Verification of a Formal Security Model for Multiapplicative Smart Cards. - Gerhard Schellhorn; Wolfgang Reif; Axel Schairer; Paul A. Karger; Vernon Austel; David C. Toll (ESORICS, 2000)

Verified Formal Security Models for Multiapplicative Smart Cards. - Gerhard Schellhorn; Wolfgang Reif; Axel Schairer; Paul A. Karger; Vernon Austel; David C. Toll (J. Comput. Secur., 2002)

Authenticating Mandatory Access Controls and Preserving Privacy for a High-Assurance Smart Card. - Helmut Scherzer; Ran Canetti; Paul A. Karger; Hugo Krawczyk; Tal Rabin; David C. Toll (ESORICS, 2003)

Chicken & Egg: Dependencies in Security Testing and Compliance with Common Criteria Evaluations. - Amit M. Paradkar; Suzanne McIntosh; Sam Weber 001; David C. Toll; Paul A. Karger; Matt Kaplan 003 (ISSSE, 2006)

The Feasibility of Automated Feedback-Directed Specification-Based Test Generation: A Case Study of a High-Assurance Operating System. - Sam Weber 001; Amitkumar M. Paradkar; Suzanne McIntosh; David C. Toll; Paul A. Karger; Matthew Kaplan 003; Elaine R. Palmer (ISSRE, 2008)

The Caernarvon secure embedded operating system. - David C. Toll; Paul A. Karger; Elaine R. Palmer; Suzanne McIntosh; Sam Weber 001 (ACM SIGOPS Oper. Syst. Rev., 2008)

Privacy is essential for secure mobile devices. - Paul A. Karger; Gaurav S. Kc; David C. Toll (IBM J. Res. Dev., 2009)

Designing a Side Channel Resistant Random Number Generator. - Suresh Chari; Vincenzo V. Diluoffo; Paul A. Karger; Elaine R. Palmer; Tal Rabin; Josyula R. Rao; Pankaj Rohatgi; Helmut Scherzer; Michael Steiner 001; David C. Toll (CARDIS, 2010)

Implementing a High-Assurance Smart-Card OS. - Paul A. Karger; David C. Toll; Elaine R. Palmer; Suzanne McIntosh; Samuel Weber 001; Jonathan W. Edwards (Financial Cryptography, 2010)

Lessons Learned: Building the Caernarvon High-Assurance Operating System. - Paul A. Karger; Suzanne McIntosh; Elaine R. Palmer; David C. Toll; Samuel Weber 001 (IEEE Secur. Priv., 2011)