Steven Van Acker; Daniel Hausknecht; Wouter Joosen; Andrei Sabelfeld (CODASPY, 2015)

Value-Sensitive Hybrid Information Flow Control for a JavaScript-Like Language. - Daniel Hedin; Luciano Bello; Andrei Sabelfeld (CSF, 2015)

Understanding and Enforcing Opacity. - Daniel Schoepe; Andrei Sabelfeld (CSF, 2015)

May I? - Content Security Policy Endorsement for Browser Extensions. - Daniel Hausknecht; Jonas Magazinius; Andrei Sabelfeld (DIMVA, 2015)

Value Sensitivity and Observable Abstract Values for Information Flow Control. - Luciano Bello; Daniel Hedin; Andrei Sabelfeld (LPAR, 2015)

BetterTimes - Privacy-Assured Outsourced Multiplications for Additively Homomorphic Encryption on Finite Fields. - Per A. Hallgren; Martín Ochoa; Andrei Sabelfeld (ProvSec, 2015)

InnerCircle: A parallelizable decentralized privacy-preserving location proximity protocol. - Per A. Hallgren; Martín Ochoa; Andrei Sabelfeld (PST, 2015)

Web Application Security Using JSFlow. - Daniel Hedin; Andrei Sabelfeld (SYNASC, 2015)

Location-enhanced authentication using the IoT: because you cannot be in two places at once. - Ioannis Agadakos; Per A. Hallgren; Dimitrios Damopoulos; Andrei Sabelfeld; Georgios Portokalidis (ACSAC, 2016)

Data Exfiltration in the Face of CSP. - Steven Van Acker; Daniel Hausknecht; Andrei Sabelfeld (AsiaCCS, 2016)

MaxPace: Speed-constrained location queries. - Per A. Hallgren; Martín Ochoa; Andrei Sabelfeld (CNS, 2016)

JSLINQ: Building Secure Applications across Tiers. - Musard Balliu; Benjamin Liebe; Daniel Schoepe; Andrei Sabelfeld (CODASPY, 2016)

Let's Face It: Faceted Values for Taint Tracking. - Daniel Schoepe; Musard Balliu; Frank Piessens; Andrei Sabelfeld (ESORICS (1), 2016)

Progress-Sensitive Security for SPARK. - Willard Rafnsson; Deepak Garg 001; Andrei Sabelfeld (ESSoS, 2016)

Explicit Secrecy: A Policy for Taint Tracking. - Daniel Schoepe; Musard Balliu; Benjamin C. Pierce; Andrei Sabelfeld (EuroS&P, 2016)

JavaScript Sandboxing: Isolating and Restricting Client-Side JavaScript. - Steven Van Acker; Andrei Sabelfeld (FOSAD, 2016)

Information-flow security for JavaScript and its APIs. - Daniel Hedin; Luciano Bello; Andrei Sabelfeld (J. Comput. Secur., 2016)

Secure multi-execution: Fine-grained, declassification-aware, and transparent. - Willard Rafnsson; Andrei Sabelfeld (J. Comput. Secur., 2016)

Discovering Browser Extensions via Web Accessible Resources. - Alexander Sjösten; Steven Van Acker; Andrei Sabelfeld (CODASPY, 2017)

PrivatePool: Privacy-Preserving Ridesharing. - Per A. Hallgren; Claudio Orlandi; Andrei Sabelfeld (CSF, 2017)

We Are Family: Relating Information-Flow Trackers. - Musard Balliu; Daniel Schoepe; Andrei Sabelfeld (ESORICS (1), 2017)

Privacy-Preserving Location-Proximity for Mobile Apps. - Simonas Stirbys; Omar Abu Nabah; Per A. Hallgren; Andrei Sabelfeld (PDP, 2017)

A Principled Approach to Tracking Information Flow in the Presence of Libraries. - Daniel Hedin; Alexander Sjösten; Frank Piessens; Andrei Sabelfeld (POST, 2017)

Measuring login webpage security. - Steven Van Acker; Daniel Hausknecht; Andrei Sabelfeld (SAC, 2017)

Special issue on verified information flow security. - Toby C. Murray; Andrei Sabelfeld; Lujo Bauer (J. Comput. Secur., 2017)

Raising the Bar: Evaluating Origin-wide Security Manifests. - Steven Van Acker; Daniel Hausknecht; Andrei Sabelfeld (ACSAC, 2018)

If This Then What?: Controlling Flows in IoT Apps. - Iulia Bastys; Musard Balliu; Andrei Sabelfeld (CCS, 2018)

Prudent Design Principles for Information Flow Control. - Iulia Bastys; Frank Piessens; Andrei Sabelfeld (PLAS@CCS, 2018)

Information Flow Tracking for Side-Effectful Libraries. - Alexander Sjösten; Daniel Hedin; Andrei Sabelfeld (FORTE, 2018)

Tracking Information Flow via Delayed Output - Addressing Privacy in IoT and Emailing Apps. - Iulia Bastys; Frank Piessens; Andrei Sabelfeld (NordSec, 2018)

Assuring BetterTimes. - Per A. Hallgren; Ravi Kishore; Martín Ochoa; Andrei Sabelfeld (J. Comput. Secur., 2018)

An Empirical Study of Information Flows in Real-World JavaScript. - Cristian-Alexandru Staicu; Daniel Schoepe; Musard Balliu; Michael Pradel; Andrei Sabelfeld (PLAS@CCS, 2019)

Information-Flow Control for Database-Backed Applications. - Marco Guarnieri; Musard Balliu; Daniel Schoepe; David A. Basin; Andrei Sabelfeld (EuroS&P, 2019)

Latex Gloves: Protecting Browser Extensions from Probing and Revelation Attacks. - Alexander Sjösten; Steven Van Acker; Pablo Picazo-Sanchez; Andrei Sabelfeld (NDSS, 2019)

On the Road with Third-party Apps: Security Analysis of an In-vehicle App Platform. - Benjamin Eriksson; Jonas Groth; Andrei Sabelfeld (VEHITS, 2019)

Securing IoT Apps. - Musard Balliu; Iulia Bastys; Andrei Sabelfeld (IEEE Secur. Priv., 2019)

TOPPool: Time-aware Optimized Privacy-Preserving Ridesharing. - Elena Pagnin; Gunnar Gunnarsson; Pedram Talebi; Claudio Orlandi; Andrei Sabelfeld (Proc. Priv. Enhancing Technol., 2019)

HMAC and "Secure Preferences": Revisiting Chromium-Based Browsers Security. - Pablo Picazo-Sanchez; Gerardo Schneider; Andrei Sabelfeld (CANS, 2020)

Clockwork: Tracking Remote Timing Attacks. - Iulia Bastys; Musard Balliu; Tamara Rezk; Andrei Sabelfeld (CSF, 2020)

VERONICA: Expressive and Precise Concurrent Information Flow Security. - Daniel Schoepe; Toby Murray; Andrei Sabelfeld (CSF, 2020)

AutoNav: Evaluation and Automatization of Web Navigation Policies. - Benjamin Eriksson; Andrei Sabelfeld (WWW, 2020)

VERONICA: Expressive and Precise Concurrent Information Flow Security (Extended Version with Technical Appendices). - Daniel Schoepe; Toby Murray; Andrei Sabelfeld (CoRR, 2020)

Data Privacy in Trigger-Action IoT Systems. - Yunang Chen; Amrita Roy Chowdhury 001; Ruizhe Wang 003; Andrei Sabelfeld; Rahul Chatterjee 001; Earlence Fernandes (CoRR, 2020)

Where are you Bob? Privacy-Preserving Proximity Testing with a Napping Party. - Ivan Oleynikov; Elena Pagnin; Andrei Sabelfeld (IACR Cryptol. ePrint Arch., 2020)

Securing Node-RED Applications. - Mohammad M. Ahmadpanah; Musard Balliu; Daniel Hedin; Lars Eric Olsson; Andrei Sabelfeld (Protocols, Strands, and Logic, 2021)

Nontransitive Policies Transpiled. - Mohammad M. Ahmadpanah; Aslan Askarov; Andrei Sabelfeld (EuroS&P, 2021)

EssentialFP: Exposing the Essence of Browser Fingerprinting. - Alexander Sjösten; Daniel Hedin; Andrei Sabelfeld (EuroS&P Workshops, 2021)

Data Privacy in Trigger-Action Systems. - Yunang Chen; Amrita Roy Chowdhury 001; Ruizhe Wang 003; Andrei Sabelfeld; Rahul Chatterjee 001; Earlence Fernandes (SP, 2021)

Black Widow: Blackbox Data-driven Web Scanning. - Benjamin Eriksson; Giancarlo Pellegrino; Andrei Sabelfeld (SP, 2021)

SandTrap: Securing JavaScript-driven Trigger-Action Platforms. - Mohammad M. Ahmadpanah; Daniel Hedin; Musard Balliu; Lars Eric Olsson; Andrei Sabelfeld (USENIX Security Symposium, 2021)

No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns. - Pablo Picazo-Sanchez; Benjamin Eriksson; Andrei Sabelfeld (ACSAC, 2022)

Outsourcing MPC Precomputation for Location Privacy. - Ivan Oleynikov; Elena Pagnin; Andrei Sabelfeld (EuroS&P Workshops, 2022)

DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication. - Pablo Picazo-Sanchez; Maximilian Algehed; Andrei Sabelfeld (ICISSP, 2022)

Hardening the security analysis of browser extensions. - Benjamin Eriksson; Pablo Picazo-Sanchez; Andrei Sabelfeld (SAC, 2022)

SecWasm: Information Flow Control for WebAssembly. - Iulia Bastys; Maximilian Algehed; Alexander Sjösten; Andrei Sabelfeld (SAS, 2022)

CatNap: Leveraging Generic MPC for Actively Secure Privacy-enhancing Proximity Testing with a Napping Party. - Ivan Oleynikov; Elena Pagnin; Andrei Sabelfeld (SECRYPT, 2022)

Practical Data Access Minimization in Trigger-Action Platforms. - Yunang Chen; Mohannad Alhanahnah; Andrei Sabelfeld; Rahul Chatterjee 001; Earlence Fernandes (USENIX Security Symposium, 2022)

Are chrome extensions compliant with the spirit of least privilege? - Pablo Picazo-Sanchez; Lara Ortiz-Martin; Gerardo Schneider; Andrei Sabelfeld (Int. J. Inf. Sec., 2022)

Poster: Data Minimization by Construction for Trigger-Action Applications. - Mohammad M. Ahmadpanah; Daniel Hedin; Andrei Sabelfeld (CCS, 2023)

Black Ostrich: Web Application Scanning with String Solvers. - Benjamin Eriksson; Amanda Stjerna; Riccardo De Masellis; Philipp Rümmer; Andrei Sabelfeld (CCS, 2023)

LazyTAP: On-Demand Data Minimization for Trigger-Action Applications. - Mohammad M. Ahmadpanah; Daniel Hedin; Andrei Sabelfeld (SP, 2023)

FakeX: A Framework for Detecting Fake Reviews of Browser Extensions. - Eric Olsson 001; Benjamin Eriksson; Pablo Picazo-Sanchez; Lukas Andersson; Andrei Sabelfeld (AsiaCCS, 2024)

Spider-Scents: Grey-box Database-aware Web Scanning for Stored XSS. - Eric Olsson 001; Benjamin Eriksson; Adam Doupé; Andrei Sabelfeld (USENIX Security Symposium, 2024)

CodeX: Contextual Flow Tracking for Browser Extensions. - Mohammad M. Ahmadpanah; Matías F. Gobbi; Daniel Hedin; Johannes Kinder; Andrei Sabelfeld (CODASPY, 2025)