STUN - Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs). - Jonathan D. Rosenberg; Joel Weinberger; Christian Huitema; Rohan Mahy (RFC, 2003)

Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense. - Adam Barth; Joel Weinberger; Dawn Song (USENIX Security Symposium, 2009)

Preventing Capability Leaks in Secure JavaScript Subsets. - Matthew Finifter; Joel Weinberger; Adam Barth (NDSS, 2010)

Diesel: applying privilege separation to database access. - Adrienne Porter Felt; Matthew Finifter; Joel Weinberger; David A. Wagner 001 (AsiaCCS, 2011)

A Systematic Analysis of XSS Sanitization in Web Application Frameworks. - Joel Weinberger; Prateek Saxena; Devdatta Akhawe; Matthew Finifter; Eui Chul Richard Shin; Dawn Song (ESORICS, 2011)

Towards Client-side HTML Security Policies. - Joel Weinberger; Adam Barth; Dawn Song (HotSec, 2011)

Analysis and Enforcement of Web Application Security Policies. - Joel Weinberger (2012)

Verifying higher-order programs with the dijkstra monad. - Nikhil Swamy; Joel Weinberger; Cole Schlesinger; Juan Chen 002; Benjamin Livshits (PLDI, 2013)

A Week to Remember: The Impact of Browser Warning Storage Policies. - Joel Weinberger; Adrienne Porter Felt (SOUPS, 2016)