Fix that Fix Commit: A real-world remediation analysis of JavaScript projects. - Vinuri Bandara; Thisura Rathnayake; Nipuna Weerasekara; Charitha Elvitigala; Kenneth Thilakarathna; Primal Wijesekera; Chamath Keppitiyagama (SCAM, 2020)

Demo: Large Scale Analysis on Vulnerability Remediation in Open-source JavaScript Projects. - Vinuri Bandara; Thisura Rathnayake; Nipuna Weerasekara; Charitha Elvitigala; Kenneth Thilakarathna; Primal Wijesekera; Kasun De Zoysa; Chamath Keppitiyagama (CCS, 2021)

Mules and Permission Laundering in Android: Dissecting Custom Permissions in the Wild. - Julien Gamba; Álvaro Feal; Eduardo Blázquez; Vinuri Bandara; Abbas Razaghpanah; Juan Tapiador; Narseo Vallina-Rodriguez (IEEE Trans. Dependable Secur. Comput., 2024)

Beneath the Surface: An Analysis of OEM Customizations on the Android TLS Protocol Stack. - Vinuri Bandara; Stijn Pletinckx; Ilya Grishchenko; Christopher Kruegel; Giovanni Vigna; Juan Tapiador; Narseo Vallina-Rodriguez (EuroS&P, 2025)