An Experimental Evaluation of Simple Methods for Seeding Program Errors. - John C. Knight; Paul Ammann (ICSE, 1985)

Data Diversity: An Approach to Software Fault Tolerance. - Paul Ammann; John C. Knight (IEEE Trans. Computers, 1988)

Issues Influencing the Use of N-Version Programming. - John C. Knight; Paul Ammann (IFIP Congress, 1989)

Extending the creation operation in the Schematic Protection Model. - Paul Ammann; Ravi S. Sandhu (ACSAC, 1990)

On the performance of software testing using multiple versions. - Susan S. Brilliant; John C. Knight; Paul Ammann (FTCS, 1990)

A distributed implementation of the extended schematic protection model. - Paul Ammann; Ravi S. Sandhu; Gurpreet S. Suri (ACSAC, 1991)

A Timestamp Ordering Algorithm for Secure, Single-Version, Multi-Level Databases. - Paul Ammann; Sushil Jajodia (DBSec, 1991)

Safety Analysis for the Extended Schematic Protection Model. - Paul Ammann; Ravi S. Sandhu (S&P, 1991)

Implementing transaction control expressions by checking for absence of access rights. - Paul Ammann; Ravi S. Sandhu (ACSAC, 1992)

The Expressive Power of Multi-Parent Creation in a Monotonic Access Control Model. - Paul Ammann; Richard J. Lipton; Ravi S. Sandhu (CSFW, 1992)

A two snapshot algorithm for concurrency control in multi-level secure databases. - Paul Ammann; Frank Jaeckle; Sushil Jajodia (S&P, 1992)

The Extended Schematic Protection Model - Paul Ammann; Ravi S. Sandhu (J. Comput. Secur., 1992)

Planar Lattice Security Structures for Multilevel Replicated Databases. - Paul Ammann; Sushil Jajodia (DBSec, 1993)

Distributed Timestamp Generation in Planar Lattice Networks. - Paul Ammann; Sushil Jajodia (ACM Trans. Comput. Syst., 1993)

An Efficient Multiversion Algorithm for Secure Servicing of Transaction Reads. - Paul Ammann; Sushil Jajodia (CCS, 1994)

Propagation of Authorizations in Distributed Database Systems. - Pierangela Samarati; Paul Ammann; Sushil Jajodia (CCS, 1994)

A Five Year Perspective on Software Engineering Graduate Programs at George Mason University. - Paul Ammann; Hassan Gomaa; A. Jefferson Offutt; David Rine; Bo Ingvar Sandén (CSEE, 1994)

One-Representative Safety Analysis in the Non-Monotonic Transform Model. - Ravi S. Sandhu; Paul Ammann (CSFW, 1994)

The Effect of Imperfect Error Detection on Reliability Assessment via Life Testing. - Paul Ammann; Susan S. Brilliant; John C. Knight (IEEE Trans. Software Eng., 1994)

Using Formal Methods to Reason about Semantics-Based Decompositions of Transactions. - Paul Ammann; Sushil Jajodia; Indrakshi Ray (VLDB, 1995)

Concurrency Control in a Secure Database via a Two-Snapshot Algorithm. - Paul Ammann; Frank Jaeckle; Sushil Jajodia (J. Comput. Secur., 1995)

The Partitioned Synchronization Rule for Planar Extendible Partial Orders. - Paul Ammann; Vijayalakshmi Atluri; Sushil Jajodia (IEEE Trans. Knowl. Data Eng., 1995)

On-The-Fly Reading of Entire Databases. - Paul Ammann; Sushil Jajodia; Padmaja Mavuluri (IEEE Trans. Knowl. Data Eng., 1995)

Ensuring Atomicity of Multilevel Transactions. - Paul Ammann; Sushil Jajodia; Indrakshi Ray (S&P, 1996)

Maintaining Replicated Authorizations in Distributed Database Systems. - Pierangela Samarati; Paul Ammann; Sushil Jajodia (Data Knowl. Eng., 1996)

The Expressive Power of Multi-parent Creation in Monotonic Access Control Models. - Paul Ammann; Richard J. Lipton; Ravi S. Sandhu (J. Comput. Secur., 1996)

Globally Consistent Event Ordering in One-Directional Distributed Environments. - Paul Ammann; Sushil Jajodia; Phyllis G. Frankl (IEEE Trans. Parallel Distributed Syst., 1996)

Semantic-Based Decomposition of Transactions. - Paul Ammann; Sushil Jajodia; Indrakshi Ray (Advanced Transaction Models and Architectures, 1997)

Implementing Semantic-Based Decomposition of Transactions. - Sushil Jajodia; Indrakshi Ray; Paul Ammann (CAiSE, 1997)

Maintaining Knowledge Currency in the 21st Century. - Paul Ammann; Jeff Offutt (CSEE&T, 1997)

Surviving information warfare attacks on databases. - Paul Ammann; Sushil Jajodia; Catherine D. McCollum; Barbara T. Blaustein (S&P, 1997)

Applying Data Redundancy to Differential Equation Solvers. - Paul Ammann; Dahlard L. Lukes; John C. Knight (Ann. Softw. Eng., 1997)

Semantics-based transaction processing: satisfying conflicting objectives. - Paul Ammann; Sushil Jajodia (IEEE Concurrency, 1997)

Rethinking integrity [distributed databases]. - Paul Ammann; Sushil Jajodia (IEEE Concurrency, 1997)

Applying Formal Methods to Semantic-Based Decomposition of Transactions. - Paul Ammann; Sushil Jajodia; Indrakshi Ray (ACM Trans. Database Syst., 1997)

Using Model Checking to Generate Tests from Specifications. - Paul Ammann; Paul E. Black; William Majurski (ICFEM, 1998)

A Semantic-Based Transaction Processing Model for Multilevel Transactions. - Indrakshi Ray; Paul Ammann; Sushil Jajodia (J. Comput. Secur., 1998)

A Specification-Based Coverage Metric to Evaluate Test Sets. - Paul Ammann; Paul E. Black (HASE, 1999)

Incorporating Transaction Semantics to Reduce Reprocessing Overhead in Replicated Mobile Data Applications. - Peng Liu 005; Paul Ammann; Sushil Jajodia (ICDCS, 1999)

The Integrity Challenge. - Paul Ammann; Sushil Jajodia (IICIS, 1999)

Trusted Recovery. - Sushil Jajodia; Catherine D. McCollum; Paul Ammann (Commun. ACM, 1999)

Surviving Information Warfare Attacks. - Sushil Jajodia; Paul Ammann; Catherine D. McCollum (Computer, 1999)

Computer Security, Fault Tolerance, And Software Assurance. - Paul Ammann; Sushil Jajodia (IEEE Concurr., 1999)

Evaluation of Three Specification-Based Testing Criteria. - Aynur Abdurazik; Paul Ammann; Wei Ding 003; A. Jefferson Offutt (ICECCS, 2000)

Using Model Checking to Analyze Network Vulnerabilities. - Ronald W. Ritchey; Paul Ammann (S&P, 2000)

Rewriting Histories: Recovering from Malicious Transactions. - Peng Liu 005; Paul Ammann; Sushil Jajodia (Distributed Parallel Databases, 2000)

Using semantic correctness in multidatabases to achieve local autonomy, distribute coordination, and maintain global integrity. - Indrakshi Ray; Paul Ammann; Sushil Jajodia (Inf. Sci., 2000)

System testing via mutation analysis of model checking specifications. - Paul Ammann (ACM SIGSOFT Softw. Eng. Notes, 2000)

Using a Model Checker to Test Safety Properties. - Paul Ammann; Wei Ding 003; Daling Xu (ICECCS, 2001)

Scalable, graph-based network vulnerability analysis. - Paul Ammann; Duminda Wijesekera; Saket Kaushik (CCS, 2002)

Recovery from Malicious Transactions. - Paul Ammann; Sushil Jajodia; Peng Liu 005 (IEEE Trans. Knowl. Data Eng., 2002)

Coverage Criteria for Logical Expressions. - Paul Ammann; A. Jefferson Offutt; Hong Huang (ISSRE, 2003)

Generating test data from state-based specifications. - A. Jefferson Offutt; Shaoying Liu; Aynur Abdurazik; Paul Ammann (Softw. Test. Verification Reliab., 2003)

A Policy Driven Approach to Email Services. - Saket Kaushik; Paul Ammann; Duminda Wijesekera; William H. Winsborough; Ronald W. Ritchey (POLICY, 2004)

A Host-Based Approach to Network Attack Chaining Analysis. - Paul Ammann; Joseph Pamula; Julie A. Street; Ronald W. Ritchey (ACSAC, 2005)

Email feedback: a policy-based approach to overcoming false positives. - Saket Kaushik; William H. Winsborough; Duminda Wijesekera; Paul Ammann (FMSE, 2005)

Policy-based dissemination of partial web-ontologies. - Saket Kaushik; Duminda Wijesekera; Paul Ammann (SWS, 2005)

A weakest-adversary security metric for network configuration security analysis. - Joseph Pamula; Sushil Jajodia; Paul Ammann; Vipin Swarup (QoP, 2006)

Policy Transformations for Preventing Leakage of Sensitive Information in Email Systems. - Saket Kaushik; William H. Winsborough; Duminda Wijesekera; Paul Ammann (DBSec, 2006)

An Algebra for Composing Ontologies. - Saket Kaushik; Csilla Farkas; Duminda Wijesekera; Paul Ammann (FOIS, 2006)

An industrial case study of structural testing applied to safety-critical embedded software. - Jing Guan; Jeff Offutt; Paul Ammann (ISESE, 2006)

BPEL orchestration of secure webmail. - Saket Kaushik; Duminda Wijesekera; Paul Ammann (SWS, 2006)

A framework for establishing, assessing, and managing trust in inter-organizational relationships. - Joseph Pamula; Paul Ammann; Sushil Jajodia; Ronald W. Ritchey (SWS, 2006)

Relating counterexamples to test cases in CTL model checking specifications. - Duminda Wijesekera; Paul Ammann; Lingya Sun; Gordon Fraser 001 (A-MOST, 2007)

Can-Follow Concurrency Control. - Peng Liu 005; Jie Li 002; Sushil Jajodia; Paul Ammann (IEEE Trans. Computers, 2007)

Introduction to Software Testing. - Paul Ammann; Jeff Offutt (Cambridge University Press, 2008)

Coverage Criteria for State Based Specifications. - Paul Ammann; Jeff Offutt; Wuzhi Xu (Formal Methods and Testing, 2008)

Reachability and Propagation for LTL Requirements Testing. - Gordon Fraser 001; Paul Ammann (QSIC, 2008)

Reconciling perspectives of software logic testing. - Garrett Kent Kaminski; Gregory Williams 002; Paul Ammann (Softw. Test. Verification Reliab., 2008)

Using Logic Criterion Feasibility to Reduce Test Set Size While Guaranteeing Fault Detection. - Garrett Kent Kaminski; Paul Ammann (ICST, 2009)

Using a Fault Hierarchy to Improve the Efficiency of DNF Logic Mutation Testing. - Garrett Kent Kaminski; Paul Ammann (ICST, 2009)

Using Logic Criterion Feasibility to Reduce Test Set Size While Guaranteeing Double Fault Detection. - Garrett Kent Kaminski; Paul Ammann (ICST Workshops, 2009)

Issues in using model checkers for test case generation. - Gordon Fraser 001; Franz Wotawa; Paul Ammann (J. Syst. Softw., 2009)

Testing with model checkers: a survey. - Gordon Fraser 001; Franz Wotawa; Paul Ammann (Softw. Test. Verification Reliab., 2009)

Applications of Optimization to Logic Testing. - Garrett Kent Kaminski; Paul Ammann (ICST Workshops, 2010)

Applying MCDC to Large DNF Logic Expressions. - Garrett Kent Kaminski; Paul Ammann (Software Engineering Research and Practice, 2010)

An Evaluation of the Minimal-MUMCUT Logic Criterion and Prime Path Coverage. - Garrett Kent Kaminski; Upsorn Praphamontripong; Paul Ammann; Jeff Offutt (Software Engineering Research and Practice, 2010)

Using abstraction and Web applications to teach criteria-based test design. - Jeff Offutt; Nan Li 008; Paul Ammann; Wuzhi Xu (CSEE&T, 2011)

Better predicate testing. - Gary Kaminski; Paul Ammann; Jeff Offutt (AST, 2011)

A logic mutation approach to selective mutation for programs and queries. - Garrett Kent Kaminski; Upsorn Praphamontripong; Paul Ammann; Jeff Offutt (Inf. Softw. Technol., 2011)

Reducing logic test set size while preserving fault detection. - Garrett Kent Kaminski; Paul Ammann (Softw. Test. Verification Reliab., 2011)

Adding Criteria-Based Tests to Test Driven Development. - William Shelton; Nan Li 008; Paul Ammann; Jeff Offutt (ICST, 2012)

Guest Editorial for the Special Issue on Model-Based Testing. - Paul Ammann; Gordon Fraser 001; Franz Wotawa (Softw. Test. Verification Reliab., 2012)

Improving logic-based testing. - Gary Kaminski; Paul Ammann; Jeff Offutt (J. Syst. Softw., 2013)

Establishing Theoretical Minimal Sets of Mutants. - Paul Ammann; Márcio Eduardo Delamaro; Jeff Offutt (ICST, 2014)

Designing Deletion Mutation Operators. - Márcio Eduardo Delamaro; Jeff Offutt; Paul Ammann (ICST, 2014)

Mutant Subsumption Graphs. - Bob Kurtz; Paul Ammann; Márcio Eduardo Delamaro; Jeff Offutt; Lin Deng 001 (ICST Workshops, 2014)

Generating Test Data to Distinguish Conjunctive Queries with Equalities. - Preetham Vemasani; Alexander Brodsky 001; Paul Ammann (ICST Workshops, 2014)

EcoDroid: An Approach for Energy-Based Ranking of Android Apps. - Reyhaneh Jabbarvand Behrouz; Alireza Sadeghi; Joshua Garcia; Sam Malek; Paul Ammann (GREENS, 2015)

Towards mutation analysis of Android apps. - Lin Deng 001; Nariman Mirzaei; Paul Ammann; Jeff Offutt (ICST Workshops, 2015)

Static analysis of mutant subsumption. - Bob Kurtz; Paul Ammann; Jeff Offutt (ICST Workshops, 2015)

Are We There Yet? How Redundant and Equivalent Mutants Affect Determination of Test Completeness. - Bob Kurtz; Paul Ammann; Jeff Offutt; Mariet Kurtz (ICST Workshops, 2016)

Analyzing the validity of selective mutation with dominator mutants. - Bob Kurtz; Paul Ammann; Jeff Offutt; Márcio Eduardo Delamaro; Mariet Kurtz; Nida Gökçe (SIGSOFT FSE, 2016)

Barriers to Usable Security? Three Organizational Case Studies. - Deanna D. Caputo; Shari Lawrence Pfleeger; M. Angela Sasse; Paul Ammann; Jeff Offutt; Lin Deng 001 (IEEE Secur. Priv., 2016)

Inferring mutant utility from program context. - René Just; Bob Kurtz; Paul Ammann (ISSTA, 2017)

A Novel Self-Paced Model for Teaching Programming. - Jeff Offutt; Paul Ammann; Kinga Dobolyi; Chris Kauffmann; Jaime Lester; Upsorn Praphamontripong; Huzefa Rangwala; Sanjeev Setia; Pearl Y. Wang; Liz White (L@S, 2017)

Mutation operators for testing Android apps. - Lin Deng 001; Jeff Offutt; Paul Ammann; Nariman Mirzaei (Inf. Softw. Technol., 2017)

An Industrial Application of Mutation Testing: Lessons, Challenges, and Research Directions. - Goran Petrovic; Marko Ivankovic; Bob Kurtz; Paul Ammann; René Just (ICST Workshops, 2018)

Guiding testing effort using mutant utility. - Justin Alvin; Bob Kurtz; Paul Ammann; Huzefa Rangwala; René Just (ICSE (Companion Volume), 2019)

Evaluating a Test Automation Decision Support Tool. - Kesina Baral; Rasika Mohod; Jennifer Flamm; Seth Goldrich; Paul Ammann (ICST Workshops, 2019)

Teaching a Testing Concept (JUnit) with Active Learning. - Kesina Baral; Paul Ammann (ICST Workshops, 2020)

Revisiting the Relationship Between Fault Detection, Test Adequacy Criteria, and Test Set Size. - Yiqun T. Chen 001; Rahul Gopinath; Anita Tadakamalla; Michael D. Ernst; Reid Holmes; Gordon Fraser 001; Paul Ammann; René Just (ASE, 2020)

Practice makes better: quiz retake software to increase student learning. - Kesina Baral; Jeff Offutt; Paul Ammann; Rasika Mohod (EASEAI@ESEC/SIGSOFT FSE, 2021)

Prioritizing Mutants to Guide Mutation Testing. - Samuel J. Kaufman; Ryan Featherman; Justin Alvin; Bob Kurtz; Paul Ammann; René Just (ICSE, 2022)

CONFETTI: Amplifying Concolic Guidance for Fuzzers. - James Kukucka; Luís Pina; Paul Ammann; Jonathan Bell 001 (ICSE, 2022)

230,439 Test Failures Later: An Empirical Evaluation of Flaky Failure Classifiers. - Abdulrahman Alshammari; Paul Ammann; Michael Hilton; Jonathan Bell 001 (ICST, 2024)

A Study of Flaky Failure De-Duplication to Identify Unreliably Killed Mutants. - Abdulrahman Alshammari; Paul Ammann; Michael Hilton; Jonathan Bell 001 (ICSTW, 2024)

An Empirical Examination of Fuzzer Mutator Performance. - James Kukucka; Luís Pina; Paul Ammann; Jonathan Bell 001 (ISSTA, 2024)

230, 439 Test Failures Later: An Empirical Evaluation of Flaky Failure Classifiers. - Abdulrahman Alshammari; Paul Ammann; Michael Hilton; Jonathan Bell 001 (CoRR, 2024)