A weakest precondition approach to active attacks analysis. - Musard Balliu; Isabella Mastroeni (PLAS, 2009)

A Weakest Precondition Approach to Robustness. - Musard Balliu; Isabella Mastroeni (Trans. Comput. Sci., 2010)

Epistemic temporal logic for information flow security. - Musard Balliu; Mads Dam; Gurvan Le Guernic (PLAS, 2011)

ENCoVer: Symbolic Exploration for Information Flow Security. - Musard Balliu; Mads Dam; Gurvan Le Guernic (CSF, 2012)

A Logic for Information Flow Analysis of Distributed Programs. - Musard Balliu (NordSec, 2013)

Automating Information Flow Analysis of Low Level Code. - Musard Balliu; Mads Dam; Roberto Guanciale (CCS, 2014)

Logics for Information Flow Security:From Specification to Verification. - Musard Balliu (2014)

JSLINQ: Building Secure Applications across Tiers. - Musard Balliu; Benjamin Liebe; Daniel Schoepe; Andrei Sabelfeld (CODASPY, 2016)

Let's Face It: Faceted Values for Taint Tracking. - Daniel Schoepe; Musard Balliu; Frank Piessens; Andrei Sabelfeld (ESORICS (1), 2016)

Explicit Secrecy: A Policy for Taint Tracking. - Daniel Schoepe; Musard Balliu; Benjamin C. Pierce; Andrei Sabelfeld (EuroS&P, 2016)

We Are Family: Relating Information-Flow Trackers. - Musard Balliu; Daniel Schoepe; Andrei Sabelfeld (ESORICS (1), 2017)

Formalising privacy policies in social networks. - Raúl Pardo; Musard Balliu; Gerardo Schneider (J. Log. Algebraic Methods Program., 2017)

If This Then What?: Controlling Flows in IoT Apps. - Iulia Bastys; Musard Balliu; Andrei Sabelfeld (CCS, 2018)

An Empirical Study of Information Flows in Real-World JavaScript. - Cristian-Alexandru Staicu; Daniel Schoepe; Musard Balliu; Michael Pradel; Andrei Sabelfeld (PLAS@CCS, 2019)

Securing Cross-App Interactions in IoT Platforms. - Musard Balliu; Massimo Merro; Michele Pasqua (CSF, 2019)

Information-Flow Control for Database-Backed Applications. - Marco Guarnieri; Musard Balliu; Daniel Schoepe; David A. Basin; Andrei Sabelfeld (EuroS&P, 2019)

Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis. - Katja Tuma; Riccardo Scandariato; Musard Balliu (ICSA, 2019)

Securing IoT Apps. - Musard Balliu; Iulia Bastys; Andrei Sabelfeld (IEEE Secur. Priv., 2019)

InSpectre: Breaking and Fixing Microarchitectural Vulnerabilities by Formal Analysis. - Roberto Guanciale; Musard Balliu; Mads Dam (CCS, 2020)

Clockwork: Tracking Remote Timing Attacks. - Iulia Bastys; Musard Balliu; Tamara Rezk; Andrei Sabelfeld (CSF, 2020)

Securing Node-RED Applications. - Mohammad M. Ahmadpanah; Musard Balliu; Daniel Hedin; Lars Eric Olsson; Andrei Sabelfeld (Protocols, Strands, and Logic, 2021)

Language Support for Secure Software Development with Enclaves. - Aditya Oak; Amir M. Ahmadian; Musard Balliu; Guido Salvaneschi (CSF, 2021)

SerialDetector: Principled and Practical Exploration of Object Injection Vulnerabilities for the Web. - Mikhail Shcherbakov; Musard Balliu (NDSS, 2021)

Security-Aware Multi-User Architecture for IoT. - Marcus Birgersson; Cyrille Artho; Musard Balliu (QRS, 2021)

Enclave-Based Secure Programming with JE. - Aditya Oak; Amir M. Ahmadian; Musard Balliu; Guido Salvaneschi (SecDev, 2021)

Vivienne: Relational Verification of Cryptographic Implementations in WebAssembly. - Rodothea-Myrsini Tsoupidi; Musard Balliu; Benoit Baudry (SecDev, 2021)

SandTrap: Securing JavaScript-driven Trigger-Action Platforms. - Mohammad M. Ahmadpanah; Daniel Hedin; Musard Balliu; Lars Eric Olsson; Andrei Sabelfeld (USENIX Security Symposium, 2021)

Friendly Fire: Cross-app Interactions in IoT Platforms. - Musard Balliu; Massimo Merro; Michele Pasqua; Mikhail Shcherbakov (ACM Trans. Priv. Secur., 2021)

Dynamic Policies Revisited. - Amir M. Ahmadian; Musard Balliu (EuroS&P, 2022)

Software Bill of Materials in Java. - Musard Balliu; Benoit Baudry; Sofia Bobadilla; Mathias Ekstedt; Martin Monperrus; Javier Ron; Aman Sharma 001; Gabriel Skoglund; César Soto-Valero; Martin Wittlinger (SCORED@CCS, 2023)

Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js. - Mikhail Shcherbakov; Musard Balliu; Cristian-Alexandru Staicu (USENIX Security Symposium, 2023)

Challenges of Producing Software Bill of Materials for Java. - Musard Balliu; Benoit Baudry; Sofia Bobadilla; Mathias Ekstedt; Martin Monperrus; Javier Ron Arteaga; Aman Sharma 001; Gabriel Skoglund; César Soto-Valero; Martin Wittlinger (IEEE Secur. Priv., 2023)

Disjunctive Policies for Database-Backed Programs. - Amir M. Ahmadian; Matvey Soloviev; Musard Balliu (CSF, 2024)

Security Properties through the Lens of Modal Logic. - Matvey Soloviev; Musard Balliu; Roberto Guanciale (CSF, 2024)

Activity Recognition Protection for IoT Trigger-Action Platforms. - Mahmoud Aghvamipanah; Morteza Amini; Cyrille Artho; Musard Balliu (EuroS&P, 2024)

Sharing without Showing: Secure Cloud Analytics with Trusted Execution Environments. - Marcus Birgersson; Cyrille Artho; Musard Balliu (SecDev, 2024)

GHunter: Universal Prototype Pollution Gadgets in JavaScript Runtimes. - Eric Cornelissen; Mikhail Shcherbakov; Musard Balliu (USENIX Security Symposium, 2024)

Unveiling the Invisible: Detection and Evaluation of Prototype Pollution Gadgets with Dynamic Taint Analysis. - Mikhail Shcherbakov; Paul Moosbrugger; Musard Balliu (WWW, 2024)

Securing P4 Programs by Information Flow Control. - Anoud Alshnakat; Amir M. Ahmadian; Musard Balliu; Roberto Guanciale; Mads Dam (CSF, 2025)

TAPShield: Securing Trigger-Action Platforms against Strong Attackers. - Mojtaba Moazen; Nicolae Paladi; Adnan Jamil Ahsan; Musard Balliu (EuroS&P, 2025)

NodeShield: Runtime Enforcement of Security-Enhanced SBOMs for Node.js. - Eric Cornelissen; Musard Balliu (CoRR, 2025)