Nomen est omen: exploring and exploiting similarities between argument and parameter names. - Hui Liu 003; Qiurong Liu; Cristian-Alexandru Staicu; Michael Pradel; Yue Luo (ICSE, 2016)

Search Based Clustering for Protecting Software with Diversified Updates. - Mariano Ceccato; Paolo Falcarin; Alessandro Cabutto; Yosief Weldezghi Frezghi; Cristian-Alexandru Staicu (SSBSE, 2016)

Saying 'hi!' is not enough: mining inputs for effective test generation. - Luca Della Toffola; Cristian-Alexandru Staicu; Michael Pradel (ASE, 2017)

A Survey of Dynamic Analysis and Test Generation for JavaScript. - Esben Andreasen; Liang Gong; Anders Møller; Michael Pradel; Marija Selakovic; Koushik Sen; Cristian-Alexandru Staicu (ACM Comput. Surv., 2017)

SYNODE: Understanding and Automatically Preventing Injection Attacks on NODE.JS. - Cristian-Alexandru Staicu; Michael Pradel; Benjamin Livshits (NDSS, 2018)

Freezing the Web: A Study of ReDoS Vulnerabilities in JavaScript-based Web Servers. - Cristian-Alexandru Staicu; Michael Pradel (USENIX Security Symposium, 2018)

An Empirical Study of Information Flows in Real-World JavaScript. - Cristian-Alexandru Staicu; Daniel Schoepe; Musard Balliu; Michael Pradel; Andrei Sabelfeld (PLAS@CCS, 2019)

Leaky Images: Targeted Privacy Attacks in the Web. - Cristian-Alexandru Staicu; Michael Pradel (USENIX Security Symposium, 2019)

Small World with High Risks: A Study of Security Threats in the npm Ecosystem. - Markus Zimmermann; Cristian-Alexandru Staicu; Cam Tenny; Michael Pradel (USENIX Security Symposium, 2019)

Anything to Hide? Studying Minified and Obfuscated Code in the Web. - Philippe Skolka; Cristian-Alexandru Staicu; Michael Pradel (WWW, 2019)

Extracting taint specifications for JavaScript libraries. - Cristian-Alexandru Staicu; Martin Toldam Torp; Max Schäfer; Anders Møller; Michael Pradel (ICSE, 2020)

Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript. - Nikos Vasilakis; Cristian-Alexandru Staicu; Greg Ntousakis; Konstantinos Kallas; Ben Karel; André DeHon; Michael Pradel (CoRR, 2020)

Enhancing the Security and Privacy of Full-Stack JavaScript Web Applications. - Cristian-Alexandru Staicu (2020)

Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction. - Nikos Vasilakis; Cristian-Alexandru Staicu; Grigoris Ntousakis; Konstantinos Kallas; Ben Karel; André DeHon; Michael Pradel (CCS, 2021)

SampleFix: Learning to Generate Functionally Diverse Fixes. - Hossein Hajipour; Apratim Bhattacharyya; Cristian-Alexandru Staicu; Mario Fritz (PKDD/ECML Workshops (2), 2021)

SimSCOOD: Systematic Analysis of Out-of-Distribution Behavior of Source Code Models. - Hossein Hajipour; Ning Yu 006; Cristian-Alexandru Staicu; Mario Fritz (CoRR, 2022)

A Tale of Frozen Clouds: Quantifying the Impact of Algorithmic Complexity Vulnerabilities in Popular Web Servers. - Masudul Hasan Masud Bhuiyan; Cristian-Alexandru Staicu (CoRR, 2022)

Jack-in-the-box: An Empirical Study of JavaScript Bundling on the Web and its Security Implications. - Jeremy Rack; Cristian-Alexandru Staicu (CCS, 2023)

SecBench.js: An Executable Security Benchmark Suite for Server-Side JavaScript. - Masudul Hasan Masud Bhuiyan; Adithya Srinivas Parthasarathy; Nikos Vasilakis; Michael Pradel; Cristian-Alexandru Staicu (ICSE, 2023)

SandDriller: A Fully-Automated Approach for Testing Language-Based JavaScript Sandboxes. - Abdullah AlHamdan; Cristian-Alexandru Staicu (USENIX Security Symposium, 2023)

Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js. - Mikhail Shcherbakov; Musard Balliu; Cristian-Alexandru Staicu (USENIX Security Symposium, 2023)

Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages. - Cristian-Alexandru Staicu; Sazzadur Rahaman; Ágnes Kiss; Michael Backes 001 (USENIX Security Symposium, 2023)

A Generalized Approach for Solving Web Form Constraints. - Björn Karthein; Cristian-Alexandru Staicu; Andreas Zeller (ASE, 2024)

Typed and Confused: Studying the Unexpected Dangers of Gradual Typing. - Dominic Troppmann; Aurore Fass; Cristian-Alexandru Staicu (ASE, 2024)

SimSCOOD: Systematic Analysis of Out-of-Distribution Generalization in Fine-tuned Source Code Models. - Hossein Hajipour; Ning Yu 006; Cristian-Alexandru Staicu; Mario Fritz (NAACL-HLT (Findings), 2024)

SoK: A Literature and Engineering Review of Regular Expression Denial of Service. - Masudul Hasan Masud Bhuiyan; Berk Çakar; Ethan H. Burmane; James C. Davis 001; Cristian-Alexandru Staicu (CoRR, 2024)

Non-Western Perspectives on Web Inclusivity: A Study of Accessibility Practices in the Global South. - Masudul Hasan Masud Bhuiyan; Matteo Varvello; Cristian-Alexandru Staicu; Yasir Zaki (SEiGS@ICSE, 2025)

Welcome to Jurassic Park: A Comprehensive Study of Security Risks in Deno and its Ecosystem. - Abdullah AlHamdan; Cristian-Alexandru Staicu (NDSS, 2025)

Digital Disparities: A Comparative Web Measurement Study Across Economic Boundaries. - Masudul Hasan Masud Bhuiyan; Matteo Varvello; Cristian-Alexandru Staicu; Yasir Zaki (WWW, 2025)

User Profiles: The Achilles' Heel of Web Browsers. - Dolière Francis Somé; Moaz Airan; Zakir Durumeric; Cristian-Alexandru Staicu (CoRR, 2025)

Call Me Maybe: Enhancing JavaScript Call Graph Construction using Graph Neural Networks. - Masudul Hasan Masud Bhuiyan; Gianluca De Stefano; Giancarlo Pellegrino; Cristian-Alexandru Staicu (CoRR, 2025)