Virtualized dynamic port assignment and windowed whitelisting for securing infrastructure servers. - Ronald Loui; Lucinda Caughey; Mohammad Ghasemisharif; Rogelio Salvador (EIT, 2016)

O Single Sign-Off, Where Art Thou? An Empirical Analysis of Single Sign-On Account Hijacking and Session Management on the Web. - Mohammad Ghasemisharif; Amrutha Ramesh; Stephen Checkoway; Chris Kanich; Jason Polakis (USENIX Security Symposium, 2018)

SpeedReader: Reader Mode Made Fast and Private. - Mohammad Ghasemisharif; Peter Snyder; Andrius Aucinas; Benjamin Livshits (WWW, 2019)

Plight at the End of the Tunnel - Legacy IPv6 Transition Mechanisms in the Wild. - John Kristoff; Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (PAM, 2021)

Towards Automated Auditing for Account and Session Management Flaws in Single Sign-On Deployments. - Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (SP, 2022)

When Push Comes to Shove: Empirical Analysis of Web Push Implementations in the Wild. - Alberto Carboneri; Mohammad Ghasemisharif; Soroush Karami; Jason Polakis (ACSAC, 2023)

Read Between the Lines: Detecting Tracking JavaScript with Bytecode Classification. - Mohammad Ghasemisharif; Jason Polakis (CCS, 2023)

Navigating Murky Waters: Automated Browser Feature Testing for Uncovering Tracking Vectors. - Mir Masood Ali; Binoy Chitale; Mohammad Ghasemisharif; Chris Kanich; Nick Nikiforakis; Jason Polakis (NDSS, 2023)

Rise of Inspectron: Automated Black-box Auditing of Cross-platform Electron Apps. - Mir Masood Ali; Mohammad Ghasemisharif; Chris Kanich; Jason Polakis (USENIX Security Symposium, 2024)