Security Model Evolution of PHP Web Applications. - Dominic Letarte; François Gauthier 001; Ettore Merlo (ICST, 2011)

Extraction and comprehension of moodle's access control model: A case study. - François Gauthier 001; Dominic Letarte; Thierry Lavoie; Ettore Merlo (PST, 2011)

Investigation of Access Control Models with Formal Concept Analysis: A Case Study. - François Gauthier 001; Ettore Merlo (CSMR, 2012)

Alias-Aware Propagation of Simple Pattern-Based Properties in PHP Applications. - François Gauthier 001; Ettore Merlo (SCAM, 2012)

Targeted genetic test SQL generation for the DB2 database. - Dominic Letarte; François Gauthier 001; Ettore Merlo; Nattavut Sutyanyong; Calisto Zuzarte (DBTest, 2012)

Fast Detection of Access Control Vulnerabilities in PHP Applications. - François Gauthier 001; Ettore Merlo (WCRE, 2012)

Uncovering access control weaknesses and flaws with security-discordant software clones. - François Gauthier 001; Thierry Lavoie; Ettore Merlo (ACSAC, 2013)

Semantic smells and errors in access control models: a case study in PHP. - François Gauthier 001; Ettore Merlo (ICSE, 2013)

Supporting Maintenance and Evolution of Access Control Models in Web Applications. - François Gauthier 001; Ettore Merlo; Eleni Stroulia; David Turner (ICSME, 2014)

Evolutionary analysis of access control models: a formal concept analysis method. - Zhuobing Han; Mathieu Mérineau; François Gauthier 001; Ettore Merlo; Xiaohong Li 001; Eleni Stroulia (CASCON, 2015)

JSPChecker: Static Detection of Context-Sensitive Cross-Site Scripting Flaws in Legacy Web Applications. - Antonín Steinhauser; François Gauthier 001 (PLAS@CCS, 2016)

Combining String Abstract Domains for JavaScript Analysis: An Evaluation. - Roberto Amadini; Alexander Jordan; Graeme Gange; François Gauthier 001; Peter Schachte; Harald Søndergaard; Peter J. Stuckey; Chenyi Zhang 001 (TACAS (1), 2017)

Driver Generation for Java EE Web Applications. - Jens Dietrich 001; François Gauthier 001; Padmanabhan Krishnan (ASWEC, 2018)

AFFOGATO: runtime detection of injection attacks for Node.js. - François Gauthier 001; Behnaz Hassanshahi; Alexander Jordan (ISSTA/ECOOP Workshops, 2018)

Scalable Static Analysis to Detect Security Vulnerabilities: Challenges and Solutions. - François Gauthier 001; Nathan Keynes; Nicholas Allen; Diane Corney; Padmanabhan Krishnan (SecDev, 2018)

Vandal: A Scalable Security Analysis Framework for Smart Contracts. - Lexi Brent; Anton Jurisevic; Michael Kong; Eric Liu; François Gauthier 001; Vincent Gramoli; Ralph Holz; Bernhard Scholz (CoRR, 2018)

SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation. - Alexander Jordan; François Gauthier 001; Behnaz Hassanshahi; David Zhao 001 (CoRR, 2018)

Reference Abstract Domains and Applications to String Analysis. - Roberto Amadini; Graeme Gange; François Gauthier 001; Alexander Jordan; Peter Schachte; Harald Søndergaard; Peter J. Stuckey; Chenyi Zhang 001 (Fundam. Informaticae, 2018)

Unacceptable Behavior: Robust PDF Malware Detection Using Abstract Interpretation. - Alexander Jordan; François Gauthier 001; Behnaz Hassanshahi; David Zhao 001 (PLAS@CCS, 2019)

Nodest: feedback-driven static analysis of Node.js applications. - Benjamin Barslev Nielsen; Behnaz Hassanshahi; François Gauthier 001 (ESEC/SIGSOFT FSE, 2019)

Trade-offs in managing risk and technical debt in industrial research labs: an experience report. - François Gauthier 001; Alexander Jordan; Padmanabhan Krishnan; Behnaz Hassanshahi; Jörn Guy Süß; Sora Bae; Hyunjun Lee (TechDebt@ICSE, 2020)

IFDS Taint Analysis with Access Paths. - Nicholas Allen; François Gauthier 001; Alexander Jordan (CoRR, 2021)

BackREST: A Model-Based Feedback-Driven Greybox Fuzzer for Web Applications. - François Gauthier 001; Behnaz Hassanshahi; Benjamin Selwyn-Smith; Trong Nhan Mai; Max Schlüter; Micah Williams (CoRR, 2021)

Synthesis of Java Deserialisation Filters from Examples. - Kostyantyn Vorobyov; François Gauthier 001; Sora Bae; Padmanabhan Krishnan; Rebecca O'Donoghue (COMPSAC, 2022)

Experience: Model-Based, Feedback-Driven, Greybox Web Fuzzing with BackREST. - François Gauthier 001; Behnaz Hassanshahi; Benjamin Selwyn-Smith; Trong Nhan Mai; Max Schlüter; Micah Williams (ECOOP, 2022)

Runtime Prevention of Deserialization Attacks. - François Gauthier 001; Sora Bae (ICSE (NIER), 2022)

Crystallizer: A Hybrid Path Analysis Framework to Aid in Uncovering Deserialization Vulnerabilities. - Prashast Srivastava; Flavio Toffalini; Kostyantyn Vorobyov; François Gauthier 001; Antonio Bianchi; Mathias Payer (ESEC/SIGSOFT FSE, 2023)

The role of program analysis in security vulnerability detection: Then and now. - Cristina Cifuentes; François Gauthier 001; Behnaz Hassanshahi; Padmanabhan Krishnan; Davin McCall (Comput. Secur., 2023)

Synthesis of Allowlists for Runtime Protection against SQLi. - Kostyantyn Vorobyov; François Gauthier 001; Padmanabhan Krishnan (NIER@ICSE, 2024)