"SafeWeb: A Middleware for Securing Ruby-based Web Applications",
ACM/IFIP/USENIX 12th International Middleware Conference (Middleware'11), Lisbon, Portugal, Springer, 12/2011. [PDF version]
"PHP Aspis: Using Partial Taint Tracking To Protect Against Injection Attacks",
2nd USENIX Conference on Web Application Development (USENIX WebApps'11), Portland, OR, USA, USENIX, 06/2011. [PDF version]
"SEEP: Scalable and Elastic Event Processing (Poster)",
ACM/IFIP/USENIX 11th International Middleware Conference (Middleware'10), Bangalore, India, ACM, 12/2010. [PDF version]
"Distributed Middleware Enforcement of Event Flow Security Policy",
ACM/IFIP/USENIX 11th International Middleware Conference (Middleware'10), Bangalore, India, Springer, 11/2010. [PDF version]
"Enforcing End-to-end Application Security in the Cloud",
ACM/IFIP/USENIX 11th International Middleware Conference (Middleware'10), Bangalore, India, Springer, 11/2010. [PDF version]
"DEFCon: High-Performance Event Processing with Information Security",
USENIX Annual Technical Conference (USENIX ATC'10), Boston, MA, USA, USENIX, 06/2010. [PDF version]
"Enforcing User Privacy in Web Applications using Erlang",
Web 2.0 Security and Privacy (W2SP'10), Oakland, CA, USA, IEEE, 05/2010. [PDF version]
"Event-Processing Middleware with Information Flow Control (Poster)",
10th International ACM/IFIP/USENIX Middleware Conference (Middleware'09), Urbana Champaign, Illinois, USA, 11/2009. [PDF version]
"Security in Multi-domain Event-based Systems",
it - Information Technology (http://it-information-technology.de/), vol. 51, no. 5, Munich/Germany, Oldenbourg Wissenschaftsverlag, 10/2009. [PDF version]
"PrivateFlow: Decentralised Information Flow Control in Event Based Middleware (Demo)",
3rd ACM International Conference on Distributed Event-Based Systems (DEBS), Nashville, TN, USA, 07/2009. [PDF version]

]