Tracking Users Like There is No Tomorrow: Privacy on the Current Internet. - Iskander Sánchez-Rola; Xabier Ugarte-Pedrero; Igor Santos; Pablo García Bringas (CISIS-ICEUTE, 2015)

Extension Breakdown: Security Analysis of Browsers Extension Resources Control Policies. - Iskander Sánchez-Rola; Igor Santos; Davide Balzarotti (USENIX Security Symposium, 2017)

The Onions Have Eyes: A Comprehensive Structure and Privacy Analysis of Tor Hidden Services. - Iskander Sánchez-Rola; Davide Balzarotti; Igor Santos (WWW, 2017)

The web is watching you: A comprehensive review of web-tracking techniques and countermeasures. - Iskander Sánchez-Rola; Xabier Ugarte-Pedrero; Igor Santos; Pablo García Bringas (Log. J. IGPL, 2017)

Clock Around the Clock: Time-Based Device Fingerprinting. - Iskander Sánchez-Rola; Igor Santos; Davide Balzarotti (CCS, 2018)

Knockin' on Trackers' Door: Large-Scale Automatic Analysis of Web Tracking. - Iskander Sánchez-Rola; Igor Santos (DIMVA, 2018)

BakingTimer: privacy analysis of server-side request processing time. - Iskander Sánchez-Rola; Davide Balzarotti; Igor Santos (ACSAC, 2019)

Can I Opt Out Yet?: GDPR and the Global Illusion of Cookie Control. - Iskander Sánchez-Rola; Matteo Dell'Amico; Platon Kotzias; Davide Balzarotti; Leyla Bilge; Pierre-Antoine Vervier; Igor Santos (AsiaCCS, 2019)

Dirty Clicks: A Study of the Usability and Security Implications of Click-related Behaviors on the Web. - Iskander Sánchez-Rola; Davide Balzarotti; Christopher Kruegel; Giovanni Vigna; Igor Santos (WWW, 2020)

Cookies from the Past: Timing Server-side Request Processing Code for History Sniffing. - Iskander Sánchez-Rola; Davide Balzarotti; Igor Santos (DTRAP, 2020)

SoK: Exploring Current and Future Research Directions on XS-Leaks through an Extended Formal Model. - Tom van Goethem; Gertjan Franken; Iskander Sánchez-Rola; David Dworken; Wouter Joosen (AsiaCCS, 2022)

Journey to the Center of the Cookie Ecosystem: Unraveling Actors' Roles and Relationships. - Iskander Sánchez-Rola; Matteo Dell'Amico; Davide Balzarotti; Pierre-Antoine Vervier; Leyla Bilge (SP, 2022)

When Sally Met Trackers: Web Tracking From the Users' Perspective. - Savino Dambra; Iskander Sánchez-Rola; Leyla Bilge; Davide Balzarotti (USENIX Security Symposium, 2022)

Scamdog Millionaire: Detecting E-commerce Scams in the Wild. - Platon Kotzias; Kevin A. Roundy; Michalis Pachilakis; Iskander Sánchez-Rola; Leyla Bilge (ACSAC, 2023)

Domain and Website Attribution beyond WHOIS. - Silvia Sebastián; Raluca-Georgia Diugan; Juan Caballero; Iskander Sánchez-Rola; Leyla Bilge (ACSAC, 2023)

Scripted Henchmen: Leveraging XS-Leaks for Cross-Site Vulnerability Detection. - Tom van Goethem; Iskander Sánchez-Rola; Wouter Joosen (SP (Workshops), 2023)

Rods with Laser Beams: Understanding Browser Fingerprinting on Phishing Pages. - Iskander Sánchez-Rola; Leyla Bilge; Davide Balzarotti; Armin Buescher; Petros Efstathopoulos (USENIX Security Symposium, 2023)

Quantifying Carbon Emissions due to Online Third-Party Tracking. - Michalis Pachilakis; Savino Dambra; Iskander Sánchez-Rola; Leyla Bilge (CoRR, 2023)

Ctrl+Alt+Deceive: Quantifying User Exposure to Online Scams. - Platon Kotzias; Michalis Pachilakis; Javier Aldana-Iuit; Juan Caballero; Iskander Sánchez-Rola; Leyla Bilge (NDSS, 2025)