DistriNet: Self-adapting concurrency: the DMonA architecture. - Sam Michiels; Lieven Desmet; Nico Janssens; Tom Mahieu; Pierre Verbaeten (WOSS, 2002)

A Generic Architecture for Web Applications to Support Threat Analysis of Infrastructural Components. - Lieven Desmet; Bart Jacobs 002; Frank Piessens; Wouter Joosen (Communications and Multimedia Security, 2004)

Threat Modelling for Web Services Based Web Applications. - Lieven Desmet; Bart Jacobs 002; Frank Piessens; Wouter Joosen (Communications and Multimedia Security, 2004)

NeCoMan: middleware for safe distributed service deployment in programmable networks. - Nico Janssens; Lieven Desmet; Sam Michiels; Pierre Verbaeten (Adaptive and Reflective Middleware, 2004)

The DiPS+ Software Architecture for Self-healing Protocol Stacks. - Sam Michiels; Lieven Desmet; Wouter Joosen; Pierre Verbaeten (WICSA, 2004)

Towards preserving correctness in self-managed software systems. - Lieven Desmet; Nico Janssens; Sam Michiels; Frank Piessens; Wouter Joosen; Pierre Verbaeten (WOSS, 2004)

Connecting Embedded Devices Using a Component Platform for Adaptable Protocol Stacks. - Sam Michiels; Nico Janssens; Lieven Desmet; Tom Mahieu; Wouter Joosen; Pierre Verbaeten (Component-Based Software Development for Embedded Systems, 2005)

Bridging the gap between web application firewalls and web applications. - Lieven Desmet; Frank Piessens; Wouter Joosen; Pierre Verbaeten (FMSE, 2006)

Static Verification of Indirect Data Sharing in Loosely-coupled Component Systems. - Lieven Desmet; Frank Piessens; Wouter Joosen; Pierre Verbaeten (SC@ETAPS, 2006)

A flexible security architecture to support third-party applications on mobile devices. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Katsiaryna Naliuka; Pieter Philippaerts; Frank Piessens; Dries Vanoverberghe (CSAW, 2007)

Security-by-contract on the .NET platform. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Pieter Philippaerts; Frank Piessens; Ida Sri Rejeki Siahaan; Dries Vanoverberghe (Inf. Secur. Tech. Rep., 2008)

Provable Protection against Web Application Vulnerabilities Related to Session Data Dependencies. - Lieven Desmet; Pierre Verbaeten; Wouter Joosen; Frank Piessens (IEEE Trans. Software Eng., 2008)

Browser protection against cross-site request forgery. - Wim Maes; Thomas Heyman; Lieven Desmet; Wouter Joosen (SecuCode@CCS, 2009)

A Security Architecture for Web 2.0 Applications. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Katsiaryna Naliuka; Pieter Philippaerts; Frank Piessens; Ida Sri Rejeki Siahaan; Dries Vanoverberghe (Future Internet Assembly, 2009)

The S3MS.NET Run Time Monitor: Tool Demonstration. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Katsiaryna Naliuka; Pieter Philippaerts; Frank Piessens; Dries Vanoverberghe (BYTECODE@ETAPS, 2009)

CsFire: Transparent Client-Side Mitigation of Malicious Cross-Domain Requests. - Philippe De Ryck; Lieven Desmet; Thomas Heyman; Frank Piessens; Wouter Joosen (ESSoS, 2010)

Security of Web Mashups: A Survey. - Philippe De Ryck; Maarten Decat; Lieven Desmet; Frank Piessens; Wouter Joosen (NordSec, 2010)

WebJail: least-privilege integration of third-party components in web mashups. - Steven Van Acker; Philippe De Ryck; Lieven Desmet; Frank Piessens; Wouter Joosen (ACSAC, 2011)

Automatic and Precise Client-Side Protection against CSRF Attacks. - Philippe De Ryck; Lieven Desmet; Wouter Joosen; Frank Piessens (ESORICS, 2011)

Scalable Authorization Middleware for Service Oriented Architectures. - Tom Goovaerts; Lieven Desmet; Wouter Joosen (ESSoS, 2011)

Middleware Support for Complex and Distributed Security Services in Multi-tier Web Applications. - Philippe De Ryck; Lieven Desmet; Wouter Joosen (ESSoS, 2011)

Deploy, Adjust and Readjust: Supporting Dynamic Reconfiguration of Policy Enforcement. - Gabriela Gheorghe; Bruno Crispo; Roberto Carbone; Lieven Desmet; Wouter Joosen (Middleware, 2011)

JSand: complete client-side sandboxing of third-party JavaScript without browser modifications. - Pieter Agten; Steven Van Acker; Yoran Brondsema; Phu H. Phung; Lieven Desmet; Frank Piessens (ACSAC, 2012)

FlashOver: automated discovery of cross-site scripting vulnerabilities in rich internet applications. - Steven Van Acker; Nick Nikiforakis; Lieven Desmet; Wouter Joosen; Frank Piessens (AsiaCCS, 2012)

Serene: Self-Reliant Client-Side Protection against Session Fixation. - Philippe De Ryck; Nick Nikiforakis; Lieven Desmet; Frank Piessens; Wouter Joosen (DAIS, 2012)

A Security Analysis of Emerging Web Standards - HTML5 and Friends, from Specification to Implementation. - Philippe De Ryck; Lieven Desmet; Frank Piessens; Wouter Joosen (SECRYPT, 2012)

PESAP: A Privacy Enhanced Social Application Platform. - Tom Reynaert; Willem De Groef; Dominique Devriese; Lieven Desmet; Frank Piessens (SocialCom/PASSAT, 2012)

Web Application Security (Dagstuhl Seminar 12401). - Lieven Desmet; Martin Johns; Benjamin Livshits; Andrei Sabelfeld (Dagstuhl Reports, 2012)

TabShots: client-side detection of tabnabbing attacks. - Philippe De Ryck; Nick Nikiforakis; Lieven Desmet; Wouter Joosen (AsiaCCS, 2013)

A Dangerous Mix: Large-Scale Analysis of Mixed-Content Websites. - Ping Chen; Nick Nikiforakis; Christophe Huygens; Lieven Desmet (ISC, 2013)

Bitsquatting: exploiting bit-flips for fun, or profit? - Nick Nikiforakis; Steven Van Acker; Wannes Meert; Lieven Desmet; Frank Piessens; Wouter Joosen (WWW, 2013)

Monkey-in-the-browser: malware and vulnerabilities in augmented browsing script markets. - Steven Van Acker; Nick Nikiforakis; Lieven Desmet; Frank Piessens; Wouter Joosen (AsiaCCS, 2014)

A Study on Advanced Persistent Threats. - Ping Chen; Lieven Desmet; Christophe Huygens (Communications and Multimedia Security, 2014)

Soundsquatting: Uncovering the Use of Homophones in Domain Squatting. - Nick Nikiforakis; Marco Balduzzi; Lieven Desmet; Frank Piessens; Wouter Joosen (ISC, 2014)

Security Analysis of the Chinese Web: How well is it protected? - Ping Chen; Nick Nikiforakis; Lieven Desmet; Christophe Huygens (SafeConfig, 2014)

Large-Scale Security Analysis of the Web: Challenges and Findings. - Tom van Goethem; Ping Chen; Nick Nikiforakis; Lieven Desmet; Wouter Joosen (TRUST, 2014)

Real-Time Communications Security on the Web. - Lieven Desmet; Martin Johns (IEEE Internet Comput., 2014)

Preface. - Lieven Desmet; Martin Johns; Benjamin Livshits; Andrei Sabelfeld (J. Comput. Secur., 2014)

Primer on Client-Side Web Security - Philippe De Ryck; Lieven Desmet; Frank Piessens; Martin Johns (Springer, 2014)

SecSess: keeping your session tucked away in your browser. - Philippe De Ryck; Lieven Desmet; Frank Piessens; Wouter Joosen (SAC, 2015)

Protected Web Components: Hiding Sensitive Information in the Shadows. - Philippe De Ryck; Nick Nikiforakis; Lieven Desmet; Frank Piessens; Wouter Joosen (IT Prof., 2015)

Ensuring endpoint authenticity in WebRTC peer-to-peer communication. - Willem De Groef; Deepak Subramanian; Martin Johns; Frank Piessens; Lieven Desmet (SAC, 2016)

Advanced or Not? A Comparative Study of the Use of Anti-debugging and Anti-VM Techniques in Generic and Targeted Malware. - Ping Chen; Christophe Huygens; Lieven Desmet; Wouter Joosen (SEC, 2016)

Longitudinal Study of the Use of Client-side Security Mechanisms on the European Web. - Ping Chen; Lieven Desmet; Christophe Huygens; Wouter Joosen (WWW (Companion Volume), 2016)

The relationship between the cost of cybercrime and web security posture: a case study on Belgian companies. - Ping Chen; Jonas Visschers; Cedric Verstraete; Letizia Paoli; Christophe Huygens; Lieven Desmet; Wouter Joosen (ECSA (Companion), 2017)

Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD. - Thomas Vissers; Jan Spooren; Pieter Agten; Dirk Jumpertz; Peter Janssen; Marc Van Wesemael; Frank Piessens; Wouter Joosen; Lieven Desmet (RAID, 2017)

Premadoma: an operational solution for DNS registries to prevent malicious domain registrations. - Jan Spooren; Thomas Vissers; Peter Janssen; Wouter Joosen; Lieven Desmet (ACSAC, 2019)

Detection of algorithmically generated domain names used by botnets: a dual arms race. - Jan Spooren; Davy Preuveneers; Lieven Desmet; Peter Janssen; Wouter Joosen (SAC, 2019)

Assessing the Effectiveness of Domain Blacklisting Against Malicious DNS Registrations. - Thomas Vissers; Peter Janssen; Wouter Joosen; Lieven Desmet (IEEE Symposium on Security and Privacy Workshops, 2019)

Premadoma: An Operational Solution to Prevent Malicious Domain Name Registrations in the .eu TLD. - Lieven Desmet; Jan Spooren; Thomas Vissers; Peter Janssen; Wouter Joosen (DTRAP, 2021)

Captcha me if you can: Imitation Games with Reinforcement Learning. - Ilias Tsingenopoulos; Davy Preuveneers; Lieven Desmet; Wouter Joosen (EuroS&P, 2022)

Position Paper: On Advancing Adversarial Malware Generation Using Dynamic Features. - Ali Mohammad Shafiei; Vera Rimmer; Ilias Tsingenopoulos; Lieven Desmet; Wouter Joosen (WoRMA@AsiaCCS, 2022)

Adaptive Malware Control: Decision-Based Attacks in the Problem Space of Dynamic Analysis. - Ilias Tsingenopoulos; Ali Mohammad Shafiei; Lieven Desmet; Davy Preuveneers; Wouter Joosen (WoRMA@AsiaCCS, 2022)

Tracking the Evolution of Cookie-based Tracking on Facebook. - Yana Dimova; Gertjan Franken; Victor Le Pochat; Wouter Joosen; Lieven Desmet (WPES@CCS, 2022)

A Bug's Life: Analyzing the Lifecycle and Mitigation Process of Content Security Policy Bugs. - Gertjan Franken; Tom van Goethem; Lieven Desmet; Wouter Joosen (USENIX Security Symposium, 2023)

Bad Design Smells in Benchmark NIDS Datasets. - Robert Flood; Gints Engelen; David Aspinall 001; Lieven Desmet (EuroS&P, 2024)

Evaluating the Impact of Design Decisions on Passive DNS-Based Domain Rankings. - Victor Le Pochat; Simon Fernandez; Tom van Goethem; Samaneh Tajalizadehkhoob; Lieven Desmet; Andrzej Duda; Wouter Joosen; Maciej Korczynski (TMA, 2024)

From Cluttered to Clustered: Addressing Privacy Threat Explosion through Automated Clustering. - Jonah Bellemans; Mario Raciti; Dimitri Van Landuyt; Laurens Sion; Giampaolo Bella; Lieven Desmet; Wouter Joosen (EuroS&P (Workshops), 2025)

One Does Not Simply Score a Website: Evaluating Website Security Scoring Algorithms. - Daan Vansteenhuyse; Victor Le Pochat; Gertjan Franken; Lieven Desmet (EuroS&P (Workshops), 2025)

Partnërka in Crime: Characterizing Deceptive Affiliate Marketing Offers. - Victor Le Pochat; Cameron Ballard; Lieven Desmet; Wouter Joosen; Damon McCoy; Tobias Lauinger (PAM, 2025)

Shiny Shells, Rusty Cores: A Crowdsourced Security Evaluation of Integrated Web Browsers. - Gertjan Franken; Pieter Claeys; Tom van Goethem; Lieven Desmet (SOUPS, 2025)

Gamified or Glorified? A systematic review of serious games for security & privacy in the SDLC. - Jonah Bellemans; Dimitri Van Landuyt; Laurens Sion; Lieven Desmet (Inf. Softw. Technol., 2025)

FlowPure: Continuous Normalizing Flows for Adversarial Purification. - Elias Collaert; Abel Rodríguez; Sander Joos; Lieven Desmet; Vera Rimmer (CoRR, 2025)