Web Cache Deception Escalates! - Seyed Ali Mirheidari; Matteo Golinelli; Kaan Onarlioglu; Engin Kirda; Bruno Crispo (USENIX Security Symposium, 2022)

OAuth 2.0 Redirect URI Validation Falls Short, Literally. - Tommaso Innocenti; Matteo Golinelli; Kaan Onarlioglu; Seyed Ali Mirheidari; Bruno Crispo; Engin Kirda (ACSAC, 2023)

The Nonce-nce of Web Security: An Investigation of CSP Nonces Reuse. - Matteo Golinelli; Francesco Bonomi; Bruno Crispo (ESORICS Workshops (2), 2023)

Mind the CORS. - Matteo Golinelli; Elham Arshad; Dmytro Kashchuk; Bruno Crispo (TPS-ISA, 2023)

Hidden Web Caches Discovery. - Matteo Golinelli; Bruno Crispo (RAID, 2024)

Koney: A Cyber Deception Orchestration Framework for Kubernetes. - Mario Kahlhofer; Matteo Golinelli; Stefan Rass (EuroS&P (Workshops), 2025)