Shellzer: A Tool for the Dynamic Analysis of Malicious Shellcode. - Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (RAID, 2011)

An empirical study of cryptographic misuse in android applications. - Manuel Egele; David Brumley; Yanick Fratantonio; Christopher Kruegel (CCS, 2013)

ANDRUBIS - 1, 000, 000 Apps Later: A View on Current Android Malware Behaviors. - Martina Lindorfer; Matthias Neugschwandtner; Lukas Weichselbaum; Yanick Fratantonio; Victor van der Veen; Christian Platzer (BADGERS@ESORICS, 2014)

Execute This! Analyzing Unsafe and Malicious Dynamic Code Loading in Android Applications. - Sebastian Poeplau; Yanick Fratantonio; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (NDSS, 2014)

Ten Years of iCTF: The Good, The Bad, and The Ugly. - Giovanni Vigna; Kevin Borgolte; Jacopo Corbetta; Adam Doupé; Yanick Fratantonio; Luca Invernizzi; Dhilung Kirat; Yan Shoshitaishvili (3GSE, 2014)

Grab 'n Run: Secure and Practical Dynamic Code Loading for Android Applications. - Luca Falsina; Yanick Fratantonio; Stefano Zanero; Christopher Kruegel; Giovanni Vigna; Federico Maggi 001 (ACSAC, 2015)

BareDroid: Large-Scale Analysis of Android Apps on Real Devices. - Simone Mutti; Yanick Fratantonio; Antonio Bianchi; Luca Invernizzi; Jacopo Corbetta; Dhilung Kirat; Christopher Kruegel; Giovanni Vigna (ACSAC, 2015)

NJAS: Sandboxing Unmodified Applications in non-rooted Devices Running stock Android. - Antonio Bianchi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (SPSM@CCS, 2015)

On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users. - Yanick Fratantonio; Antonio Bianchi; William K. Robertson; Manuel Egele; Christopher Kruegel; Engin Kirda; Giovanni Vigna (DIMVA, 2015)

EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework. - Yinzhi Cao; Yanick Fratantonio; Antonio Bianchi; Manuel Egele; Christopher Kruegel; Giovanni Vigna; Yan Chen 004 (NDSS, 2015)

CLAPP: characterizing loops in Android applications. - Yanick Fratantonio; Aravind Machiry; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (ESEC/SIGSOFT FSE, 2015)

CLAPP: characterizing loops in Android applications (invited talk). - Yanick Fratantonio; Aravind Machiry; Antonio Bianchi; Christopher Kruegel; Giovanni Vigna (DeMobile@SIGSOFT FSE, 2015)

What the App is That? Deception and Countermeasures in the Android User Interface. - Antonio Bianchi; Jacopo Corbetta; Luca Invernizzi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2015)

Drammer: Deterministic Rowhammer Attacks on Mobile Platforms. - Victor van der Veen; Yanick Fratantonio; Martina Lindorfer; Daniel Gruss; Clémentine Maurice; Giovanni Vigna; Herbert Bos; Kaveh Razavi; Cristiano Giuffrida (CCS, 2016)

RETracer: triaging crashes by reverse execution from partial memory dumps. - Weidong Cui; Marcus Peinado; Sang Kil Cha; Yanick Fratantonio; Vasileios P. Kemerlis (ICSE, 2016)

Going Native: Using a Large-Scale Analysis of Android Apps to Create a Practical Native-Code Sandboxing Policy. - Vitor Monte Afonso; Paulo L. de Geus; Antonio Bianchi; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna; Adam Doupé; Mario Polino (NDSS, 2016)

TriggerScope: Towards Detecting Logic Bombs in Android Applications. - Yanick Fratantonio; Antonio Bianchi; William K. Robertson; Engin Kirda; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy, 2016)

Exploitation and Mitigation of Authentication Schemes Based on Device-Public Information. - Antonio Bianchi; Eric Gustafson; Yanick Fratantonio; Christopher Kruegel; Giovanni Vigna (ACSAC, 2017)

Obfuscation-Resilient Privacy Leak Detection for Mobile Apps Through Differential Analysis. - Andrea Continella; Yanick Fratantonio; Martina Lindorfer; Alessandro Puccetti; Ali Zand; Christopher Kruegel; Giovanni Vigna (NDSS, 2017)

Cloak and Dagger: From Two Permissions to Complete Control of the UI Feedback Loop. - Yanick Fratantonio; Chenxiong Qian; Simon P. Chung; Wenke Lee (IEEE Symposium on Security and Privacy, 2017)

BootStomp: On the Security of Bootloaders in Mobile Devices. - Nilo Redini; Aravind Machiry; Dipanjan Das 002; Yanick Fratantonio; Antonio Bianchi; Eric Gustafson; Yan Shoshitaishvili; Christopher Kruegel; Giovanni Vigna (USENIX Security Symposium, 2017)

On the Privacy and Security of the Ultrasound Ecosystem. - Vasilios Mavroudis; Shuang Hao 001; Yanick Fratantonio; Federico Maggi 001; Christopher Kruegel; Giovanni Vigna (Proc. Priv. Enhancing Technol., 2017)

Using Loops For Malware Classification Resilient to Feature-unaware Perturbations. - Aravind Machiry; Nilo Redini; Eric Gustafson; Yanick Fratantonio; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (ACSAC, 2018)

Phishing Attacks on Modern Android. - Simone Aonzo; Alessio Merlo; Giulio Tavella; Yanick Fratantonio (CCS, 2018)

ClickShield: Are You Hiding Something? Towards Eradicating Clickjacking on Android. - Andrea Possemato; Andrea Lanzi; Simon Pak Ho Chung; Wenke Lee; Yanick Fratantonio (CCS, 2018)

GuardION: Practical Mitigation of DMA-Based Rowhammer Attacks on ARM. - Victor van der Veen; Martina Lindorfer; Yanick Fratantonio; Harikrishnan Padmanabha Pillai; Giovanni Vigna; Christopher Kruegel; Herbert Bos; Kaveh Razavi (DIMVA, 2018)

Broken Fingers: On the Usage of the Fingerprint API in Android. - Antonio Bianchi; Yanick Fratantonio; Aravind Machiry; Christopher Kruegel; Giovanni Vigna; Simon Pak Ho Chung; Wenke Lee (NDSS, 2018)

Understanding Linux Malware. - Emanuele Cozzi; Mariano Graziano; Yanick Fratantonio; Davide Balzarotti (IEEE Symposium on Security and Privacy, 2018)

Toward the Analysis of Embedded Firmware through Automated Re-hosting. - Eric Gustafson; Marius Muench; Chad Spensky; Nilo Redini; Aravind Machiry; Yanick Fratantonio; Davide Balzarotti; Aurélien Francillon; Yung Ryn Choe; Christopher Kruegel; Giovanni Vigna (RAID, 2019)

Exploring Syscall-Based Semantics Reconstruction of Android Applications. - Dario Nisi; Antonio Bianchi; Yanick Fratantonio (RAID, 2019)

Towards HTTPS Everywhere on Android: We Are Not There Yet. - Andrea Possemato; Yanick Fratantonio (USENIX Security Symposium, 2020)

Tarnhelm: Isolated, Transparent & Confidential Execution of Arbitrary Code in ARM's TrustZone. - Davide Quarta; Michele Ianni; Aravind Machiry; Yanick Fratantonio; Eric Gustafson; Davide Balzarotti; Martina Lindorfer; Giovanni Vigna; Christopher Kruegel (Checkmate@CCS, 2021)

On the Insecurity of SMS One-Time Password Messages against Local Attackers in Modern Mobile Devices. - Zeyu Lei; Yuhong Nan; Yanick Fratantonio; Antonio Bianchi (NDSS, 2021)

Preventing and Detecting State Inference Attacks on Android. - Andrea Possemato; Dario Nisi; Yanick Fratantonio (NDSS, 2021)

Lost in the Loader: The Many Faces of the Windows PE File Format. - Dario Nisi; Mariano Graziano; Yanick Fratantonio; Davide Balzarotti (RAID, 2021)

Trust, But Verify: A Longitudinal Analysis Of Android OEM Compliance and Customization. - Andrea Possemato; Simone Aonzo; Davide Balzarotti; Yanick Fratantonio (SP, 2021)

RE-Mind: a First Look Inside the Mind of a Reverse Engineer. - Alessandro Mantovani; Simone Aonzo; Yanick Fratantonio; Davide Balzarotti (USENIX Security Symposium, 2022)

How Machine Learning Is Solving the Binary Function Similarity Problem. - Andrea Marcelli; Mariano Graziano; Xabier Ugarte-Pedrero; Yanick Fratantonio; Mohamad Mansouri; Davide Balzarotti (USENIX Security Symposium, 2022)

Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs. - Jayakrishna Vadayath; Moritz Eckert; Kyle Zeng; Nicolaas Weideman; Gokulkrishna Praveen Menon; Yanick Fratantonio; Davide Balzarotti; Adam Doupé; Tiffany Bao; Ruoyu Wang 001; Christophe Hauser; Yan Shoshitaishvili (USENIX Security Symposium, 2022)

MAGIKA: AI-Powered Content-Type Detection. - Yanick Fratantonio; Luca Invernizzi; Loua Farah; Kurt Thomas; Marina Zhang; Ange Albertini; Francois Galilee; Giancarlo Metitieri; Julien Cretin; Alex Petit-Bianco; David Tao; Elie Bursztein (ICSE, 2025)