Automatically Hardening Web Applications Using Precise Tainting. - Anh Nguyen-Tuong; Salvatore Guarnieri; Doug Greene; Jeff Shirley; David Evans 001 (SEC, 2005)

The user is not the enemy: fighting malware by tracking user intentions. - Jeff Shirley; David Evans 001 (NSPW, 2008)