MET: an experimental system for Malicious Email Tracking. - Manasi Bhattacharyya; Shlomo Hershkop; Eleazar Eskin (NSPW, 2002)

Detecting Malicious Software by Monitoring Anomalous Windows Registry Accesses. - Frank Apap; Andrew Honig; Shlomo Hershkop; Eleazar Eskin; Salvatore J. Stolfo (RAID, 2002)

EMT/MET: Systems for Modeling and Detecting Errant Email. - Salvatore J. Stolfo; Shlomo Hershkop; Ke Wang 009; Olivier Nimeskern (DISCEX (2), 2003)

Behavior Profiling of Email. - Salvatore J. Stolfo; Shlomo Hershkop; Ke Wang 009; Olivier Nimeskern; Chia-Wei Hu (ISI, 2003)

A Behavior-Based Approach to Securing Email Systems. - Salvatore J. Stolfo; Shlomo Hershkop; Ke Wang 009; Olivier Nimeskern; Chia-Wei Hu (MMM-ACNS, 2003)

Email archive analysis through graphical visualization. - Wei-Jen Li; Shlomo Hershkop; Salvatore J. Stolfo (VizSEC, 2004)

Identifying spam without peeking at the contents. - Shlomo Hershkop; Salvatore J. Stolfo (ACM Crossroads, 2004)

Email mining toolkit supporting law enforcement forensic analyses. - Salvatore J. Stolfo; Shlomo Hershkop (DG.O, 2005)

Anomaly Detection in Computer Security and an Application to File System Accesses. - Salvatore J. Stolfo; Shlomo Hershkop; Linh H. Bui; Ryan Ferster; Ke Wang 009 (ISMIS, 2005)

Combining email models for false positive reduction. - Shlomo Hershkop; Salvatore J. Stolfo (KDD, 2005)

A comparative evaluation of two algorithms for Windows Registry Anomaly Detection. - Salvatore J. Stolfo; Frank Apap; Eleazar Eskin; Katherine A. Heller; Shlomo Hershkop; Andrew Honig; Krysta M. Svore (J. Comput. Secur., 2005)

A temporal based forensic analysis of electronic communication. - Salvatore J. Stolfo; Germán Creamer; Shlomo Hershkop (DG.O, 2006)

Behavior-based modeling and its application to Email analysis. - Salvatore J. Stolfo; Shlomo Hershkop; Chia-Wei Hu; Wei-Jen Li; Olivier Nimeskern; Ke Wang 009 (ACM Trans. Internet Techn., 2006)

Segmentation and Automated Social Hierarchy Detection through Email Network Analysis. - Germán Creamer; Ryan Rowe; Shlomo Hershkop; Salvatore J. Stolfo (WebKDD/SNA-KDD, 2007)

A Survey of Insider Attack Detection Research. - Malek Ben Salem 001; Shlomo Hershkop; Salvatore J. Stolfo (Insider Attack and Cyber Security, 2008)

Baiting Inside Attackers Using Decoy Documents. - Brian M. Bowen; Shlomo Hershkop; Angelos D. Keromytis; Salvatore J. Stolfo (SecureComm, 2009)

Designing Host and Network Sensors to Mitigate the Insider Threat. - Brian M. Bowen; Malek Ben Salem 001; Shlomo Hershkop; Angelos D. Keromytis; Salvatore J. Stolfo (IEEE Secur. Priv., 2009)

System Level User Behavior Biometrics using Fisher Features and Gaussian Mixture Models. - Yingbo Song; Malek Ben Salem 001; Shlomo Hershkop; Salvatore J. Stolfo (IEEE Symposium on Security and Privacy Workshops, 2013)

Active authentication using file system decoys and user behavior modeling: results of a large scale study. - Jonathan Voris; Yingbo Song; Malek Ben Salem 001; Shlomo Hershkop; Salvatore J. Stolfo (Comput. Secur., 2019)

DeepMatch: practical deep packet inspection in the data plane using network processors. - Joel Hypolite; John Sonchack; Shlomo Hershkop; Nathan Dautenhahn; André DeHon; Jonathan M. Smith (CoNEXT, 2020)

Discovering Organizational Hierarchy through a Corporate Ranking Algorithm: The Enron Case. - Germán Creamer; Salvatore J. Stolfo; Mateo Creamer; Shlomo Hershkop; Ryan Rowe (Complex., 2022)