Dynamic integrity measurement and attestation: towards defense against return-oriented programming attacks. - Lucas Davi; Ahmad-Reza Sadeghi; Marcel Winandy (STC, 2009)

Return-oriented programming without returns. - Stephen Checkoway; Lucas Davi; Alexandra Dmitrienko; Ahmad-Reza Sadeghi; Hovav Shacham; Marcel Winandy (CCS, 2010)

Privilege Escalation Attacks on Android. - Lucas Davi; Alexandra Dmitrienko; Ahmad-Reza Sadeghi; Marcel Winandy (ISC, 2010)

Scalable trust establishment with software reputation. - Sven Bugiel; Lucas Vincenzo Davi; Steffen Schulz 001 (STC@CCS, 2011)

Poster: the quest for security against privilege escalation attacks on android. - Sven Bugiel; Lucas Davi; Alexandra Dmitrienko; Thomas Fischer 005; Ahmad-Reza Sadeghi; Bhargava Shastry (CCS, 2011)

Practical and lightweight domain isolation on Android. - Sven Bugiel; Lucas Davi; Alexandra Dmitrienko; Stephan Heuser; Ahmad-Reza Sadeghi; Bhargava Shastry (SPSM@CCS, 2011)

Poster: control-flow integrity for smartphones. - Lucas Davi; Alexandra Dmitrienko; Manuel Egele; Thomas Fischer 005; Thorsten Holz; Ralf Hund; Stefan Nürnberger; Ahmad-Reza Sadeghi (CCS, 2011)

Trusted virtual domains on OKL4: secure information sharing on smartphones. - Lucas Davi; Alexandra Dmitrienko; Christoph Kowalski; Marcel Winandy (STC@CCS, 2011)

ROPdefender: a detection tool to defend against return-oriented programming attacks. - Lucas Davi; Ahmad-Reza Sadeghi; Marcel Winandy (AsiaCCS, 2011)

Towards Taming Privilege-Escalation Attacks on Android. - Sven Bugiel; Lucas Davi; Alexandra Dmitrienko; Thomas Fischer 005; Ahmad-Reza Sadeghi; Bhargava Shastry (NDSS, 2012)

MoCFI: A Framework to Mitigate Control-Flow Attacks on Smartphones. - Lucas Davi; Alexandra Dmitrienko; Manuel Egele; Thomas Fischer 005; Thorsten Holz; Ralf Hund; Stefan Nürnberger; Ahmad-Reza Sadeghi (NDSS, 2012)

Gadge me if you can: secure and efficient ad-hoc instruction-level randomization for x86 and ARM. - Lucas Vincenzo Davi; Alexandra Dmitrienko; Stefan Nürnberger; Ahmad-Reza Sadeghi (AsiaCCS, 2013)

PSiOS: bring your own privacy & security to iOS devices. - Tim Werthmann; Ralf Hund; Lucas Davi; Ahmad-Reza Sadeghi; Thorsten Holz (AsiaCCS, 2013)

Check My Profile: Leveraging Static Analysis for Fast and Accurate Detection of ROP Gadgets. - Blaine Stancill; Kevin Z. Snow; Nathan Otterness; Fabian Monrose; Lucas Davi; Ahmad-Reza Sadeghi (RAID, 2013)

Just-In-Time Code Reuse: On the Effectiveness of Fine-Grained Address Space Layout Randomization. - Kevin Z. Snow; Fabian Monrose; Lucas Davi; Alexandra Dmitrienko; Christopher Liebchen; Ahmad-Reza Sadeghi (IEEE Symposium on Security and Privacy, 2013)

Mobile Platform Security - N. Asokan; Lucas Vincenzo Davi; Alexandra Dmitrienko; Stephan Heuser; Kari Kostiainen; Elena Reshetova; Ahmad-Reza Sadeghi (Morgan & Claypool Publishers, 2013)

Beasty Memories: The Quest for Practical Defense against Code Reuse Attacks. - Ahmad-Reza Sadeghi; Lucas Davi (TrustED@CCS, 2014)

Hardware-Assisted Fine-Grained Control-Flow Integrity: Towards Efficient Protection of Embedded Systems Against Software Exploitation. - Lucas Davi; Patrick Koeberl; Ahmad-Reza Sadeghi (DAC, 2014)

Stitching the Gadgets: On the Ineffectiveness of Coarse-Grained Control-Flow Integrity Protection. - Lucas Davi; Ahmad-Reza Sadeghi; Daniel Lehmann 002; Fabian Monrose (USENIX Security Symposium, 2014)

XiOS: Extended Application Sandboxing on iOS. - Mihai Bucicoiu; Lucas Davi; Razvan Deaconescu; Ahmad-Reza Sadeghi (AsiaCCS, 2015)

Losing Control: On the Effectiveness of Control-Flow Integrity under Stack Attacks. - Mauro Conti; Stephen Crane; Lucas Davi; Michael Franz; Per Larsen; Marco Negro; Christopher Liebchen; Mohaned Qunaibit; Ahmad-Reza Sadeghi (CCS, 2015)

It's a TRaP: Table Randomization and Protection against Function-Reuse Attacks. - Stephen J. Crane; Stijn Volckaert; Felix Schuster; Christopher Liebchen; Per Larsen; Lucas Davi; Ahmad-Reza Sadeghi; Thorsten Holz; Bjorn De Sutter; Michael Franz (CCS, 2015)

Securing Legacy Software against Real-World Code-Reuse Exploits: Utopia, Alchemy, or Possible Future? - Ahmad-Reza Sadeghi; Lucas Davi; Per Larsen (AsiaCCS, 2015)

HAFIX: hardware-assisted flow integrity extension. - Lucas Davi; Matthias Hanreich; Debayan Paul; Ahmad-Reza Sadeghi; Patrick Koeberl; Dean Sullivan; Orlando Arias; Yier Jin (DAC, 2015)

Isomeron: Code Randomization Resilient to (Just-In-Time) Return-Oriented Programming. - Lucas Davi; Christopher Liebchen; Ahmad-Reza Sadeghi; Kevin Z. Snow; Fabian Monrose (NDSS, 2015)

Readactor: Practical Code Randomization Resilient to Memory Disclosure. - Stephen Crane; Christopher Liebchen; Andrei Homescu; Lucas Davi; Per Larsen; Ahmad-Reza Sadeghi; Stefan Brunthaler 001; Michael Franz (IEEE Symposium on Security and Privacy, 2015)

Counterfeit Object-oriented Programming: On the Difficulty of Preventing Code Reuse Attacks in C++ Applications. - Felix Schuster; Thomas Tendyck; Christopher Liebchen; Lucas Davi; Ahmad-Reza Sadeghi; Thorsten Holz (IEEE Symposium on Security and Privacy, 2015)

Code-reuse attacks and defenses. - Lucas Vincenzo Davi (2015)

Building Secure Defenses Against Code-Reuse Attacks - Lucas Davi; Ahmad-Reza Sadeghi (Springer, 2015)

Automated Software Diversity - Per Larsen; Stefan Brunthaler 001; Lucas Davi; Ahmad-Reza Sadeghi; Michael Franz (Morgan & Claypool Publishers, 2015)

C-FLAT: Control-Flow Attestation for Embedded Systems Software. - Tigist Abera; N. Asokan; Lucas Davi; Jan-Erik Ekberg; Thomas Nyman; Andrew Paverd; Ahmad-Reza Sadeghi; Gene Tsudik (CCS, 2016)

SandScout: Automatic Detection of Flaws in iOS Sandbox Profiles. - Luke Deshotels; Razvan Deaconescu; Mihai Chiroiu; Lucas Davi; William Enck; Ahmad-Reza Sadeghi (CCS, 2016)

Invited - Things, trouble, trust: on building trust in IoT systems. - Tigist Abera; N. Asokan; Lucas Davi; Farinaz Koushanfar; Andrew Paverd; Ahmad-Reza Sadeghi; Gene Tsudik (DAC, 2016)

Strategy without tactics: policy-agnostic hardware-enhanced control-flow integrity. - Dean Sullivan; Orlando Arias; Lucas Davi; Per Larsen; Ahmad-Reza Sadeghi; Yier Jin (DAC, 2016)

Leakage-Resilient Layout Randomization for Mobile Devices. - Kjell Braden; Lucas Davi; Christopher Liebchen; Ahmad-Reza Sadeghi; Stephen Crane; Michael Franz; Per Larsen (NDSS, 2016)

Subversive-C: Abusing and Protecting Dynamic Message Dispatch. - Julian Lettner; Benjamin Kollenda; Andrei Homescu; Per Larsen; Felix Schuster; Lucas Davi; Ahmad-Reza Sadeghi; Thorsten Holz; Michael Franz (USENIX ATC, 2016)

CAn't Touch This: Practical and Generic Software-only Defenses Against Rowhammer Attacks. - Ferdinand Brasser; Lucas Davi; David Gens; Christopher Liebchen; Ahmad-Reza Sadeghi (CoRR, 2016)

SandBlaster: Reversing the Apple Sandbox. - Razvan Deaconescu; Luke Deshotels; Mihai Bucicoiu; William Enck; Lucas Davi; Ahmad-Reza Sadeghi (CoRR, 2016)

The Cybersecurity Landscape in Industrial Control Systems. - Stephen McLaughlin 003; Charalambos Konstantinou; Xueyang Wang; Lucas Davi; Ahmad-Reza Sadeghi; Michail Maniatakos; Ramesh Karri (Proc. IEEE, 2016)

Breaking and Fixing Destructive Code Read Defenses. - Jannik Pewny; Philipp Koppe; Lucas Davi; Thorsten Holz (ACSAC, 2017)

LO-FAT: Low-Overhead Control Flow ATtestation in Hardware. - Ghada Dessouky; Shaza Zeitouni; Thomas Nyman; Andrew Paverd; Lucas Davi; Patrick Koeberl; N. Asokan; Ahmad-Reza Sadeghi (DAC, 2017)

PT-Rand: Practical Mitigation of Data-only Attacks against Page Tables. - Lucas Davi; David Gens; Christopher Liebchen; Ahmad-Reza Sadeghi (NDSS, 2017)

Address Oblivious Code Reuse: On the Effectiveness of Leakage Resilient Diversity. - Robert Rudd; Richard Skowyra; David Bigelow; Veer Dedhia; Thomas Hobson; Stephen Crane; Christopher Liebchen; Per Larsen; Lucas Davi; Michael Franz; Ahmad-Reza Sadeghi; Hamed Okhravi (NDSS, 2017)

CFI CaRE: Hardware-Supported Call and Return Enforcement for Commercial Microcontrollers. - Thomas Nyman; Jan-Erik Ekberg; Lucas Davi; N. Asokan (RAID, 2017)

CAn't Touch This: Software-only Mitigation against Rowhammer Attacks targeting Kernel Memory. - Ferdinand Brasser; Lucas Davi; David Gens; Christopher Liebchen; Ahmad-Reza Sadeghi (USENIX Security Symposium, 2017)

Execution Integrity with In-Place Encryption. - Dean Sullivan; Orlando Arias; David Gens; Lucas Davi; Ahmad-Reza Sadeghi; Yier Jin (CoRR, 2017)

Hardware control flow integrity. - Yier Jin; Dean Sullivan; Orlando Arias; Ahmad-Reza Sadeghi; Lucas Davi (The Continuing Arms Race, 2018)

Advances and throwbacks in hardware-assisted security: special session. - Ferdinand Brasser; Lucas Davi; Abhijitt Dhavlle; Tommaso Frassetto; Sai Manoj Pudukotai Dinakarrao; Setareh Rafatirad; Ahmad-Reza Sadeghi; Avesta Sasan; Hossein Sayadi; Shaza Zeitouni; Houman Homayoun (CASES, 2018)

K-Miner: Uncovering Memory Corruption in Linux. - David Gens; Simon Schmitt; Lucas Davi; Ahmad-Reza Sadeghi (NDSS, 2018)

The Guard's Dilemma: Efficient Code-Reuse Attacks Against Intel SGX. - Andrea Biondo; Mauro Conti; Lucas Davi; Tommaso Frassetto; Ahmad-Reza Sadeghi (USENIX Security Symposium, 2018)

CHASE: A Configurable Hardware-Assisted Security Extension for Real-Time Systems. - Ghada Dessouky; Shaza Zeitouni; Ahmad Ibrahim 002; Lucas Davi; Ahmad-Reza Sadeghi (ICCAD, 2019)

Sereum: Protecting Existing Smart Contracts Against Re-Entrancy Attacks. - Michael Rodler; Wenting Li 001; Ghassan O. Karame; Lucas Davi (NDSS, 2019)

Combining Safety and Security in Autonomous Cars Using Blockchain Technologies. - Lucas Davi; Denis Hatebur; Maritta Heisel; Roman Wirtz (SAFECOMP Workshops, 2019)

Control Behavior Integrity for Distributed Cyber-Physical Systems. - Sridhar Adepu; Ferdinand Brasser; Luis Garcia 001; Michael Rodler; Lucas Davi; Ahmad-Reza Sadeghi; Saman A. Zonouz (ICCPS, 2020)

TeeRex: Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves. - Tobias Cloosters; Michael Rodler; Lucas Davi (USENIX Security Symposium, 2020)

RealSWATT: Remote Software-based Attestation for Embedded Devices under Realtime Constraints. - Sebastian Surminski; Christian Niesler; Ferdinand Brasser; Lucas Davi; Ahmad-Reza Sadeghi (CCS, 2021)

Nano Security: From Nano-Electronics to Secure Systems. - Ilia Polian; Frank Altmann; Tolga Arul; Christian Boit; Ralf Brederlow; Lucas Davi; Rolf Drechsler; Nan Du 004; Thomas Eisenbarth 001; Tim Güneysu; Sascha Hermann; Matthias Hiller; et al. (DATE, 2021)

My Fuzzer Beats Them All! Developing a Framework for Fair Evaluation and Comparison of Fuzzers. - David Paaßen; Sebastian Surminski; Michael Rodler; Lucas Davi (ESORICS (1), 2021)

HERA: Hotpatching of Embedded Real-time Applications. - Christian Niesler; Sebastian Surminski; Lucas Davi (NDSS, 2021)

EVMPatch: Timely and Automated Patching of Ethereum Smart Contracts. - Michael Rodler; Wenting Li 001; Ghassan O. Karame; Lucas Davi (USENIX Security Symposium, 2021)

xTag: Mitigating Use-After-Free Vulnerabilities via Software-Based Pointer Tagging on Intel x86-64. - Lukas Bernhard; Michael Rodler; Thorsten Holz; Lucas Davi (EuroS&P, 2022)

RiscyROP: Automated Return-Oriented Programming Attacks on RISC-V and ARM64. - Tobias Cloosters; David Paaßen; Jianqiang Wang; Oussama Draissi; Patrick Jauernig; Emmanuel Stapf; Lucas Davi; Ahmad-Reza Sadeghi (RAID, 2022)

Salsa: SGX Attestation for Live Streaming Applications. - Tobias Cloosters; Sebastian Surminski; Gerrit Sangel; Lucas Davi (SecDev, 2022)

Tutorial: Analyzing, Exploiting, and Patching Smart Contracts in Ethereum. - Jens-Rene Giesen; Sébastien Andreina; Michael Rodler; Ghassan O. Karame; Lucas Davi (SecDev, 2022)

SGXFuzz: Efficiently Synthesizing Nested Structures for SGX Enclave Fuzzing. - Tobias Cloosters; Johannes Willbold; Thorsten Holz; Lucas Davi (USENIX Security Symposium, 2022)

Practical Mitigation of Smart Contract Bugs. - Jens-Rene Giesen; Sébastien Andreina; Michael Rodler; Ghassan O. Karame; Lucas Davi (CoRR, 2022)

DMA'n'Play: Practical Remote Attestation Based on Direct Memory Access. - Sebastian Surminski; Christian Niesler; Lucas Davi; Ahmad-Reza Sadeghi (ACNS, 2023)

Fuzz on the Beach: Fuzzing Solana Smart Contracts. - Sven Smolka; Jens-Rene Giesen; Pascal Winkler; Oussama Draissi; Lucas Davi; Ghassan Karame; Klaus Pohl (CCS, 2023)

SCAtt-man: Side-Channel-Based Remote Attestation for Embedded Devices that Users Understand. - Sebastian Surminski; Christian Niesler; Sebastian Linsner; Lucas Davi; Christian Reuter 001 (CODASPY, 2023)

EF↯CF: High Performance Smart Contract Fuzzing for Exploit Generation. - Michael Rodler; David Paaßen; Wenting Li 001; Lukas Bernhard; Thorsten Holz; Ghassan Karame; Lucas Davi (EuroS&P, 2023)

ClepsydraCache - Preventing Cache Attacks with Time-Based Evictions. - Jan Philipp Thoma; Christian Niesler; Dominic A. Funke; Gregor Leander; Pierre Mayr; Nils Pohl; Lucas Davi; Tim Güneysu (USENIX Security Symposium, 2023)

Defying the Odds: Solana's Unexpected Resilience in Spite of the Security Challenges Faced by Developers. - Sébastien Andreina; Tobias Cloosters; Lucas Davi; Jens-Rene Giesen; Marco Gutfleisch; Ghassan Karame; Alena Naiakshina; Houda Naji (CCS, 2024)

NVM-Flip: Non-Volatile-Memory BitFlips on the System Level. - Felix Staudigl; Jan Philipp Thoma; Christian Niesler; Karl J. X. Sturm; Rebecca Pelke; Dominik Germek; Jan Moritz Joseph; Tim Güneysu; Lucas Davi; Rainer Leupers (SAT-CPS@CODASPY, 2024)

Memory Corruption at the Border of Trusted Execution. - Tobias Cloosters; Oussama Draissi; Johannes Willbold; Thorsten Holz; Lucas Davi (IEEE Secur. Priv., 2024)

HCC: A Language-Independent Hardening Contract Compiler for Smart Contracts. - Jens-Rene Giesen; Sébastien Andreina; Michael Rodler; Ghassan Karame; Lucas Davi (ACNS (1), 2025)

Space RADSIM: Binary-Agnostic Fault Injection to Evaluate Cosmic Radiation Impact on Exploit Mitigation Techniques in Space. - Johannes Willbold; Tobias Cloosters; Simon Wörner; Felix Buchmann; Moritz Schloegel; Lucas Davi; Thorsten Holz (SP, 2025)

Wemby's Web: Hunting for Memory Corruption in WebAssembly. - Oussama Draissi; Tobias Cloosters; David Klein 001; Michael Rodler; Marius Musch; Martin Johns; Lucas Davi (Proc. ACM Softw. Eng., 2025)

Building trust in remote attestation through transparency - a qualitative user study on observable attestation. - Sebastian Linsner; Kilian Demuth; Sebastian Surminski; Lucas Davi; Christian Reuter 001 (Behav. Inf. Technol., 2025)

Targeted Fuzzing for Unsafe Rust Code: Leveraging Selective Instrumentation. - David Paaßen; Jens-Rene Giesen; Lucas Davi (CoRR, 2025)