FCPre: Extending the Arora-Kulkarni Method of Automatic Addition of Fault-Tolerance. - Bastian Braun (ARES, 2007)

Authenticity: The missing link in the social semantic web. - Bastian Braun; Henrich Christopher Pöhls (GI Jahrestagung (2), 2008)

SAVE: static analysis on versioning entities. - Bastian Braun (SESS, 2008)

Session Fixation - The Forgotten Vulnerability? - Michael Schrank; Bastian Braun; Martin Johns; Joachim Posegga (Sicherheit, 2010)

Reliable protection against session fixation attacks. - Martin Johns; Bastian Braun; Michael Schrank; Joachim Posegga (SAC, 2011)

BetterAuth: web authentication revisited. - Martin Johns; Sebastian Lekies; Bastian Braun; Benjamin Flesch (ACSAC, 2012)

A User-Level Authentication Scheme to Mitigate Web Session-Based Vulnerabilities. - Bastian Braun; Stefan Kucher; Martin Johns; Joachim Posegga (TrustBus, 2012)

Angriffe auf OpenID und ihre strafrechtliche Bewertung - Cross Site Request Forgery, Phishing und Clickjacking. - Bastian Braun; Patrick Gemein; Benedikt Höfling; Michael Marc Maisch; Alexander Seidl (Datenschutz und Datensicherheit, 2012)

Control-Flow Integrity in Web Applications. - Bastian Braun; Patrick Gemein; Hans P. Reiser; Joachim Posegga (ESSoS, 2013)

A Survey on Control-Flow Integrity Means in Web Application Frameworks. - Bastian Braun; Christian v. Pollak; Joachim Posegga (NordSec, 2013)

PhishSafe: leveraging modern JavaScript API's for transparent and robust protection. - Bastian Braun; Martin Johns; Johannes Köstler; Joachim Posegga (CODASPY, 2014)

Ghostrail: Ad Hoc Control-Flow Integrity for Web Applications. - Bastian Braun; Caspar Gries; Benedikt Petschkuhn; Joachim Posegga (SEC, 2014)

A Trusted UI for the Mobile Web. - Bastian Braun; Johannes Köstler; Joachim Posegga; Martin Johns (SEC, 2014)

LogSec: adaptive protection for the wild wild web. - Bastian Braun; Korbinian Pauli; Joachim Posegga; Martin Johns (SAC, 2015)

Web-based Secure Application Control. - Bastian Braun (2015)