A flexible security architecture to support third-party applications on mobile devices. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Katsiaryna Naliuka; Pieter Philippaerts; Frank Piessens; Dries Vanoverberghe (CSAW, 2007)

Security-by-contract on the .NET platform. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Pieter Philippaerts; Frank Piessens; Ida Sri Rejeki Siahaan; Dries Vanoverberghe (Inf. Secur. Tech. Rep., 2008)

Security Middleware for Mobile Applications. - Bart De Win; Tom Goovaerts; Wouter Joosen; Pieter Philippaerts; Frank Piessens; Yves Younan (Middleware for Network Eccentric and Mobile Applications, 2009)

Report: Extensibility and Implementation Independence of the .NET Cryptographic API. - Pieter Philippaerts; Cédric Boon; Frank Piessens (ESSoS, 2009)

Breaking the memory secrecy assumption. - Raoul Strackx; Yves Younan; Pieter Philippaerts; Frank Piessens; Sven Lachmund; Thomas Walter 001 (EUROSEC, 2009)

A Security Architecture for Web 2.0 Applications. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Katsiaryna Naliuka; Pieter Philippaerts; Frank Piessens; Ida Sri Rejeki Siahaan; Dries Vanoverberghe (Future Internet Assembly, 2009)

The S3MS.NET Run Time Monitor: Tool Demonstration. - Lieven Desmet; Wouter Joosen; Fabio Massacci; Katsiaryna Naliuka; Pieter Philippaerts; Frank Piessens; Dries Vanoverberghe (BYTECODE@ETAPS, 2009)

PAriCheck: an efficient pointer arithmetic checker for C programs. - Yves Younan; Pieter Philippaerts; Lorenzo Cavallaro; R. Sekar 001; Frank Piessens; Wouter Joosen (AsiaCCS, 2010)

ValueGuard: Protection of Native Applications against Data-Only Buffer Overflows. - Steven Van Acker; Nick Nikiforakis; Pieter Philippaerts; Yves Younan; Frank Piessens (ICISS, 2010)

Efficient and Effective Buffer Overflow Protection on ARM Processors. - Raoul Strackx; Yves Younan; Pieter Philippaerts; Frank Piessens (WISTP, 2010)

Code Pointer Masking: Hardening Applications against Code Injection Attacks. - Pieter Philippaerts; Yves Younan; Stijn Muylle; Frank Piessens; Sven Lachmund; Thomas Walter 001 (DIMVA, 2011)

VeriFast: A Powerful, Sound, Predictable, Fast Verifier for C and Java. - Bart Jacobs 002; Jan Smans; Pieter Philippaerts; Frédéric Vogels; Willem Penninckx; Frank Piessens (NASA Formal Methods, 2011)

The Belgian Electronic Identity Card: a Verification Case Study. - Pieter Philippaerts; Frédéric Vogels; Jan Smans; Bart Jacobs 002; Frank Piessens (Electron. Commun. Eur. Assoc. Softw. Sci. Technol., 2011)

Filter-resistant code injection on ARM. - Yves Younan; Pieter Philippaerts; Frank Piessens; Wouter Joosen; Sven Lachmund; Thomas Walter 001 (J. Comput. Virol., 2011)

ProtoLeaks: A Reliable and Protocol-Independent Network Covert Channel. - Arne Swinnen; Raoul Strackx; Pieter Philippaerts; Frank Piessens (ICISS, 2012)

CPM: Masking Code Pointers to Prevent Code Injection Attacks. - Pieter Philippaerts; Yves Younan; Stijn Muylle; Frank Piessens; Sven Lachmund; Thomas Walter 001 (ACM Trans. Inf. Syst. Secur., 2013)

Software verification with VeriFast: Industrial case studies. - Pieter Philippaerts; Jan Tobias Mühlberg; Willem Penninckx; Jan Smans; Bart Jacobs 002; Frank Piessens (Sci. Comput. Program., 2014)

Idea: Towards an Inverted Cloud. - Raoul Strackx; Pieter Philippaerts; Frédéric Vogels (ESSoS, 2015)

A Quantitative Assessment of the Detection Performance of Web Vulnerability Scanners. - Emma Lavens; Pieter Philippaerts; Wouter Joosen (ARES, 2022)

SecSharp: Towards Efficient Trusted Execution in Managed Languages (Work in Progress). - Gilang Mentari Hamidy; Pieter Philippaerts; Wouter Joosen (MPLR, 2022)

OAuch: Exploring Security Compliance in the OAuth 2.0 Ecosystem. - Pieter Philippaerts; Davy Preuveneers; Wouter Joosen (RAID, 2022)

A User-Centric Approach to API Delegations - Enforcing Privacy Policies on OAuth Delegations. - Shirin Kalantari; Pieter Philippaerts; Yana Dimova; Danny Hughes 001; Wouter Joosen; Bart De Decker (ESORICS (2), 2023)

Revisiting OAuth 2.0 Compliance: A Two-Year Follow-Up Study. - Pieter Philippaerts; Davy Preuveneers; Wouter Joosen (EuroS&P Workshops, 2023)

TC4SE: A High-Performance Trusted Channel Mechanism for Secure Enclave-Based Trusted Execution Environments. - Gilang Mentari Hamidy; Sri Yulianti; Pieter Philippaerts; Wouter Joosen (ISC, 2023)

T3E: A Practical Solution to Trusted Time in Secure Enclaves. - Gilang Mentari Hamidy; Pieter Philippaerts; Wouter Joosen (NSS, 2023)

Is Your OAuth Middleware Vulnerable? Evaluating Open-Source Identity Providers' Security. - Pieter Philippaerts; Jan Vanhoof; Tom Van Cutsem; Wouter Joosen (GLOBECOM, 2024)

Enhanced Threat Modeling and Attack Scenario Generation for OAuth 2.0 Implementations: Data/Toolset paper. - Pieter Philippaerts; Stef Verreydt; Wouter Joosen (CODASPY, 2025)