Attack Patterns for Black-Box Security Testing of Multi-Party Web Applications. - Avinash Sudhodanan; Alessandro Armando; Roberto Carbone; Luca Compagna (NDSS, 2016)

Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries. - Avinash Sudhodanan; Roberto Carbone; Luca Compagna; Nicolas Dolgin; Alessandro Armando; Umberto Morelli (EuroS&P, 2017)

Black-Box Security Testing of Browser-Based Security Protocols. - Avinash Sudhodanan (2017)

Costly freeware: a systematic analysis of abuse in download portals. - Richard Rivera; Platon Kotzias; Avinash Sudhodanan; Juan Caballero (IET Inf. Secur., 2019)

Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks. - Avinash Sudhodanan; Soheil Khodayari; Juan Caballero (NDSS, 2020)

Pre-hijacked accounts: An Empirical Study of Security Failures in User Account Creation on the Web. - Avinash Sudhodanan; Andrew Paverd (USENIX Security Symposium, 2022)

CSRFing the SSO Waves: Security Testing of SSO-Based Account Linking Process. - Andrea Bisegna; Matteo Bitussi; Roberto Carbone; Luca Compagna; Silvio Ranise; Avinash Sudhodanan (EuroS&P, 2024)