Securing Node-RED Applications. - Mohammad M. Ahmadpanah; Musard Balliu; Daniel Hedin; Lars Eric Olsson; Andrei Sabelfeld (Protocols, Strands, and Logic, 2021)

Nontransitive Policies Transpiled. - Mohammad M. Ahmadpanah; Aslan Askarov; Andrei Sabelfeld (EuroS&P, 2021)

SandTrap: Securing JavaScript-driven Trigger-Action Platforms. - Mohammad M. Ahmadpanah; Daniel Hedin; Musard Balliu; Lars Eric Olsson; Andrei Sabelfeld (USENIX Security Symposium, 2021)

Poster: Data Minimization by Construction for Trigger-Action Applications. - Mohammad M. Ahmadpanah; Daniel Hedin; Andrei Sabelfeld (CCS, 2023)

LazyTAP: On-Demand Data Minimization for Trigger-Action Applications. - Mohammad M. Ahmadpanah; Daniel Hedin; Andrei Sabelfeld (SP, 2023)

CodeX: Contextual Flow Tracking for Browser Extensions. - Mohammad M. Ahmadpanah; Matías F. Gobbi; Daniel Hedin; Johannes Kinder; Andrei Sabelfeld (CODASPY, 2025)