Temporal search: detecting hidden malware timebombs with virtual machines. - Jedidiah R. Crandall; Gary Wassermann; Daniela Alvim Seabra de Oliveira; Zhendong Su 001; Shyhtsun Felix Wu; Frederic T. Chong (ASPLOS, 2006)

ExecRecorder: VM-based full-system replay for attack analysis and system recovery. - Daniela Alvim Seabra de Oliveira; Jedidiah R. Crandall; Gary Wassermann; Shyhtsun Felix Wu; Zhendong Su 001; Frederic T. Chong (ASID, 2006)

Validity Checking for Finite Automata over Linear Arithmetic Constraints. - Gary Wassermann; Zhendong Su 001 (FSTTCS, 2006)

The essence of command injection attacks in web applications. - Zhendong Su 001; Gary Wassermann (POPL, 2006)

Sound and precise analysis of web applications for injection vulnerabilities. - Gary Wassermann; Zhendong Su 001 (PLDI, 2007)

Static checking of dynamically generated queries in database applications. - Gary Wassermann; Carl Gould 001; Zhendong Su 001; Premkumar T. Devanbu (ACM Trans. Softw. Eng. Methodol., 2007)

Static detection of cross-site scripting vulnerabilities. - Gary Wassermann; Zhendong Su 001 (ICSE, 2008)

Dynamic test input generation for web applications. - Gary Wassermann; Dachuan Yu; Ajay Chander; Dinakar Dhurjati; Hiroshi Inamura; Zhendong Su 001 (ISSTA, 2008)

Bezoar: Automated virtual machine-based full-system recovery from control-flow hijacking attacks. - Daniela Alvim Seabra de Oliveira; Jedidiah R. Crandall; Gary Wassermann; Shaozhi Ye; Shyhtsun Felix Wu; Zhendong Su 001; Frederic T. Chong (NOMS, 2008)

Putting Trojans on the Horns of a Dilemma: Redundancy for Information Theft Detection. - Jedidiah R. Crandall; John Brevik; Shaozhi Ye; Gary Wassermann; Daniela Alvim Seabra de Oliveira; Zhendong Su 001; Shyhtsun Felix Wu; Frederic T. Chong (Trans. Comput. Sci., 2009)