Mozilla Research

Expanding the Foundations of the Open Web

Papers & Publications


2026:
Title Venue Year Authors
MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks USENIX Security Symposium August 2026 Georgios Syros, Evan Rose, Brian Grinstead, Christoph Kerschbaumer, William Robertson, Cristina Nita-Rotaru, and Alina Oprea
From the Wild Web to the Zoo: A Realistic Environment for Evaluating Web Agents MadWeb – Measurements, Attacks, and Defenses for the Web February 2026 Brian Grinstead, Christoph Kerschbaumer, Mariana Meireles, and Cameron Allen
The Effect of Choice Screens on Mobile Browser Usage: Evidence from the EU Digital Markets Act N/A April 2026 Jesper Akesson, Kush Amlani, Raul Cepeda Suarez, Emily Chissell, Stefan Hunt, Michael Luca, Gemma Petrie
Group versus Individual Review Requests: Tradeoffs in Speed and
Quality at Mozilla Firefox
48th International Conference on Software Engineering – Software
Engineering In Practice (ICSE – SEIP)
April 2026 Matej Kucera, Marco Castelluccio, Daniel Feitosa, Ayushi Rastogi

XBIDetective: Leveraging Vision Language Models for Identifying
Cross-Browser Visual Inconsistencies
48th International Conference on Software Engineering – Software
Engineering In Practice (ICSE – SEIP)
April 2026 Balreet Grewal, James Graham, Jeff Muizelaar, Jan Honza Odvarko, Suhaib
Mujahid, Marco Castelluccio, Cor-Paul Bezemer
Impact of an LLM-based Review Assistant in Practice: A Mixed
Open-/Closed-source Case Study
IEEE Transactions on Software Engineering (TSE) February 2026 Doriane Olewicki, Leuson Da Silva, Oussama Ben Sghaier, Suhaib Mujahid,
Arezou Amini, Benjamin Mah, Marco Castelluccio, Sarra Habchi, Foutse
Khomh, Bram Adams
A Comparison of Conversational Models and Humans in Answering
Technical Questions: the Firefox Case
48th International Conference on Software Engineering (ICSE) April 2026 Joao Correia, Daniel Coutinho, Marco Castelluccio, Caio Barbosa, Rafael
de Mello, Anita Sarma, Alessandro Garcia, Marco Gerosa, Igor Steinmacher


2025:
Title Venue Year Authors
Automated Generation of Issue-Reproducing Tests by Combining LLMs and
Search-Based Testing
40th IEEE/ACM International Conference on Automated Software Engineering
(ASE)
November 2025 Konstantinos Kitsios, Marco Castelluccio, Alberto Bacchelli
Using LLMs to Bridge the Gaps in QA Test Plans at Firefox IEEE Software (special edition: AI Ware in the FM Era) October 2025 John Pangas, Suhaib Mujahid, Ahmad Abdellatif, Marco Castelluccio
“Easy” Default Browser Settings on iOS and Windows N/A October 2025 Gemma Petrie

Designing Better Digital Competition Remedies: Lessons from user
research

Knight-Georgetown Institute: DMA & Beyond Conference
July 2025 Gemma Petrie

A Dataset of Performance Measurements and Alerts from Mozilla (Data
Artifact)
16th ACM/SPEC International Conference on Performance Engineering May 2025 Mohamed Bilel Besbes, Diego Elias Costa, Suhaib Mujahid, Gregory
Mierzwinski, Marco Castelluccio
The State of https Adoption on the Web MadWeb – Measurements, Attacks, and Defenses for the Web 2025 Christoph Kerschbaumer, Frederik Braun, Simon Friedberger, Malte Jürgens
Clubcards for the WebPKI: smaller certificate revocation tests in
theory and practice
IEEE S&P 2025 John M. Schanck

 


2024:
Title Venue Year Authors
Impact of LLM-based review comment generation in practice: A mixed
open-/closed-source user study
arXiv November 2024 Doriane Olewicki, Leuson Da Silva, Suhaib Mujahid, Arezou Amini,
Benjamin Mah, Marco Castelluccio, Sarra Habchi, Foutse Khomh, Bram Adams
How do smartphone users access the internet? An exploratory analysis
of mobile web browser use
Mobile Media & Communication (Journal) 2024 Ludwig Fichte, Chance York
Unveiling the Potential of a Conversational Agent in Developer
Support: Insights from Mozilla’s PDF.js Project
1st ACM International Conference on AI-Powered Software (AIware) 2024 João Correia, Morgan C Nicholson, Daniel Coutinho, Caio Barbosa, Marco
Castelluccio, Marco Gerosa, Alessandro Garcia, Igor Steinmacher
Over the Edge: The Use of Design Tactics to Undermine Browser
Choice
N/A 2024 Harry Brignull, Cennydd Bowles
Columbia Convening on Openness and AI (Policy Readout) N/A 2024 Udbhav Tiwari
Columbia Convening on Openness and AI (Technical Readout) N/A 2024 Nik Marda
Predicting the Impact of Crashes Across Release Channels 21st IEEE/ACM International Conference on Mining Software Repositories
(MSR)
2024 Suhaib Mujahid, Diego Elias Costa, Marco Castelluccio
Mind the Gap: What Working With Developers on Fuzz Tests Taught Us
About Coverage Gaps
46th International Conference on Software Engineering – Software
Engineering In Practice (ICSE – SEIP)
2024 Carolin Brandt, Marco Castelluccio, Christian Holler, Jason Kratzer,
Andy Zaidman, Alberto Bacchelli


2023:
Title Venue Year Authors
Can browser choice screens be effective? Experimental analysis of the
impact of their design, content and placement
N/A 2023 Gemma Petrie, Kush Amlani, Jesper Akesson, Michael Luca
Beyond Choice Screens: Exploring browser choice design interventions
N/A 2023 Gemma Petrie
Understanding the Helpfulness of Stale Bot for Pull-based
Development: An Empirical Study of 20 Large Open-Source Projects.
ACM Transactions on Software Engineering and Methodology Journal (TOSEM) 2023 SayedHassan Khatoonabadi, Diego Elias Costa, Suhaib Mujahid, Emad Shihab
Where to Go Now? Finding Alternatives for Declining Packages in the
npm Ecosystem
38th IEEE/ACM International Conference on Automated Software Engineering
(ASE)
2023 Suhaib Mujahid, Diego Elias Costa, Rabe Abdalkareem, Emad Shihab


2022:
Title Venue Year Authors
Five Walled Gardens: Why Browsers are Essential to the Internet and
How Operating Systems Are Holding Them Back
N/A 2022 Gemma Petrie, Mika Shah, Kush Amlani
Not All Dependencies are Equal: An Empirical Study on Production
Dependencies in NPM
37th IEEE/ACM International Conference on Automated Software Engineering
(ASE)
2022 Jasmine Latendresse, Suhaib Mujahid, Diego Elias Costa, Emad Shihab
What are the characteristics of highly-selected packages? A case
study on the npm ecosystem
Journal of Systems and Software (JSS) 2022 Suhaib Mujahid, Rabe Abdalkareem, Emad Shihab
Works for me! cannot reproduce–a large scale empirical study of
non-reproducible bugs
Empirical Software Engineering 2022 Mohammad M. Rahman, Foutse Khomh, Marco Castelluccio
SZZ in the time of pull requests arXiv 2022 Fernando Petrulio, David Ackermann, Enrico Fregnan, Gül Calikli, Marco
Castelluccio, Sylvestre Ledru, Calixte Denizet, Emma Humphries, Alberto
Bacchelli

2021:
Title Venue Year Authors
HTTPS-Only: Upgrading all connections to https in Web Browsers MadWeb – Measurements, Attacks, and Defenses for the Web 2021 Christoph Kerschbaumer, Julian Gaibler, Arthur Edelstein, Thyla van der
Merwe

2020:
Title Venue Year Authors
Who Gets to Define Success? Listening to Stories of How People Value
Firefox to Redefine Metrics and Revive a Decommissioned Product
Ethnographic Praxis in Industry Conference Proceedings 2020 Gemma Petrie, Jennifer Davidson
rust-code-analysis: A Rust library to analyze and extract
maintainability information from source codes
SoftwareX, 2020 2020 L. Ardito, L. Barbato, M. Castelluccio, R. Coppola, C. Denizet, S.
Ledru, M. Valsesia
Why Are Some Bugs Non-Reproducible? An Empirical Investigation using
Data Fusion
36th ACM/IEEE International Conference on Maintenance and Software
Evolution (ICSME), 2020
2020 M. M. Rahman, F. Khomh and M. Castelluccio
Empirical Evaluation Of Cost Of Annoying Ads 42nd Marketing Science Conference 2020 2020 Ayman Farahat, Jofish Kaye, Henriette Cramer
Why We Still Can’t Browse in Peace: On the Uniqueness and
Reidentifiability of Web Browsing Histories
SOUPS 2020 2020 Sarah Bird, Ilana Segall, Martin Lopatka
Retrofitting Fine Grain Isolation in the Firefox Renderer Proceedings of USENIX Security Symposium 2020 Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric
Rahm, Sorin Lerner, Hovav Shacham, and Deian Stefan
Moving Forward Together: Effective Activism for Change Ext. Abs. CHI ’20 2020 Shaowen Bardzell, Jofish Kaye, Katta Spiel
Enhancing the Experience of Virtual Conferences in Social Virtual
Environments
IEEE VR 2020 Duc Anh Le, Blair MacIntyre, Jessica Outlaw