An Abstract Interpretation Framework for Analysing Mobile Ambients. - Francesca Levi; Sergio Maffeis (SAS, 2001)

On the Expressive Power of Polyadic Synchronisation in pi-calculus. - Marco Carbone; Sergio Maffeis (Nord. J. Comput., 2003)

Sequence Types for the pi-calculus. - Sergio Maffeis (ITRS, 2004)

On abstract interpretation of Mobile Ambients. - Francesca Levi; Sergio Maffeis (Inf. Comput., 2004)

Process Calculi and Peer-to-peer Web Data Integration. - Sergio Maffeis (APC 25, 2005)

Modelling dynamic web data. - Philippa Gardner; Sergio Maffeis (Theor. Comput. Sci., 2005)

On the computational strength of pure ambient calculi. - Sergio Maffeis; Iain Phillips 001 (Theor. Comput. Sci., 2005)

Dynamic Web data : a process algebraic approach. - Sergio Maffeis (2006)

A Type Discipline for Authorization in Distributed Systems. - Cédric Fournet; Andy Gordon 001; Sergio Maffeis (CSF, 2007)

Dynamic Web Data and Process Calculi. - Sergio Maffeis (Bull. EATCS, 2007)

Matching Systems for Concurrent Calculi. - Bjørn Haagensen; Sergio Maffeis; Iain Phillips 001 (EXPRESS, 2007)

A type discipline for authorization policies. - Cédric Fournet; Andrew D. Gordon 001; Sergio Maffeis (ACM Trans. Program. Lang. Syst., 2007)

An Operational Semantics for JavaScript. - Sergio Maffeis; John C. Mitchell; Ankur Taly (APLAS, 2008)

Code-Carrying Authorization. - Sergio Maffeis; Martín Abadi; Cédric Fournet; Andrew D. Gordon 001 (ESORICS, 2008)

Behavioural equivalences for dynamic Web data. - Sergio Maffeis; Philippa Gardner (J. Log. Algebraic Methods Program., 2008)

Language-Based Isolation of Untrusted JavaScript. - Sergio Maffeis; Ankur Taly (CSF, 2009)

Isolating JavaScript with Filters, Rewriting, and Wrappers. - Sergio Maffeis; John C. Mitchell; Ankur Taly (ESORICS, 2009)

Object Capabilities and Isolation of Untrusted Web Applications. - Sergio Maffeis; John C. Mitchell; Ankur Taly (IEEE Symposium on Security and Privacy, 2010)

Refinement types for secure implementations. - Jesper Bengtson; Karthikeyan Bhargavan; Cédric Fournet; Andrew D. Gordon 001; Sergio Maffeis (ACM Trans. Program. Lang. Syst., 2011)

Discovering Concrete Attacks on Website Authorization by Formal Analysis. - Chetan Bansal; Karthikeyan Bhargavan; Sergio Maffeis (CSF, 2012)

Towards a program logic for JavaScript. - Philippa Gardner; Sergio Maffeis; Gareth David Smith (POPL, 2012)

Defensive JavaScript - Building and Verifying Secure Web Components. - Karthikeyan Bhargavan; Antoine Delignat-Lavaud; Sergio Maffeis (FOSAD, 2013)

Keys to the Cloud: Formal Analysis and Concrete Attacks on Encrypted Web Storage. - Chetan Bansal; Karthikeyan Bhargavan; Antoine Delignat-Lavaud; Sergio Maffeis (POST, 2013)

Language-based Defenses Against Untrusted Browser Origins. - Karthikeyan Bhargavan; Antoine Delignat-Lavaud; Sergio Maffeis (USENIX Security Symposium, 2013)

An Executable Formal Semantics of PHP. - Daniele Filaretti; Sergio Maffeis (ECOOP, 2014)

A trusted mechanised JavaScript specification. - Martin Bodin; Arthur Charguéraud; Daniele Filaretti; Philippa Gardner; Sergio Maffeis; Daiva Naudziuniene; Alan Schmitt; Gareth Smith (POPL, 2014)

Discovering concrete attacks on website authorization by formal analysis. - Chetan Bansal; Karthikeyan Bhargavan; Antoine Delignat-Lavaud; Sergio Maffeis (J. Comput. Secur., 2014)

BrowserAudit: automated testing of browser security features. - Charlie Hothersall-Thomas; Sergio Maffeis; Chris Novakovic (ISSTA, 2015)

Abstract Domains for Type Juggling. - Vincenzo Arceri; Sergio Maffeis (NSAD@SAS, 2016)

CPS-MT: A Real-Time Cyber-Physical System Monitoring Tool for Security Research. - Martín Barrère; Chris Hankin; Angelo Barboni; Giulio Zizzo; Francesca Boem; Sergio Maffeis; Thomas Parisini (RTCSA, 2018)

Adversarial Machine Learning Beyond the Image Domain. - Giulio Zizzo; Chris Hankin; Sergio Maffeis; Kevin Jones (DAC, 2019)

Deep Latent Defence. - Giulio Zizzo; Chris Hankin; Sergio Maffeis; Kevin Jones (CoRR, 2019)

Intrusion Detection for Industrial Control Systems: Evaluation Analysis and Adversarial Attacks. - Giulio Zizzo; Chris Hankin; Sergio Maffeis; Kevin Jones (CoRR, 2019)

Adversarial Attacks on Time-Series Intrusion Detection for Industrial Control Systems. - Giulio Zizzo; Chris Hankin; Sergio Maffeis; Kevin Jones (TrustCom, 2020)

Hawk-Eye: holistic detection of APT command and control domains. - Almuthanna Alageel; Sergio Maffeis (SAC, 2021)

DeepTective: detection of PHP vulnerabilities using hybrid graph neural networks. - Rishi Rabheru; Hazim Hanif; Sergio Maffeis (SAC, 2021)

Certified Federated Adversarial Training. - Giulio Zizzo; Ambrish Rawat; Mathieu Sinn; Sergio Maffeis; Chris Hankin (CoRR, 2021)

A Hybrid Graph Neural Network Approach for Detecting PHP Vulnerabilities. - Rishi Rabheru; Hazim Hanif; Sergio Maffeis (DSC, 2022)

VulBERTa: Simplified Source Code Pre-Training for Vulnerability Detection. - Hazim Hanif; Sergio Maffeis (IJCNN, 2022)

EarlyCrow: Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries. - Almuthanna Alageel; Sergio Maffeis (ISC, 2022)

Haxss: Hierarchical Reinforcement Learning for XSS Payload Generation. - Myles Foley; Sergio Maffeis (TrustCom, 2022)

Adaptive Experimental Design for Intrusion Data Collection. - Kate Highnam; Zach Hanif; Ellie Van Vogt; Sonali Parbhoo; Sergio Maffeis; Nicholas R. Jennings (CAMLIS, 2023)

SQIRL: Grey-Box Detection of SQL Injection Vulnerabilities Using Reinforcement Learning. - Salim Al Wahaibi; Myles Foley; Sergio Maffeis (USENIX Security Symposium, 2023)

Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience. - Janvi Thakkar; Giulio Zizzo; Sergio Maffeis (CoRR, 2023)

Mateen: Adaptive Ensemble Learning for Network Anomaly Detection. - Fahad M. Alotaibi; Sergio Maffeis (RAID, 2024)

Rasd: Semantic Shift Detection and Adaptation for Network Intrusion Detection. - Fahad M. Alotaibi; Sergio Maffeis (SEC, 2024)

Differentially Private and Adversarially Robust Machine Learning: An Empirical Evaluation. - Janvi Thakkar; Giulio Zizzo; Sergio Maffeis (CoRR, 2024)

HarmLevelBench: Evaluating Harm-Level Compliance and the Impact of Quantization on Model Alignment. - Yannis Belkhiter; Giulio Zizzo; Sergio Maffeis (CoRR, 2024)

Helping LLMs Improve Code Generation Using Feedback from Testing and Static Analysis. - Greta Dolcetti; Vincenzo Arceri; Eleonora Iotti; Sergio Maffeis; Agostino Cortesi; Enea Zaffanella (CoRR, 2024)

APIRL: Deep Reinforcement Learning for REST API Fuzzing. - Myles Foley; Sergio Maffeis (AAAI, 2025)

Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries. - Almuthanna Alageel; Sergio Maffeis; Imperial College London (CoRR, 2025)

Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures. - Almuthanna Alageel; Sergio Maffeis; Imperial College London (CoRR, 2025)

KnowML: Improving Generalization of ML-NIDS with Attack Knowledge Graphs. - Xin Fan Guo; Albert Meroño-Peñuela; Sergio Maffeis; Fabio Pierazzi (CoRR, 2025)