REnvDB, a RESTful Database for Pervasive Environmental Wireless Sensor Networks. - Filippo de Stefani; Paolo Gamba; Emanuele Goldoni; Alberto Savioli; Davide Silvestri; Flavio Toffalini (ICDCS Workshops, 2010)

Google Dorks: Analysis, Creation, and New Defenses. - Flavio Toffalini; Maurizio Abbà; Damiano Carra; Davide Balzarotti (DIMVA, 2016)

TWOS: A Dataset of Malicious Insider Threat Behavior Based on a Gamified Competition. - Athul Harilal; Flavio Toffalini; John Henry Castellanos; Juan Guarnizo; Ivan Homoliak; Martín Ochoa (MIST@CCS, 2017)

Static analysis of context leaks in android applications. - Flavio Toffalini; Jun Sun 001; Martín Ochoa (ICSE (SEIP), 2018)

Detection of Masqueraders Based on Graph Partitioning of File System Access Events. - Flavio Toffalini; Ivan Homoliak; Athul Harilal; Alexander Binder; Martín Ochoa (IEEE Symposium on Security and Privacy Workshops, 2018)

Insight into Insiders: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures. - Ivan Homoliak; Flavio Toffalini; Juan Guarnizo; Yuval Elovici; Martín Ochoa (CoRR, 2018)

SCARR: A Novel Scalable Runtime Remote Attestation. - Flavio Toffalini; Andrea Biondo; Eleonora Losiouk; Jianying Zhou 001; Mauro Conti (CoRR, 2018)

The Wolf Of SUTD (TWOS): A Dataset of Malicious Insider Threat Behavior Based on a Gamified Competition. - Athul Harilal; Flavio Toffalini; Ivan Homoliak; John Henry Castellanos; Juan Guarnizo; Soumik Mondal; Martín Ochoa (J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl., 2018)

Careful-Packing: A Practical and Scalable Anti-Tampering Software Protection enforced by Trusted Computing. - Flavio Toffalini; Martín Ochoa; Jun Sun 001; Jianying Zhou 001 (CODASPY, 2019)

ScaRR: Scalable Runtime Remote Attestation for Complex Systems. - Flavio Toffalini; Eleonora Losiouk; Andrea Biondo; Jianying Zhou 001; Mauro Conti (RAID, 2019)

SAFE^d: Self-Attestation For Networks of Heterogeneous Embedded Devices. - Alessandro Visintin; Flavio Toffalini; Mauro Conti; Jianying Zhou 001 (CoRR, 2019)

Insight Into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures. - Ivan Homoliak; Flavio Toffalini; Juan Guarnizo; Yuval Elovici; Martín Ochoa (ACM Comput. Surv., 2019)

Practical static analysis of context leaks in Android applications. - Flavio Toffalini; Jun Sun 001; Martín Ochoa (Softw. Pract. Exp., 2019)

ASAINT: a spy App identification system based on network traffic. - Mauro Conti; Giulio Rigoni; Flavio Toffalini (ARES, 2020)

SnakeGX: A Sneaky Attack Against SGX Enclaves. - Flavio Toffalini; Mariano Graziano; Mauro Conti; Jianying Zhou 001 (ACNS (1), 2021)

The evidence beyond the wall: Memory forensics in SGX environments. - Flavio Toffalini; Andrea Oliveri; Mariano Graziano; Jianying Zhou 001; Davide Balzarotti (Digit. Investig., 2021)

HolA: Holistic and Autonomous Attestation for IoT Networks. - Alessandro Visintin; Flavio Toffalini; Eleonora Losiouk; Mauro Conti; Jianying Zhou 001 (ACNS Workshops, 2022)

Designing a Provenance Analysis for SGX Enclaves. - Flavio Toffalini; Mathias Payer; Jianying Zhou 001; Lorenzo Cavallaro (ACSAC, 2022)

Evocatio: Conjuring Bug Capabilities from a Single PoC. - Zhiyuan Jiang; Shuitao Gan; Adrian Herrera; Flavio Toffalini; Lucio Romerio; Chaojing Tang; Manuel Egele; Chao Zhang 008; Mathias Payer (CCS, 2022)

FishFuzz: Throwing Larger Nets to Catch Deeper Bugs. - Han Zheng 006; Jiayuan Zhang; Yuhang Huang; Zezhong Ren; He Wang 014; Chunjie Cao; Yuqing Zhang 001; Flavio Toffalini; Mathias Payer (CoRR, 2022)

Crystallizer: A Hybrid Path Analysis Framework to Aid in Uncovering Deserialization Vulnerabilities. - Prashast Srivastava; Flavio Toffalini; Kostyantyn Vorobyov; François Gauthier 001; Antonio Bianchi; Mathias Payer (ESEC/SIGSOFT FSE, 2023)

ViDeZZo: Dependency-aware Virtual Device Fuzzing. - Qiang Liu 034; Flavio Toffalini; Yajin Zhou; Mathias Payer (SP, 2023)

WarpAttack: Bypassing CFI through Compiler-Introduced Double-Fetches. - Jianhao Xu; Luca Di Bartolomeo; Flavio Toffalini; Bing Mao 001; Mathias Payer (SP, 2023)

FISHFUZZ: Catch Deeper Bugs by Throwing Larger Nets. - Han Zheng 006; Jiayuan Zhang; Yuhang Huang; Zezhong Ren; He Wang 014; Chunjie Cao; Yuqing Zhang 001; Flavio Toffalini; Mathias Payer (USENIX Security Symposium, 2023)

EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems. - Davide Rusconi; Matteo Zoia; Luca Buccioli; Fabio Pierazzi; Danilo Bruschi; Lorenzo Cavallaro; Flavio Toffalini; Andrea Lanzi (CPSIOTSEC@CCS, 2024)

TuneFuzz: Adaptively Exploring Target Programs. - Han Zheng 006; Flavio Toffalini; Mathias Payer (SBFT@ICSE, 2024)

Sourcerer: Channeling the void. - Nicolas Badoux; Flavio Toffalini; Mathias Payer (DIMVA (1), 2025)

type++: Prohibiting Type Confusion with Inline Type Information. - Nicolas Badoux; Flavio Toffalini; Yuseok Jeon; Mathias Payer (NDSS, 2025)

DUMPLING: Fine-grained Differential JavaScript Engine Fuzzing. - Liam Wachter; Julian Gremminger; Christian Wressnegger; Mathias Payer; Flavio Toffalini (NDSS, 2025)

Liberating Libraries through Automated Fuzz Driver Generation: Striking a Balance without Consumer Code. - Flavio Toffalini; Nicolas Badoux; Zurab Tsinadze; Mathias Payer (Proc. ACM Softw. Eng., 2025)

MendelFuzz: The Return of the Deterministic Stage. - Han Zheng 006; Flavio Toffalini; Marcel Böhme; Mathias Payer (Proc. ACM Softw. Eng., 2025)