Please Forget Where I Was Last Summer: The Privacy Risks of Public Location (Meta)Data. - Kostas Drakonakis; Panagiotis Ilia; Sotiris Ioannidis; Jason Polakis (NDSS, 2019)

The Cookie Hunter: Automated Black-box Auditing for Web Authentication and Authorization Flaws. - Kostas Drakonakis; Sotiris Ioannidis; Jason Polakis (CCS, 2020)

ReScan: A Middleware Framework for Realistic and Robust Black-box Web Application Scanning. - Kostas Drakonakis; Sotiris Ioannidis; Jason Polakis (NDSS, 2023)

White paper on cybersecurity in the healthcare sector. The HEIR solution. - Konstantinos Lampropoulos 001; Apostolis Zarras; Eftychia Lakka; Polyanthi Barmpaki; Kostas Drakonakis; Manos Athanatos; Hervé Debar; Andreas Alexopoulos; Aristeidis Sotiropoulos; George Tsakirakis; Nikos Dimakopoulos; Dimitris Tsolovos; et al. (CoRR, 2023)

Dredging the River Styx: Fortifying the Web through Robust and Real-Time Script Attribution. - Kostas Drakonakis; Sotiris Ioannidis; Jason Polakis (EuroS&P, 2025)