Building Certifications Paths: Forward vs. Reverse. - Yassir Elley; Anne H. Anderson; Steve Hanna; Sean Mullan; Radia J. Perlman; Seth Proctor (NDSS, 2001)

Modeling and analysis of worm defense using stochastic activity networks. - David M. Nicol; Steve Hanna; Frank Stratton; William H. Sanders (SpringSim (3), 2007)

Emulating emulation-resistant malware. - Min Gyung Kang; Heng Yin 001; Steve Hanna; Stephen McCamant; Dawn Song (VMSec@CCS, 2009)

HookScout: Proactive Binary-Centric Hook Detection. - Heng Yin 001; Pongsin Poosankam; Steve Hanna; Dawn Xiaodong Song (DIMVA, 2010)

FLAX: Systematic Discovery of Client-side Validation Vulnerabilities in Rich Web Applications. - Prateek Saxena; Steve Hanna; Pongsin Poosankam; Dawn Song (NDSS, 2010)

A Symbolic Execution Framework for JavaScript. - Prateek Saxena; Devdatta Akhawe; Steve Hanna; Feng Mao; Stephen McCamant; Dawn Song (IEEE Symposium on Security and Privacy, 2010)

NEA: Public Health for the Network. - Steve Hanna; Susan Thomson 002 (IEEE Internet Comput., 2010)

PB-TNC: A Posture Broker (PB) Protocol Compatible with Trusted Network Connect (TNC). - Ravi Sahita; Steve Hanna; Ryan Hurst; Kaushik Narayan (RFC, 2010)

Android permissions demystified. - Adrienne Porter Felt; Erika Chin; Steve Hanna; Dawn Song; David A. Wagner 001 (CCS, 2011)

A survey of mobile malware in the wild. - Adrienne Porter Felt; Matthew Finifter; Erika Chin; Steve Hanna; David A. Wagner 001 (SPSM@CCS, 2011)

Permission Re-Delegation: Attacks and Defenses. - Adrienne Porter Felt; Helen J. Wang; Alexander Moshchuk; Steve Hanna; Erika Chin (USENIX Security Symposium, 2011)

Take Two Software Updates and See Me in the Morning: The Case for Software Security Evaluations of Medical Devices. - Steve Hanna; Rolf Rolles; Andres Molina-Markham; Pongsin Poosankam; Jeremiah Blocki; Kevin Fu; Dawn Song (HealthSec, 2011)

Juxtapp: A Scalable System for Detecting Code Reuse among Android Applications. - Steve Hanna; Ling Huang 001; Edward XueJun Wu; Saung Li; Charles Chen; Dawn Song (DIMVA, 2012)

The Network Endpoint Assessment (NEA) Asokan Attack Analysis. - Joseph Salowey; Steve Hanna (RFC, 2012)

Auto-Discovery VPN Problem Statement and Requirements. - Vishwas Manral; Steve Hanna (RFC, 2013)