Digging For Worms, Fishing For Answers. - Florian P. Buchholz; Thomas E. Daniels 001; James P. Early; Rajeev Gopalakrishna; R. Patrick Gorman; Benjamin A. Kuperman; Sofie Nystrom; Addam Schroll; Andrew Smith (ACSAC, 2002)

Providing Process Origin Information to Aid in Network Traceback. - Florian P. Buchholz; Clay Shields (USENIX ATC, General Track, 2002)

On the role of file system metadata in digital forensics. - Florian P. Buchholz; Eugene H. Spafford (Digit. Investig., 2004)

Providing process origin information to aid in computer forensic investigations. - Florian P. Buchholz; Clay Shields (J. Comput. Secur., 2004)

Design and Implementation of Zeitline: a Forensic Timeline Editor. - Florian P. Buchholz; Courtney Falk (DFRWS, 2005)

Pervasive binding of labels to system processes - Florian P. Buchholz (2005)

Provenance-Aware Tracing ofWorm Break-in and Contaminations: A Process Coloring Approach. - Xuxian Jiang; AAron Walters; Dongyan Xu; Eugene H. Spafford; Florian P. Buchholz; Yi-Min Wang (ICDCS, 2006)

Run-time label propagation for forensic audit data. - Florian P. Buchholz; Eugene H. Spafford (Comput. Secur., 2007)

A brief study of time. - Florian P. Buchholz; Brett C. Tjaden (Digit. Investig., 2007)

Tracing Worm Break-In and Contaminations via Process Coloring: A Provenance-Preserving Approach. - Xuxian Jiang; Florian P. Buchholz; Aaron Walters; Dongyan Xu; Yi-Min Wang; Eugene H. Spafford (IEEE Trans. Parallel Distributed Syst., 2008)