Bayesian Event Classification for Intrusion Detection. - Christopher Krügel; Darren Mutz; William K. Robertson; Fredrik Valeur (ACSAC, 2003)

A Stateful Intrusion Detection System for World-Wide Web Servers. - Giovanni Vigna; William K. Robertson; Vishal Kher; Richard A. Kemmerer (ACSAC, 2003)

Run-time Detection of Heap-based Overflows. - William K. Robertson; Christopher Krügel; Darren Mutz; Fredrik Valeur (LISA, 2003)

Topology-Based Detection of Anomalous BGP Messages. - Christopher Krügel; Darren Mutz; William K. Robertson; Fredrik Valeur (RAID, 2003)

Detecting Kernel-Level Rootkits Through Binary Analysis. - Christopher Krügel; William K. Robertson; Giovanni Vigna (ACSAC, 2004)

Testing network-based intrusion detection signatures using mutant exploits. - Giovanni Vigna; William K. Robertson; Davide Balzarotti (CCS, 2004)

Alert Verification Determining the Success of Intrusion Attempts. - Christopher Krügel; William K. Robertson (DIMVA, 2004)

Static Disassembly of Obfuscated Binaries. - Christopher Krügel; William K. Robertson; Fredrik Valeur; Giovanni Vigna (USENIX Security Symposium, 2004)

Using Alert Verification to Identify Successful Intrusion Attempts. - Christopher Kruegel; William K. Robertson; Giovanni Vigna (Prax. Inf.verarb. Kommun., 2004)

Polymorphic Worm Detection Using Structural Information of Executables. - Christopher Krügel; Engin Kirda; Darren Mutz; William K. Robertson; Giovanni Vigna (RAID, 2005)

Automating Mimicry Attacks Using Static Binary Analysis. - Christopher Kruegel; Engin Kirda; Darren Mutz; William K. Robertson; Giovanni Vigna (USENIX Security Symposium, 2005)

A multi-model approach to the detection of web-based attacks. - Christopher Krügel; Giovanni Vigna; William K. Robertson (Comput. Networks, 2005)

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks. - William K. Robertson; Giovanni Vigna; Christopher Krügel; Richard A. Kemmerer (NDSS, 2006)

Improving Signature Testing through Dynamic Data Flow Analysis. - Christopher Kruegel; Davide Balzarotti; William K. Robertson; Giovanni Vigna (ACSAC, 2007)

Exploiting Execution Context for the Detection of Anomalous System Calls. - Darren Mutz; William K. Robertson; Giovanni Vigna; Richard A. Kemmerer (RAID, 2007)

Are your votes really counted?: testing the security of real-world electronic voting systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (ISSTA, 2008)

Protecting a Moving Target: Addressing Web Application Concept Drift. - Federico Maggi 001; William K. Robertson; Christopher Krügel; Giovanni Vigna (RAID, 2009)

Static Enforcement of Web Application Integrity Through Strong Typing. - William K. Robertson; Giovanni Vigna (USENIX Security Symposium, 2009)

Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries. - Giovanni Vigna; Fredrik Valeur; Davide Balzarotti; William K. Robertson; Christopher Kruegel; Engin Kirda (J. Comput. Secur., 2009)

Effective Anomaly Detection with Scarce Training Data. - William K. Robertson; Federico Maggi 001; Christopher Kruegel; Giovanni Vigna (NDSS, 2010)

An Experience in Testing the Security of Real-World Electronic Voting Systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (IEEE Trans. Software Eng., 2010)

Disclosure: detecting botnet command and control servers through large-scale NetFlow analysis. - Leyla Bilge; Davide Balzarotti; William K. Robertson; Engin Kirda; Christopher Kruegel (ACSAC, 2012)

TRESOR-HUNT: attacking CPU-bound encryption. - Erik-Oliver Blass; William Robertson 002 (ACSAC, 2012)

Preventing Input Validation Vulnerabilities in Web Applications through Automated Type Analysis. - Theodoor Scholte; William K. Robertson; Davide Balzarotti; Engin Kirda (COMPSAC, 2012)

An empirical analysis of input validation mechanisms in web applications and languages. - Theodoor Scholte; William K. Robertson; Davide Balzarotti; Engin Kirda (SAC, 2012)

PatchDroid: scalable third-party security patches for Android devices. - Collin Mulliner; Jon Oberheide; William K. Robertson; Engin Kirda (ACSAC, 2013)

Beehive: large-scale log analysis for detecting suspicious activity in enterprise networks. - Ting-Fang Yen; Alina Oprea; Kaan Onarlioglu; Todd Leetham; William K. Robertson; Ari Juels; Engin Kirda (ACSAC, 2013)

Securing Legacy Firefox Extensions with SENTINEL. - Kaan Onarlioglu; Mustafa Battal; William K. Robertson; Engin Kirda (DIMVA, 2013)

A Practical, Targeted, and Stealthy Attack Against WPA Enterprise Authentication. - Aldo Cassola; William K. Robertson; Engin Kirda; Guevara Noubir (NDSS, 2013)

Holiday Pictures or Blockbuster Movies? Insights into Copyright Infringement in User Uploads to One-Click File Hosters. - Tobias Lauinger; Kaan Onarlioglu; Chaabane Abdelberi; Engin Kirda; William K. Robertson; Mohamed Ali Kâafar (RAID, 2013)

PrivExec: Private Execution as an Operating System Service. - Kaan Onarlioglu; Collin Mulliner; William K. Robertson; Engin Kirda (IEEE Symposium on Security and Privacy, 2013)

TrueClick: automatically distinguishing trick banners from genuine download links. - Sevtap Duman; Kaan Onarlioglu; Ali Osman Ulusoy; William K. Robertson; Engin Kirda (ACSAC, 2014)

VirtualSwindle: an automated attack against in-app billing on android. - Collin Mulliner; William K. Robertson; Engin Kirda (AsiaCCS, 2014)

Optical Delusions: A Study of Malicious QR Codes in the Wild. - Amin Kharraz; Engin Kirda; William K. Robertson; Davide Balzarotti; Aurélien Francillon (DSN, 2014)

Why Is CSP Failing? Trends and Challenges in CSP Adoption. - Michael Weissbacher; Tobias Lauinger; William K. Robertson (RAID, 2014)

Hidden GEMs: Automated Discovery of Access Control Vulnerabilities in Graphical User Interfaces. - Collin Mulliner; William K. Robertson; Engin Kirda (IEEE Symposium on Security and Privacy, 2014)

On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. - Yanick Fratantonio; Antonio Bianchi; William K. Robertson; Manuel Egele; Christopher Kruegel; Engin Kirda; Giovanni Vigna (DIMVA, 2015)

Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks. - Amin Kharraz; William K. Robertson; Davide Balzarotti; Leyla Bilge; Engin Kirda (DIMVA, 2015)

BabelCrypt: The Universal Encryption Layer for Mobile Messaging Applications. - Ahmet Talha Ozcan; Can Gemicioglu; Kaan Onarlioglu; Michael Weissbacher; Collin Mulliner; William K. Robertson; Engin Kirda (Financial Cryptography, 2015)

ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities. - Michael Weissbacher; William K. Robertson; Engin Kirda; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2015)

SENTINEL: Securing Legacy Firefox Extensions. - Kaan Onarlioglu; Ahmet Salih Buyukkayhan; William K. Robertson; Engin Kirda (Comput. Secur., 2015)

EmailProfiler: Spearphishing Filtering with Header and Stylometric Features of Emails. - Sevtap Duman; Kubra Kalkan-Cakmakci; Manuel Egele; William K. Robertson; Engin Kirda (COMPSAC, 2016)

Overhaul: Input-Driven Access Control for Better Privacy on Traditional Operating Systems. - Kaan Onarlioglu; William Robertson 002; Engin Kirda (DSN, 2016)

Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions. - Sajjad Arshad; Amin Kharraz; William Robertson 002 (Financial Cryptography, 2016)

CuriousDroid: Automated User Interface Interaction for Android Application Analysis Sandboxes. - Patrick Carter; Collin Mulliner; Martina Lindorfer; William K. Robertson; Engin Kirda (Financial Cryptography, 2016)

WHOIS Lost in Translation: (Mis)Understanding Domain Name Expiration and Re-Registration. - Tobias Lauinger; Kaan Onarlioglu; Abdelberi Chaabane; William Robertson 002; Engin Kirda (Internet Measurement Conference, 2016)

CrossFire: An Analysis of Firefox Extension-Reuse Vulnerabilities. - Ahmet Salih Buyukkayhan; Kaan Onarlioglu; William K. Robertson; Engin Kirda (NDSS, 2016)

Identifying Extension-Based Ad Injection via Fine-Grained Web Content Provenance. - Sajjad Arshad; Amin Kharraz; William Robertson 002 (RAID, 2016)

Trellis: Privilege Separation for Multi-user Applications Made Easy. - Andrea Mambretti; Kaan Onarlioglu; Collin Mulliner; William Robertson 002; Engin Kirda; Federico Maggi 001; Stefano Zanero (RAID, 2016)

LAVA: Large-Scale Automated Vulnerability Addition. - Brendan Dolan-Gavitt; Patrick Hulin; Engin Kirda; Tim Leek; Andrea Mambretti; William K. Robertson; Frederick Ulrich; Ryan Whelan (IEEE Symposium on Security and Privacy, 2016)

TriggerScope: Towards Detecting Logic Bombs in Android Applications. - Yanick Fratantonio; Antonio Bianchi; William K. Robertson; Engin Kirda; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2016)

Runtime Integrity Checking for Exploit Mitigation on Lightweight Embedded Devices. - Matthias Neugschwandtner; Collin Mulliner; William K. Robertson; Engin Kirda (TRUST, 2016)

Tracing Information Flows Between Ad Exchanges Using Retargeted Ads. - Muhammad Ahmad Bashir; Sajjad Arshad; William K. Robertson; Christo Wilson (USENIX Security Symposium, 2016)

UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. - Amin Kharraz; Sajjad Arshad; Collin Mulliner; William K. Robertson; Engin Kirda (USENIX Security Symposium, 2016)

Ex-Ray: Detection of History-Leaking Browser Extensions. - Michael Weissbacher; Enrico Mariconti; Guillermo Suarez-Tangil; Gianluca Stringhini; William K. Robertson; Engin Kirda (ACSAC, 2017)

Semi-automated discovery of server-based information oversharing vulnerabilities in Android applications. - William Koch; Abdelberi Chaabane; Manuel Egele; William K. Robertson; Engin Kirda (ISSTA, 2017)

Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript Libraries on the Web. - Tobias Lauinger; Abdelberi Chaabane; Sajjad Arshad; William Robertson 002; Christo Wilson; Engin Kirda (NDSS, 2017)

Lens on the Endpoint: Hunting for Malicious Software Through Endpoint Data Analysis. - Ahmet Salih Buyukkayhan; Alina Oprea; Zhou Li 001; William K. Robertson (RAID, 2017)

Game of Registrars: An Empirical Analysis of Post-Expiration Domain Name Takeovers. - Tobias Lauinger; Abdelberi Chaabane; Ahmet Salih Buyukkayhan; Kaan Onarlioglu; William Robertson 002 (USENIX Security Symposium, 2017)

On the misuse of graphical user interface elements to implement security controls. - Collin Mulliner; William K. Robertson; Engin Kirda (it Inf. Technol., 2017)

On the Effectiveness of Type-based Control Flow Integrity. - Reza Mirzazade Farkhani; Saman Jafari; Sajjad Arshad; William K. Robertson; Engin Kirda; Hamed Okhravi (ACSAC, 2018)

Eraser: Your Data Won't Be Back. - Kaan Onarlioglu; William K. Robertson; Engin Kirda (EuroS&P, 2018)

How Tracking Companies Circumvented Ad Blockers Using WebSockets. - Muhammad Ahmad Bashir; Sajjad Arshad; Engin Kirda; William K. Robertson; Christo Wilson (Internet Measurement Conference, 2018)

From Deletion to Re-Registration in Zero Seconds: Domain Registrar Behaviour During the Drop. - Tobias Lauinger; Ahmet Salih Buyukkayhan; Abdelberi Chaabane; William K. Robertson; Engin Kirda (Internet Measurement Conference, 2018)

Surveylance: Automatically Detecting Online Survey Scams. - Amin Kharraz; William K. Robertson; Engin Kirda (IEEE Symposium on Security and Privacy, 2018)

Large-Scale Analysis of Style Injection by Relative Path Overwrite. - Sajjad Arshad; Seyed Ali Mirheidari; Tobias Lauinger; Bruno Crispo; Engin Kirda; William K. Robertson (WWW, 2018)

Protecting against Ransomware: A New Line of Research or Restating Classic Ideas? - Amin Kharraz; William K. Robertson; Engin Kirda (IEEE Secur. Priv., 2018)

Speculator: a tool to analyze speculative execution attacks and mitigations. - Andrea Mambretti; Matthias Neugschwandtner; Alessandro Sorniotti; Engin Kirda; William K. Robertson; Anil Kurmus (ACSAC, 2019)

It's Not what It Looks Like: Measuring Attacks and Defensive Registrations of Homograph Domains. - Florian Quinkert; Tobias Lauinger; William K. Robertson; Engin Kirda; Thorsten Holz (CNS, 2019)

A Longitudinal Analysis of the ads.txt Standard. - Muhammad Ahmad Bashir; Sajjad Arshad; Engin Kirda; William K. Robertson; Christo Wilson (Internet Measurement Conference, 2019)

Getting Under Alexa's Umbrella: Infiltration Attacks Against Internet Top Domain Lists. - Walter Rweyemamu; Tobias Lauinger; Christo Wilson; William K. Robertson; Engin Kirda (ISC, 2019)

Clustering and the Weekend Effect: Recommendations for the Use of Top Domain Lists in Security Research. - Walter Rweyemamu; Tobias Lauinger; Christo Wilson; William K. Robertson; Engin Kirda (PAM, 2019)

USBESAFE: An End-Point Solution to Protect Against USB-Based Attacks. - Amin Kharraz; Brandon L. Daley; Graham Z. Baker; William Robertson 002; Engin Kirda (RAID, 2019)

HotFuzz: Discovering Algorithmic Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. - William Blair; Andrea Mambretti; Sajjad Arshad; Michael Weissbacher; William Robertson 002; Engin Kirda; Manuel Egele (NDSS, 2020)

What's in an Exploit? An Empirical Analysis of Reflected Server XSS Exploitation Techniques. - Ahmet Salih Buyukkayhan; Can Gemicioglu; Tobias Lauinger; Alina Oprea; William Robertson 002; Engin Kirda (RAID, 2020)

Cached and Confused: Web Cache Deception in the Wild. - Seyed Ali Mirheidari; Sajjad Arshad; Kaan Onarlioglu; Bruno Crispo; Engin Kirda; William Robertson 002 (USENIX Security Symposium, 2020)

DICE: Automatic Emulation of DMA Input Channels for Dynamic Firmware Analysis. - Alejandro Mera; Bo Feng 002; Long Lu; Engin Kirda; William K. Robertson (CoRR, 2020)

Evaluating Synthetic Bugs. - Joshua Bundt; Andrew Fasano; Brendan Dolan-Gavitt; William Robertson 002; Tim Leek (AsiaCCS, 2021)

SoK: Enabling Security Analyses of Embedded Systems via Rehosting. - Andrew Fasano; Tiemoko Ballo; Marius Muench; Tim Leek; Alexander Bulekov; Brendan Dolan-Gavitt; Manuel Egele; Aurélien Francillon; Long Lu; Nick Gregory; Davide Balzarotti; William Robertson 002 (AsiaCCS, 2021)

Bypassing memory safety mechanisms through speculative control flow hijacks. - Andrea Mambretti; Alexandra Sandulescu; Alessandro Sorniotti; William Robertson 002; Engin Kirda; Anil Kurmus (EuroS&P, 2021)

MPKAlloc: Efficient Heap Meta-data Integrity Through Hardware Memory Protection Keys. - William Blair; William K. Robertson; Manuel Egele (DIMVA, 2022)

Polytope: Practical Memory Access Control for C++ Applications. - Ioannis Agadakos; Manuel Egele; William K. Robertson (CoRR, 2022)

Attacking Neural Binary Function Detection. - Joshua Bundt; Michael Davinroy; Ioannis Agadakos; Alina Oprea; William Robertson 002 (CoRR, 2022)

HotFuzz: Discovering Temporal and Spatial Denial-of-Service Vulnerabilities Through Guided Micro-Fuzzing. - William Blair; Andrea Mambretti; Sajjad Arshad; Michael Weissbacher; William Robertson 002; Engin Kirda; Manuel Egele (ACM Trans. Priv. Secur., 2022)

ThreadLock: Native Principal Isolation Through Memory Protection Keys. - William Blair; William K. Robertson; Manuel Egele (AsiaCCS, 2023)

Homo in Machina: Improving Fuzz Testing Coverage via Compartment Analysis. - Joshua Bundt; Andrew Fasano; Brendan Dolan-Gavitt; William K. Robertson; Tim Leek (ICST, 2023)

Black-box Attacks Against Neural Binary Function Detection. - Joshua Bundt; Michael Davinroy; Ioannis Agadakos; Alina Oprea; William K. Robertson (RAID, 2023)

Hypervisor Dissociative Execution: Programming Guests for Monitoring, Management, and Security. - Andrew Fasano; Zak Estrada; Tim Leek; William K. Robertson (ACSAC, 2024)

A Viewpoint: Safer Heaps With Practical Architectural Security Primitives. - William K. Robertson; Manuel Egele (IEEE Secur. Priv., 2024)

ACE: A Security Architecture for LLM-Integrated App Systems. - Evan Li; Tushin Mallick; Evan Rose; William K. Robertson; Alina Oprea; Cristina Nita-Rotaru (CoRR, 2025)

An Enumerative Embedding of the Python Type System in ACL2s. - Samuel Xifaras; Panagiotis Manolios; Andrew T. Walter; William Robertson 002 (CoRR, 2025)