Defining code-injection attacks. - Donald Ray; Jay Ligatti (POPL, 2012)

Defining Injection Attacks. - Donald Ray; Jay Ligatti (ISC, 2014)

A Theory of Gray Security Policies. - Donald Ray; Jay Ligatti (ESORICS (2), 2015)

A Quantified Model of Security Policies, with an Application for Injection-Attack Prevention. - Donald Ray (2016)