Subverting BIND's SRTT Algorithm Derandomizing NS Selection. - Roee Hay; Jonathan Kalechstain; Gabi Nakibly (WOOT, 2013)

Attacking the Linux PRNG On Android: Weaknesses in Seeding of Entropic Pools and Low Boot-Time Entropy. - David Kaplan; Sagi Kedmi; Roee Hay; Avi Dayan (WOOT, 2014)

Dynamic detection of inter-application communication vulnerabilities in Android. - Roee Hay; Omer Tripp; Marco Pistoia (ISSTA, 2015)

One Class to Rule Them All: 0-Day Deserialization Vulnerabilities in Android. - Or Peles; Roee Hay (WOOT, 2015)

fastboot oem vuln: Android Bootloader Vulnerabilities in Vendor Customizations. - Roee Hay (WOOT, 2017)