Assuring high reliability of service provision in critical infrastructures. - Mark de Bruijne; Michel van Eeten; Emery Roe; Paul Schulman (Int. J. Crit. Infrastructures, 2006)

The governance of cybersecurity: a framework for policy. - Michel van Eeten; Hans de Bruijn; Mirjam Kars; Haiko Van Der Voort; Jaap Van Till (Int. J. Crit. Infrastructures, 2006)

Empirical Findings on Critical Infrastructure Dependencies in Europe. - Eric A. M. Luiijf; Albert Nieuwenhuijs; Marieke H. A. Klaver; Michel van Eeten; Edite Cruz (CRITIS, 2008)

The Role of Internet Service Providers in Botnet Mitigation: An Empirical Analysis Based on Spam Data. - Michel van Eeten; Johannes M. Bauer; Hadi Asghari; Shirin Tabatabaie; Dave Rand (WEIS, 2010)

Empirical findings on European critical infrastructure dependencies. - H. A. M. (Eric) Luiijf; Albert Nieuwenhuijs; Marieke H. A. Klaver; Michel J. G. van Eeten; Edite Cruz (Int. J. Syst. Syst. Eng., 2010)

Measuring the Cost of Cybercrime. - Ross J. Anderson; Chris Barton; Rainer Böhme; Richard Clayton 001; Michel van Eeten; Michael Levi; Tyler Moore 001; Stefan Savage (WEIS, 2012)

Measuring the Cost of Cybercrime. - Ross J. Anderson; Chris Barton; Rainer Böhme; Richard Clayton 001; Michel J. G. van Eeten; Michael Levi; Tyler Moore 001; Stefan Savage (The Economics of Information Security and Privacy, 2013)

Internet Measurements and Public Policy: Mind the Gap. - Hadi Asghari; Michel van Eeten; Milton L. Mueller (CSET, 2013)

Where is the governance in Internet governance? - Michel van Eeten; Milton Mueller (New Media Soc., 2013)

Towards Incentivizing ISPs to Mitigate Botnets. - Qasim Lone; Giovane C. M. Moura; Michel van Eeten (AIMS, 2014)

Security collapse in the HTTPS market. - Axel Arnbak; Hadi Asghari; Michel van Eeten; Nico Van Eijk (Commun. ACM, 2014)

Images of innovation in discourses of free and open source software. - George N. Dafermos; Michel J. G. van Eeten (First Monday, 2014)

Analyzing and Modeling Longitudinal Security Data: Promise and Pitfalls. - Benjamin Edwards; Steven A. Hofmeyr; Stephanie Forrest; Michel van Eeten (ACSAC, 2015)

An Empirical Analysis of ZeuS C&C Lifetime. - Carlos Gañán; Orçun Çetin; Michel van Eeten (AsiaCCS, 2015)

How dynamic is the ISPs address space? Towards internet-wide DHCP churn estimation. - Giovane C. M. Moura; Carlos Gañán; Qasim Lone; Payam Poursaied; Hadi Asghari; Michel van Eeten (Networking, 2015)

Post-Mortem of a Zombie: Conficker Cleanup After Six Years. - Hadi Asghari; Michael Ciere; Michel J. G. van Eeten (USENIX Security Symposium, 2015)

Economics of Fighting Botnets: Lessons from a Decade of Mitigation. - Hadi Asghari; Michel J. G. van Eeten; Johannes M. Bauer (IEEE Secur. Priv., 2015)

A time-dependent SIS-model for long-term computer worm evolution. - Marcus Märtens; Hadi Asghari; Michel van Eeten; Piet Van Mieghem (CNS, 2016)

Zone Poisoning: The How and Where of Non-Secure DNS Dynamic Updates. - Maciej Korczynski; Michal Król; Michel van Eeten (Internet Measurement Conference, 2016)

Apples, oranges and hosting providers: Heterogeneity and security in the hosting market. - Samaneh Tajalizadehkhoob; Maciej Korczynski; Arman Noroozian; Carlos Gañán; Michel van Eeten (NOMS, 2016)

Who Gets the Boot? Analyzing Victimization by DDoS-as-a-Service. - Arman Noroozian; Maciej Korczynski; Carlos Hernandez Gañán; Daisuke Makita; Katsunari Yoshioka; Michel van Eeten (RAID, 2016)

Evaluating Malware Mitigation by Android Market Operators. - Yosuke Kikuchi; Hiroshi Mori; Hiroki Nakano; Katsunari Yoshioka; Tsutomu Matsumoto; Michel van Eeten (CSET @ USENIX Security Symposium, 2016)

Evaluating the Impact of AbuseHUB on Botnet Mitigation. - Michel van Eeten; Qasim Lone; Giovane C. M. Moura; Hadi Asghari; Maciej Korczynski (CoRR, 2016)

Developing Security Reputation Metrics for Hosting Providers. - Arman Noroozian; Maciej Korczynski; Samaneh Tajalizadehkhoob; Michel van Eeten (CoRR, 2016)

Understanding the role of sender reputation in abuse reporting and cleanup. - Orçun Çetin; Mohammad Hanif Jhaveri; Carlos Gañán; Michel van Eeten; Tyler Moore 001 (J. Cybersecur., 2016)

Introduction. - Tyler Moore 001; David J. Pym; Michel van Eeten (J. Cybersecur., 2016)

Assessing ICT Security Risks in Socio-Technical Systems (Dagstuhl Seminar 16461). - Tyler W. Moore; Christian W. Probst; Kai Rannenberg; Michel van Eeten (Dagstuhl Reports, 2016)

The Role of Hosting Providers in Fighting Command and Control Infrastructure of Financial Malware. - Samaneh Tajalizadehkhoob; Carlos Gañán; Arman Noroozian; Michel van Eeten (AsiaCCS, 2017)

Herding Vulnerable Cats: A Statistical Approach to Disentangle Joint Responsibility for Web Security in Shared Hosting. - Samaneh Tajalizadehkhoob; Tom van Goethem; Maciej Korczynski; Arman Noroozian; Rainer Böhme; Tyler Moore 001; Wouter Joosen; Michel van Eeten (CCS, 2017)

Reputation Metrics Design to Improve Intermediary Incentives for Security of TLDs. - Maciej Korczynski; Samaneh Tajalizadehkhoob; Arman Noroozian; Maarten Wullink; Cristian Hesselman; Michel van Eeten (EuroS&P, 2017)

Beyond the pretty penny: the Economic Impact of Cybercrime. - Carlos Hernandez Gañán; Michael Ciere; Michel van Eeten (NSPW, 2017)

Using Loops Observed in Traceroute to Infer the Ability to Spoof. - Qasim Lone; Matthew J. Luckie; Maciej Korczynski; Michel van Eeten (PAM, 2017)

Partial Device Fingerprints. - Michael Ciere; Carlos Gañán; Michel van Eeten (ECML/PKDD (2), 2017)

Abuse Reporting and the Fight Against Cybercrime. - Mohammad Hanif Jhaveri; Orçun Çetin; Carlos Gañán; Tyler Moore 001; Michel van Eeten (ACM Comput. Surv., 2017)

Let Me Out! Evaluating the Effectiveness of Quarantining Compromised Users in Walled Gardens. - Orçun Çetin; Carlos Gañán; Lisette Altena; Samaneh Tajalizadehkhoob; Michel van Eeten (SOUPS @ USENIX Security Symposium, 2018)

Using Crowdsourcing Marketplaces for Network Measurements: The Case of Spoofer. - Qasim Lone; Matthew J. Luckie; Maciej Korczynski; Hadi Asghari; Mobin Javed; Michel van Eeten (TMA, 2018)

Plug and Prey? Measuring the Commoditization of Cybercrime via Online Anonymous Markets. - Rolf van Wegberg; Samaneh Tajalizadehkhoob; Kyle Soska; Ugur Akyazi; Carlos Hernandez Gañán; Bram Klievink; Nicolas Christin; Michel van Eeten (USENIX Security Symposium, 2018)

Collectively exercising the right of access: individual effort, societal effect. - René L. P. Mahieu; Hadi Asghari; Michel van Eeten (Internet Policy Rev., 2018)

Rotten Apples or Bad Harvest? What We Are Measuring When We Are Measuring Abuse. - Samaneh Tajalizadehkhoob; Rainer Böhme; Carlos Gañán; Maciej Korczynski; Michel van Eeten (ACM Trans. Internet Techn., 2018)

Tell Me You Fixed It: Evaluating Vulnerability Notifications via Quarantine Networks. - Orçun Çetin; Carlos Gañán; Lisette Altena; Samaneh Tajalizadehkhoob; Michel van Eeten (EuroS&P, 2019)

Detect Me If You... Oh Wait. An Internet-Wide View of Self-Revealing Honeypots. - Shun Morishita; Takuya Hoizumi; Wataru Ueno; Rui Tanabe; Carlos Gañán; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (IM, 2019)

Cleaning Up the Internet of Evil Things: Real-World Evidence on ISP and Consumer Efforts to Remove Mirai. - Orçun Çetin; Carlos Gañán; Lisette Altena; Takahiro Kasama; Daisuke Inoue; Kazuki Tamiya; Ying Tie; Katsunari Yoshioka; Michel van Eeten (NDSS, 2019)

Platforms in Everything: Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting. - Arman Noroozian; Jan Koenders; Eelco van Veldhuizen; Carlos Hernandez Gañán; Sumayah A. Alrwais; Damon McCoy; Michel van Eeten (USENIX Security Symposium, 2019)

Disposable botnets: examining the anatomy of IoT botnet infrastructure. - Rui Tanabe; Tatsuya Tamai; Akira Fujita; Ryoichi Isawa; Katsunari Yoshioka; Tsutomu Matsumoto; Carlos Gañán; Michel van Eeten (ARES, 2020)

A different cup of TI? The added value of commercial threat intelligence. - Xander Bouwman; Harm Griffioen; Jelle Egbers; Christian Doerr; Bram Klievink; Michel van Eeten (USENIX Security Symposium, 2020)

Go See a Specialist? Predicting Cybercrime Sales on Online Anonymous Markets from Vendor and Product Characteristics. - Rolf van Wegberg; Fieke Miedema; Ugur Akyazi; Arman Noroozian; Bram Klievink; Michel van Eeten (WWW, 2020)

Governance Challenges for European Cybersecurity Policies: Stakeholder Views. - Pierantonia Sterlini; Fabio Massacci; Natalia Kadenko; Tobias Fiebig; Michel van Eeten (IEEE Secur. Priv., 2020)

Pay the Piper: DDoS Mitigation Technique to Deter Financially-Motivated Attackers. - Takayuki Sasaki; Carlos Hernandez Gañán; Katsunari Yoshioka; Michel van Eeten; Tsutomu Matsumoto (IEICE Trans. Commun., 2020)

Can ISPs Help Mitigate IoT Malware? A Longitudinal Study of Broadband ISP Security Efforts. - Arman Noroozian; Elsa Turcios Rodriguez; Elmer Lastdrager; Takahiro Kasama; Michel van Eeten; Carlos Gañán (EuroS&P, 2021)

SoK: A Framework for Asset Discovery: Systematizing Advances in Network Measurements for Protecting Organizations. - Mathew Vermeer; Jonathan West; Alejandro Cuevas; Shuonan Niu; Nicolas Christin; Michel van Eeten; Tobias Fiebig; Carlos Gañán; Tyler Moore 001 (EuroS&P, 2021)

"The Thing Doesn't Have a Name": Learning from Emergent Real-World Interventions in Smart Home Security. - Brennen Bouwmeester; Elsa Turcios Rodriguez; Carlos Gañán; Michel van Eeten; Simon Parkin (SOUPS @ USENIX Security Symposium, 2021)

Human Factors in Security Research: Lessons Learned from 2008-2018. - Mannat Kaur 001; Michel van Eeten; Marijn Janssen; Kevin Borgolte; Tobias Fiebig (CoRR, 2021)

User compliance and remediation success after IoT malware notifications. - Elsa Turcios Rodriguez; Susanne Verstegen; Arman Noroozian; Daisuke Inoue; Takahiro Kasama; Michel van Eeten; Carlos Hernandez Gañán (J. Cybersecur., 2021)

No Spring Chicken: Quantifying the Lifespan of Exploits in IoT Malware Using Static and Dynamic Analysis. - Arwa Abdulkarim Al Alsadi; Kaichi Sameshima; Jakob Bleier; Katsunari Yoshioka; Martina Lindorfer; Michel van Eeten; Carlos Hernandez Gañán (AsiaCCS, 2022)

Ruling the Rules: Quantifying the Evolution of Rulesets, Alerts and Incidents in Network Intrusion Detection. - Mathew Vermeer; Michel van Eeten; Carlos Gañán (AsiaCCS, 2022)

Difficult for Thee, But Not for Me: Measuring the Difficulty and User Experience of Remediating Persistent IoT Malware. - Elsa Turcios Rodriguez; Max Fukkink; Simon Parkin; Michel van Eeten; Carlos Gañán (EuroS&P, 2022)

Deployment of Source Address Validation by Network Operators: A Randomized Control Trial. - Qasim Lone; Alisa Frik; Matthew Luckie; Maciej Korczynski; Michel van Eeten; Carlos Gañán (SP, 2022)

Exposed Infrastructures: Discovery, Attacks and Remediation of Insecure ICS Remote Management Devices. - Takayuki Sasaki; Akira Fujita; Carlos Hernandez Gañán; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (SP, 2022)

Helping hands: Measuring the impact of a large threat intelligence sharing community. - Xander Bouwman; Victor Le Pochat; Pawel Foremski; Tom van Goethem; Carlos Hernandez Gañán; Giovane C. M. Moura; Samaneh Tajalizadehkhoob; Wouter Joosen; Michel van Eeten (USENIX Security Symposium, 2022)

DomainPrio: Prioritizing Domain Name Investigations to Improve SOC Efficiency. - Daiki Chiba 001; Mitsuaki Akiyama; Yuto Otsuki; Hiroki Hada; Takeshi Yagi; Tobias Fiebig; Michel van Eeten (IEEE Access, 2022)

Disposable Botnets: Long-term Analysis of IoT Botnet Infrastructure. - Rui Tanabe; Tsuyufumi Watanabe; Akira Fujita; Ryoichi Isawa; Carlos Gañán; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (J. Inf. Process., 2022)

Alert Alchemy: SOC Workflows and Decisions in the Management of NIDS Rules. - Mathew Vermeer; Natalia Kadenko; Michel van Eeten; Carlos Gañán; Simon Parkin (CCS, 2023)

Tough Decisions? Supporting System Classification According to the AI Act. - Hilmy Hanif; Jorge Constantino; Marie-Therese Sekwenz; Michel van Eeten; Jolien Ubacht; Ben Wagner; Yury Zhauniarovich (JURIX, 2023)

Bin there, target that: Analyzing the target selection of IoT vulnerabilities in malware binaries. - Arwa Abdulkarim Al Alsadi; Kaichi Sameshima; Katsunari Yoshioka; Michel van Eeten; Carlos Hernandez Gañán (RAID, 2023)

No One Drinks From the Firehose: How Organizations Filter and Prioritize Vulnerability Information. - Stephanie de Smale; Rik van Dijk; Xander Bouwman; Jeroen van der Ham; Michel van Eeten (SP, 2023)

Measuring Up to (Reasonable) Consumer Expectations: Providing an Empirical Basis for Holding IoT Manufacturers Legally Responsible. - Lorenz Kustosch; Carlos Gañán; Mattis van 't Schip; Michel van Eeten; Simon Parkin (USENIX Security Symposium, 2023)

An Attacker's Dream? Exploring the Capabilities of ChatGPT for Developing Malware. - Yin Minn Pa Pa; Shunsuke Tanizaki; Tetsui Kou; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (CSET @ USENIX Security Symposium, 2023)

Two Sides of the Shield: Understanding Protective DNS adoption factors. - Elsa Turcios Rodriguez; Radu Anghel; Simon Parkin; Michel van Eeten; Carlos Gañán (USENIX Security Symposium, 2023)

Examining Consumer Reviews to Understand Security and Privacy Issues in the Market of Smart Home Devices. - Swaathi Vetrivel; Veerle van Harten; Carlos Hernandez Gañán; Michel van Eeten; Simon Parkin (USENIX Security Symposium, 2023)

Easier Said Than Done: The Failure of Top-Level Cybersecurity Advice for Consumer IoT Devices. - Veerle van Harten; Carlos Hernandez Gañán; Michel van Eeten; Simon Parkin (CoRR, 2023)

Pushing boundaries: An empirical view on the digital sovereignty of six governments in the midst of geopolitical tensions. - Bernardus Jansen; Natalia Kadenko; Dennis Broeders; Michel van Eeten; Kevin Borgolte; Tobias Fiebig (Gov. Inf. Q., 2023)

VT-SOS: A Cost-effective URL Warning utilizing VirusTotal as a Second Opinion Service. - Kyohei Takao; Chika Hiraishi; Rui Tanabe; Kazuki Takada; Akira Fujita; Daisuke Inoue; Carlos Gañán; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (NOMS, 2024)

Finding Harmony in the Noise: Blending Security Alerts for Attack Detection. - Tom-Martijn Roelofs; Eduardo Barbaro; Svetlana Pekarskikh; Katarzyna Orzechowska; Marta Kwapien; Jakub Tyrlik; Dinu Smadu; Michel van Eeten; Yury Zhauniarovich (SAC, 2024)

Patchy Performance? Uncovering the Vulnerability Management Practices of IoT-Centric Vendors. - Sandra Rivera Pérez; Michel van Eeten; Carlos Hernandez Gañán (SP, 2024)

Who Left the Door Open? Investigating the Causes of Exposed IoT Devices in an Academic Network. - Takayuki Sasaki; Takaya Noma; Yudai Morii; Toshiya Shimura; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (SP, 2024)

The Unpatchables: Why Municipalities Persist in Running Vulnerable Hosts. - Aksel Ethembabaoglu; Rolf van Wegberg; Yury Zhauniarovich; Michel van Eeten (USENIX Security Symposium, 2024)

IoT Market Dynamics: An Analysis of Device Sales, Security and Privacy Signals, and their Interactions. - Swaathi Vetrivel; Brennen Bouwmeester; Michel van Eeten; Carlos Hernandez Gañán (USENIX Security Symposium, 2024)

Characteristics Comparison between Carpet Bombing-type and Single Target DRDoS Attacks Observed by Honeypot. - Qingxin Mao; Daisuke Makita; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (J. Inf. Process., 2024)

"All Sorts of Other Reasons to Do It": Explaining the Persistence of Sub-optimal IoT Security Advice. - Veerle van Harten; Carlos Hernandez Gañán; Michel van Eeten; Simon Parkin (CHI, 2025)

Speedrunning the Maze: Meeting Regulatory Patching Deadlines in a Large Enterprise Environment. - Gerbrand ten Napel; Michel van Eeten; Simon Parkin (SP, 2025)

Am I Infected? Lessons from Operating a Large-Scale IoT Security Diagnostic Service. - Takayuki Sasaki; Tomoya Inazawa; Youhei Yamaguchi; Simon Parkin; Michel van Eeten; Katsunari Yoshioka; Tsutomu Matsumoto (CoRR, 2025)