Impacts of packet scheduling and packet loss distribution on FEC Performances: observations and recommendations. - Christoph Neumann 001; Vincent Roca; Aurélien Francillon; David Furodet (CoNEXT, 2005)

TinyRNG: A Cryptographic Random Number Generator for Wireless Sensors Network Nodes. - Aurélien Francillon; Claude Castelluccia (WiOpt, 2007)

Code injection attacks on harvard-architecture devices. - Aurélien Francillon; Claude Castelluccia (CCS, 2008)

On the difficulty of software-based attestation of embedded devices. - Claude Castelluccia; Aurélien Francillon; Daniele Perito; Claudio Soriente (CCS, 2009)

Defending embedded systems against control flow attacks. - Aurélien Francillon; Daniele Perito; Claude Castelluccia (SecuCode@CCS, 2009)

Half-Blind Attacks: Mask ROM Bootloaders are Dangerous. - Travis Goodspeed; Aurélien Francillon (WOOT, 2009)

Attacking and Protecting Constrained Embedded Systems from Control Flow Attacks. - Aurélien Francillon (2009)

Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars. - Aurélien Francillon; Boris Danev; Srdjan Capkun (IACR Cryptol. ePrint Arch., 2010)

Use of Timed Efficient Stream Loss-Tolerant Authentication (TESLA) in the Asynchronous Layered Coding (ALC) and NACK-Oriented Reliable Multicast (NORM) Protocols. - Vincent Roca; Aurélien Francillon; Sebastien Faurite (RFC, 2010)

EphPub: Toward robust Ephemeral Publishing. - Claude Castelluccia; Emiliano De Cristofaro; Aurélien Francillon; Mohamed Ali Kâafar (ICNP, 2011)

Pay as you browse: microcomputations as micropayments in web-based services. - Ghassan Karame; Aurélien Francillon; Srdjan Capkun (WWW, 2011)

Analysis of the communication between colluding applications on modern smartphones. - Claudio Marforio; Hubert Ritzdorf; Aurélien Francillon; Srdjan Capkun (ACSAC, 2012)

Enabling trusted scheduling in embedded systems. - Ramya Jayaram Masti; Claudio Marforio; Aanjhan Ranganathan; Aurélien Francillon; Srdjan Capkun (ACSAC, 2012)

SMART: Secure and Minimal Architecture for (Establishing Dynamic) Root of Trust. - Karim Eldefrawy; Gene Tsudik; Aurélien Francillon; Daniele Perito (NDSS, 2012)

Physical-layer attacks on chirp-based ranging systems. - Aanjhan Ranganathan; Boris Danev; Aurélien Francillon; Srdjan Capkun (WISEC, 2012)

Systematic Treatment of Remote Attestation. - Aurélien Francillon; Quan Nguyen 002; Kasper Bonne Rasmussen; Gene Tsudik (IACR Cryptol. ePrint Arch., 2012)

Implementation and implications of a stealth hard-drive backdoor. - Jonas Zaddach; Anil Kurmus; Davide Balzarotti; Erik-Oliver Blass; Aurélien Francillon; Travis Goodspeed; Moitrayee Gupta; Ioannis Koltsidas (ACSAC, 2013)

The role of phone numbers in understanding cyber-crime schemes. - Andrei Costin; Jelena Isacenkova; Marco Balduzzi; Aurélien Francillon; Davide Balzarotti (PST, 2013)

Improving 802.11 Fingerprinting of Similar Devices by Cooperative Fingerprinting. - Clémentine Maurice; Stéphane Onno; Christoph Neumann 001; Olivier Heen; Aurélien Francillon (SECRYPT, 2013)

The role of web hosting providers in detecting compromised websites. - Davide Canali; Davide Balzarotti; Aurélien Francillon (WWW, 2013)

On the feasibility of software attacks on commodity virtual machine monitors via direct device assignment. - Gábor Pék; Andrea Lanzi; Abhinav Srivastava; Davide Balzarotti; Aurélien Francillon; Christoph Neumann 001 (AsiaCCS, 2014)

A minimalist approach to Remote Attestation. - Aurélien Francillon; Quan Nguyen 002; Kasper Bonne Rasmussen; Gene Tsudik (DATE, 2014)

Optical Delusions: A Study of Malicious QR Codes in the Wild. - Amin Kharraz; Engin Kirda; William K. Robertson; Davide Balzarotti; Aurélien Francillon (DSN, 2014)

Confidentiality Issues on a GPU in a Virtualized Environment. - Clémentine Maurice; Christoph Neumann 001; Olivier Heen; Aurélien Francillon (Financial Cryptography, 2014)

AVATAR: A Framework to Support Dynamic Security Analysis of Embedded Systems' Firmwares. - Jonas Zaddach; Luca Bruno; Aurélien Francillon; Davide Balzarotti (NDSS, 2014)

A Large-Scale Analysis of the Security of Embedded Firmwares. - Andrei Costin; Jonas Zaddach; Aurélien Francillon; Davide Balzarotti (USENIX Security Symposium, 2014)

Short paper: WifiLeaks: underestimated privacy implications of the access_wifi_state android permission. - Jagdish Prasad Achara; Mathieu Cunche; Vincent Roca; Aurélien Francillon (WISEC, 2014)

Short paper: a dangerous 'pyrotechnic composition': fireworks, embedded wireless and insecurity-by-design. - Andrei Costin; Aurélien Francillon (WISEC, 2014)

Through the Looking-Glass, and What Eve Found There. - Luca Bruno; Mariano Graziano; Davide Balzarotti; Aurélien Francillon (WOOT, 2014)

Inside the SCAM Jungle: A Closer Look at 419 Scam Email Operations. - Jelena Isacenkova; Olivier Thonnard; Andrei Costin; Aurélien Francillon; Davide Balzarotti (EURASIP J. Inf. Secur., 2014)

Microcomputations as Micropayments in Web-based Services. - Ghassan Karame; Aurélien Francillon; Victor Budilivschi; Srdjan Capkun; Vedran Capkun (ACM Trans. Internet Techn., 2014)

PIE: Parser Identification in Embedded Systems. - Lucian Cojocar; Jonas Zaddach; Roel Verdult; Herbert Bos; Aurélien Francillon; Davide Balzarotti (ACSAC, 2015)

C5: Cross-Cores Cache Covert Channel. - Clémentine Maurice; Christoph Neumann 001; Olivier Heen; Aurélien Francillon (DIMVA, 2015)

Reverse Engineering Intel Last-Level Cache Complex Addressing Using Performance Counters. - Clémentine Maurice; Nicolas Le Scouarnec; Christoph Neumann 001; Olivier Heen; Aurélien Francillon (RAID, 2015)

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces. - Andrei Costin; Apostolis Zarras; Aurélien Francillon (AsiaCCS, 2016)

Analyzing Thousands of Firmware Images and a Few Physical Devices: What's Next? - Aurélien Francillon (TrustED@CCS, 2016)

Over-The-Top Bypass: Study of a Recent Telephony Fraud. - Merve Sahin; Aurélien Francillon (CCS, 2016)

Trust, but verify: Why and how to establish trust in embedded devices. - Aurélien Francillon (DATE, 2016)

MobileAppScrutinator: A Simple yet Efficient Dynamic Analysis Approach for Detecting Privacy Leaks across Mobile OSs. - Jagdish Prasad Achara; Vincent Roca; Claude Castelluccia; Aurélien Francillon (CoRR, 2016)

SoK: Fraud in Telephony Networks. - Merve Sahin; Aurélien Francillon; Payas Gupta; Mustaque Ahamad (EuroS&P, 2017)

Towards Automated Classification of Firmware Images and Identification of Embedded Devices. - Andrei Costin; Apostolis Zarras; Aurélien Francillon (SEC, 2017)

Using chatbots against voice spam: Analyzing Lenny's effectiveness. - Merve Sahin; Marc Relieu; Aurélien Francillon (SOUPS, 2017)

SMASHUP: a toolchain for unified verification of hardware/software co-designs. - Florian Lugou; Ludovic Apvrille; Aurélien Francillon (J. Cryptogr. Eng., 2017)

Screaming Channels: When Electromagnetic Side Channels Meet Radio Transceivers. - Giovanni Camurati; Sebastian Poeplau; Marius Muench; Tom Hayes; Aurélien Francillon (CCS, 2018)

What You Corrupt Is Not What You Crash: Challenges in Fuzzing Embedded Devices. - Marius Muench; Jan Stijohann; Frank Kargl; Aurélien Francillon; Davide Balzarotti (NDSS, 2018)

Backdoors: Definition, Deniability and Detection. - Sam L. Thomas; Aurélien Francillon (RAID, 2018)

Smashing the Stack Protector for Fun and Profit. - Bruno Bierbaumer; Julian Kirsch; Thomas Kittel 001; Aurélien Francillon; Apostolis Zarras (SEC, 2018)

Inception: System-Wide Security Testing of Real-World Embedded Systems Software. - Nassim Corteggiani; Giovanni Camurati; Aurélien Francillon (USENIX Security Symposium, 2018)

Systematic comparison of symbolic execution systems: intermediate representation and its generation. - Sebastian Poeplau; Aurélien Francillon (ACSAC, 2019)

Lenny the bot as a resource for sequential analysis: exploring the treatment of Next Turn Repair Initiation in the beginnings of unsolicited calls. - Marc Relieu; Merve Sahin; Aurélien Francillon (MuC (Workshopband), 2019)

Toward the Analysis of Embedded Firmware through Automated Re-hosting. - Eric Gustafson; Marius Muench; Chad Spensky; Nilo Redini; Aravind Machiry; Yanick Fratantonio; Davide Balzarotti; Aurélien Francillon; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (RAID, 2019)

HardSnap: Leveraging Hardware Snapshotting for Embedded Systems Security Testing. - Nassim Corteggiani; Aurélien Francillon (DSN, 2020)

Symbolic execution with SymCC: Don't interpret, compile! - Sebastian Poeplau; Aurélien Francillon (USENIX Security Symposium, 2020)

Understanding Screaming Channels: From a Detailed Analysis to Improved Attacks. - Giovanni Camurati; Aurélien Francillon; François-Xavier Standaert (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2020)

Finding Software Bugs in Embedded Devices. - Aurélien Francillon; Sam L. Thomas; Andrei Costin (Security of Ubiquitous Computing Systems, 2021)

SoK: Enabling Security Analyses of Embedded Systems via Rehosting. - Andrew Fasano; Tiemoko Ballo; Marius Muench; Tim Leek; Alexander Bulekov; Brendan Dolan-Gavitt; Manuel Egele; Aurélien Francillon; Long Lu; Nick Gregory; Davide Balzarotti; William Robertson 002 (AsiaCCS, 2021)

SymQEMU: Compilation-based symbolic execution for binaries. - Sebastian Poeplau; Aurélien Francillon (NDSS, 2021)

Understanding and Detecting International Revenue Share Fraud. - Merve Sahin; Aurélien Francillon (NDSS, 2021)

SoC Security Evaluation: Reflections on Methodology and Tooling. - Nassim Corteggiani; Giovanni Camurati; Marius Muench; Sebastian Poeplau; Aurélien Francillon (IEEE Des. Test, 2021)

Automated Identification of Flaky Builds using Knowledge Graphs. - Florent Moriconi; Raphaël Troncy; Aurélien Francillon; Jihane Zouaoui (EKAW (Companion), 2022)

BEERR: Bench of Embedded system Experiments for Reproducible Research. - Paul Olivier; Xuan-Huy Ngo; Aurélien Francillon (EuroS&P Workshops, 2022)

Noise-SDR: Arbitrary Modulation of Electromagnetic Noise from Unprivileged Software and Its Impact on Emission Security. - Giovanni Camurati; Aurélien Francillon (SP, 2022)

ESPwn32: Hacking with ESP32 System-on-Chips. - Romain Cayre; Damien Cauquil; Aurélien Francillon (SP (Workshops), 2023)

Reflections on Trusting Docker: Invisible Malware in Continuous Integration Systems. - Florent Moriconi; Axel Ilmari Neergaard; Lucas Georget; Samuel Aubertin; Aurélien Francillon (SP (Workshops), 2023)

BlueScream: Screaming Channels on Bluetooth Low Energy. - Pierre Ayoub; Romain Cayre; Aurélien Francillon; Clémentine Maurice (ACSAC, 2024)

OASIS: An Intrusion Detection System Embedded in Bluetooth Low Energy Controllers. - Romain Cayre; Vincent Nicomette; Guillaume Auriol; Mohamed Kaâniche; Aurélien Francillon (AsiaCCS, 2024)

X-Ray-TLS: Transparent Decryption of TLS Sessions by Extracting Session Keys from Memory. - Florent Moriconi; Olivier Levillain; Aurélien Francillon; Raphaël Troncy (AsiaCCS, 2024)

GHALogs: Large-Scale Dataset of GitHub Actions Runs. - Florent Moriconi; Thomas Durieux; Jean-Rémy Falleri; Raphaël Troncy; Aurélien Francillon (MSR, 2025)

PhaseSCA: Exploiting Phase-Modulated Emanations in Side Channels. - Pierre Ayoub; Aurélien Hernandez; Romain Cayre; Aurélien Francillon; Clémentine Maurice (IACR Trans. Cryptogr. Hardw. Embed. Syst., 2025)