A Distributed Pi-Calculus with Local Areas of Communication. - Tom Chothia; Ian Stark (HLCL, 2000)

Encoding Distributed Areas and Local Communication into the pi-Calculus. - Tom Chothia; Ian Stark (EXPRESS, 2001)

Type-Based Distributed Access Control. - Tom Chothia; Dominic Duggan; Jan Vitek (CSFW, 2003)

Abstractions for fault-tolerant global computing. - Tom Chothia; Dominic Duggan (Theor. Comput. Sci., 2004)

A Survey of Anonymous Peer-to-Peer File-Sharing. - Tom Chothia; Konstantinos Chatzikokolakis 001 (EUC Workshops, 2005)

Type-Based Distributed Access Control vs. Untyped Attackers. - Tom Chothia; Dominic Duggan (Formal Aspects in Security and Trust, 2005)

Metrics for Action-labelled Quantitative Transition Systems. - Yuxin Deng; Tom Chothia; Catuscia Palamidessi; Jun Pang 001 (QAPL, 2005)

Analysing the MUTE Anonymous File-Sharing System Using the Pi-Calculus. - Tom Chothia (FORTE, 2006)

A Framework for Automatically Checking Anonymity with mu CRL. - Tom Chothia; Simona Orzan; Jun Pang 001; Muhammad Torabi Dashti (TGC, 2006)

An End-To-End Approach to Distributed Policy Language Implementation: (Extended Abstract). - Tom Chothia; Dominic Duggan; Ye Wu 006 (SecReT@ICALP, 2006)

Q-Automata: Modelling the Resource Usage of Concurrent Components. - Tom Chothia; Jetty Kleijn (FOCLASA, 2006)

Component Connectors with QoS Guarantees. - Farhad Arbab; Tom Chothia; Sun Meng; Young-Joo Moon 001 (COORDINATION, 2007)

Securing pseudo identities in an anonymous peer-to-peer file-sharing network. - Tom Chothia (SecureComm, 2007)

Keeping Secrets in Resource Aware Components. - Tom Chothia; Jun Pang 001; Muhammad Torabi Dashti (QAPL, 2007)

Capability passing processes. - Tom Chothia; Dominic Duggan (Sci. Comput. Program., 2007)

Schedulability and Compatibility of Real Time Asynchronous Objects. - Mohammad Mahdi Jaghoori; Delphine Longuet; Frank S. de Boer; Tom Chothia (RTSS, 2008)

From Coordination to Stochastic Models of QoS. - Farhad Arbab; Tom Chothia; Rob van der Mei; Sun Meng; Young-Joo Moon 001; Chrétien Verhoef (COORDINATION, 2009)

Modular Schedulability Analysis of Concurrent Objects in Creol. - Frank S. de Boer; Tom Chothia; Mohammad Mahdi Jaghoori (FSEN, 2009)

Untraceability in the applied pi-calculus. - Myrto Arapinis; Tom Chothia; Eike Ritter; Mark Ryan 001 (ICITST, 2009)

A Trusted Infrastructure for P2P-based Marketplaces. - Tien Tuan Anh Dinh; Tom Chothia; Mark Ryan 001 (Peer-to-Peer Computing, 2009)

Schedulability of asynchronous real-time concurrent objects. - Mohammad Mahdi Jaghoori; Frank S. de Boer; Tom Chothia; Marjan Sirjani (J. Log. Algebraic Methods Program., 2009)

Analysing Unlinkability and Anonymity Using the Applied Pi Calculus. - Myrto Arapinis; Tom Chothia; Eike Ritter; Mark Ryan 001 (CSF, 2010)

A Traceability Attack against e-Passports. - Tom Chothia; Vitaliy Smirnov (Financial Cryptography, 2010)

Statistical Measurement of Information Leakage. - Konstantinos Chatzikokolakis 001; Tom Chothia; Apratim Guha (TACAS, 2010)

Timed Automata Semantics for Analyzing Creol - Mohammad Mahdi Jaghoori; Tom Chothia (FOCLASA, 2010)

A Statistical Test for Information Leaks Using Continuous Mutual Information. - Tom Chothia; Apratim Guha (CSF, 2011)

SCAIL: An integrated Starcraft AI system. - Jay Young; Fran Smith; Christopher Atkinson; Ken Poyner; Tom Chothia (CIG, 2012)

The Unbearable Lightness of Monitoring: Direct Monitoring in BitTorrent. - Tom Chothia; Marco Cova; Chris Novakovic; Camilo González Toro (SecureComm, 2012)

A Tool for Estimating Information Leakage. - Tom Chothia; Yusuke Kawamoto 001; Chris Novakovic (CAV, 2013)

Probabilistic Point-to-Point Information Leakage. - Tom Chothia; Yusuke Kawamoto 001; Chris Novakovic; David Parker 001 (CSF, 2013)

LeakWatch: Estimating Information Leakage from Java Programs. - Tom Chothia; Yusuke Kawamoto 001; Chris Novakovic (ESORICS (2), 2014)

Automatically Calculating Quantitative Integrity Measures for Imperative Programs. - Tom Chothia; Chris Novakovic; Rajiv Ranjan Singh (DPM/SETOP/QASA, 2014)

Relay Cost Bounding for Contactless EMV Payments. - Tom Chothia; Flavio D. Garcia; Joeri de Ruiter; Jordi van den Breekel; Matthew Thompson (Financial Cryptography, 2015)

Automatically Checking Commitment Protocols in ProVerif without False Attacks. - Tom Chothia; Ben Smyth; Christopher Staite (POST, 2015)

Analysis of Mobility Algorithms for Forensic Virtual Machine Based Malware Detection. - Nada Alruhaily; Behzad Bordbar; Tom Chothia (TrustCom/BigDataSE/ISPA (1), 2015)

Calculating Quantitative Integrity and Secrecy for Imperative Programs. - Tom Chothia; Chris Novakovic; Rajiv Ranjan Singh (Int. J. Secur. Softw. Eng., 2015)

Thwarting Market Specific Attacks in Cloud. - Giannis Tziakouris; Rami Bahsoon; Tom Chothia; Rajkumar Buyya (CLOUD, 2016)

On the (in)security of the latest generation implantable cardiac defibrillators and how to secure them. - Eduard Marin; Dave Singelée; Flavio D. Garcia; Tom Chothia; Rik Willems; Bart Preneel (ACSAC, 2016)

Asset-centric Security-Aware Service Selection. - Giannis Tziakouris; Marios Zinonos; Tom Chothia; Rami Bahsoon (BigData Congress, 2016)

A Formal Security Analysis of ERTMS Train to Trackside Protocols. - Joeri de Ruiter; Richard James Thomas; Tom Chothia (RSSRail, 2016)

Learning From Others' Mistakes: Penetration Testing IoT Devices in the Classroom. - Tom Chothia; Joeri de Ruiter (ASE @ USENIX Security Symposium, 2016)

Spinner: Semi-Automatic Detection of Pinning without Hostname Verification. - Chris McMahon Stone; Tom Chothia; Flavio D. Garcia (ACSAC, 2017)

TRAKS: A Universal Key Management Scheme for ERTMS. - Richard James Thomas; Mihai Ordean; Tom Chothia; Joeri de Ruiter (ACSAC, 2017)

An Attack Against Message Authentication in the ERTMS Train to Trackside Communication Protocols. - Tom Chothia; Mihai Ordean; Joeri de Ruiter; Richard James Thomas (AsiaCCS, 2017)

Types for Location and Data Security in Cloud Environments. - Ivan Gazeau; Tom Chothia; Dominic Duggan (CSF, 2017)

HumIDIFy: A Tool for Hidden Functionality Detection in Firmware. - Sam L. Thomas; Flavio D. Garcia; Tom Chothia (DIMVA, 2017)

Stringer: Measuring the Importance of Static Data Comparisons to Detect Backdoors and Undocumented Functionality. - Sam L. Thomas; Tom Chothia; Flavio D. Garcia (ESORICS (2), 2017)

Why Banker Bob (Still) Can't Get TLS Right: A Security Analysis of TLS in Leading UK Banking Apps. - Tom Chothia; Flavio D. Garcia; Chris Heppel; Chris McMahon Stone (Financial Cryptography, 2017)

Towards an Understanding of the Misclassification Rates of Machine Learning-based Malware Detection Systems. - Nada Alruhaily; Behzad Bordbar; Tom Chothia (ICISSP, 2017)

A Better Understanding of Machine Learning Malware Misclassifcation. - Nada Alruhaily; Tom Chothia; Behzad Bordbar (ICISSP (Revised Selected Papers), 2017)

A Market-Based Approach for Detecting Malware in the Cloud via Introspection. - Nada Alruhaily; Carlos Joseph Mera-Gómez; Tom Chothia; Rami Bahsoon (ICSOC, 2017)

Jail, Hero or Drug Lord? Turning a Cyber Security Course Into an 11 Week Choose Your Own Adventure Story. - Tom Chothia; Sam Holdcroft; Andreea-Ina Radu; Richard James Thomas (ASE @ USENIX Security Symposium, 2017)

Compositional schedulability analysis of real-time actor-based systems. - Mohammad Mahdi Jaghoori; Frank S. de Boer; Delphine Longuet; Tom Chothia; Marjan Sirjani (Acta Informatica, 2017)

Breaking All the Things - A Systematic Survey of Firmware Extraction Techniques for IoT Devices. - Sebastian Vasile; David F. Oswald; Tom Chothia (CARDIS, 2018)

Extending Automated Protocol State Learning for the 802.11 4-Way Handshake. - Chris McMahon Stone; Tom Chothia; Joeri de Ruiter (ESORICS (1), 2018)

Phishing Attacks: Learning by Doing. - Tom Chothia; Stefan-Ioan Paiu; Michael Oultram (ASE @ USENIX Security Symposium, 2018)

Modelling and Analysis of a Hierarchy of Distance Bounding Attacks. - Tom Chothia; Joeri de Ruiter; Ben Smyth (USENIX Security Symposium, 2018)

Time Protection: The Missing OS Abstraction. - Qian Ge 001; Yuval Yarom; Tom Chothia; Gernot Heiser (EuroSys, 2019)

Short Paper: Making Contactless EMV Robust Against Rogue Readers Colluding with Relay Attackers. - Tom Chothia; Ioana Boureanu; Liqun Chen 002 (Financial Cryptography, 2019)

Choose Your Pwn Adventure: Adding Competition and Storytelling to an Introductory Cybersecurity Course. - Tom Chothia; Chris Novakovic; Andreea-Ina Radu; Richard James Thomas (Trans. Edutainment, 2019)

Security Analysis and Implementation of Relay-Resistant Contactless Payments. - Ioana Boureanu; Tom Chothia; Alexandre Debant; Stéphanie Delaune (CCS, 2020)

Catch Me If You Can: An In-Depth Study of CVE Discovery Time and Inconsistencies for Managing Risks in Critical Infrastructures. - Richard James Thomas; Joseph Gardiner; Tom Chothia; Emmanouil Samanis; Joshua Perrett; Awais Rashid (CPSIOTSEC@CCS, 2020)

Learning from Vulnerabilities - Categorising, Understanding and Detecting Weaknesses in Industrial Control Systems. - Richard James Thomas; Tom Chothia (CyberICPS/SECPRE/ADIoT@ESORICS, 2020)

Modelling of 802.11 4-Way Handshake Attacks and Analysis of Security Properties. - Rajiv Ranjan Singh; José Moreira; Tom Chothia; Mark Dermot Ryan (STM, 2020)

The Closer You Look, The More You Learn: A Grey-box Approach to Protocol State Machine Learning. - Chris McMahon Stone; Sam L. Thomas; Mathy Vanhoef; James Henderson; Nicolas Bailluet; Tom Chothia (CCS, 2022)

Practical EMV Relay Protection. - Andreea-Ina Radu; Tom Chothia; Christopher J. P. Newton; Ioana Boureanu; Liqun Chen 002 (SP, 2022)

Symbolic modelling of remote attestation protocols for device and app integrity on Android. - Abdulla Aldoseri; Tom Chothia; José Moreira; David F. Oswald (AsiaCCS, 2023)

Anti-Cheat: Attacks and the Effectiveness of Client-Side Defences. - Sam Collins; Alex Poulopoulos; Marius Muench; Tom Chothia (Checkmate@CCS, 2024)