Vulnerability Analysis of MMS User Agents. - Collin Mulliner; Giovanni Vigna (ACSAC, 2006)

Using Labeling to Prevent Cross-Service Attacks Against Smart Phones. - Collin Mulliner; Giovanni Vigna; David Dagon; Wenke Lee (DIMVA, 2006)

Vulnerability Analysis and Attacks on NFC-Enabled Mobile Phones. - Collin Mulliner (ARES, 2009)

Injecting SMS Messages into Smart Phones for Security Analysis. - Collin Mulliner; Charlie Miller (WOOT, 2009)

Rise of the iBots: Owning a telco network. - Collin Mulliner; Jean-Pierre Seifert (MALWARE, 2010)

Poster: Towards detecting DMA malware. - Patrick Stewin; Jean-Pierre Seifert; Collin Mulliner (CCS, 2011)

SMS of Death: From Analyzing to Attacking Mobile Phones on a Large Scale. - Collin Mulliner; Nico Golde; Jean-Pierre Seifert (USENIX Security Symposium, 2011)

Taming Mr Hayes: Mitigating signaling based attacks on smartphones. - Collin Mulliner; Steffen Liebergeld; Matthias Lange; Jean-Pierre Seifert (DSN, 2012)

Read It Twice! A Mass-Storage-Based TOCTTOU Attack. - Collin Mulliner; Benjamin Michéle (WOOT, 2012)

Persönliche Datenspuren bei der mobilen Internetnutzung. - Collin Mulliner (Datenschutz und Datensicherheit, 2012)

Fake Emulation Environment to Prevent Malware from Executing. - Collin Mulliner (Adv. Math. Commun., 2012)

On the Impact of the Cellular Modem on the Security of Mobile Phones. - Collin Mulliner (2012)

PatchDroid: scalable third-party security patches for Android devices. - Collin Mulliner; Jon Oberheide; William K. Robertson; Engin Kirda (ACSAC, 2013)

SMS-Based One-Time Passwords: Attacks and Defense - (Short Paper). - Collin Mulliner; Ravishankar Borgaonkar; Patrick Stewin; Jean-Pierre Seifert (DIMVA, 2013)

PrivExec: Private Execution as an Operating System Service. - Kaan Onarlioglu; Collin Mulliner; William K. Robertson; Engin Kirda (IEEE Symposium on Security and Privacy, 2013)

VirtualSwindle: an automated attack against in-app billing on android. - Collin Mulliner; William K. Robertson; Engin Kirda (AsiaCCS, 2014)

Hidden GEMs: Automated Discovery of Access Control Vulnerabilities in Graphical User Interfaces. - Collin Mulliner; William K. Robertson; Engin Kirda (IEEE Symposium on Security and Privacy, 2014)

BabelCrypt: The Universal Encryption Layer for Mobile Messaging Applications. - Ahmet Talha Ozcan; Can Gemicioglu; Kaan Onarlioglu; Michael Weissbacher; Collin Mulliner; William K. Robertson; Engin Kirda (Financial Cryptography, 2015)

CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes. - Patrick Carter; Collin Mulliner; Martina Lindorfer; William K. Robertson; Engin Kirda (Financial Cryptography, 2016)

Trellis: Privilege Separation for Multi-user Applications Made Easy. - Andrea Mambretti; Kaan Onarlioglu; Collin Mulliner; William Robertson 002; Engin Kirda; Federico Maggi 001; Stefano Zanero (RAID, 2016)

Runtime Integrity Checking for Exploit Mitigation on Lightweight Embedded Devices. - Matthias Neugschwandtner; Collin Mulliner; William K. Robertson; Engin Kirda (TRUST, 2016)

UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. - Amin Kharraz; Sajjad Arshad; Collin Mulliner; William K. Robertson; Engin Kirda (USENIX Security Symposium, 2016)

On the misuse of graphical user interface elements to implement security controls. - Collin Mulliner; William K. Robertson; Engin Kirda (it Inf. Technol., 2017)

USBlock: Blocking USB-Based Keypress Injection Attacks. - Sebastian Neuner; Artemios G. Voyiatzis; Spiros Fotopoulos; Collin Mulliner; Edgar R. Weippl (DBSec, 2018)