D(e|i)aling with VoIP: Robust Prevention of DIAL Attacks. - Alexandros Kapravelos; Iasonas Polakis; Elias Athanasopoulos; Sotiris Ioannidis; Evangelos P. Markatos (ESORICS, 2010)

A Systematic Characterization of IM Threats using Honeypots. - Iasonas Polakis; Thanasis Petsas; Evangelos P. Markatos; Spyros Antonatos (NDSS, 2010)

Using social networks to harvest email addresses. - Iasonas Polakis; Georgios Kontaxis; Spyros Antonatos; Eleni Gessiou; Thanasis Petsas; Evangelos P. Markatos (WPES, 2010)

Outsourcing Malicious Infrastructure to the Cloud. - Georgios Kontaxis; Iasonas Polakis; Sotiris Ioannidis (SysSec@DIMVA, 2011)

CAPTCHuring Automated (Smart) Phone Attacks. - Iasonas Polakis; Georgios Kontaxis; Sotiris Ioannidis (SysSec@DIMVA, 2011)

dead.drop: URL-Based Stealthy Messaging. - Georgios Kontaxis; Iasonas Polakis; Michalis Polychronakis; Evangelos P. Markatos (EC2ND, 2011)

An empirical study on the security of cross-domain policies in rich internet applications. - Georgios Kontaxis; Demetres Antoniades; Iasonas Polakis; Evangelos P. Markatos (EUROSEC, 2011)

Detecting social network profile cloning. - Georgios Kontaxis; Iasonas Polakis; Sotiris Ioannidis; Evangelos P. Markatos (PerCom Workshops, 2011)

Dynamic Monitoring of Dark IP Address Space (Poster). - Iasonas Polakis; Georgios Kontaxis; Sotiris Ioannidis; Evangelos P. Markatos (TMA, 2011)

we.b: the web of short urls. - Demetres Antoniades; Iasonas Polakis; Georgios Kontaxis; Elias Athanasopoulos; Sotiris Ioannidis; Evangelos P. Markatos; Thomas Karagiannis (WWW, 2011)

All your face are belong to us: breaking Facebook's social authentication. - Iasonas Polakis; Marco Lancini; Georgios Kontaxis; Federico Maggi 001; Sotiris Ioannidis; Angelos D. Keromytis; Stefano Zanero (ACSAC, 2012)

The man who was there: validating check-ins in location-based services. - Iasonas Polakis; Stamatis Volanis; Elias Athanasopoulos; Evangelos P. Markatos (ACSAC, 2013)

Security and Privacy Measurements in Social Networks: Experiences and Lessons Learned. - Iasonas Polakis; Federico Maggi 001; Stefano Zanero; Angelos D. Keromytis (BADGERS@ESORICS, 2014)

Faces in the Distorting Mirror: Revisiting Photo-based Social Authentication. - Iasonas Polakis; Panagiotis Ilia; Federico Maggi 001; Marco Lancini; Georgios Kontaxis; Stefano Zanero; Sotiris Ioannidis; Angelos D. Keromytis (CCS, 2014)

Think Before RT: An Experimental Study of Abusing Twitter Trends. - Despoina Antonakaki; Iasonas Polakis; Elias Athanasopoulos; Sotiris Ioannidis; Paraskevi Fragopoulou (SocInfo Workshops, 2014)

Online social networks from a malicious perspective: novel attack techniques and defense mechanisms - Iasonas Polakis (2014)

Social Forensics: Searching for Needles in Digital Haystacks. - Iasonas Polakis; Panagiotis Ilia; Zacharias Tzermias; Sotiris Ioannidis; Paraskevi Fragopoulou (BADGERS@RAID, 2015)

Face/Off: Preventing Privacy Leakage From Photos in Social Networks. - Panagiotis Ilia; Iasonas Polakis; Elias Athanasopoulos; Federico Maggi 001; Sotiris Ioannidis (CCS, 2015)

Where's Wally?: Precise User Discovery Attacks in Location Proximity Services. - Iasonas Polakis; George Argyros; Theofilos Petsios; Suphannee Sivakorn; Angelos D. Keromytis (CCS, 2015)

Powerslave: Analyzing the Energy Consumption of Mobile Antivirus Software. - Iasonas Polakis; Michalis Diamantaris; Thanasis Petsas; Federico Maggi 001; Sotiris Ioannidis (DIMVA, 2015)

I am Robot: (Deep) Learning to Break Semantic Image CAPTCHAs. - Suphannee Sivakorn; Iasonas Polakis; Angelos D. Keromytis (EuroS&P, 2016)

The Cracked Cookie Jar: HTTP Cookie Hijacking and the Exposure of Private Information. - Suphannee Sivakorn; Iasonas Polakis; Angelos D. Keromytis (IEEE Symposium on Security and Privacy, 2016)

That's the Way the Cookie Crumbles: Evaluating HTTPS Enforcing Mechanisms. - Suphannee Sivakorn; Angelos D. Keromytis; Jason Polakis (WPES@CCS, 2016)

Exploiting abused trending topics to identify spam campaigns in Twitter. - Despoina Antonakaki; Iasonas Polakis; Elias Athanasopoulos; Sotiris Ioannidis; Paraskevi Fragopoulou (Soc. Netw. Anal. Min., 2016)

Reveal: Fine-grained Recommendations in Online Social Networks. - Markos Aivazoglou; Orestis Roussos; Sotiris Ioannidis; Dimitris Spiliotopoulos; Jason Polakis (ASONAM, 2017)

In (Cyber)Space Bots Can Hear You Speak: Breaking Audio CAPTCHAs Using OTS Speech Recognition. - Saumya Solanki; Gautam Krishnan; Varshini Sampath; Jason Polakis (AISec@CCS, 2017)

Techu: Open and Privacy-Preserving Crowdsourced GPS for the Masses. - Ioannis Agadakos; Jason Polakis; Georgios Portokalidis (MobiSys, 2017)

Evaluating the Privacy Guarantees of Location Proximity Services. - George Argyros; Theofilos Petsios; Suphannee Sivakorn; Angelos D. Keromytis; Iasonas Polakis (ACM Trans. Priv. Secur., 2017)

O Single Sign-Off, Where Art Thou? An Empirical Analysis of Single Sign-On Account Hijacking and Session Management on the Web. - Mohammad Ghasemisharif; Amrutha Ramesh; Stephen Checkoway; Chris Kanich; Jason Polakis (USENIX Security Symposium, 2018)

REAPER: Real-time App Analysis for Augmenting the Android Permission System. - Michalis Diamantaris; Elias P. Papadopoulos; Evangelos P. Markatos; Sotiris Ioannidis; Jason Polakis (CODASPY, 2019)

Please Forget Where I Was Last Summer: The Privacy Risks of Public Location (Meta)Data. - Kostas Drakonakis; Panagiotis Ilia; Sotiris Ioannidis; Jason Polakis (NDSS, 2019)

A Large-scale Study on the Risks of the HTML5 WebAPI for Mobile Sensor-based Attacks. - Francesco Marcantoni; Michalis Diamantaris; Sotiris Ioannidis; Jason Polakis (WWW, 2019)

Deep Complex Networks for Protocol-Agnostic Radio Frequency Device Fingerprinting in the Wild. - Ioannis Agadakos; Nikolaos Agadakos; Jason Polakis; Mohamed R. Amer (CoRR, 2019)

The Cookie Hunter: Automated Black-box Auditing for Web Authentication and Authorization Flaws. - Kostas Drakonakis; Sotiris Ioannidis; Jason Polakis (CCS, 2020)

Fill in the Blanks: Empirical Analysis of the Privacy Threats of Browser Form Autofill. - Xu Lin 003; Panagiotis Ilia; Jason Polakis (CCS, 2020)

Chameleons' Oblivion: Complex-Valued Deep Neural Networks for Protocol-Agnostic RF Device Fingerprinting. - Ioannis Agadakos; Nikolaos Agadakos; Jason Polakis; Mohamed R. Amer (EuroS&P, 2020)

Tech Pains: Characterizations of Lived Cybersecurity Experiences. - Huixin Tian; Chris Kanich; Jason Polakis; Sameer Patil (EuroS&P Workshops, 2020)

Carnus: Exploring the Privacy Threats of Browser Extension Fingerprinting. - Soroush Karami; Panagiotis Ilia; Konstantinos Solomos; Jason Polakis (NDSS, 2020)

Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers. - Brian Kondracki; Assel Aliyeva; Manuel Egele; Jason Polakis; Nick Nikiforakis (SP, 2020)

A fine-grained social network recommender system. - Markos Aivazoglou; Antonios O. Roussos; Dionisis Margaris; Costas Vassilakis 001; Sotiris Ioannidis; Jason Polakis; Dimitris Spiliotopoulos (Soc. Netw. Anal. Min., 2020)

The Seven Deadly Sins of the HTML5 WebAPI: A Large-scale Study on the Risks of Mobile Sensor-based Attacks. - Michalis Diamantaris; Francesco Marcantoni; Sotiris Ioannidis; Jason Polakis (ACM Trans. Priv. Secur., 2020)

This Sneaky Piggy Went to the Android Ad Market: Misusing Mobile Sensors for Stealthy Data Exfiltration. - Michalis Diamantaris; Serafeim Moustakas; Lichao Sun 001; Sotiris Ioannidis; Jason Polakis (CCS, 2021)

Awakening the Web's Sleeper Agents: Misusing Service Workers for Privacy Leakage. - Soroush Karami; Panagiotis Ilia; Jason Polakis (NDSS, 2021)

Tales of Favicons and Caches: Persistent Tracking in Modern Browsers. - Konstantinos Solomos; John Kristoff; Chris Kanich; Jason Polakis (NDSS, 2021)

Plight at the End of the Tunnel - Legacy IPv6 Transition Mechanisms in the Wild. - John Kristoff; Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (PAM, 2021)

Escaping the Confines of Time: Continuous Browser Extension Fingerprinting Through Ephemeral Modifications. - Konstantinos Solomos; Panagiotis Ilia; Nick Nikiforakis; Jason Polakis (CCS, 2022)

Exploring the security and privacy risks of chatbots in messaging services. - Jide S. Edu; Cliona Mulligan; Fabio Pierazzi; Jason Polakis; Guillermo Suarez-Tangil; Jose M. Such (IMC, 2022)

Towards Automated Auditing for Account and Session Management Flaws in Single Sign-On Deployments. - Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (SP, 2022)

Unleash the Simulacrum: Shifting Browser Realities for Robust Extension-Fingerprinting Prevention. - Soroush Karami; Faezeh Kalantari; Mehrnoosh Zaeifi; Xavier J. Maso; Erik Trickel; Panagiotis Ilia; Yan Shoshitaishvili; Adam Doupé; Jason Polakis (USENIX Security Symposium, 2022)

Phish in Sheep's Clothing: Exploring the Authentication Pitfalls of Browser Fingerprinting. - Xu Lin 003; Panagiotis Ilia; Saumya Solanki; Jason Polakis (USENIX Security Symposium, 2022)

The Dangers of Human Touch: Fingerprinting Browser Extensions through User Actions. - Konstantinos Solomos; Panagiotis Ilia; Soroush Karami; Nick Nikiforakis; Jason Polakis (USENIX Security Symposium, 2022)

When Push Comes to Shove: Empirical Analysis of Web Push Implementations in the Wild. - Alberto Carboneri; Mohammad Ghasemisharif; Soroush Karami; Jason Polakis (ACSAC, 2023)

Read Between the Lines: Detecting Tracking JavaScript with Bytecode Classification. - Mohammad Ghasemisharif; Jason Polakis (CCS, 2023)

Navigating Murky Waters: Automated Browser Feature Testing for Uncovering Tracking Vectors. - Mir Masood Ali; Binoy Chitale; Mohammad Ghasemisharif; Chris Kanich; Nick Nikiforakis; Jason Polakis (NDSS, 2023)

ReScan: A Middleware Framework for Realistic and Robust Black-box Web Application Scanning. - Kostas Drakonakis; Sotiris Ioannidis; Jason Polakis (NDSS, 2023)

Fashion Faux Pas: Implicit Stylistic Fingerprints for Bypassing Browsers' Anti-Fingerprinting Defenses. - Xu Lin 003; Frederico Araujo; Teryl Taylor; Jiyong Jang; Jason Polakis (SP, 2023)

Harnessing Multiplicity: Granular Browser Extension Fingerprinting through User Configurations. - Konstantinos Solomos; Nick Nikiforakis; Jason Polakis (ACSAC, 2024)

Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Apps. - Mir Masood Ali; Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (USENIX Security Symposium, 2024)

Abandon All Hope Ye Who Enter Here: A Dynamic, Longitudinal Investigation of Android's Data Safety Section. - Ioannis Arkalakis; Michalis Diamantaris; Serafeim Moustakas; Sotiris Ioannidis; Jason Polakis; Panagiotis Ilia (USENIX Security Symposium, 2024)

Fledging Will Continue Until Privacy Improves: Empirical Analysis of Google's Privacy-Preserving Targeted Advertising. - Giuseppe Calderonio; Mir Masood Ali; Jason Polakis (USENIX Security Symposium, 2024)

Dredging the River Styx: Fortifying the Web through Robust and Real-Time Script Attribution. - Kostas Drakonakis; Sotiris Ioannidis; Jason Polakis (EuroS&P, 2025)

Lost in Translation: Exploring the Risks of Web-to-Cross-platform Application Migration. - Claudio Paloscia; Kostas Solomos; Mir Masood Ali; Jason Polakis (Proc. Priv. Enhancing Technol., 2025)

SoK: Advances and Open Problems in Web Tracking. - Yash Vekaria; Yohan Beugin; Shaoor Munir; Gunes Acar; Nataliia Bielova; Steven Englehardt; Umar Iqbal 002; Alexandros Kapravelos; Pierre Laperdrix; Nick Nikiforakis; Jason Polakis; Franziska Roesner; et al. (CoRR, 2025)