HProxy: Client-Side Detection of SSL Stripping Attacks. - Nick Nikiforakis; Yves Younan; Wouter Joosen (DIMVA, 2010)

ValueGuard: Protection of Native Applications against Data-Only Buffer Overflows. - Steven Van Acker; Nick Nikiforakis; Pieter Philippaerts; Yves Younan; Frank Piessens (ICISS, 2010)

RIPE: runtime intrusion prevention evaluator. - John Wilander; Nick Nikiforakis; Yves Younan; Mariam Kamkar; Wouter Joosen (ACSAC, 2011)

SessionShield: Lightweight Protection against Session Hijacking. - Nick Nikiforakis; Wannes Meert; Yves Younan; Martin Johns; Wouter Joosen (ESSoS, 2011)

Abusing locality in shared web hosting. - Nick Nikiforakis; Wouter Joosen; Martin Johns (EUROSEC, 2011)

Hello rootKitty: A Lightweight Invariance-Enforcing Framework. - Francesco Gadaleta; Nick Nikiforakis; Yves Younan; Wouter Joosen (ISC, 2011)

Exposing the Lack of Privacy in File Hosting Services. - Nick Nikiforakis; Marco Balduzzi; Steven Van Acker; Wouter Joosen; Davide Balzarotti (LEET, 2011)

FlashOver: automated discovery of cross-site scripting vulnerabilities in rich internet applications. - Steven Van Acker; Nick Nikiforakis; Lieven Desmet; Wouter Joosen; Frank Piessens (AsiaCCS, 2012)

FlowFox: a web browser with flexible and precise information flow control. - Willem De Groef; Dominique Devriese; Nick Nikiforakis; Frank Piessens (CCS, 2012)

You are what you include: large-scale evaluation of remote javascript inclusions. - Nick Nikiforakis; Luca Invernizzi; Alexandros Kapravelos; Steven Van Acker; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (CCS, 2012)

Serene: Self-Reliant Client-Side Protection against Session Fixation. - Philippe De Ryck; Nick Nikiforakis; Lieven Desmet; Frank Piessens; Wouter Joosen (DAIS, 2012)

There Is Safety in Numbers: Preventing Control-Flow Hijacking by Duplication. - Job Noorman; Nick Nikiforakis; Frank Piessens (NordSec, 2012)

Exploring the Ecosystem of Referrer-Anonymizing Services. - Nick Nikiforakis; Steven Van Acker; Frank Piessens; Wouter Joosen (Privacy Enhancing Technologies, 2012)

DEMACRO: Defense against Malicious Cross-Domain Requests. - Sebastian Lekies; Nick Nikiforakis; Walter Tighzert; Frank Piessens; Martin Johns (RAID, 2012)

HyperForce: Hypervisor-enForced Execution of Security-Critical Code. - Francesco Gadaleta; Nick Nikiforakis; Jan Tobias Mühlberg; Wouter Joosen (SEC, 2012)

Recent Developments in Low-Level Software Security. - Pieter Agten; Nick Nikiforakis; Raoul Strackx; Willem De Groef; Frank Piessens (WISTP, 2012)

FPDetective: dusting the web for fingerprinters. - Gunes Acar; Marc Juarez; Nick Nikiforakis; Claudia Díaz; Seda F. Gürses; Frank Piessens; Bart Preneel (CCS, 2013)

TabShots: client-side detection of tabnabbing attacks. - Philippe De Ryck; Nick Nikiforakis; Lieven Desmet; Wouter Joosen (AsiaCCS, 2013)

HeapSentry: Kernel-Assisted Protection against Heap Overflows. - Nick Nikiforakis; Frank Piessens; Wouter Joosen (DIMVA, 2013)

A Dangerous Mix: Large-Scale Analysis of Mixed-Content Websites. - Ping Chen; Nick Nikiforakis; Christophe Huygens; Lieven Desmet (ISC, 2013)

Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting. - Nick Nikiforakis; Alexandros Kapravelos; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2013)

Bitsquatting: exploiting bit-flips for fun, or profit? - Nick Nikiforakis; Steven Van Acker; Wannes Meert; Lieven Desmet; Frank Piessens; Wouter Joosen (WWW, 2013)

Monkey-in-the-browser: malware and vulnerabilities in augmented browsing script markets. - Steven Van Acker; Nick Nikiforakis; Lieven Desmet; Frank Piessens; Wouter Joosen (AsiaCCS, 2014)

Clubbing Seals: Exploring the Ecosystem of Third-party Security Seals. - Tom van Goethem; Frank Piessens; Wouter Joosen; Nick Nikiforakis (CCS, 2014)

Soundsquatting: Uncovering the Use of Homophones in Domain Squatting. - Nick Nikiforakis; Marco Balduzzi; Lieven Desmet; Frank Piessens; Wouter Joosen (ISC, 2014)

Security Analysis of the Chinese Web: How well is it protected? - Ping Chen; Nick Nikiforakis; Lieven Desmet; Christophe Huygens (SafeConfig, 2014)

Large-Scale Security Analysis of the Web: Challenges and Findings. - Tom van Goethem; Ping Chen; Nick Nikiforakis; Lieven Desmet; Wouter Joosen (TRUST, 2014)

Stranger danger: exploring the ecosystem of ad-based URL shortening services. - Nick Nikiforakis; Federico Maggi 001; Gianluca Stringhini; M. Zubair Rafique; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna; Stefano Zanero (WWW, 2014)

On the effectiveness of virtualization-based security. - Francesco Gadaleta; Raoul Strackx; Nick Nikiforakis; Frank Piessens; Wouter Joosen (CoRR, 2014)

On the Workings and Current Practices of Web-Based Device Fingerprinting. - Nick Nikiforakis; Alexandros Kapravelos; Wouter Joosen; Christopher Kruegel; Frank Piessens; Giovanni Vigna (IEEE Secur. Priv., 2014)

Secure multi-execution of web scripts: Theory and practice. - Willem De Groef; Dominique Devriese; Nick Nikiforakis; Frank Piessens (J. Comput. Secur., 2014)

The Clock is Still Ticking: Timing Attacks in the Modern Web. - Tom van Goethem; Wouter Joosen; Nick Nikiforakis (CCS, 2015)

Drops for Stuff: An Analysis of Reshipping Mule Scams. - Shuang Hao 001; Kevin Borgolte; Nick Nikiforakis; Gianluca Stringhini; Manuel Egele; Michael Eubanks; Brian Krebs; Giovanni Vigna (CCS, 2015)

Maneuvering Around Clouds: Bypassing Cloud-based Security Providers. - Thomas Vissers; Tom van Goethem; Wouter Joosen; Nick Nikiforakis (CCS, 2015)

Seven Months' Worth of Mistakes: A Longitudinal Study of Typosquatting Abuse. - Pieter Agten; Wouter Joosen; Frank Piessens; Nick Nikiforakis (NDSS, 2015)

Parking Sensors: Analyzing and Detecting Parked Domains. - Thomas Vissers; Wouter Joosen; Nick Nikiforakis (NDSS, 2015)

PriVaricator: Deceiving Fingerprinters with Little White Lies. - Nick Nikiforakis; Wouter Joosen; Benjamin Livshits (WWW, 2015)

Protected Web Components: Hiding Sensitive Information in the Shadows. - Philippe De Ryck; Nick Nikiforakis; Lieven Desmet; Frank Piessens; Wouter Joosen (IT Prof., 2015)

Why allowing profile name reuse is a bad idea. - Enrico Mariconti; Jeremiah Onaolapo; Syed Sharique Ahmad; Nicolas Nikiforou; Manuel Egele; Nick Nikiforakis; Gianluca Stringhini (EUROSEC, 2016)

It's Free for a Reason: Exploring the Ecosystem of Free Live Streaming Services. - M. Zubair Rafique; Tom van Goethem; Wouter Joosen; Christophe Huygens; Nick Nikiforakis (NDSS, 2016)

No Honor Among Thieves: A Large-Scale Analysis of Malicious Web Shells. - Oleksii Starov; Johannes Dahse; Syed Sharique Ahmad; Thorsten Holz; Nick Nikiforakis (WWW, 2016)

Dial One for Scam: Analyzing and Detecting Technical Support Scams. - Najmeh Miramirkhani; Oleksii Starov; Nick Nikiforakis (CoRR, 2016)

Are You Sure You Want to Contact Us? Quantifying the Leakage of PII via Website Contact Forms. - Oleksii Starov; Phillipa Gill; Nick Nikiforakis (Proc. Priv. Enhancing Technol., 2016)

Picky Attackers: Quantifying the Role of System Properties on Intruder Behavior. - Timothy Barron; Nick Nikiforakis (ACSAC, 2017)

Hiding in Plain Sight: A Longitudinal Study of Combosquatting Abuse. - Panagiotis Kintis; Najmeh Miramirkhani; Charles Lever; Yizheng Chen 001; Rosa Romero Gómez; Nikolaos Pitropakis; Nick Nikiforakis; Manos Antonakakis (CCS, 2017)

Hindsight: Understanding the Evolution of UI Vulnerabilities in Mobile Browsers. - Meng Luo 002; Oleksii Starov; Nima Honarmand; Nick Nikiforakis (CCS, 2017)

The Wolf of Name Street: Hijacking Domains Through Their Nameservers. - Thomas Vissers; Timothy Barron; Tom van Goethem; Wouter Joosen; Nick Nikiforakis (CCS, 2017)

Block Me If You Can: A Large-Scale Study of Tracker-Blocking Tools. - Georg Merzdovnik; Markus Huber 001; Damjan Buhov; Nick Nikiforakis; Sebastian Neuner; Martin Schmiedecker; Edgar R. Weippl (EuroS&P, 2017)

Dial One for Scam: A Large-Scale Analysis of Technical Support Scams. - Najmeh Miramirkhani; Oleksii Starov; Nick Nikiforakis (NDSS, 2017)

Spotless Sandboxes: Evading Malware Analysis Systems Using Wear-and-Tear Artifacts. - Najmeh Miramirkhani; Mahathi Priya Appini; Nick Nikiforakis; Michalis Polychronakis (IEEE Symposium on Security and Privacy, 2017)

XHOUND: Quantifying the Fingerprintability of Browser Extensions. - Oleksii Starov; Nick Nikiforakis (IEEE Symposium on Security and Privacy, 2017)

What's in a Name?: Understanding Profile Name Reuse on Twitter. - Enrico Mariconti; Jeremiah Onaolapo; Syed Sharique Ahmad; Nicolas Nikiforou; Manuel Egele; Nick Nikiforakis; Gianluca Stringhini (WWW, 2017)

Extended Tracking Powers: Measuring the Privacy Diffusion Enabled by Browser Extensions. - Oleksii Starov; Nick Nikiforakis (WWW, 2017)

By Hook or by Crook: Exposing the Diverse Abuse Tactics of Technical Support Scammers. - Bharat Srinivasan; Athanasios Kountouras; Najmeh Miramirkhani; Monjur Alam; Nick Nikiforakis; Manos Antonakakis; Mustaque Ahamad (CoRR, 2017)

Online Privacy and Web Transparency (Dagstuhl Seminar 17162). - Nataliia Bielova; Nikolaos Laoutaris; Arvind Narayanan; Nick Nikiforakis (Dagstuhl Reports, 2017)

PrivacyMeter: Designing and Developing a Privacy-Preserving Browser Extension. - Oleksii Starov; Nick Nikiforakis (ESSoS, 2018)

Panning for gold.com: Understanding the Dynamics of Domain Dropcatching. - Najmeh Miramirkhani; Timothy Barron; Michael Ferdman; Nick Nikiforakis (WWW, 2018)

Exposing Search and Advertisement Abuse Tactics and Infrastructure of Technical Support Scammers. - Bharat Srinivasan; Athanasios Kountouras; Najmeh Miramirkhani; Monjur Alam; Nick Nikiforakis; Manos Antonakakis; Mustaque Ahamad (WWW, 2018)

Betrayed by Your Dashboard: Discovering Malicious Campaigns via Web Analytics. - Oleksii Starov; Yuchen Zhou; Xiao Zhang; Najmeh Miramirkhani; Nick Nikiforakis (WWW, 2018)

Web Application Security (Dagstuhl Seminar 18321). - Martin Johns; Nick Nikiforakis; Melanie Volkamer; John Wilander (Dagstuhl Reports, 2018)

Purchased Fame: Exploring the Ecosystem of Private Blog Networks. - Tom van Goethem; Najmeh Miramirkhani; Wouter Joosen; Nick Nikiforakis (AsiaCCS, 2019)

Morellian Analysis for Browsers: Making Web Authentication Stronger with Canvas Fingerprinting. - Pierre Laperdrix; Gildas Avoine; Benoit Baudry; Nick Nikiforakis (DIMVA, 2019)

Time Does Not Heal All Wounds: A Longitudinal Analysis of Security-Mechanism Support in Mobile Browsers. - Meng Luo 002; Pierre Laperdrix; Nima Honarmand; Nick Nikiforakis (NDSS, 2019)

Now You See It, Now You Don't: A Large-scale Analysis of Early Domain Deletions. - Timothy Barron; Najmeh Miramirkhani; Nick Nikiforakis (RAID, 2019)

Less is More: Quantifying the Security Benefits of Debloating Web Applications. - Babak Amin Azad; Pierre Laperdrix; Nick Nikiforakis (USENIX Security Symposium, 2019)

Everyone is Different: Client-side Diversification for Defending Against Extension Fingerprinting. - Erik Trickel; Oleksii Starov; Alexandros Kapravelos; Nick Nikiforakis; Adam Doupé (USENIX Security Symposium, 2019)

Unnecessarily Identifiable: Quantifying the fingerprintability of browser extensions due to bloat. - Oleksii Starov; Pierre Laperdrix; Alexandros Kapravelos; Nick Nikiforakis (WWW, 2019)

You've Changed: Detecting Malicious Browser Extensions through their Update Deltas. - Nikolaos Pantelaios; Nick Nikiforakis; Alexandros Kapravelos (CCS, 2020)

Web Runner 2049: Evaluating Third-Party Anti-bot Services. - Babak Amin Azad; Oleksii Starov; Pierre Laperdrix; Nick Nikiforakis (DIMVA, 2020)

Short Paper - Taming the Shape Shifter: Detecting Anti-fingerprinting Browsers. - Babak Amin Azad; Oleksii Starov; Pierre Laperdrix; Nick Nikiforakis (DIMVA, 2020)

Complex Security Policy? A Longitudinal Analysis of Deployed Content Security Policies. - Sebastian Roth; Timothy Barron; Stefano Calzavara; Nick Nikiforakis; Ben Stock (NDSS, 2020)

Meddling Middlemen: Empirical Analysis of the Risks of Data-Saving Mobile Browsers. - Brian Kondracki; Assel Aliyeva; Manuel Egele; Jason Polakis; Nick Nikiforakis (SP, 2020)

Need for Mobile Speed: A Historical Study of Mobile Web Performance. - Javad Nejati; Meng Luo 002; Nick Nikiforakis; Aruna Balasubramanian (TMA, 2020)

Click This, Not That: Extending Web Authentication with Deception. - Timothy Barron; Johnny So; Nick Nikiforakis (AsiaCCS, 2021)

Catching Transparent Phish: Analyzing and Detecting MITM Phishing Toolkits. - Brian Kondracki; Babak Amin Azad; Oleksii Starov; Nick Nikiforakis (CCS, 2021)

To Err.Is Human: Characterizing the Threat of Unintended URLs in Social Media. - Beliz Kaleli; Brian Kondracki; Manuel Egele; Nick Nikiforakis; Gianluca Stringhini (NDSS, 2021)

Good Bot, Bad Bot: Characterizing Automated Browsing Activity. - Xigao Li; Babak Amin Azad; Amir Rahmati; Nick Nikiforakis (SP, 2021)

Fingerprinting in Style: Detecting Browser Extensions via Injected Style Sheets. - Pierre Laperdrix; Oleksii Starov; Quan Chen; Alexandros Kapravelos; Nick Nikiforakis (USENIX Security Symposium, 2021)

Where are you taking me?Understanding Abusive Traffic Distribution Systems. - Janos Szurdi; Meng Luo 002; Brian Kondracki; Nick Nikiforakis; Nicolas Christin (WWW, 2021)

Escaping the Confines of Time: Continuous Browser Extension Fingerprinting Through Ephemeral Modifications. - Konstantinos Solomos; Panagiotis Ilia; Nick Nikiforakis; Jason Polakis (CCS, 2022)

The Droid is in the Details: Environment-aware Evasion of Android Sandboxes. - Brian Kondracki; Babak Amin Azad; Najmeh Miramirkhani; Nick Nikiforakis (NDSS, 2022)

Domains Do Change Their Spots: Quantifying Potential Abuse of Residual Trust. - Johnny So; Najmeh Miramirkhani; Michael Ferdman; Nick Nikiforakis (SP, 2022)

Uninvited Guests: Analyzing the Identity and Behavior of Certificate Transparency Bots. - Brian Kondracki; Johnny So; Nick Nikiforakis (USENIX Security Symposium, 2022)

The Dangers of Human Touch: Fingerprinting Browser Extensions through User Actions. - Konstantinos Solomos; Panagiotis Ilia; Soroush Karami; Nick Nikiforakis; Jason Polakis (USENIX Security Symposium, 2022)

Verba Volant, Scripta Volant: Understanding Post-publication Title Changes in News Outlets. - Xingzhi Guo; Brian Kondracki; Nick Nikiforakis; Steven Skiena (WWW, 2022)

Introduction to the Special Issue on Vulnerabilities. - Fabio Massacci; Nick Nikiforakis; Ivan Pashchenko; Antonino Sabetta; Victoria Wang (DTRAP, 2022)

Role Models: Role-based Debloating for Web Applications. - Babak Amin Azad; Nick Nikiforakis (CODASPY, 2023)

Navigating Murky Waters: Automated Browser Feature Testing for Uncovering Tracking Vectors. - Mir Masood Ali; Binoy Chitale; Mohammad Ghasemisharif; Chris Kanich; Nick Nikiforakis; Jason Polakis (NDSS, 2023)

Double and Nothing: Understanding and Detecting Cryptocurrency Giveaway Scams. - Xigao Li; Anurag Yepuri; Nick Nikiforakis (NDSS, 2023)

AnimateDead: Debloating Web Applications Using Concolic Execution. - Babak Amin Azad; Rasoul Jahanshahi; Chris Tsoukaladelis; Manuel Egele; Nick Nikiforakis (USENIX Security Symposium, 2023)

Minimalist: Semi-automated Debloating of PHP Web Applications through Static Analysis. - Rasoul Jahanshahi; Babak Amin Azad; Nick Nikiforakis; Manuel Egele (USENIX Security Symposium, 2023)

Scan Me If You Can: Understanding and Detecting Unwanted Vulnerability Scanning. - Xigao Li; Babak Amin Azad; Amir Rahmati; Nick Nikiforakis (WWW, 2023)

The More Things Change, the More They Stay the Same: Integrity of Modern JavaScript. - Johnny So; Michael Ferdman; Nick Nikiforakis (WWW, 2023)

Ready or Not, Here I Come: Characterizing the Security of Prematurely-public Web Applications. - Brian Kondracki; Michael Ferdman; Nick Nikiforakis (ACSAC, 2024)

Harnessing Multiplicity: Granular Browser Extension Fingerprinting through User Configurations. - Konstantinos Solomos; Nick Nikiforakis; Jason Polakis (ACSAC, 2024)

Knocking on Admin's Door: Protecting Critical Web Applications with Deception. - Billy Tsouvalas; Nick Nikiforakis (DIMVA, 2024)

Typosquatting 3.0: Characterizing Squatting in Blockchain Naming Systems. - Muhammad Muzammil; Zhengyu Wu; Lalith Harisha; Brian Kondracki; Nick Nikiforakis (eCrime, 2024)

Panning for gold.eth: Understanding and Analyzing ENS Domain Dropcatching. - Muhammad Muzammil; Zhengyu Wu; Aruna Balasubramanian; Nick Nikiforakis (IMC, 2024)

Like, Comment, Get Scammed: Characterizing Comment Scams on Media Platforms. - Xigao Li; Amir Rahmati; Nick Nikiforakis (NDSS, 2024)

Secrets are Forever: Characterizing Sensitive File Leaks on IPFS. - Zhengyu Wu; Brian Kondracki; Nick Nikiforakis; Aruna Balasubramanian (IFIP Networking, 2024)

The Times They Are A-Changin': Characterizing Post-Publication Changes to Online News. - Chris Tsoukaladelis; Brian Kondracki; Niranjan Balasubramanian; Nick Nikiforakis (SP, 2024)

Manufactured Narratives: On the Potential of Manipulating Social Media to Politicize World Events. - Chris Tsoukaladelis; Nick Nikiforakis (SP (Workshops), 2024)

Smudged Fingerprints: Characterizing and Improving the Performance of Web Application Fingerprinting. - Brian Kondracki; Nick Nikiforakis (USENIX Security Symposium, 2024)

Degrees of Decentralized Freedom: Comparing Modern Decentralized Storage Platforms. - Zhengyu Wu; Brian Lin; Nick Nikiforakis; Aruna Balasubramanian (TMA, 2025)

The Poorest Man in Babylon: A Longitudinal Study of Cryptocurrency Investment Scams. - Muhammad Muzammil; Abisheka Pitumpe; Xigao Li; Amir Rahmati; Nick Nikiforakis (WWW, 2025)

SoK: Advances and Open Problems in Web Tracking. - Yash Vekaria; Yohan Beugin; Shaoor Munir; Gunes Acar; Nataliia Bielova; Steven Englehardt; Umar Iqbal 002; Alexandros Kapravelos; Pierre Laperdrix; Nick Nikiforakis; Jason Polakis; Franziska Roesner; et al. (CoRR, 2025)