The Ff-Family of Protocols for RFID-Privacy and Authentication. - Erik-Oliver Blass; Anil Kurmus; Refik Molva; Guevara Noubir; Abdullatif Shikfa (IACR Cryptol. ePrint Arch., 2008)

Design and Implementation of a Key-Lifecycle Management System. - Mathias Björkqvist; Christian Cachin; Robert Haas 001; Xiao-Yu Hu; Anil Kurmus; René Pawlitzek; Marko Vukolic (Financial Cryptography, 2010)

Attack surface reduction for commodity OS kernels: trimmed garden plants may attract less bugs. - Anil Kurmus; Alessandro Sorniotti; Rüdiger Kapitza (EUROSEC, 2011)

A Comparison of Secure Multi-Tenancy Architectures for Filesystem Storage Clouds. - Anil Kurmus; Moitrayee Gupta; Roman A. Pletka; Christian Cachin; Robert Haas 001 (Middleware, 2011)

The F_f-Family of Protocols for RFID-Privacy and Authentication. - Erik-Oliver Blass; Anil Kurmus; Refik Molva; Guevara Noubir; Abdullatif Shikfa (IEEE Trans. Dependable Secur. Comput., 2011)

Secure cloud maintenance: protecting workloads against insider attacks. - Sören Bleikertz; Anil Kurmus; Zoltán A. Nagy; Matthias Schunter (AsiaCCS, 2012)

Automatic OS Kernel TCB Reduction by Leveraging Compile-Time Configurability. - Reinhard Tartler; Anil Kurmus; Bernhard Heinloth; Valentin Rothberg; Andreas Ruprecht; Daniela Dorneanu; Rüdiger Kapitza; Wolfgang Schröder-Preikschat; Daniel Lohmann (HotDep, 2012)

Implementation and implications of a stealth hard-drive backdoor. - Jonas Zaddach; Anil Kurmus; Davide Balzarotti; Erik-Oliver Blass; Aurélien Francillon; Travis Goodspeed; Moitrayee Gupta; Ioannis Koltsidas (ACSAC, 2013)

Secure Logical Isolation for Multi-tenancy in cloud storage. - Michael Factor; David Hadas; Aner Hamama; Nadav Har'El; Elliot K. Kolodner; Anil Kurmus; Alexandra Shulman-Peleg; Alessandro Sorniotti (MSST, 2013)

Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring. - Anil Kurmus; Reinhard Tartler; Daniela Dorneanu; Bernhard Heinloth; Valentin Rothberg; Andreas Ruprecht; Wolfgang Schröder-Preikschat; Daniel Lohmann; Rüdiger Kapitza (NDSS, 2013)

PSP: Private and secure payment with RFID. - Erik-Oliver Blass; Anil Kurmus; Refik Molva; Thorsten Strufe (Comput. Commun., 2013)

A Tale of Two Kernels: Towards Ending Kernel Hardening Wars with Split Kernel. - Anil Kurmus; Robby Zippel (CCS, 2014)

Quantifiable Run-Time Kernel Attack Surface Reduction. - Anil Kurmus; Sergej Dechand; Rüdiger Kapitza (DIMVA, 2014)

Kernel Self-Protection through Quantified Attack Surface Reduction. - Anil Kurmus (2014)

AsyncShock: Exploiting Synchronisation Bugs in Intel SGX Enclaves. - Nico Weichbrodt; Anil Kurmus; Peter R. Pietzuch; Rüdiger Kapitza (ESORICS (1), 2016)

A transparent defense against USB eavesdropping attacks. - Matthias Neugschwandtner; Anton Beitler; Anil Kurmus (EUROSEC, 2016)

From random block corruption to privilege escalation: A filesystem attack vector for rowhammer-like attacks. - Anil Kurmus; Nikolas Ioannou; Nikolaos Papandreou; Thomas P. Parnell (WOOT, 2017)

Speculator: a tool to analyze speculative execution attacks and mitigations. - Andrea Mambretti; Matthias Neugschwandtner; Alessandro Sorniotti; Engin Kirda; William K. Robertson; Anil Kurmus (ACSAC, 2019)

SMoTherSpectre: Exploiting Speculative Execution through Port Contention. - Atri Bhattacharyya; Alexandra Sandulescu; Matthias Neugschwandtner; Alessandro Sorniotti; Babak Falsafi; Mathias Payer; Anil Kurmus (CCS, 2019)

Memory Categorization: Separating Attacker-Controlled Data. - Matthias Neugschwandtner; Alessandro Sorniotti; Anil Kurmus (DIMVA, 2019)

Two methods for exploiting speculative control flow hijacks. - Andrea Mambretti; Alexandra Sandulescu; Matthias Neugschwandtner; Alessandro Sorniotti; Anil Kurmus (WOOT @ USENIX Security Symposium, 2019)

Bypassing memory safety mechanisms through speculative control flow hijacks. - Andrea Mambretti; Alexandra Sandulescu; Alessandro Sorniotti; William Robertson 002; Engin Kirda; Anil Kurmus (EuroS&P, 2021)

GhostBuster: understanding and overcoming the pitfalls of transient execution vulnerability checkers. - Andrea Mambretti; Pasquale Convertini; Alessandro Sorniotti; Alexandra Sandulescu; Engin Kirda; Anil Kurmus (SANER, 2021)

Go or No Go: Differential Fuzzing of Native and C Libraries. - Alessandro Sorniotti; Michael Weissbacher; Anil Kurmus (SP (Workshops), 2023)

GhostRace: Exploiting and Mitigating Speculative Race Conditions. - Hany Ragab; Andrea Mambretti; Anil Kurmus; Cristiano Giuffrida (USENIX Security Symposium, 2024)

SoK: Automating Kernel Vulnerability Discovery and Exploit Generation. - Anil Kurmus; Andrea Mambretti; Alessandro Sorniotti; Vincent Lenders; Damian Pfammatter; Bernhard Tellenbach (WOOT, 2025)