Citizen Electronic Identities using TPM 2.0. - Thomas Nyman; Jan-Erik Ekberg; N. Asokan (TrustED@CCS, 2014)

Security of OS-Level Virtualization Technologies. - Elena Reshetova; Janne Karhunen; Thomas Nyman; N. Asokan (NordSec, 2014)

Security of OS-level virtualization technologies: Technical report. - Elena Reshetova; Janne Karhunen; Thomas Nyman; N. Asokan (CoRR, 2014)

On Making Emerging Trusted Execution Environments Accessible to Developers. - Thomas Nyman; Brian McGillion; N. Asokan (TRUST, 2015)

Open-TEE - An Open Virtual Trusted Execution Environment. - Brian McGillion; Tanel Dettenborn; Thomas Nyman; N. Asokan (TrustCom/BigDataSE/ISPA (1), 2015)

C-FLAT: Control-Flow Attestation for Embedded Systems Software. - Tigist Abera; N. Asokan; Lucas Davi; Jan-Erik Ekberg; Thomas Nyman; Andrew Paverd; Ahmad-Reza Sadeghi; Gene Tsudik (CCS, 2016)

Characterizing SEAndroid Policies in the Wild. - Elena Reshetova; Filippo Bonazzi; Thomas Nyman; Ravishankar Borgaonkar; N. Asokan (ICISSP, 2016)

LO-FAT: Low-Overhead Control Flow ATtestation in Hardware. - Ghada Dessouky; Shaza Zeitouni; Thomas Nyman; Andrew Paverd; Lucas Davi; Patrick Koeberl; N. Asokan; Ahmad-Reza Sadeghi (DAC, 2017)

CFI CaRE: Hardware-Supported Call and Return Enforcement for Commercial Microcontrollers. - Thomas Nyman; Jan-Erik Ekberg; Lucas Davi; N. Asokan (RAID, 2017)

HardScope: Thwarting DOP with Hardware-assisted Run-time Scope Enforcement. - Thomas Nyman; Ghada Dessouky; Shaza Zeitouni; Aaro Lehikoinen; Andrew Paverd; N. Asokan; Ahmad-Reza Sadeghi (CoRR, 2017)

ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices. - N. Asokan; Thomas Nyman; Norrathep Rattanavipanon; Ahmad-Reza Sadeghi; Gene Tsudik (IEEE Trans. Comput. Aided Des. Integr. Circuits Syst., 2018)

Authenticated Call Stack. - Hans Liljestrand; Thomas Nyman; Jan-Erik Ekberg; N. Asokan (DAC, 2019)

HardScope: Hardening Embedded Systems Against Data-Oriented Attacks. - Thomas Nyman; Ghada Dessouky; Shaza Zeitouni; Aaro Lehikoinen; Andrew Paverd; N. Asokan; Ahmad-Reza Sadeghi (DAC, 2019)

Exploitation Techniques and Defenses for Data-Oriented Attacks. - Long Cheng 005; Hans Liljestrand; Md. Salman Ahmed 001; Thomas Nyman; Trent Jaeger; N. Asokan; Danfeng Yao (SecDev, 2019)

Protecting the stack with PACed canaries. - Hans Liljestrand; Zaheer Gauhar; Thomas Nyman; Jan-Erik Ekberg; N. Asokan (SysTEX@SOSP, 2019)

PAC it up: Towards Pointer Integrity using ARM Pointer Authentication. - Hans Liljestrand; Thomas Nyman; Kui Wang; Carlos Chinea Perez; Jan-Erik Ekberg; N. Asokan (USENIX Security Symposium, 2019)

Exploitation Techniques and Defenses for Data-Oriented Attacks. - Long Cheng 005; Hans Liljestrand; Thomas Nyman; Yu Tsung Lee; Danfeng Yao; Trent Jaeger; N. Asokan (CoRR, 2019)

Toward Hardware-assisted Run-time Protection. - Thomas Nyman (2020)

PACStack: an Authenticated Call Stack. - Hans Liljestrand; Thomas Nyman; Lachlan J. Gunn; Jan-Erik Ekberg; N. Asokan (USENIX Security Symposium, 2021)

Exploitation Techniques for Data-oriented Attacks with Existing and Potential Defense Approaches. - Long Cheng 005; Salman Ahmed 001; Hans Liljestrand; Thomas Nyman; Haipeng Cai; Trent Jaeger; N. Asokan; Danfeng (Daphne) Yao (ACM Trans. Priv. Secur., 2021)

Unlimited Lives: Secure In-Process Rollback with Isolated Domains. - Merve Turhan; Thomas Nyman; Christoph Baumann; Jan Tobias Mühlberg (CoRR, 2022)

Hardware Platform Security for Mobile Devices. - Lachlan J. Gunn; N. Asokan; Jan-Erik Ekberg; Hans Liljestrand; Vijayanand Nayani; Thomas Nyman (Found. Trends Priv. Secur., 2022)

Rewind & Discard: Improving Software Resilience using Isolated Domains. - Merve Gülmez; Thomas Nyman; Christoph Baumann; Jan Tobias Mühlberg (DSN, 2023)

Exploring the Environmental Benefits of In-Process Isolation for Software Resilience. - Merve Gülmez; Thomas Nyman; Christoph Baumann; Jan Tobias Mühlberg (DSN-S, 2023)

Friend or Foe Inside? Exploring In-Process Isolation to Maintain Memory Safety for Unsafe Rust. - Merve Gülmez; Thomas Nyman; Christoph Baumann; Jan Tobias Mühlberg (SecDev, 2023)

Mon CHÈRI <3 Adapting Capability Hardware Enhanced RISC with Conditional Capabilities. - Merve Gülmez; Håkan Englund; Jan Tobias Mühlberg; Thomas Nyman (CoRR, 2024)

Do We Still Need Canaries in the Coal Mine? Measuring Shadow Stack Effectiveness in Countering Stack Smashing. - Hugo Depuydt; Merve Gülmez; Thomas Nyman; Jan Tobias Mühlberg (ARES (2), 2025)

Mon CHERI: Mitigating Uninitialized Memory Access with Conditional Capabilities. - Merve Gülmez; Håkan Englund; Jan Tobias Mühlberg; Thomas Nyman (SP, 2025)

BLACKOUT: Data-Oblivious Computation with Blinded Capabilities. - Hossam ElAtali; Merve Gülmez; Thomas Nyman; N. Asokan (CoRR, 2025)