To have and have not: variations on secret sharing to model user presence. - Quentin Stafford-Fraser; Graeme Jenkinson; Frank Stajano; Max Spencer; Chris Warrington; Jeunese A. Payne (UbiComp Adjunct, 2014)

Password-Manager Friendly (PMF): Semantic Annotations to Improve the Effectiveness of Password Managers. - Frank Stajano; Max Spencer; Graeme Jenkinson; Quentin Stafford-Fraser (PASSWORDS, 2014)

I Bought a New Security Token and All I Got Was This Lousy Phish - Relay Attacks on Visual Code Authentication Schemes. - Graeme Jenkinson; Max Spencer; Chris Warrington; Frank Stajano (Security Protocols Workshop, 2014)

Bootstrapping Adoption of the Pico Password Replacement System. - Frank Stajano; Graeme Jenkinson; Jeunese A. Payne; Max Spencer; Quentin Stafford-Fraser; Chris Warrington (Security Protocols Workshop, 2014)

Pico Without Public Keys. - Frank Stajano; Bruce Christianson; T. Mark A. Lomas; Graeme Jenkinson; Jeunese A. Payne; Max Spencer; Quentin Stafford-Fraser (Security Protocols Workshop, 2015)

Low-Cost Mitigation Against Cold Boot Attacks for an Authentication Token. - Ian Goldberg; Graeme Jenkinson; Frank Stajano (ACNS, 2016)

Red Button and Yellow Button: Usable Security for Lost Security Tokens. - Ian Goldberg; Graeme Jenkinson; David Llewellyn-Jones; Frank Stajano (Security Protocols Workshop, 2016)

Explicit Delegation Using Configurable Cookies. - David Llewellyn-Jones; Graeme Jenkinson; Frank Stajano (Security Protocols Workshop, 2016)

The usability canary in the security coal mine: A cognitive framework for evaluation and design of usable authentication solutions. - Brian Glass; Graeme Jenkinson; Yuqi Liu; M. Angela Sasse; Frank Stajano (CoRR, 2016)

Responsibility and Tangible Security: Towards a Theory of User Acceptance of Security Tokens. - Jeunese A. Payne; Graeme Jenkinson; Frank Stajano; M. Angela Sasse; Max Spencer (CoRR, 2016)

Applying Provenance in APT Monitoring and Analysis: Practical Challenges for Scalable, Efficient and Trustworthy Distributed Provenance. - Graeme Jenkinson; Lucian Carata; Thomas Bytheway; Ripduman Sohan; Robert N. M. Watson; Jonathan Anderson; Brian J. Kidney; Amanda Strnad; Arun Thomas; George V. Neville-Neil (TaPP, 2017)

It's Better to Rust Than Wear Out. - Graeme Jenkinson (login Usenix Mag., 2017)

Deploying authentication in the wild: towards greater ecological validity in security usability studies. - Seb Aebischer; Claudio Dettoni; Graeme Jenkinson; Kat Krol; David Llewellyn-Jones; Toshiyuki Masui; Frank Stajano (J. Cybersecur., 2020)

It Is Time to Standardize Principles and Practices for Software Memory Safety. - Robert N. M. Watson; John Baldwin; David Chisnall; Tony Chen; Jessica Clarke 001; Brooks Davis; Nathaniel Wesley Filardo; Brett F. Gutstein; Graeme Jenkinson; Ben Laurie; Alfredo Mazzinghi; Simon W. Moore; et al. (Commun. ACM, 2025)