Quantifying the Pressure of Legal Risks on Third-party Vulnerability Research, Alex Gamero-Garrido, Stefan Savage, Kirill Levchenko, and Alex C. Snoeren, Proceedings of the ACM Conference on Computer and Communications Security, Dallas, Texas, November 2017.

Better Than Advertised: Improved Security Guarantees for MD-Based Hash Functions, Mihir Bellare, Joseph Jaeger, and Julia Len, Proceedings of the ACM Conference on Computer and Communications Security, Dallas, Texas, November 2017.

Defending Against Key Exfiltration: Efficiency Improvements for BIG-Key Cryptography via Large-Alphabet Subkey Prediction, Mihir Bellare and Wei Dai, Proceedings of the ACM Conference on Computer and Communications Security, Dallas, Texas, November 2017.

Identity-Based Format-Preserving Encryption, Mihir Bellare and Viet Tung Hoang, Proceedings of the ACM Conference on Computer and Communications Security, Dallas, Texas, November 2017.

Tripwire: Inferring Internet Site Compromise, Joe DeBlasio, Stefan Savage, Geoffrey M. Voelker, and Alex C. Snoeren, Proceedings of the ACM Internet Measurement Conference, London, UK, November 2017.

Backpage and Bitcoin: Uncovering Human Traffickers, Rebecca S. Portnoff, Danny Yuxing Huang, Periwinkle Doerfler, Sadia Afroz, and Damon McCoy, Proceedings of the ACM SIGKDD Conference, Halifax, Nova Scotia, August 2017.

Prime+Abort: A Timer-Free High-Precision L3 Cache Attack using Intel TSX, Craig Disselkoen, David Kohlbrenner, Leo Porter, and Dean Tullsen, Proceedings of the USENIX Security Symposium, Vancouver, BC, Canada, August 2017.

The buoyancy of castles: Examining the effectiveness of mitigations against floating-point timing channels, David Kohlbrenner and Hovav Shacham, Proceedings of the USENIX Security Symposium, Vancouver, BC, Canada, August 2017.

Dead Store Elimination (Stil) Considered Harmful, Zhaomo Yang, Brian Johannesmeyer, Anders Trier Olesen, Sorin Lerner, and Kirill Levchenko, Proceedings of the USENIX Security Symposium, Vancouver, BC, Canada, August 2017.

Malicious Browser Extensions at Scale: Bridging the Observability Gap between Web Site and Browser, Louis F. DeKoven, Stefan Savage, Goeffrey M. Voelker, and Nektarios Lentiadis, Proceedings of Workshop on Cyber Security Experimentation and Test (CSET), August 2017.

How They Did It: An Analysis of Emission Defeat Devices in Modern Automobiles, Mortiz Contag, Guo Li, Andre Pawlowski, Flexi Domke, Stefan Savage, Kirill Levchenko, and Thorsten Holz, Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, May 2017.

To Catch a Ratter: Monitoring the Behavior of Amateur DarkComet RAT Operators in the Wild, Brown Farinholt, Mohammad Rezaeirad, Paul Pearce, Hitesh Dharamdasani, Haikuo Yin, Stevens LeBlond, Damon McCoy, and Kirill Levchenko, Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, May 2017.

Finding and Preventing Bugs in JavaScript Bindings, Fraser Brown, Shravan Narayan, Riad S. Wahby, Dawson Engler, Ranjit Jhala, and Deian Stefan, Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, May 2017.

How Do System Administrators Resolve Access-Denied Issues in the Real World?, Tianyin Xu, Han Min Naing, Le Lu, and Yuanyuan Zhou, Proceedings of the 35th Annual CHI Conference on Human Factors in Computing Systems (CHI'17), Denver, CO, USA, May 2017.

Pinning Down Abuse on Google Maps, Danny Yuxing Huang, Doug Grundman, Kurt Thomas, Elie Bursztein, Abhishek Kumar, Kirill Levchenko, and Alex C. Snoeren, Proceedings of the International World Wide Web Conference (WWW), Perth, Australia, April 2017.

Automated Analysis of Cybercriminal Markets, Rebecca S Portnoff, Sadia Afroz, Greg Durrett, Jonathan K Kummerfeld, Taylor Berg-Kirkpatrick, Damon McCoy, Kirill Levchenko, and Vern Paxson, Proceedings of the International World Wide Web Conference (WWW), Perth, Australia, April 2017.