Measurement and Analysis of Autonomous Spreading Malware in a University Environment. - Jan Goebel; Thorsten Holz; Carsten Willems (DIMVA, 2007)

Toward Automated Dynamic Malware Analysis Using CWSandbox. - Carsten Willems; Thorsten Holz; Felix C. Freiling (IEEE Secur. Priv., 2007)

Learning and Classification of Malware Behavior. - Konrad Rieck; Thorsten Holz; Carsten Willems; Patrick Düssel; Pavel Laskov (DIMVA, 2008)

A Malware Instruction Set for Behavior-Based Analysis. - Philipp Trinius; Carsten Willems; Thorsten Holz; Konrad Rieck (Sicherheit, 2010)

Automated Identification of Cryptographic Primitives in Binary Programs. - Felix Gröbert; Carsten Willems; Thorsten Holz (RAID, 2011)

Das Internet-Malware-Analyse-System (InMAS) - Ein System zur großflächigen Sammlung und Analyse von Schadsoftware im Internet. - Markus Engelberth; Felix C. Freiling; Jan Göbel; Christian Gorecki; Thorsten Holz; Ralf Hund; Philipp Trinius; Carsten Willems (Datenschutz und Datensicherheit, 2011)

Automatic analysis of malware behavior using machine learning. - Konrad Rieck; Philipp Trinius; Carsten Willems; Thorsten Holz (J. Comput. Secur., 2011)

Using memory management to detect and extract illegitimate code for malware analysis. - Carsten Willems; Felix C. Freiling; Thorsten Holz (ACSAC, 2012)

Down to the bare metal: using processor features for binary analysis. - Carsten Willems; Ralf Hund; Andreas Fobian; Dennis Felsch; Thorsten Holz; Amit Vasudevan (ACSAC, 2012)

Analyse und Vergleich von BckR2D2-I und II. - Andreas Dewald; Felix C. Freiling; Thomas Schreck; Michael Spreitzenbarth; Johannes Stüttgen; Stefan Vömel; Carsten Willems (Sicherheit, 2012)

Don't Trust Satellite Phones: A Security Analysis of Two Satphone Standards. - Benedikt Driessen; Ralf Hund; Carsten Willems; Christof Paar; Thorsten Holz (IEEE Symposium on Security and Privacy, 2012)

Reverse Code Engineering - State of the Art and Countermeasures. - Carsten Willems; Felix C. Freiling (it Inf. Technol., 2012)

Practical Timing Side Channel Attacks against Kernel Space ASLR. - Ralf Hund; Carsten Willems; Thorsten Holz (IEEE Symposium on Security and Privacy, 2013)

An experimental security analysis of two satphone standards. - Benedikt Driessen; Ralf Hund; Carsten Willems; Christof Paar; Thorsten Holz (ACM Trans. Inf. Syst. Secur., 2013)

Instrumenting existing system components for dynamic analysis of malicious software - Carsten Willems (2013)