Mobile device-based cellular network coverage analysis using crowd sourcing. - Daniel Jaymin Mankowitz; Andrew J. Paverd (EUROCON, 2011)

Personal PKI for the Smart Device Era. - John Lyle; Andrew J. Paverd; Justin King-Lacroix; Andrea S. Atzeni; Habib Virji; Ivan Flechais; Shamal Faily (EuroPKI, 2012)

Hardware Security for Device Authentication in the Smart Grid. - Andrew J. Paverd; Andrew P. Martin (SmartGridSec, 2012)

Towards Enhancing Web Application Security Using Trusted Execution. - Cornelius Namiluko; Andrew J. Paverd; Tulio de Souza (WASH, 2013)

Characteristic-based security analysis of personal networks. - Andrew J. Paverd; Fadi El-Moussa 001; Ian Brown (UbiComp Adjunct, 2014)

Privacy-enhanced bi-directional communication in the Smart Grid using trusted computing. - Andrew J. Paverd; Andrew P. Martin; Ian Brown (SmartGridComm, 2014)

Security and Privacy in Smart Grid Demand Response Systems. - Andrew J. Paverd; Andrew P. Martin; Ian Brown (SmartGridSec, 2014)

OmniShare: Securely Accessing Encrypted Cloud Storage from Multiple Authorized Devices. - Sandeep Tamrakar; Hoang Long Nguyen 003; Praveen Kumar Pendyala; Andrew Paverd; N. Asokan; Ahmad-Reza Sadeghi (CoRR, 2015)

C-FLAT: Control-Flow Attestation for Embedded Systems Software. - Tigist Abera; N. Asokan; Lucas Davi; Jan-Erik Ekberg; Thomas Nyman; Andrew Paverd; Ahmad-Reza Sadeghi; Gene Tsudik (CCS, 2016)

Invited - Things, trouble, trust: on building trust in IoT systems. - Tigist Abera; N. Asokan; Lucas Davi; Farinaz Koushanfar; Andrew Paverd; Ahmad-Reza Sadeghi; Gene Tsudik (DAC, 2016)

Protecting Password Databases using Trusted Hardware. - Klaudia Krawiecka; Andrew Paverd; N. Asokan (SysTEX@Middleware, 2016)

Exploring the use of Intel SGX for Secure Many-Party Applications. - Kubilay Ahmet Küçük; Andrew Paverd; Andrew Martin 002; N. Asokan; Andrew Simpson 001; Robin Ankele (SysTEX@Middleware, 2016)

Applying the Trustworthy Remote Entity to Privacy-Preserving Multiparty Computation: Requirements and Criteria for Large-Scale Applications. - Robin Ankele; Kubilay Ahmet Küçük; Andrew Martin 002; Andrew Simpson 001; Andrew Paverd (UIC/ATC/ScalCom/CBDCom/IoP/SmartWorld, 2016)

Trustworthy and Secure Service-Oriented Architecture for the Internet of Things. - Ahmad Atamli-Reineh; Andrew J. Paverd; Andrew P. Martin (CoRR, 2016)

The Circle Game: Scalable Private Membership Test Using Trusted Hardware. - Sandeep Tamrakar; Jian Liu 012; Andrew Paverd; Jan-Erik Ekberg; Benny Pinkas; N. Asokan (AsiaCCS, 2017)

LO-FAT: Low-Overhead Control Flow ATtestation in Hardware. - Ghada Dessouky; Shaza Zeitouni; Thomas Nyman; Andrew Paverd; Lucas Davi; Patrick Koeberl; N. Asokan; Ahmad-Reza Sadeghi (DAC, 2017)

Formal Analysis of V2X Revocation Protocols. - Jorden Whitefield; Liqun Chen 002; Frank Kargl; Andrew Paverd; Steve A. Schneider; Helen Treharne; Stephan Wesemeyer (STM, 2017)

A framework for application partitioning using trusted execution environments. - Ahmad Atamli-Reineh; Andrew Paverd; Giuseppe Petracca; Andrew P. Martin (Concurr. Comput. Pract. Exp., 2017)

HardScope: Thwarting DOP with Hardware-assisted Run-time Scope Enforcement. - Thomas Nyman; Ghada Dessouky; Shaza Zeitouni; Aaro Lehikoinen; Andrew Paverd; N. Asokan; Ahmad-Reza Sadeghi (CoRR, 2017)

Protecting Web Passwords from Rogue Servers using Trusted Execution Environments. - Klaudia Krawiecka; Arseny Kurnikov; Andrew Paverd; Mohammad Mannan; N. Asokan (CoRR, 2017)

Towards Linux Kernel Memory Safety. - Elena Reshetova; Hans Liljestrand; Andrew Paverd; N. Asokan (CoRR, 2017)

Auditable De-anonymization in V2X Communication. - Masoud Naderpour; Tommi Meskanen; Andrew Paverd; Valtteri Niemi (J. ICT Stand., 2017)

Security in Automotive Networks: Lightweight Authentication and Authorization. - Philipp Mundhenk; Andrew Paverd; Artur Mrowca; Sebastian Steinhorst; Martin Lukasiewycz; Suhaib A. Fahmy; Samarjit Chakraborty (ACM Trans. Design Autom. Electr. Syst., 2017)

Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials. - Arseny Kurnikov; Andrew Paverd; Mohammad Mannan; N. Asokan (ARES, 2018)

Migrating SGX Enclaves with Persistent State. - Fritz Alder; Arseny Kurnikov; Andrew Paverd; N. Asokan (DSN, 2018)

SafeKeeper: Protecting Web Passwords using Trusted Execution Environments. - Klaudia Krawiecka; Arseny Kurnikov; Andrew Paverd; Mohammad Mannan; N. Asokan (WWW, 2018)

Using SafeKeeper to Protect Web Passwords. - Arseny Kurnikov; Klaudia Krawiecka; Andrew Paverd; Mohammad Mannan; N. Asokan (WWW (Companion Volume), 2018)

Mitigating Branch-Shadowing Attacks on Intel SGX using Control Flow Randomization. - Shohreh Hosseinzadeh; Hans Liljestrand; Ville Leppänen; Andrew Paverd (CoRR, 2018)

OmniShare: Encrypted Cloud Storage for the Multi-Device Era. - Andrew Paverd; Sandeep Tamrakar; Hoang Long Nguyen 003; Praveen Kumar Pendyala; Thien Duc Nguyen; Elizabeth Stobert; Tommi Grondahl; N. Asokan; Ahmad-Reza Sadeghi (IEEE Internet Comput., 2018)

Toward Linux kernel memory safety. - Elena Reshetova; Hans Liljestrand; Andrew Paverd; N. Asokan (Softw. Pract. Exp., 2018)

S-FaaS: Trustworthy and Accountable Function-as-a-Service using Intel SGX. - Fritz Alder; N. Asokan; Arseny Kurnikov; Andrew Paverd; Michael Steiner 001 (CCSW, 2019)

HardScope: Hardening Embedded Systems Against Data-Oriented Attacks. - Thomas Nyman; Ghada Dessouky; Shaza Zeitouni; Aaro Lehikoinen; Andrew Paverd; N. Asokan; Ahmad-Reza Sadeghi (DAC, 2019)

Sustainable Security & Safety: Challenges and Opportunities. - Andrew Paverd; Marcus Völp; Ferdinand Brasser; Matthias Schunter; N. Asokan; Ahmad-Reza Sadeghi; Paulo Jorge Esteves Veríssimo; Andreas Steininger; Thorsten Holz (CERTS, 2019)

Smart Grid Metering Networks: A Survey on Security, Privacy and Open Research Issues. - Pardeep Kumar 001; Yun Lin 001; Guangdong Bai; Andrew Paverd; Jin Song Dong 001; Andrew P. Martin (IEEE Commun. Surv. Tutorials, 2019)

Analyzing Information Leakage of Updates to Natural Language Models. - Santiago Zanella-Béguelin; Lukas Wutschitz; Shruti Tople; Victor Rühle; Andrew Paverd; Olga Ohrimenko; Boris Köpf; Marc Brockschmidt (CCS, 2020)

Grey-box Extraction of Natural Language Models. - Santiago Zanella-Béguelin; Shruti Tople; Andrew Paverd; Boris Köpf (ICML, 2021)

CACTI: Captcha Avoidance via Client-side TEE Integration. - Yoshimichi Nakatsuka; Ercan Ozturk; Andrew Paverd; Gene Tsudik (USENIX Security Symposium, 2021)

PDoT: Private DNS-over-TLS with TEE Support. - Yoshimichi Nakatsuka; Andrew Paverd; Gene Tsudik (DTRAP, 2021)

Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web. - Avinash Sudhodanan; Andrew Paverd (USENIX Security Symposium, 2022)

CTR: Checkpoint, Transfer, and Restore for Secure Enclaves. - Yoshimichi Nakatsuka; Ercan Ozturk; Alex Shamis; Andrew Paverd; Peter R. Pietzuch (CoRR, 2022)

Dropbear: Machine Learning Marketplaces made Trustworthy with Byzantine Model Agreement. - Alex Shamis; Peter R. Pietzuch; Antoine Delignat-Lavaud; Andrew Paverd; Manuel Costa (CoRR, 2022)

Bayesian Estimation of Differential Privacy. - Santiago Zanella-Béguelin; Lukas Wutschitz; Shruti Tople; Ahmed Salem 001; Victor Rühle; Andrew Paverd; Mohammad Naseri; Boris Köpf; Daniel Jones (ICML, 2023)

VICEROY: GDPR-/CCPA-compliant Enforcement of Verifiable Accountless Consumer Requests. - Scott Jordan 001; Yoshimichi Nakatsuka; Ercan Ozturk; Andrew Paverd; Gene Tsudik (NDSS, 2023)

SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learning. - Ahmed Salem 001; Giovanni Cherubin; David Evans 001; Boris Köpf; Andrew Paverd; Anshuman Suri; Shruti Tople; Santiago Zanella-Béguelin (SP, 2023)

An Empirical Study & Evaluation of Modern CAPTCHAs. - Andrew Searles; Yoshimichi Nakatsuka; Ercan Ozturk; Andrew Paverd; Gene Tsudik; Ai Enkoji (USENIX Security Symposium, 2023)

Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective. - Lukas Wutschitz; Boris Köpf; Andrew Paverd; Saravan Rajmohan; Ahmed Salem 001; Shruti Tople; Santiago Zanella-Béguelin; Menglin Xia; Victor Rühle (CoRR, 2023)

Maatphor: Automated Variant Analysis for Prompt Injection Attacks. - Ahmed Salem 001; Andrew Paverd; Boris Köpf (CoRR, 2023)

On the Efficacy of Differentially Private Few-shot Image Classification. - Marlon Tobaben; Aliaksandra Shysheya; John Bronskill; Andrew Paverd; Shruti Tople; Santiago Zanella-Béguelin; Richard E. Turner; Antti Honkela (Trans. Mach. Learn. Res., 2023)

Closed-Form Bounds for DP-SGD against Record-level Inference. - Giovanni Cherubin; Boris Köpf; Andrew Paverd; Shruti Tople; Lukas Wutschitz; Santiago Zanella-Béguelin (USENIX Security Symposium, 2024)

Are you still on track!? Catching LLM Task Drift with Activations. - Sahar Abdelnabi; Aideen Fay; Giovanni Cherubin; Ahmed Salem 001; Mario Fritz; Andrew Paverd (CoRR, 2024)

Permissive Information-Flow Analysis for Large Language Models. - Shoaib Ahmed Siddiqui; Radhika Gaonkar; Boris Köpf; David Krueger 001; Andrew Paverd; Ahmed Salem 001; Shruti Tople; Lukas Wutschitz; Menglin Xia; Santiago Zanella-Béguelin (CoRR, 2024)

ExclaveFL: Providing Transparency to Federated Learning using Exclaves. - Jinnan Guo; Kapil Vaswani; Andrew Paverd; Peter R. Pietzuch (CoRR, 2024)

Trustworthy AI using Confidential Federated Learning: Federated learning and confidential computing are not competing technologies. - Jinnan Guo; Peter R. Pietzuch; Andrew Paverd; Kapil Vaswani (ACM Queue, 2024)

Trustworthy AI Using Confidential Federated Learning. - Jinnan Guo; Peter R. Pietzuch; Andrew Paverd; Kapil Vaswani (Commun. ACM, 2024)

Get My Drift? Catching LLM Task Drift with Activation Deltas. - Sahar Abdelnabi; Aideen Fay; Giovanni Cherubin; Ahmed Salem 001; Mario Fritz; Andrew Paverd (SaTML, 2025)

Securing AI Agents with Information-Flow Control. - Manuel Costa; Boris Köpf; Aashish Kolluri; Andrew Paverd; Mark Russinovich; Ahmed Salem 001; Shruti Tople; Lukas Wutschitz; Santiago Zanella-Béguelin (CoRR, 2025)

Design Patterns for Securing LLM Agents against Prompt Injections. - Luca Beurer-Kellner; Beat Buesser; Ana-Maria Cretu 001; Edoardo Debenedetti; Daniel Dobos; Daniel Fabian; Marc Fischer 002; David Froelicher; Kathrin Grosse; Daniel Naeff; Ezinwanne Ozoani; Andrew Paverd; et al. (CoRR, 2025)

LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge. - Sahar Abdelnabi; Aideen Fay; Ahmed Salem 001; Egor Zverev; Kai-Chieh Liao; Chi-Huang Liu; Chun-Chih Kuo; Jannis Weigend; Danyael Manlangit; Alex Apostolov; Haris Umair; João Donato; et al. (CoRR, 2025)

Highlight & Summarize: RAG without the jailbreaks. - Giovanni Cherubin; Andrew Paverd (CoRR, 2025)