Automatically Generating Models for Botnet Detection. - Peter Wurzinger; Leyla Bilge; Thorsten Holz; Jan Goebel; Christopher Kruegel; Engin Kirda (ESORICS, 2009)

All your contacts are belong to us: automated identity theft attacks on social networks. - Leyla Bilge; Thorsten Strufe; Davide Balzarotti; Engin Kirda (WWW, 2009)

G-Free: defeating return-oriented programming through gadget-less binaries. - Kaan Onarlioglu; Leyla Bilge; Andrea Lanzi; Davide Balzarotti; Engin Kirda (ACSAC, 2010)

CAPTCHA smuggling: hijacking web browsing sessions to create CAPTCHA farms. - Manuel Egele; Leyla Bilge; Engin Kirda; Christopher Kruegel (SAC, 2010)

Thwarting real-time dynamic unpacking. - Leyla Bilge; Andrea Lanzi; Davide Balzarotti (EUROSEC, 2011)

EXPOSURE: Finding Malicious Domains Using Passive DNS Analysis. - Leyla Bilge; Engin Kirda; Christopher Kruegel; Marco Balduzzi (NDSS, 2011)

Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis. - Leyla Bilge; Davide Balzarotti; William K. Robertson; Engin Kirda; Christopher Kruegel (ACSAC, 2012)

Before we knew it: an empirical study of zero-day attacks in the real world. - Leyla Bilge; Tudor Dumitras (CCS, 2012)

Industrial Espionage and Targeted Attacks: Understanding the Characteristics of an Escalating Threat. - Olivier Thonnard; Leyla Bilge; Gavin O'Gorman; Seán Kiernan; Martin Lee (RAID, 2012)

Investigating Zero-Day Attacks. - Leyla Bilge; Tudor Dumitras (login Usenix Mag., 2013)

On the effectiveness of risk prediction based on users browsing behavior. - Davide Canali; Leyla Bilge; Davide Balzarotti (AsiaCCS, 2014)

Exposure: A Passive DNS Analysis Service to Detect and Report Malicious Domains. - Leyla Bilge; Sevil Sen; Davide Balzarotti; Engin Kirda; Christopher Kruegel (ACM Trans. Inf. Syst. Secur., 2014)

The Dropper Effect: Insights into Malware Distribution with Downloader Graph Analytics. - Bum Jun Kwon; Jayanta Mondal; Jiyong Jang; Leyla Bilge; Tudor Dumitras (CCS, 2015)

Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. - Amin Kharraz; William K. Robertson; Davide Balzarotti; Leyla Bilge; Engin Kirda (DIMVA, 2015)

Are You at Risk? Profiling Organizations and Individuals Subject to Targeted Attacks. - Olivier Thonnard; Leyla Bilge; Anand Kashyap; Martin Lee (Financial Cryptography, 2015)

The Attack of the Clones: A Study of the Impact of Shared Code on Vulnerability Patching. - Antonio Nappa; Richard Johnson; Leyla Bilge; Juan Caballero; Tudor Dumitras (IEEE Symposium on Security and Privacy, 2015)

Needles in a Haystack: Mining Information from Public Dynamic Analysis Sandboxes for Malware Intelligence. - Mariano Graziano; Davide Canali; Leyla Bilge; Andrea Lanzi; Davide Balzarotti (USENIX Security Symposium, 2015)

Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services. - Platon Kotzias; Leyla Bilge; Juan Caballero (USENIX Security Symposium, 2016)

Lean On Me: Mining Internet Service Dependencies From Large-Scale DNS Data. - Matteo Dell'Amico; Leyla Bilge; Ashwin Kumar Kayyoor; Petros Efstathopoulos; Pierre-Antoine Vervier (ACSAC, 2017)

RiskTeller: Predicting the Risk of Cyber Incidents. - Leyla Bilge; Yufei Han 001; Matteo Dell'Amico (CCS, 2017)

Spearphishing Malware: Do We Really Know the Unknown? - Yanko Baychev; Leyla Bilge (DIMVA, 2018)

Can I Opt Out Yet?: GDPR and the Global Illusion of Cookie Control. - Iskander Sánchez-Rola; Matteo Dell'Amico; Platon Kotzias; Davide Balzarotti; Leyla Bilge; Pierre-Antoine Vervier; Igor Santos (AsiaCCS, 2019)

Mind Your Own Business: A Longitudinal Study of Threats and Vulnerabilities in Enterprises. - Platon Kotzias; Leyla Bilge; Pierre-Antoine Vervier; Juan Caballero (NDSS, 2019)

The Tangled Genealogy of IoT Malware. - Emanuele Cozzi; Pierre-Antoine Vervier; Matteo Dell'Amico; Yun Shen; Leyla Bilge; Davide Balzarotti (ACSAC, 2020)

SoK: Cyber Insurance - Technical Challenges and a System Security Roadmap. - Savino Dambra; Leyla Bilge; Davide Balzarotti (SP, 2020)

Does Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes. - Alexander Küchler; Alessandro Mantovani; Yufei Han 001; Leyla Bilge; Davide Balzarotti (NDSS, 2021)

How Did That Get In My Phone? Unwanted App Distribution on Android Devices. - Platon Kotzias; Juan Caballero; Leyla Bilge (SP, 2021)

When Malware Changed Its Mind: An Empirical Study of Variable Program Behaviors in the Real World. - Erin Avllazagaj; Ziyun Zhu; Leyla Bilge; Davide Balzarotti; Tudor Dumitras (USENIX Security Symposium, 2021)

Unsupervised Detection and Clustering of Malicious TLS Flows. - Gibran Gómez; Platon Kotzias; Matteo Dell'Amico; Leyla Bilge; Juan Caballero (CoRR, 2021)

Journey to the Center of the Cookie Ecosystem: Unraveling Actors' Roles and Relationships. - Iskander Sánchez-Rola; Matteo Dell'Amico; Davide Balzarotti; Pierre-Antoine Vervier; Leyla Bilge (SP, 2022)

When Sally Met Trackers: Web Tracking From the Users' Perspective. - Savino Dambra; Iskander Sánchez-Rola; Leyla Bilge; Davide Balzarotti (USENIX Security Symposium, 2022)

Scamdog Millionaire: Detecting E-commerce Scams in the Wild. - Platon Kotzias; Kevin A. Roundy; Michalis Pachilakis; Iskander Sánchez-Rola; Leyla Bilge (ACSAC, 2023)

Domain and Website Attribution beyond WHOIS. - Silvia Sebastián; Raluca-Georgia Diugan; Juan Caballero; Iskander Sánchez-Rola; Leyla Bilge (ACSAC, 2023)

Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance. - Savino Dambra; Yufei Han 001; Simone Aonzo; Platon Kotzias; Antonino Vitale; Juan Caballero; Davide Balzarotti; Leyla Bilge (CCS, 2023)

One Size Does not Fit All: Quantifying the Risk of Malicious App Encounters for Different Android User Profiles. - Savino Dambra; Leyla Bilge; Platon Kotzias; Yun Shen; Juan Caballero (USENIX Security Symposium, 2023)

Rods with Laser Beams: Understanding Browser Fingerprinting on Phishing Pages. - Iskander Sánchez-Rola; Leyla Bilge; Davide Balzarotti; Armin Buescher; Petros Efstathopoulos (USENIX Security Symposium, 2023)

Quantifying Carbon Emissions due to Online Third-Party Tracking. - Michalis Pachilakis; Savino Dambra; Iskander Sánchez-Rola; Leyla Bilge (CoRR, 2023)

A Comparison of Systemic and Systematic Risks of Malware Encounters in Consumer and Enterprise Environments. - Savino Dambra; Leyla Bilge; Davide Balzarotti (ACM Trans. Priv. Secur., 2023)

Ctrl+Alt+Deceive: Quantifying User Exposure to Online Scams. - Platon Kotzias; Michalis Pachilakis; Javier Aldana-Iuit; Juan Caballero; Iskander Sánchez-Rola; Leyla Bilge (NDSS, 2025)