Two novel server-side attacks against log file in Shared Web Hosting servers. - Seyed Ali Mirheidari; Sajjad Arshad; Saeidreza Khoshkdahan; Rasool Jalili (ICITST, 2012)

Performance Evaluation of Shared Hosting Security Methods. - Seyed Ali Mirheidari; Sajjad Arshad; Saeidreza Khoshkdahan (TrustCom, 2012)

Alert Correlation Algorithms: A Survey and Taxonomy. - Seyed Ali Mirheidari; Sajjad Arshad; Rasool Jalili (CSS, 2013)

A Comprehensive Approach to Abusing Locality in Shared Web Hosting Servers. - Seyed Ali Mirheidari; Sajjad Arshad; Saeidreza Khoshkdahan; Rasool Jalili (TrustCom/ISPA/IUCC, 2013)

Large-Scale Analysis of Style Injection by Relative Path Overwrite. - Sajjad Arshad; Seyed Ali Mirheidari; Tobias Lauinger; Bruno Crispo; Engin Kirda; William K. Robertson (WWW, 2018)

Cached and Confused: Web Cache Deception in the Wild. - Seyed Ali Mirheidari; Sajjad Arshad; Kaan Onarlioglu; Bruno Crispo; Engin Kirda; William Robertson 002 (USENIX Security Symposium, 2020)

The Full Gamut of an Attack: An Empirical Analysis of OAuth CSRF in the Wild. - Michele Benolli; Seyed Ali Mirheidari; Elham Arshad; Bruno Crispo (DIMVA, 2021)

You've Got (a Reset) Mail: A Security Analysis of Email-Based Password Reset Procedures. - Tommaso Innocenti; Seyed Ali Mirheidari; Amin Kharraz; Bruno Crispo; Engin Kirda (DIMVA, 2021)

Generative adversarial networks for subdomain enumeration. - Luca Degani; Francesco Bergadano; Seyed Ali Mirheidari; Fabio Martinelli; Bruno Crispo (SAC, 2022)

Web Cache Deception Escalates! - Seyed Ali Mirheidari; Matteo Golinelli; Kaan Onarlioglu; Engin Kirda; Bruno Crispo (USENIX Security Symposium, 2022)

OAuth 2.0 Redirect URI Validation Falls Short, Literally. - Tommaso Innocenti; Matteo Golinelli; Kaan Onarlioglu; Seyed Ali Mirheidari; Bruno Crispo; Engin Kirda (ACSAC, 2023)