Decentralized Control: A Case Study of Russia. - Reethika Ramesh; Ram Sundara Raman; Matthew Bernhard; Victor Ongkowijaya; Leonid Evdokimov; Anne Edmundson; Steven Sprecher; Muhammad Ikram 001; Roya Ensafi (NDSS, 2020)

T-Reqs: HTTP Request Smuggling with Differential Fuzzing. - Bahruz Jabiyev; Steven Sprecher; Kaan Onarlioglu; Engin Kirda (CCS, 2021)

SoK: All or Nothing - A Postmortem of Solutions to the Third-Party Script Inclusion Permission Model and a Path Forward. - Steven Sprecher; Christoph Kerschbaumer; Engin Kirda (EuroS&P, 2022)

FRAMESHIFTER: Security Implications of HTTP/2-to-HTTP/1 Conversion Anomalies. - Bahruz Jabiyev; Steven Sprecher; Anthony Gavazzi; Tommaso Innocenti; Kaan Onarlioglu; Engin Kirda (USENIX Security Symposium, 2022)