Specification and Verification of the UCLA Unix Security Kernel (Extended Abstract). - Bruce J. Walker; Richard A. Kemmerer; Gerald J. Popek (SOSP, 1979)

Specification and Verification of the UCLA Unix Security Kernel. - Bruce J. Walker; Richard A. Kemmerer; Gerald J. Popek (Commun. ACM, 1980)

Toward Modular Verifiable Exception Handling. - Daniel M. Berry; Richard A. Kemmerer; Arndt von Staa; Shaula Yemini (Comput. Lang., 1980)

Status of ongoing security-relevant projects. - Richard A. Kemmerer (ACM SIGSOFT Softw. Eng. Notes, 1981)

A Practical Approach to Identifying Storage and Timing Channels. - Richard A. Kemmerer (S&P, 1982)

SDC Secure Release Terminal Project. - Thomas H. Hinke; Jose Althouse; Richard A. Kemmerer (S&P, 1983)

Shared Resource Matrix Methodology: An Approach to Identifying Storage and Timing Channels - Richard A. Kemmerer (ACM Trans. Comput. Syst., 1983)

Complexity measures for assembly language programs. - J. David Blaine; Richard A. Kemmerer (J. Syst. Softw., 1985)

INATEST: an interactive environment for testing formal specifications. - Steven T. Eckmann; Richard A. Kemmerer (ACM SIGSOFT Softw. Eng. Notes, 1985)

Overview of foundations. - Richard A. Kemmerer (ACM SIGSOFT Softw. Eng. Notes, 1985)

UNISEX: A UNIX-based Symbolic EXecutor for Pascal. - Richard A. Kemmerer; Steven T. Eckman (Softw. Pract. Exp., 1985)

Testing Formal Specifications to Detect Design Errors. - Richard A. Kemmerer (IEEE Trans. Software Eng., 1985)

RT-ASLAN: A Specification Language for Real-Time Systems. - Brent Auernheimer; Richard A. Kemmerer (IEEE Trans. Software Eng., 1986)

Analyzing Encryption Protocols Using Formal Verification Authentication Schemes. - Richard A. Kemmerer (CRYPTO, 1987)

Formal Specification and Verification Techniques for Secure Database Systems. - Richard A. Kemmerer (DBSec, 1987)

Using Formal Verification Techniques to Analyze Encryption Protocols. - Richard A. Kemmerer (S&P, 1987)

An Experience Using Two Covert Channel Analysis Techniques on a Real System Design. - J. Thomas Haigh; Richard A. Kemmerer; John McHugh; William D. Young (IEEE Trans. Software Eng., 1987)

Formal Specification of a Mental Health Delivery System. - Richard A. Kemmerer (DBSec, 1989)

Completely Validated Software. - Richard A. Kemmerer (ICSE, 1989)

Analyzing encryption protocols using formal verification techniques. - Richard A. Kemmerer (IEEE J. Sel. Areas Commun., 1989)

A Multilevel Formal Specification of a Mental Health Care Database. - Richard A. Kemmerer (DBSec, 1990)

Integrating Formal Methods into the Development Process. - Richard A. Kemmerer (IEEE Softw., 1990)

ASTRAL: An Assertion Language for Specifying Realtime Systems. - Carlo Ghezzi; Richard A. Kemmerer (ESEC, 1991)

Covert Flow Trees: A Technique for Identifying and Analyzing Covert Storage Channels. - Phillip A. Porras; Richard A. Kemmerer (S&P, 1991)

Covert Flow Trees: A Visual Approach to Analyzing Covert Storage Channels. - Richard A. Kemmerer; Phillip A. Porras (IEEE Trans. Software Eng., 1991)

Penetration state transition analysis: A rule-based intrusion detection approach. - Phillip A. Porras; Richard A. Kemmerer (ACSAC, 1992)

SoundWorks: An Object-Oriented Distributed System for Digital Sound. - Jonathan D. Reichbach; Richard A. Kemmerer (Computer, 1992)

Guest Editors' Introduction: Specification and Analysis of Real-Time Systems. - Richard A. Kemmerer; Carlo Ghezzi (IEEE Trans. Software Eng., 1992)

Quality Assurance Working Group. - Richard A. Kemmerer (Formal Methods in Systems Engineering, 1993)

The Composability of ASTRAL Realtime Specifications. - Alberto Coen-Porisini; Richard A. Kemmerer (ISSTA, 1993)

Aslantest: A Symbolic Execution Tool for Testing Aslan Formal Specifications. - Jeffrey Douglas; Richard A. Kemmerer (ISSTA, 1994)

Three System for Cryptographic Protocol Analysis. - Richard A. Kemmerer; Catherine Meadows 001; Jonathan K. Millen (J. Cryptol., 1994)

A Formal Framework for ASTRAL Intralevel Proof Obligations. - Alberto Coen-Porisini; Richard A. Kemmerer; Dino Mandrioli (IEEE Trans. Software Eng., 1994)

A Formal Framework for ASTRAL Inter-level Proof Obligations. - Alberto Coen-Porisini; Richard A. Kemmerer; Dino Mandrioli (ESEC, 1995)

State Transition Analysis: A Rule-Based Intrusion Detection Approach. - Koral Ilgun; Richard A. Kemmerer; Phillip A. Porras (IEEE Trans. Software Eng., 1995)

A Modular Covert Channel Analysis Methodology for Trusted DG/UXTM. - Richard A. Kemmerer; Tad Taylor (ACSAC, 1996)

Why State-of-the-Art is not State-of-the-Practice (Panel Abstract). - Richard Denney; Richard A. Kemmerer; Nancy G. Leveson; Alberto Savoia (ISSTA, 1996)

Security Issues in Distributed Software. - Richard A. Kemmerer (ESEC / SIGSOFT FSE, 1997)

Formally Specifying and Verifying Real-Time Systems. - Richard A. Kemmerer (ICFEM, 1997)

Specification of Realtime Systems Using ASTRAL. - Alberto Coen-Porisini; Carlo Ghezzi; Richard A. Kemmerer (IEEE Trans. Software Eng., 1997)

NetSTAT: A Network-Based Intrusion Detection Approach. - Giovanni Vigna; Richard A. Kemmerer (ACSAC, 1998)

The Most Influential Papers from the ISSTA Research Community (Panel). - Richard G. Hamlet; Richard A. Kemmerer; Edward F. Miller; Debra J. Richardson (ISSTA, 1998)

Web Browsers and Security. - Flavio De Paoli; André L. M. dos Santos; Richard A. Kemmerer (Mobile Agents and Security, 1998)

Safe Areas of Computation for Secure Computing with Insecure Applications. - André L. M. dos Santos; Richard A. Kemmerer (ACSAC, 1999)

Using the ASTRAL Model Checker to Analyze Mobile IP. - Zhe Dang; Richard A. Kemmerer (ICSE, 1999)

A Symbolic Model Checker for Testing ASTRAL Real-Time Specifications. - Zhe Dang; Richard A. Kemmerer (RTCSA, 1999)

The Design and Analysis of Real-Time Systems Using the ASTRAL Software Development Environment. - Paul Z. Kolano; Zhe Dang; Richard A. Kemmerer (Ann. Softw. Eng., 1999)

NetSTAT: A Network-based Intrusion Detection System. - Giovanni Vigna; Richard A. Kemmerer (J. Comput. Secur., 1999)

Editor's Note. - Richard A. Kemmerer (IEEE Trans. Software Eng., 1999)

Editorial. - Richard A. Kemmerer (IEEE Trans. Software Eng., 1999)

Implementing Security Policies using the Safe Areas of Computation Approach. - André L. M. dos Santos; Richard A. Kemmerer (ACSAC, 2000)

Binary Reachability Analysis of Discrete Pushdown Timed Automata. - Zhe Dang; Oscar H. Ibarra; Tevfik Bultan; Richard A. Kemmerer; Jianwen Su (CAV, 2000)

Parallel Refinement Mechanisms for Real-Time Systems. - Paul Z. Kolano; Richard A. Kemmerer; Dino Mandrioli (FASE, 2000)

Three approximation techniques for ASTRAL symbolic model checking of infinite state real-time systems. - Zhe Dang; Richard A. Kemmerer (ICSE, 2000)

Classification schemes to aid in the analysis of real-time systems. - Paul Z. Kolano; Richard A. Kemmerer (ISSTA, 2000)

Conter Machines: Decidable Properties and Applications to Verification Problems. - Oscar H. Ibarra; Jianwen Su; Zhe Dang; Tevfik Bultan; Richard A. Kemmerer (MFCS, 2000)

Editorial: New EIC Introduction. - Richard A. Kemmerer (IEEE Trans. Software Eng., 2000)

Decidable Approximations on Generalized and Parameterized Discrete Timed Automata. - Zhe Dang; Oscar H. Ibarra; Richard A. Kemmerer (COCOON, 2001)

Evaluating the Security of Three Java-Based Mobile Agent Systems. - Sebastian Fischmeister; Giovanni Vigna; Richard A. Kemmerer (Mobile Agents, 2001)

Designing a Web of Highly-Configurable Intrusion Detection Sensors. - Giovanni Vigna; Richard A. Kemmerer; Per Blix (Recent Advances in Intrusion Detection, 2001)

On Presburger Liveness of Discrete Timed Automata. - Zhe Dang; Pierluigi San Pietro; Richard A. Kemmerer (STACS, 2001)

Past Pushdown Timed Automata. - Zhe Dang; Tevfik Bultan; Oscar H. Ibarra; Richard A. Kemmerer (CIAA, 2001)

Security Testing of an Online Banking Service. - André L. M. dos Santos; Giovanni Vigna; Richard A. Kemmerer (E-Commerce Security and Privacy, 2001)

A Practical Approach to Identifying Storage and Timing Channels: Twenty Years Later. - Richard A. Kemmerer (ACSAC, 2002)

Composable Tools For Network Discovery and Security Analysis. - Giovanni Vigna; Fredrik Valeur; Jingyu Zhou; Richard A. Kemmerer (ACSAC, 2002)

Stateful Intrusion Detection for High-Speed Networks. - Christopher Krügel; Fredrik Valeur; Giovanni Vigna; Richard A. Kemmerer (S&P, 2002)

STATL: An Attack Language for State-Based Intrusion Detection. - Steven T. Eckmann; Giovanni Vigna; Richard A. Kemmerer (J. Comput. Secur., 2002)

Counter Machines and Verification Problems. - Oscar H. Ibarra; Jianwen Su; Zhe Dang; Tevfik Bultan; Richard A. Kemmerer (Theor. Comput. Sci., 2002)

An Experience Developing an IDS Stimulator for the Black-Box Testing of Network Intrusion Detection Systems. - Darren Mutz; Giovanni Vigna; Richard A. Kemmerer (ACSAC, 2003)

A Stateful Intrusion Detection System for World-Wide Web Servers. - Giovanni Vigna; William K. Robertson; Vishal Kher; Richard A. Kemmerer (ACSAC, 2003)

Cybersecurity. - Richard A. Kemmerer (ICSE, 2003)

Internet Security and Intrusion Detection. - Richard A. Kemmerer; Giovanni Vigna (ICSE, 2003)

Designing and implementing a family of intrusion detection systems. - Giovanni Vigna; Fredrik Valeur; Richard A. Kemmerer (ESEC / SIGSOFT FSE, 2003)

Generalized discrete timed automata: decidable approximations for safety verificatio. - Zhe Dang; Oscar H. Ibarra; Richard A. Kemmerer (Theor. Comput. Sci., 2003)

Presburger liveness verification of discrete timed automata. - Zhe Dang; Pierluigi San Pietro; Richard A. Kemmerer (Theor. Comput. Sci., 2003)

An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks. - Giovanni Vigna; Sumit Gwalani; Kavitha Srinivasan; Elizabeth M. Belding-Royer; Richard A. Kemmerer (ACSAC, 2004)

Past pushdown timed automata and safety verification. - Zhe Dang; Tevfik Bultan; Oscar H. Ibarra; Richard A. Kemmerer (Theor. Comput. Sci., 2004)

A Comprehensive Approach to Intrusion Detection Alert Correlation. - Fredrik Valeur; Giovanni Vigna; Christopher Krügel; Richard A. Kemmerer (IEEE Trans. Dependable Secur. Comput., 2004)

Designing and implementing a family of intrusion detection systems. - Richard A. Kemmerer (ASE, 2005)

Hi-DRA: Intrusion Detection for Internet Security. - Richard A. Kemmerer; Giovanni Vigna (Proc. IEEE, 2005)

Digital Forensic Reconstruction and the Virtual Security Testbed ViSe. - André Årnes; Paul Haas; Giovanni Vigna; Richard A. Kemmerer (DIMVA, 2006)

SNOOZE: Toward a Stateful NetwOrk prOtocol fuzZEr. - Greg Banks; Marco Cova; Viktoria Felmetsger; Kevin C. Almeroth; Richard A. Kemmerer; Giovanni Vigna (ISC, 2006)

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks. - William K. Robertson; Giovanni Vigna; Christopher Krügel; Richard A. Kemmerer (NDSS, 2006)

Using Hidden Markov Models to Evaluate the Risks of Intrusions. - André Årnes; Fredrik Valeur; Giovanni Vigna; Richard A. Kemmerer (RAID, 2006)

So You Think You Can Dance? - Richard A. Kemmerer (ACSAC, 2007)

Exploiting Execution Context for the Detection of Anomalous System Calls. - Darren Mutz; William K. Robertson; Giovanni Vigna; Richard A. Kemmerer (RAID, 2007)

Using a virtual security testbed for digital forensic reconstruction. - André Årnes; Paul Haas; Giovanni Vigna; Richard A. Kemmerer (J. Comput. Virol., 2007)

08102 Executive Summary – Perspectives Workshop: Network Attack Detection and Defense. - Georg Carle; Falko Dressler; Richard A. Kemmerer; Hartmut König; Christopher Kruegel (Network Attack Detection and Defense, 2008)

08102 Manifesto – Perspectives Workshop: Network Attack Detection and Defense. - Georg Carle; Falko Dressler; Richard A. Kemmerer; Hartmut König; Christopher Kruegel; Pavel Laskov (Network Attack Detection and Defense, 2008)

08102 Outcome Working Group – Situational Awareness. - Richard A. Kemmerer; Roland Büschkes; Ali Fessi; Hartmut König; Peter Herrmann; Stephen D. Wolthusen; Marko Jahnke; Hervé Debar; Ralph Holz; Tanja Zseby; Dirk Haage (Network Attack Detection and Defense, 2008)

Are your votes really counted?: testing the security of real-world electronic voting systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (ISSTA, 2008)

Your botnet is my botnet: analysis of a botnet takeover. - Brett Stone-Gross; Marco Cova; Lorenzo Cavallaro; Bob Gilbert; Martin Szydlowski; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (CCS, 2009)

Formal analysis of attacks for e-voting system. - Komminist Weldemariam; Richard A. Kemmerer; Adolfo Villafiorita (CRiSIS, 2009)

How to Steal a Botnet and What Can Happen When You Do. - Richard A. Kemmerer (ICICS, 2009)

Network attack detection and defense - Manifesto of the Dagstuhl Perspective Workshop, March 2nd-6th, 2008. - Georg Carle; Falko Dressler; Richard A. Kemmerer; Hartmut König; Christopher Kruegel; Pavel Laskov (Comput. Sci. Res. Dev., 2009)

Formal Specification and Analysis of an E-voting System. - Komminist Weldemariam; Richard A. Kemmerer; Adolfo Villafiorita (ARES, 2010)

Refinement and Verification of Real-Time Systems - Paul Z. Kolano; Carlo A. Furia; Richard A. Kemmerer; Dino Mandrioli (CoRR, 2010)

An Experience in Testing the Security of Real-World Electronic Voting Systems. - Davide Balzarotti; Greg Banks; Marco Cova; Viktoria Felmetsger; Richard A. Kemmerer; William K. Robertson; Fredrik Valeur; Giovanni Vigna (IEEE Trans. Software Eng., 2010)

MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper). - Greg Banks; Aristide Fattori; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (DIMVA, 2011)

Understanding fraudulent activities in online ad exchanges. - Brett Stone-Gross; Ryan Stevens; Apostolis Zarras; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (Internet Measurement Conference, 2011)

Dymo: Tracking Dynamic Code Identity. - Bob Gilbert; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (RAID, 2011)

The Underground Economy of Fake Antivirus Software. - Brett Stone-Gross; Ryan Abman; Richard A. Kemmerer; Christopher Kruegel; Douglas G. Steigerwald (WEIS, 2011)

The Underground Economy of Fake Antivirus Software. - Brett Stone-Gross; Ryan Abman; Richard A. Kemmerer; Christopher Kruegel; Douglas G. Steigerwald; Giovanni Vigna (WEIS (Springer Volume), 2011)

Analysis of a Botnet Takeover. - Brett Stone-Gross; Marco Cova; Bob Gilbert; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (IEEE Secur. Priv., 2011)

Formal analysis of an electronic voting system: An experience report. - Komminist Weldemariam; Richard A. Kemmerer; Adolfo Villafiorita (J. Syst. Softw., 2011)

Formulating Cyber-Security as Convex Optimization Problems. - Kyriakos G. Vamvoudakis; João P. Hespanha 001; Richard A. Kemmerer; Giovanni Vigna (CPSW@CISS, 2013)

20 Years of Network and Distributed Systems Security: The Good, the Bad, and the Ugly. - Richard A. Kemmerer (NDSS, 2013)

Targeted Attacks against Industrial Control Systems: Is the Power Industry Prepared? - Maria B. Line; Ali Zand; Gianluca Stringhini; Richard A. Kemmerer (SEGS@CCS, 2014)

Rippler: Delay injection for service dependency detection. - Ali Zand; Giovanni Vigna; Richard A. Kemmerer; Christopher Kruegel (INFOCOM, 2014)

The Tricks of the Trade: What Makes Spam Campaigns Successful? - Jane Iedemska; Gianluca Stringhini; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (IEEE Symposium on Security and Privacy Workshops, 2014)

Know Your Achilles' Heel: Automatic Detection of Network Critical Services. - Ali Zand; Amir Houmansadr; Giovanni Vigna; Richard A. Kemmerer; Christopher Kruegel (ACSAC, 2015)

Prison: Tracking Process Interactions to Contain Malware. - Benjamin Caillat; Bob Gilbert; Richard A. Kemmerer; Christopher Kruegel; Giovanni Vigna (HPCC/CSS/ICESS, 2015)