NoJITsu: Locking Down JavaScript Engines. - Taemin Park; Karel Dhondt; David Gens; Yeoul Na; Stijn Volckaert; Michael Franz (NDSS, 2020)

A Run a Day Won't Keep the Hacker Away: Inference Attacks on Endpoint Privacy Zones in Fitness Tracking Social Networks. - Karel Dhondt; Victor Le Pochat; Alexios Voulimeneas; Wouter Joosen; Stijn Volckaert (CCS, 2022)

Swipe Left for Identity Theft: An Analysis of User Data Privacy Risks on Location-based Dating Apps. - Karel Dhondt; Victor Le Pochat; Yana Dimova; Wouter Joosen; Stijn Volckaert (USENIX Security Symposium, 2024)