Program Analysis of Cryptographic Implementations for Security. - Sazzadur Rahaman; Danfeng Yao (SecDev, 2017)

Provably Secure Anonymous-yet-Accountable Crowdsensing with Scalable Sublinear Revocation. - Sazzadur Rahaman; Long Cheng 005; Danfeng Daphne Yao; He Li 007; Jung-Min "Jerry" Park (Proc. Priv. Enhancing Technol., 2017)

Tutorial: Principles and Practices of Secure Crypto Coding in Java. - Sazzadur Rahaman; Na Meng 001; Danfeng Yao (SecDev, 2018)

CHIRON: Deployment-quality Detection of Java Cryptographic Vulnerabilities. - Sazzadur Rahaman; Ya Xiao 002; Ke Tian; Fahad Shaon; Murat Kantarcioglu; Danfeng Yao (CoRR, 2018)

Security Certification in Payment Card Industry: Testbeds, Measurements, and Recommendations. - Sazzadur Rahaman; Gang Wang 011; Danfeng Daphne Yao (CCS, 2019)

CryptoGuard: High Precision Detection of Cryptographic Vulnerabilities in Massive-sized Java Projects. - Sazzadur Rahaman; Ya Xiao 002; Sharmin Afrose; Fahad Shaon; Ke Tian; Miles Frantz; Murat Kantarcioglu; Danfeng (Daphne) Yao (CCS, 2019)

Poster: Deployment-quality and Accessible Solutions for Cryptography Code Development. - Sazzadur Rahaman; Ya Xiao 002; Sharmin Afrose; Ke Tian; Miles Frantz; Na Meng 001; Barton P. Miller; Fahad Shaon; Murat Kantarcioglu; Danfeng (Daphne) Yao (CCS, 2019)

CryptoAPI-Bench: A Comprehensive Benchmark on Java Cryptographic API Misuses. - Sharmin Afrose; Sazzadur Rahaman; Danfeng Yao (SecDev, 2019)

A Comprehensive Benchmark on Java Cryptographic API Misuses. - Sharmin Afrose; Sazzadur Rahaman; Danfeng (Daphne) Yao (CODASPY, 2020)

Deployment-quality and Accessible Solutions for Cryptography Code Development. - Sazzadur Rahaman; Ya Xiao 002; Sharmin Afrose; Ke Tian; Miles Frantz; Na Meng 001; Barton P. Miller; Fahad Shaon; Murat Kantarcioglu; Danfeng (Daphne) Yao (CODASPY, 2020)

Coding Practices and Recommendations of Spring Security for Enterprise Applications. - Mazharul Islam; Sazzadur Rahaman; Na Meng 001; Behnaz Hassanshahi; Padmanabhan Krishnan; Danfeng Daphne Yao (SecDev, 2020)

Tutorial: Principles and Practices of Secure Cryptographic Coding in Java. - Ya Xiao 002; Miles Frantz; Sharmin Afrose; Sazzadur Rahaman; Danfeng Daphne Yao (SecDev, 2020)

From Theory to Practice: Deployment-grade Tools and Methodologies for Software Security. - Sazzadur Rahaman (2020)

Optimization to the Rescue: Evading Binary Code Stylometry with Adversarial Use of Code Optimizations. - Ben Jacobsen; Sazzadur Rahaman; Saumya Debray (Checkmate@CCS, 2021)

SecureDL: Securing Code Execution and Access Control for Distributed Data Analytics Platforms. - Fahad Shaon; Sazzadur Rahaman; Murat Kantarcioglu (CoRR, 2021)

"If security is required": Engineering and Security Practices for Machine Learning-based IoT Devices. - Nikhil Krishna Gopalakrishna; Dharun Anandayuvaraj; Annan Detti; Forrest Lee Bland; Sazzadur Rahaman; James C. Davis 001 (SERP4IoT, 2022)

Being the Developers' Friend: Our Experience Developing a High-Precision Tool for Secure Coding. - Danfeng Daphne Yao; Sazzadur Rahaman; Ya Xiao 002; Sharmin Afrose; Miles Frantz; Ke Tian; Na Meng 001; Cristina Cifuentes; Yang Zhao; Nicholas Allen; Nathan Keynes; Barton P. Miller; et al. (IEEE Secur. Priv., 2022)

From Theory to Code: Identifying Logical Flaws in Cryptographic Implementations in C/C++. - Sazzadur Rahaman; Haipeng Cai; Omar Chowdhury; Danfeng Yao (IEEE Trans. Dependable Secur. Comput., 2022)

SpanL: Creating Algorithms for Automatic API Misuse Detection with Program Analysis Compositions. - Sazzadur Rahaman; Miles Frantz; Barton P. Miller; Danfeng (Daphne) Yao (ACNS Workshops, 2023)

The Queen's Guard: A Secure Enforcement of Fine-grained Access Control In Distributed Data Analytics Platforms. - Fahad Shaon; Sazzadur Rahaman; Murat Kantarcioglu (ACSAC, 2023)

SoK: A Tale of Reduction, Security, and Correctness - Evaluating Program Debloating Paradigms and Their Compositions. - Muaz Ali; Muhammad Muzammil; M. Faraz Karim; Ayesha Naeem; Rukhshan Haroon; Muhammad Haris; Huzaifah Nadeem; Waseem Sabir; Fahad Shaon; Fareed Zaffar; Vinod Yegneswaran; Ashish Gehani; et al. (ESORICS (4), 2023)

BLADE: Towards Scalable Source Code Debloating. - Muaz Ali; Rumaisa Habib; Ashish Gehani; Sazzadur Rahaman; Zartash Afzal Uzmi (SecDev, 2023)

Evaluating Container Debloaters. - Muhammad Hassan 005; Talha Tahir; Muhammad Farrukh; Abdullah Naveed; Anas Naeem; Fareed Zaffar; Fahad Shaon; Ashish Gehani; Sazzadur Rahaman (SecDev, 2023)

Bilingual Problems: Studying the Security Risks Incurred by Native Extensions in Scripting Languages. - Cristian-Alexandru Staicu; Sazzadur Rahaman; Ágnes Kiss; Michael Backes 001 (USENIX Security Symposium, 2023)

A Unified Taxonomy and Evaluation of IoT Security Guidelines. - Jesse Chen; Dharun Anandayuvaraj; James C. Davis 001; Sazzadur Rahaman (CoRR, 2023)

Evaluation of Static Vulnerability Detection Tools With Java Cryptographic API Benchmarks. - Sharmin Afrose; Ya Xiao 002; Sazzadur Rahaman; Barton P. Miller; Danfeng Yao (IEEE Trans. Software Eng., 2023)

Trust, Because You Can't Verify: Privacy and Security Hurdles in Education Technology Acquisition Practices. - Easton Kelso; Ananta Soneji; Sazzadur Rahaman; Yan Shoshitaishvili; Rakibul Hasan 001 (CCS, 2024)

Impeding LLM-assisted Cheating in Introductory Programming Assignments via Adversarial Perturbation. - Saiful Islam Salim; Rubin Yuchan Yang; Alexander Cooper; Suryashree Ray; Saumya Debray; Sazzadur Rahaman (EMNLP, 2024)

Trust, Because You Can't Verify:Privacy and Security Hurdles in Education Technology Acquisition Practices. - Easton Kelso; Ananta Soneji; Sazzadur Rahaman; Yan Shoshitaishvili; Rakibul Hasan 001 (CoRR, 2024)

An Investigation into Protestware. - Tanner Finken; Jesse Chen; Sazzadur Rahaman (CoRR, 2024)

On the Contents and Utility of IoT Cybersecurity Guidelines. - Jesse Chen; Dharun Anandayuvaraj; James C. Davis 001; Sazzadur Rahaman (Proc. ACM Softw. Eng., 2024)

Investigating the Security & Privacy Risks from Unsanctioned Technology Use by Educators. - Easton Kelso; Ananta Soneji; Syed Zami-Ul-Haque Navid; Yan Shoshitaishvili; Sazzadur Rahaman; Rakibul Hasan 001 (CHI Extended Abstracts, 2025)

On the Characteristics and Impacts of Protestware Libraries. - Tanner Finken; Jesse Chen; Sazzadur Rahaman (Proc. ACM Softw. Eng., 2025)

Does Coding Style Really Survive Compilation? Stylometry of Executable Code Revisited. - Muaz Ali; Tugay Bilgis; Nimet Beyza Bozdag; Saumya Debray; Sazzadur Rahaman (Proc. Priv. Enhancing Technol., 2025)

"It's not approved, but many, like myself, ignore the rule": Investigating the Landscape and Consequences of Unsanctioned Technology Use in Educational Institutes. - Easton Kelso; Ananta Soneji; Syed Zami-Ul-Haque Navid; Yan Soshitaishvili; Sazzadur Rahaman; Rakibul Hasan 001 (CoRR, 2025)