Can DREs Provide Long-Lasting Security? The Case of Return-Oriented Programming and the AVC Advantage. - Stephen Checkoway; Ariel J. Feldman; Brian Kantor; J. Alex Halderman; Edward W. Felten; Hovav Shacham (EVT/WOTE, 2009)

Return-oriented programming without returns. - Stephen Checkoway; Lucas Davi; Alexandra Dmitrienko; Ahmad-Reza Sadeghi; Hovav Shacham; Marcel Winandy (CCS, 2010)

Are Text-Only Data Formats Safe? Or, Use This LaTeX Class File to Pwn Your Computer. - Stephen Checkoway; Hovav Shacham; Eric Rescorla (LEET, 2010)

Experimental Security Analysis of a Modern Automobile. - Karl Koscher; Alexei Czeskis; Franziska Roesner; Shwetak N. Patel; Tadayoshi Kohno; Stephen Checkoway; Damon McCoy; Brian Kantor; Danny Anderson; Hovav Shacham; Stefan Savage (IEEE Symposium on Security and Privacy, 2010)

Single-Ballot Risk-Limiting Audits Using Convex Optimization. - Stephen Checkoway; Anand D. Sarwate (EVT/WOTE, 2010)

Don't Take LaTeX Files from Strangers. - Stephen Checkoway; Hovav Shacham; Eric Rescorla (login Usenix Mag., 2010)

Comprehensive Experimental Analyses of Automotive Attack Surfaces. - Stephen Checkoway; Damon McCoy; Brian Kantor; Danny Anderson; Hovav Shacham; Stefan Savage; Karl Koscher; Alexei Czeskis; Franziska Roesner; Tadayoshi Kohno (USENIX Security Symposium, 2011)

Putting Out a HIT: Crowdsourcing Malware Installs. - Chris Kanich; Stephen Checkoway; Keaton Mowery (WOOT, 2011)

The Phantom Tollbooth: Privacy-Preserving Electronic Toll Collection in the Presence of Driver Collusion. - Sarah Meiklejohn; Keaton Mowery; Stephen Checkoway; Hovav Shacham (USENIX Security Symposium, 2011)

Portably solving the access(2)/open(2) race. - Stephen Checkoway (Adv. Math. Commun., 2012)

Low-level software security : exploiting memory safety vulnerabilities and assumptions. - Stephen Checkoway (2012)

Iago attacks: why the system call API is a bad untrusted RPC interface. - Stephen Checkoway; Hovav Shacham (ASPLOS, 2013)

On The Security of Mobile Cockpit Information Systems. - Devin Lundberg; Brown Farinholt; Edward Sullivan; Ryan A. Mast; Stephen Checkoway; Stefan Savage; Alex C. Snoeren; Kirill Levchenko (CCS, 2014)

iSeeYou: Disabling the MacBook Webcam Indicator LED. - Matthew Brocker; Stephen Checkoway (USENIX Security Symposium, 2014)

On the Practical Exploitability of Dual EC in TLS Implementations. - Stephen Checkoway; Ruben Niederhagen; Adam Everspaugh; Matthew Green 001; Tanja Lange 001; Thomas Ristenpart; Daniel J. Bernstein; Jake Maskiewicz; Hovav Shacham; Matthew Fredrikson (USENIX Security Symposium, 2014)

Security Analysis of a Full-Body Scanner. - Keaton Mowery; Eric Wustrow; Tom Wypych; Corey Singleton; Chris Comfort; Eric Rescorla; J. Alex Halderman; Hovav Shacham; Stephen Checkoway (USENIX Security Symposium, 2014)

Enforcing Forward-Edge Control-Flow Integrity in GCC & LLVM. - Caroline Tice; Tom Roeder; Peter Collingbourne; Stephen Checkoway; Úlfar Erlingsson; Luis Lozano; Geoff Pike (USENIX Security Symposium, 2014)

Run-DMA. - Michael Rushanan; Stephen Checkoway (WOOT, 2015)

A Systematic Analysis of the Juniper Dual EC Incident. - Stephen Checkoway; Jacob Maskiewicz; Christina Garman; Joshua Fried; Shaanan Cohney; Matthew Green 001; Nadia Heninger; Ralf-Philipp Weinmann; Eric Rescorla; Hovav Shacham (CCS, 2016)

A Systematic Analysis of the Juniper Dual EC Incident. - Stephen Checkoway; Shaanan Cohney; Christina Garman; Matthew Green 001; Nadia Heninger; Jacob Maskiewicz; Eric Rescorla; Hovav Shacham; Ralf-Philipp Weinmann (IACR Cryptol. ePrint Arch., 2016)

Sentinel: Secure Mode Profiling and Enforcement for Embedded Systems. - Paul D. Martin 002; David Russell; Aviel D. Rubin; Stephen Checkoway; Malek Ben Salem 001 (IoTDI, 2018)

O Single Sign-Off, Where Art Thou? An Empirical Analysis of Single Sign-On Account Hijacking and Session Management on the Web. - Mohammad Ghasemisharif; Amrutha Ramesh; Stephen Checkoway; Chris Kanich; Jason Polakis (USENIX Security Symposium, 2018)

Where did I leave my keys?: lessons from the Juniper Dual EC incident. - Stephen Checkoway; Jacob Maskiewicz; Christina Garman; Joshua Fried; Shaanan Cohney; Matthew Green 001; Nadia Heninger; Ralf-Philipp Weinmann; Eric Rescorla; Hovav Shacham (Commun. ACM, 2018)

Triton: A Software-Reconfigurable Federated Avionics Testbed. - Sam Crow; Brown Farinholt; Brian Johannesmeyer; Karl Koscher; Stephen Checkoway; Stefan Savage; Aaron Schulman; Alex C. Snoeren; Kirill Levchenko (CSET @ USENIX Security Symposium, 2019)

Jetset: Targeted Firmware Rehosting for Embedded Systems. - Evan Johnson 001; Maxwell Bland; Yifei Zhu; Joshua Mason; Stephen Checkoway; Stefan Savage; Kirill Levchenko (USENIX Security Symposium, 2021)

Kollector: Detecting Fraudulent Activities on Mobile Devices Using Deep Learning. - Lichao Sun 001; Bokai Cao; Ji Wang 002; Witawas Srisa-an; Philip S. Yu; Alex D. Leow; Stephen Checkoway (IEEE Trans. Mob. Comput., 2021)

The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders. - Willy R. Vasquez; Stephen Checkoway; Hovav Shacham (USENIX Security Symposium, 2023)