Security Test Generation Using Threat Trees. - Aaron Marback; Hyunsook Do; Ke He; Samuel Kondamarri; Dianxiang Xu (AST, 2009)

An Effective Regression Testing Approach for PHP Web Applications. - Aaron Marback; Hyunsook Do; Nathan Ehresmann (ICST, 2012)

A threat model-based approach to security testing. - Aaron Marback; Hyunsook Do; Ke He; Samuel Kondamarri; Dianxiang Xu (Softw. Pract. Exp., 2013)