Design of an I/O Balancing File System on Web Server Clusters. - Wei Liu 014; Min Wu; Xinming Ou; Weimin Zheng; Meiming Shen (ICPP Workshops, 2000)

An Effective File Migration Algorithm in Cluster File Systems. - Wei Liu 014; Weimin Zheng; Meiming Shen; Xinming Ou; Min Wu (ICPP Workshops, 2000)

Theorem Proving Using Lazy Proof Explication. - Cormac Flanagan; Rajeev Joshi; Xinming Ou; James B. Saxe (CAV, 2003)

Dynamic Typing with Dependent Types. - Xinming Ou; Gang Tan; Yitzhak Mandelbaum; David Walker (IFIP TCS, 2004)

A Two-Tier Technique for Supporting Quantifiers in a Lazily Proof-Explicating Theorem Prover. - K. Rustan M. Leino; Madan Musuvathi; Xinming Ou (TACAS, 2005)

MulVAL: A Logic-based Network Security Analyzer. - Xinming Ou; Sudhakar Govindavajhala; Andrew W. Appel (USENIX Security Symposium, 2005)

A scalable approach to attack graph generation. - Xinming Ou; Wayne F. Boyer; Miles A. McQueen (CCS, 2006)

Identifying Critical Attack Assets in Dependency Attack Graphs. - Reginald E. Sawilla; Xinming Ou (ESORICS, 2008)

Improving Attack Graph Visualization through Data Reduction and Attack Grouping. - John Homer; Ashok Varikuti; Xinming Ou; Miles A. McQueen (VizSEC, 2008)

An Empirical Approach to Modeling Uncertainty in Intrusion Analysis. - Xinming Ou; Siva Raj Rajagopalan; Sakthiyuvaraja Sakthivelmurugan (ACSAC, 2009)

Techniques for enterprise network security metrics. - Anoop Singhal; Xinming Ou (CSIIRW, 2009)

SAT-solving approaches to context-aware enterprise network security management. - John Homer; Xinming Ou (IEEE J. Sel. Areas Commun., 2009)

Using Bayesian networks for cyber security analysis. - Peng Xie; Jason H. Li; Xinming Ou; Peng Liu 005; Renato Levy (DSN, 2010)

Cyber SA: Situational Awareness for Cyber Defense. - Paul Barford; Marc Dacier; Thomas G. Dietterich; Matt Fredrikson; Jonathon T. Giffin; Sushil Jajodia; Somesh Jha; Jason H. Li; Peng Liu 005; Peng Ning; Xinming Ou; Dawn Song; et al. (Cyber Situational Awareness, 2010)

Uncertainty and Risk Management in Cyber Situational Awareness. - Jason H. Li; Xinming Ou; Siva Raj Rajagopalan (Cyber Situational Awareness, 2010)

Distilling critical attack graph surface iteratively through minimum-cost SAT solving. - Heqing Huang; Su Zhang; Xinming Ou; Atul Prakash 001; Karem A. Sakallah (ACSAC, 2011)

Prioritizing intrusion analysis using Dempster-Shafer theory. - Loai Zomlot; Sathya Chandran Sundaramurthy; Kui Luo; Xinming Ou; Siva Raj Rajagopalan (AISec, 2011)

Model-driven, Moving-Target Defense for Enterprise Network Security. - Scott A. DeLoach; Xinming Ou; Rui Zhuang; Su Zhang (Models@run.time@Dagstuhl, 2011)

An Empirical Study on Using the National Vulnerability Database to Predict Software Vulnerabilities. - Su Zhang; Doina Caragea; Xinming Ou (DEXA (1), 2011)

Effective Network Vulnerability Assessment through Model Abstraction. - Su Zhang; Xinming Ou; John Homer (DIMVA, 2011)

Quantitative Security Risk Assessment of Enterprise Networks. - Xinming Ou; Anoop Singhal (Springer, 2011)

Investigative response modeling and predictive data collection. - Dan Moor; Siva Raj Rajagopalan; Sathya Chandran Sundaramurthy; Xinming Ou (eCrime Researchers Summit, 2012)

Classification of UDP Traffic for DDoS Detection. - Alexandru G. Bardas; Loai Zomlot; Sathya Chandran Sundaramurthy; Xinming Ou; S. Raj Rajagopalan; Marc R. Eisenbarth (LEET, 2012)

A Certificate Infrastructure for Machine-Checked Proofs of Conditional Information Flow. - Torben Amtoft; Josiah Dodds; Zhi Zhang; Andrew W. Appel; Lennart Beringer; John Hatcliff; Xinming Ou; Andrew Cousino (POST, 2012)

Mission-oriented moving target defense based on cryptographically strong network dynamics. - Justin Yackoski; Jason H. Li; Scott A. DeLoach; Xinming Ou (CSIIRW, 2013)

Aiding Intrusion Analysis Using Machine Learning. - Loai Zomlot; Sathya Chandran Sundaramurthy; Doina Caragea; Xinming Ou (ICMLA (2), 2013)

Aggregating vulnerability metrics in enterprise networks using attack graphs. - John Homer; Su Zhang; Xinming Ou; David Schmidt; Yanhui Du; S. Raj Rajagopalan; Anoop Singhal (J. Comput. Secur., 2013)

Setting up and using a cyber security lab for education purposes. - Alexandru G. Bardas; Xinming Ou (J. Comput. Sci. Coll., 2013)

After we knew it: empirical study and modeling of cost-effectiveness of exploiting prevalent known vulnerabilities across IaaS cloud. - Su Zhang; Xinwen Zhang; Xinming Ou (AsiaCCS, 2014)

Towards a Theory of Moving Target Defense. - Rui Zhuang; Scott A. DeLoach; Xinming Ou (MTD@CCS, 2014)

A model for analyzing the effect of moving target defenses on enterprise networks. - Rui Zhuang; Scott A. DeLoach; Xinming Ou (CISR, 2014)

Compiling Abstract Specifications into Concrete Systems - Bringing Order to the Cloud. - Ian Unruh; Alexandru G. Bardas; Rui Zhuang; Xinming Ou; Scott A. DeLoach (LISA, 2014)

An Anthropological Approach to Studying CSIRTs. - Sathya Chandran Sundaramurthy; John McHugh; Xinming Simon Ou; S. Raj Rajagopalan; Michael Wesch (IEEE Secur. Priv., 2014)

Metrics of Security. - Yi Cheng; Julia Deng 001; Jason H. Li; Scott A. DeLoach; Anoop Singhal; Xinming Ou (Cyber Defense and Situational Awareness, 2014)

Experimental Study with Real-world Data for Android App Security Analysis using Machine Learning. - Sankardas Roy; Jordan DeLoach; Yuping Li; Nic Herndon; Doina Caragea; Xinming Ou; Venkatesh Prasad Ranganath; Hongmin Li 001; Nicolais Guevara (ACSAC, 2015)

Secure RTOS Architecture for Building Automation. - Xiaolong Wang; Masaaki Mizuno; Mitchell L. Neilsen; Xinming Ou; S. Raj Rajagopalan; Will G. Boldwin; Bryan Phillips (CPS-SPC@CCS, 2015)

A Theory of Cyber Attacks: A Step Towards Analyzing MTD Systems. - Rui Zhuang; Alexandru G. Bardas; Scott A. DeLoach; Xinming Ou (MTD@CCS, 2015)

Practical Always-on Taint Tracking on Mobile Devices. - Justin Paupore; Earlence Fernandes; Atul Prakash 001; Sankardas Roy; Xinming Ou (HotOS, 2015)

Assessing Attack Surface with Component-Based Package Dependency. - Su Zhang; Xinwen Zhang; Xinming Ou; Liqun Chen 002; Nigel Edwards; Jing Jin (NSS, 2015)

A Human Capital Model for Mitigating Security Analyst Burnout. - Sathya Chandran Sundaramurthy; Alexandru G. Bardas; Jacob Case; Xinming Ou; Michael Wesch; John McHugh; S. Raj Rajagopalan (SOUPS, 2015)

Predicting Cyber Risks through National Vulnerability Database. - Su Zhang; Xinming Ou; Doina Caragea (Inf. Secur. J. A Glob. Perspect., 2015)

A Bottom-Up Approach to Applying Graphical Models in Security Analysis. - Xinming Ou (GraMSec@CSF, 2016)

Turning Contradictions into Innovations or: How We Learned to Stop Whining and Improve Security Operations. - Sathya Chandran Sundaramurthy; John McHugh; Xinming Ou; Michael Wesch; Alexandru G. Bardas; S. Raj Rajagopalan (SOUPS, 2016)

Security Optimization of Dynamic Networks with Probabilistic Graph Modeling and Linear Programming. - Hussain M. J. Almohri; Layne T. Watson; Danfeng Yao; Xinming Ou (IEEE Trans. Dependable Secur. Comput., 2016)

Android Malware Detection with Weak Ground Truth Data. - Jordan DeLoach; Doina Caragea; Xinming Ou (AAAI, 2017)

MTD 2017: Fourth ACM Workshop on Moving Target Defense (MTD). - Hamed Okhravi; Xinming Ou (CCS, 2017)

Deep Ground Truth Analysis of Current Android Malware. - Fengguo Wei; Yuping Li; Sankardas Roy; Xinming Ou; Wu Zhou (DIMVA, 2017)

MTD CBITS: Moving Target Defense for Cloud-Based IT Systems. - Alexandru G. Bardas; Sathya Chandran Sundaramurthy; Xinming Ou; Scott A. DeLoach (ESORICS (1), 2017)

Enhanced Security of Building Automation Systems Through Microkernel-Based Controller Platforms. - Xiaolong Wang; Richard Habeeb; Xinming Ou; Siddharth Amaravadi; John Hatcliff; Masaaki Mizuno; Mitchell L. Neilsen; S. Raj Rajagopalan; Srivatsan Varadarajan (ICDCS Workshops, 2017)

Android Malware Clustering Through Malicious Payload Mining. - Yuping Li; Jiyong Jang; Xin Hu 001; Xinming Ou (RAID, 2017)

Humans Are Dynamic - Our Tools Should Be Too. - Sathya Chandran Sundaramurthy; Michael Wesch; Xinming Ou; John McHugh; S. Raj Rajagopalan; Alexandru G. Bardas (IEEE Internet Comput., 2017)

JN-SAF: Precise and Efficient NDK/JNI-aware Inter-language Static Analysis Framework for Security Vetting of Android Applications with Native Code. - Fengguo Wei; Xingwei Lin; Xinming Ou; Ting Chen 002; Xiaosong Zhang 001 (CCS, 2018)

InstaGuard: Instantly Deployable Hot-patches for Vulnerable System Programs on Android. - Yaohui Chen 001; Yuping Li; Long Lu; Yueh-Hsun Lin; Hayawardh Vijayakumar; Zhi Wang 004; Xinming Ou (NDSS, 2018)

A Population-Based Incremental Learning Approach to Network Hardening. - Alexander Paulsen; Anis Yazidi; Boning Feng; Xinming Ou (SoMeT, 2018)

Amandroid: A Precise and General Inter-component Data Flow Analysis Framework for Security Vetting of Android Apps. - Fengguo Wei; Sankardas Roy; Xinming Ou; Robby (ACM Trans. Priv. Secur., 2018)

Topology-Aware Hashing for Effective Control Flow Graph Similarity Analysis. - Yuping Li; Jiyong Jang; Xinming Ou (SecureComm (1), 2019)

A Multi-phased Multi-faceted IoT Honeypot Ecosystem. - Armin Ziaie Tabari; Xinming Ou (CCS, 2020)

Hybrid Analysis of Android Apps for Security Vetting using Deep Learning. - Dewan Chaulagain; Prabesh Poudel; Prabesh Pathak; Sankardas Roy; Doina Caragea; Guojun Liu; Xinming Ou (CNS, 2020)

GPU-Based Static Data-Flow Analysis for Fast and Scalable Android App Vetting. - Xiaodong Yu 001; Fengguo Wei; Xinming Ou; Michela Becchi; Tekin Bicer; Danfeng Daphne Yao (IPDPS, 2020)

An Ethnographic Understanding of Software (In)Security and a Co-Creation Model to Improve Secure Software Development. - Hernan M. Palombo; Armin Ziaie Tabari; Daniel Lende; Jay Ligatti; Xinming Ou (SOUPS @ USENIX Security Symposium, 2020)

A First Step Towards Understanding Real-world Attacks on IoT Devices. - Armin Ziaie Tabari; Xinming Ou (CoRR, 2020)

An Analysis of the Role of Situated Learning in Starting a Security Culture in a Software Company. - Anwesh Tuladhar; Daniel Lende; Jay Ligatti; Xinming Ou (SOUPS @ USENIX Security Symposium, 2021)

What are Attackers after on IoT Devices? An approach based on a multi-phased multi-faceted IoT honeypot ecosystem and data clustering. - Armin Ziaie Tabari; Xinming Ou; Anoop Singhal (CoRR, 2021)

Security Analysis of Trust on the Controller in the Matter Protocol Specification. - Shashwat Kumar; Francis Hahn; Xinming Ou; Anoop Singhal (CNS, 2023)

Revealing Human Attacker Behaviors Using an Adaptive Internet of Things Honeypot Ecosystem. - Armin Ziaie Tabari; Guojun Liu; Xinming Ou; Anoop Singhal (IFIP Int. Conf. Digital Forensics, 2023)

Towards Optimal Triage and Mitigation of Context-Sensitive Cyber Vulnerabilities. - Soumyadeep Hore; Fariha Moomtaheen; Ankit Shah 002; Xinming Ou (IEEE Trans. Dependable Secur. Comput., 2023)

Using LLM Embeddings with Similarity Search for Botnet TLS Certificate Detection. - Shashwat Kumar; Francis Hahn; Stuart Millar; Xinming Ou (AISec@CCS, 2024)

ACM CCS 2024 Doctoral Symposium. - Gabriela F. Ciocarlie; Xinming Ou (CCS, 2024)

A Preliminary Study on Using Large Language Models in Software Pentesting. - Shashwat Kumar; Francis Hahn; Xinming Ou; Dmitry B. Goldgof; Lawrence O. Hall; Jay Ligatti; S. Raj Rajagopalan; Armin Ziaie Tabari (CoRR, 2024)

The Impact of Train-Test Leakage on Machine Learning-based Android Malware Detection. - Guojun Liu; Doina Caragea; Xinming Ou; Sankardas Roy (CoRR, 2024)

Benchmarking Android Malware Detection: Rethinking the Role of Traditional and Deep Learning Models. - Guojun Liu; Doina Caragea; Xinming Ou; Sankardas Roy (CoRR, 2025)

Towards AI-Driven Human-Machine Co-Teaming for Adaptive and Agile Cyber Security Operation Centers. - Massimiliano Albanese; Xinming Ou; Kevin Lybarger; Daniel Lende; Dmitry B. Goldgof (CoRR, 2025)