Computer viruses and malware by John Aycock. - Michael Sanford (SIGACT News, 2010)

Security mutation testing of the FileZilla FTP server. - Daniel Woodraska; Michael Sanford; Dianxiang Xu (SAC, 2011)

Security Analysis of FileZilla Server Using Threat Models. - Michael Sanford; Daniel Woodraska; Dianxiang Xu (SEKE, 2011)

Automated Security Test Generation with Formal Threat Models. - Dianxiang Xu; Manghui Tu; Michael Sanford; Lijo Thomas; Daniel Woodraska; Weifeng Xu (IEEE Trans. Dependable Secur. Comput., 2012)

Testing access control and obligation policies. - Dianxiang Xu; Michael Sanford; Zhaoliang Liu; Spencer Johnson; Mark Emry; Brad Brockmueller; Michael To (ICNC, 2013)