BLOCK: a black-box approach for detection of state violation attacks towards web applications. - Xiaowei Li 003; Yuan Xue 001 (ACSAC, 2011)

Context-Aware Anomaly Detection for Electronic Medical Record Systems. - Xiaowei Li 003; Yuan Xue 001; You Chen 001; Bradley A. Malin (HealthSec, 2011)

Towards understanding the usage pattern of web-based electronic medical record systems. - Xiaowei Li 003; Yuan Xue 001; Bradley A. Malin (WOWMOM, 2011)

SENTINEL: securing database from logic flaws in web applications. - Xiaowei Li 003; Wei Yan; Yuan Xue 001 (CODASPY, 2012)

Integrated simulation and emulation platform for cyber-physical system security experimentation. - Wei Yan; Yuan Xue 001; Xiaowei Li 003; Jiannian Weng; Timothy Busch; Janos Sztipanovits (HiCoNS, 2012)

Detecting Anomalous User Behaviors in Workflow-Driven Web Applications. - Xiaowei Li 003; Yuan Xue 001; Bradley A. Malin (SRDS, 2012)

Protecting Web-based Patient Portal for the Security and Privacy of Electronic Medical Records. - Xiaowei Li 003; Yuan Xue 001 (HealthSec, 2012)

Towards an Automatic Parameter-Tuning Framework for Cost Optimization on Video Encoding Cloud. - Xiaowei Li 003; Yi Cui 001; Yuan Xue 001 (Int. J. Digit. Multim. Broadcast., 2012)

LogicScope: automatic discovery of logic vulnerabilities within web applications. - Xiaowei Li 003; Yuan Xue 001 (AsiaCCS, 2013)

Automated black-box detection of access control vulnerabilities in web applications. - Xiaowei Li 003; Xujie Si; Yuan Xue 001 (CODASPY, 2014)

A survey on server-side approaches to securing web applications. - Xiaowei Li 003; Yuan Xue 001 (ACM Comput. Surv., 2014)