Talking About My Generation: Targeted DOM-based XSS Exploit Generation using Dynamic Data Flow Analysis. - Souphiane Bensalim; David Klein 001; Thomas Barber; Martin Johns (EuroSec@EuroSys, 2021)

Accept All Exploits: Exploring the Security Impact of Cookie Banners. - David Klein 001; Marius Musch; Thomas Barber; Moritz Kopmann; Martin Johns (ACSAC, 2022)

Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions. - David Klein 001; Thomas Barber; Souphiane Bensalim; Ben Stock; Martin Johns (EuroS&P, 2022)

General Data Protection Runtime: Enforcing Transparent GDPR Compliance for Existing Applications. - David Klein 001; Benny Rolle; Thomas Barber; Manuel Karl; Martin Johns (CCS, 2023)

Load-and-Act: Increasing Page Coverage of Web Applications. - Nico Weidmann; Thomas Barber; Christian Wressnegger (ISC, 2023)

The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web. - Soheil Khodayari; Thomas Barber; Giancarlo Pellegrino (SP, 2024)

FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Entropy-based Thresholds. - Soumaya Boussaha; Lukas Hock; Miguel Bermejo; Rubén Cuevas Rumín; Ángel Cuevas Rumín; David Klein 001; Martin Johns; Luca Compagna; Daniele Antonioli; Thomas Barber (Proc. Priv. Enhancing Technol., 2024)