Spinner: Semi-Automatic Detection of Pinning without Hostname Verification. - Chris McMahon Stone; Tom Chothia; Flavio D. Garcia (ACSAC, 2017)

Why Banker Bob (Still) Can't Get TLS Right: A Security Analysis of TLS in Leading UK Banking Apps. - Tom Chothia; Flavio D. Garcia; Chris Heppel; Chris McMahon Stone (Financial Cryptography, 2017)

Extending Automated Protocol State Learning for the 802.11 4-Way Handshake. - Chris McMahon Stone; Tom Chothia; Joeri de Ruiter (ESORICS (1), 2018)

SoK: Untangling File-based Encryption on Mobile Devices. - David Galindo; Jia Liu 003; Chris McMahon Stone; Mihai Ordean (CoRR, 2021)

The Closer You Look, The More You Learn: A Grey-box Approach to Protocol State Machine Learning. - Chris McMahon Stone; Sam L. Thomas; Mathy Vanhoef; James Henderson; Nicolas Bailluet; Tom Chothia (CCS, 2022)