The Use of Honeynets to Detect Exploited Systems Across Large Enterprise Networks. - John G. Levine; Richard LaBella; Henry L. Owen; Didier Contis; Brian Culver (IAW, 2003)

Wireless Intrusion Detection and Response. - Yu-Xi Lim; Tim Schmoyer; John G. Levine; Henry L. Owen (IAW, 2003)

Intrusion Detection Testing and Benchmarking Methodologies. - Nicholas Athanasiades; Randal T. Abler; John G. Levine; Henry L. Owen; George F. Riley (IWIA, 2003)

Re-establishing Trust in Compromised Systems: Recovering from Rootkits That Trojan the System Call Table. - Julian B. Grizzard; John G. Levine; Henry L. Owen (ESORICS, 2004)

A Methodology to Detect and Characterize Kernel Level Rootkit Exploits Involving Redirection of the System Call Table. - John G. Levine; Julian B. Grizzard; Henry L. Owen (IWIA, 2004)

HoneyStat: Local Worm Detection Using Honeypots. - David Dagon; Xinzhou Qin; Guofei Gu; Wenke Lee; Julian B. Grizzard; John G. Levine; Henry L. Owen (RAID, 2004)

Using Honeynets to Protect Large Enterprise Networks. - John G. Levine; Julian B. Grizzard; Henry L. Owen (IEEE Secur. Priv., 2004)

A Methodology for Detecting and Classifying Rootkit Exploits. - John G. Levine (2004)

Detecting and Categorizing Kernel-Level Rootkits to Aid Future Detection. - John G. Levine; Julian B. Grizzard; Henry L. Owen (IEEE Secur. Priv., 2006)