| Finding security vulnerabilities in Java applications with static analysis B Livshits, MS Lam Proceedings of the 14th conference on USENIX Security Symposium 14, 18-18, 2005 | 832 | 2005 |
| Finding application errors and security flaws using PQL: a program query language M Martin, B Livshits, MS Lam Conference on Object-Oriented Programming, Systems, Languages, and …, 2005 | 637 | 2005 |
| DynaMine: finding common error patterns by mining software revision histories B Livshits, T Zimmermann Symposium on the Foundations of Software Engineering (FSE) 30 (5), 296-305, 2005 | 500 | 2005 |
| Zozzle: Low-overhead mostly static javascript malware detection CCB Livshits, B Zorn, C Seifert USENIX Security Symposium, 2010 | 449* | 2010 |
| Nozzle: A defense against heap-spraying code injection attacks P Ratanaworabhan, B Livshits, B Zorn USENIX Security Symposium, 169-186, 2009 | 307 | 2009 |
| Gatekeeper: Mostly Static Enforcement of Security and Reliability Policies for JavaScript Code. S Guarnieri, B Livshits USENIX Security Symposium, 151-168, 2009 | 296 | 2009 |
| ConScript: Specifying and enforcing fine-grained security policies for JavaScript in the browser LA Meyerovich, B Livshits Security and Privacy (SP), 2010 IEEE Symposium on, 481-496, 2010 | 280 | 2010 |
| In defense of soundiness: A manifesto B Livshits, M Sridharan, Y Smaragdakis, O Lhoták, JN Amaral, ... Communications of the ACM 58 (2), 44-46, 2015 | 267 | 2015 |
| Rozzle: De-cloaking internet malware C Kolbitsch, B Livshits, B Zorn, C Seifert 2012 IEEE Symposium on Security and Privacy, 443-457, 2012 | 240 | 2012 |
| {JSMeter}: Comparing the Behavior of {JavaScript} Benchmarks with Real Web Applications P Ratanaworabhan, B Livshits, BG Zorn USENIX Conference on Web Application Development (WebApps 10), 2010 | 238* | 2010 |
| Context-sensitive program analysis as database queries MS Lam, J Whaley, B Livshits, MC Martin, D Avots, M Carbin, C Unkel Proceedings of the Symposium on Principles of Database Systems (PODS), 1-12, 2005 | 225 | 2005 |
| Reflection analysis for Java B Livshits, J Whaley, MS Lam Asian Symposium on Programming Languages and Systems, 139-160, 2005 | 214 | 2005 |
| Finding security errors in Java programs with static analysis VB Livshits Proc. 14th USENIX Security Symposium, 2005, 2005 | 195 | 2005 |
| Fast and precise sanitizer analysis with Bek P Hooimeijer, B Livshits, D Molnar, P Saxena, M Veanes Proceedings of the 20th USENIX conference on Security, 1-1, 2011 | 187 | 2011 |
| PriVaricator: Deceiving fingerprinters with little white lies N Nikiforakis, W Joosen, B Livshits WWW, 2014 | 184 | 2014 |
| Merlin: specification inference for explicit information flow problems B Livshits, AV Nori, SK Rajamani, A Banerjee Conference on Programming Language Design and Implementation (PLDI) 44 (6 …, 2009 | 184 | 2009 |
| Combining personalization and privacy locally on devices B Livshits, AJ Davidson US Patent 9,589,149, 2017 | 178 | 2017 |
| Symbolic finite state transducers: algorithms and applications M Veanes, P Hooimeijer, B Livshits, D Molnar, N Bjorner Symposium on the Principles of Programming Languages 47 (1), 137-150, 2012 | 170 | 2012 |
| ScriptGard: Automatic context-sensitive sanitization for large-scale legacy web applications P Saxena, D Molnar, B Livshits Proceedings of the 18th ACM conference on Computer and communications …, 2011 | 169* | 2011 |
| RePriv: Re-Imagining Content Personalization and In-Browser Privacy M Fredrikson, B Livshits Security and Privacy (SP), 2011 IEEE Symposium on, 131-146, 2011 | 162* | 2011 |
David MolnarVerified email at microsoft.com
