To have and have not: variations on secret sharing to model user presence. - Quentin Stafford-Fraser; Graeme Jenkinson; Frank Stajano; Max Spencer; Chris Warrington; Jeunese A. Payne (UbiComp Adjunct, 2014)

Password-Manager Friendly (PMF): Semantic Annotations to Improve the Effectiveness of Password Managers. - Frank Stajano; Max Spencer; Graeme Jenkinson; Quentin Stafford-Fraser (PASSWORDS, 2014)

I Bought a New Security Token and All I Got Was This Lousy Phish - Relay Attacks on Visual Code Authentication Schemes. - Graeme Jenkinson; Max Spencer; Chris Warrington; Frank Stajano (Security Protocols Workshop, 2014)

Relay Attacks on Visual Code Authentication Schemes (Transcript of Discussion). - Max Spencer (Security Protocols Workshop, 2014)

Bootstrapping Adoption of the Pico Password Replacement System. - Frank Stajano; Graeme Jenkinson; Jeunese A. Payne; Max Spencer; Quentin Stafford-Fraser; Chris Warrington (Security Protocols Workshop, 2014)

Pico Without Public Keys. - Frank Stajano; Bruce Christianson; T. Mark A. Lomas; Graeme Jenkinson; Jeunese A. Payne; Max Spencer; Quentin Stafford-Fraser (Security Protocols Workshop, 2015)

Responsibility and Tangible Security: Towards a Theory of User Acceptance of Security Tokens. - Jeunese A. Payne; Graeme Jenkinson; Frank Stajano; M. Angela Sasse; Max Spencer (CoRR, 2016)

AQUADA GUI: A graphical user interface for automated quantification of damages in composite structures under fatigue loading using computer vision and thermography. - Max Spencer; Shohreh Sheiati; Xiao Chen (SoftwareX, 2023)