Towards a Formal Foundation of Web Security. - Devdatta Akhawe; Adam Barth; Peifung E. Lam; John C. Mitchell; Dawn Song (CSF, 2010)

A Symbolic Execution Framework for JavaScript. - Prateek Saxena; Devdatta Akhawe; Steve Hanna; Feng Mao; Stephen McCamant; Dawn Song (IEEE Symposium on Security and Privacy, 2010)

A Systematic Analysis of XSS Sanitization in Web Application Frameworks. - Joel Weinberger; Prateek Saxena; Devdatta Akhawe; Matthew Finifter; Eui Chul Richard Shin; Dawn Song (ESORICS, 2011)

Do You Know Where Your Data Are? Secure Data Capsules for Deployable Data Protection. - Petros Maniatis; Devdatta Akhawe; Kevin R. Fall; Elaine Shi; Dawn Song (HotOS, 2011)

Privilege Separation in HTML5 Applications. - Devdatta Akhawe; Prateek Saxena; Dawn Song (USENIX Security Symposium, 2012)

How to Ask for Permission. - Adrienne Porter Felt; Serge Egelman; Matthew Finifter; Devdatta Akhawe; David A. Wagner 001 (HotSec, 2012)

Data-Confined HTML5 Applications. - Devdatta Akhawe; Frank Li 001; Warren He; Prateek Saxena; Dawn Song (ESORICS, 2013)

Alice in Warningland: A Large-Scale Field Study of Browser Security Warning Effectiveness. - Devdatta Akhawe; Adrienne Porter Felt (USENIX Security Symposium, 2013)

An Empirical Study of Vulnerability Rewards Programs. - Matthew Finifter; Devdatta Akhawe; David A. Wagner 001 (USENIX Security Symposium, 2013)

Here's my cert, so trust me, maybe?: understanding TLS errors on the web. - Devdatta Akhawe; B. Amann 001; Matthias Vallentin; Robin Sommer (WWW, 2013)

ShadowCrypt: Encrypted Web Applications for Everyone. - Warren He; Devdatta Akhawe; Sumeet Jain; Elaine Shi; Dawn Xiaodong Song (CCS, 2014)

The Emperor's New Password Manager: Security Analysis of Web-based Password Managers. - Zhiwei Li; Warren He; Devdatta Akhawe; Dawn Song (USENIX Security Symposium, 2014)

Clickjacking Revisited: A Perceptual View of UI Security. - Devdatta Akhawe; Warren He; Zhiwei Li; Reza Moazzezi; Dawn Song (WOOT, 2014)

Towards High Assurance HTML5 Applications. - Devdatta Akhawe (2014)

ASPIRE: Iterative Specification Synthesis for Security. - Kevin Zhijie Chen; Warren He; Devdatta Akhawe; Vijay D'Silva; Prateek Mittal; Dawn Song (HotOS, 2015)

pASSWORD tYPOS and How to Correct Them Securely. - Rahul Chatterjee 001; Anish Athayle; Devdatta Akhawe; Ari Juels; Thomas Ristenpart (IEEE Symposium on Security and Privacy, 2016)

Cracking ShadowCrypt: Exploring the Limitations of Secure I/O Systems in Internet Browsers. - Michael Freyberger; Warren He; Devdatta Akhawe; Michelle L. Mazurek; Prateek Mittal (Proc. Priv. Enhancing Technol., 2018)

SoK: Hate, Harassment, and the Changing Landscape of Online Abuse. - Kurt Thomas; Devdatta Akhawe; Michael D. Bailey; Dan Boneh; Elie Bursztein; Sunny Consolvo; Nicola Dell; Zakir Durumeric; Patrick Gage Kelley; Deepak Kumar 006; Damon McCoy; Sarah Meiklejohn; et al. (SP, 2021)

Hopper: Modeling and Detecting Lateral Movement. - Grant Ho; Mayank Dhiman; Devdatta Akhawe; Vern Paxson; Stefan Savage; Geoffrey M. Voelker; David A. Wagner 001 (USENIX Security Symposium, 2021)

Hopper: Modeling and Detecting Lateral Movement (Extended Report). - Grant Ho; Mayank Dhiman; Devdatta Akhawe; Vern Paxson; Stefan Savage; Geoffrey M. Voelker; David A. Wagner 001 (CoRR, 2021)