Using Programmer-Written Compiler Extensions to Catch Security Holes. - Ken Ashcraft; Dawson R. Engler (S&P, 2002)

RacerX: effective, static detection of race conditions and deadlocks. - Dawson R. Engler; Ken Ashcraft (SOSP, 2003)

Correlation exploitation in error ranking. - Ted Kremenek; Ken Ashcraft; Junfeng Yang; Dawson R. Engler (SIGSOFT FSE, 2004)