Challenges and implications of verifiable builds for security-critical open-source software. - Xavier de Carné de Carnavalet; Mohammad Mannan (ACSAC, 2014)

From Very Weak to Very Strong: Analyzing Password-Strength Meters. - Xavier de Carné de Carnavalet; Mohammad Mannan (NDSS, 2014)

A Large-Scale Evaluation of High-Impact Password Strength Meters. - Xavier de Carné de Carnavalet; Mohammad Mannan (ACM Trans. Inf. Syst. Secur., 2015)

Killed by Proxy: Analyzing Client-end TLS Interception Software. - Xavier de Carné de Carnavalet; Mohammad Mannan (NDSS, 2016)

Privacy and Security Risks of "Not-a-Virus" Bundled Adware: The Wajam Case. - Xavier de Carné de Carnavalet; Mohammad Mannan (CoRR, 2019)

Large-Scale Empirical Study of Important Features Indicative of Discovered Vulnerabilities to Assess Application Security. - Mengyuan Zhang 001; Xavier de Carné de Carnavalet; Lingyu Wang 001; Ahmed Ragab (IEEE Trans. Inf. Forensics Secur., 2019)

A survey and analysis of TLS interception mechanisms and motivations. - Xavier de Carné de Carnavalet; Paul C. van Oorschot (CoRR, 2020)

The Flaw Within: Identifying CVSS Score Discrepancies in the NVD. - Siqi Zhang; Minjie Cai; Mengyuan Zhang 001; Lianying Zhao; Xavier de Carné de Carnavalet (CloudCom, 2023)

A Survey and Analysis of TLS Interception Mechanisms and Motivations: Exploring how end-to-end TLS is made "end-to-me" for web traffic. - Xavier de Carné de Carnavalet; Paul C. van Oorschot (ACM Comput. Surv., 2023)

Exposed by Default: A Security Analysis of Home Router Default Settings. - Junjian Ye; Xavier de Carné de Carnavalet; Lianying Zhao; Mengyuan Zhang 001; Lifa Wu; Wei Zhang 122 (AsiaCCS, 2024)

Towards Exploring Cross-Regional and Cross-Platform Differences in Login Throttling. - Minjie Cai; Xavier de Carné de Carnavalet; Siqi Zhang; Lianying Zhao; Mengyuan Zhang 001 (NordSec, 2024)

Detecting command injection vulnerabilities in Linux-based embedded firmware with LLM-based taint analysis of library functions. - Junjian Ye; Xincheng Fei; Xavier de Carné de Carnavalet; Lianying Zhao; Lifa Wu; Mengyuan Zhang 001 (Comput. Secur., 2024)

Understanding Home Router Configuration Habits & Attitudes. - Junjian Ye; Xavier de Carné de Carnavalet; Lianying Zhao; Lifa Wu; Mengyuan Zhang 001 (CHI, 2025)

Exposed by Default: A Security Analysis of Home Router Default Settings and Beyond. - Junjian Ye; Xavier de Carné de Carnavalet; Lianying Zhao; Mengyuan Zhang 001; Lifa Wu; Wei Zhang 122 (IEEE Internet Things J., 2025)