Confine: Fine-grained system call filtering for container attack surface reduction. - Maryam Rostamipoor; Seyedhamed Ghavamnia; Michalis Polychronakis (Comput. Secur., 2023)

KubeKeeper: Protecting Kubernetes Secrets Against Excessive Permissions. - Maryam Rostamipoor; Aliakbar Sadeghi; Michalis Polychronakis (EuroS&P, 2025)

LeakLess: Selective Data Protection against Memory Leakage Attacks for Serverless Platforms. - Maryam Rostamipoor; Seyedhamed Ghavamnia; Michalis Polychronakis (NDSS, 2025)