| 2016 | APSEC | Achieving High Code Coverage in Android UI Testing via Automated Widget Exercising. | Yauhen Leanidavich Arnatovich, Minh Ngoc Ngo, Hee Beng Kuan Tan, Charlie Soh |
| 2016 | APSEC | LibSift: Automated Detection of Third-Party Libraries in Android Applications. | Charlie Soh, Hee Beng Kuan Tan, Yauhen Leanidavich Arnatovich, Annamalai Narayanan, Lipo Wang |
| 2015 | COMPSAC | Buffer Overflow Vulnerability Prediction from x86 Executables Using Static Analysis and Machine Learning. | Bindu Madhavi Padmanabhuni, Hee Beng Kuan Tan |
| 2015 | ICSE | Mining Patterns of Unsatisfiable Constraints to Detect Infeasible Paths. | Sun Ding, Hee Beng Kuan Tan, Lwin Khin Shar |
| 2015 | ICSE | Light-Weight Rule-Based Test Case Generation for Detecting Buffer Overflow Vulnerabilities. | Bindu Madhavi Padmanabhuni, Hee Beng Kuan Tan |
| 2014 | COMPSAC | Faceted Bug Report Search with Topic Model. | Kaiping Liu, Hee Beng Kuan Tan |
| 2014 | COMPSAC | Auditing Buffer Overflow Vulnerabilities Using Hybrid Static-Dynamic Analysis. | Bindu Madhavi Padmanabhuni, Hee Beng Kuan Tan |
| 2014 | ISSRE | Predicting Buffer Overflow Vulnerabilities through Mining Light-Weight Static Code Attributes. | Bindu Madhavi Padmanabhuni, Hee Beng Kuan Tan |
| 2014 | SAC | Mining key and referential constraints enforcement patterns. | Kaiping Liu, Hee Beng Kuan Tan, Hongyu Zhang |
| 2014 | SEKE | Empirical Comparison of Intermediate Representations for Android Applications. | Yauhen Arnatovich, Hee Beng Kuan Tan, Sun Ding, Kaiping Liu, Lwin Khin Shar |
| 2014 | SEKE | Detecting Anomaly in the Usage of Database Attribute. | Kaiping Liu, Hee Beng Kuan Tan, Yauhen Arnatovich |
| 2013 | APSEC | Towards a Hybrid Framework for Detecting Input Manipulation Vulnerabilities. | Sun Ding, Hee Beng Kuan Tan, Lwin Khin Shar, Bindu Madhavi Padmanabhuni |
| 2013 | APSEC | Mining Attribute Lifecycle to Predict Faults and Incompleteness in Database Applications. | Kaiping Liu, Hee Beng Kuan Tan |
| 2013 | ICSE | Mining SQL injection and cross site scripting vulnerabilities using hybrid program analysis. | Lwin Khin Shar, Hee Beng Kuan Tan, Lionel C. Briand |
| 2012 | APSEC | Automated Insertion of Exception Handling for Key and Referential Constraints. | Kaiping Liu, Hee Beng Kuan Tan |
| 2012 | APSEC | Semi-Automated Verification of Defense against SQL Injection in Web Applications. | Kaiping Liu, Hee Beng Kuan Tan, Lwin Khin Shar |
| 2012 | COMPSAC | Detection of Buffer Overflow Vulnerabilities in C/C++ with Pattern Based Limited Symbolic Evaluation. | Sun Ding, Hee Beng Kuan Tan, Kaiping Liu, Mahinthan Chandramohan, Hongyu Zhang |
| 2012 | ENASE | Detection of Infeasible Paths: Approaches and Challenges. | Sun Ding, Hee Beng Kuan Tan |
| 2012 | ENASE | A Survey of Infeasible Path Detection. | Sun Ding, Hee Beng Kuan Tan, Kaiping Liu |
| 2012 | ICSE | Mining input sanitization patterns for predicting SQL injection and cross site scripting vulnerabilities. | Lwin Khin Shar, Hee Beng Kuan Tan |
| 2011 | APSEC | Extraction of Attribute Dependency Graph from Database Applications. | Kaiping Liu, Hee Beng Kuan Tan, Xu Chen |
| 2011 | SEKE | Automated Extraction of Data Lifecycle Support from Database Applications. | Kaiping Liu, Hee Beng Kuan Tan, Xu Chen, Hongyu Zhang, Bindu Padmanabhuni |
| 2010 | SECRYPT | Auditing the Defense Against Cross Site Scripting in Web Applications. | Lwin Khin Shar, Hee Beng Kuan Tan |
| 2007 | APSEC | An Empirical Study of Class Sizes for Large Java Systems. | Hongyu Zhang, Hee Beng Kuan Tan |
| 2006 | ICSE | Automated Verification and Test Case Generation for Input Validation. | Hui Liu, Hee Beng Kuan Tan |
| 2006 | ICSE | Estimating LOC for information systems from their conceptual data models. | Hee Beng Kuan Tan, Yuan Zhao, Hongyu Zhang |
| 2004 | ER | ER-Based Software Sizing for Data-Intensive Systems. | Hee Beng Kuan Tan, Yuan Zhao |
| 2004 | SNPD | Automated extracting code fragments that implement Security functionality from source programs. | Yong Yang, Hee Beng Kuan Tan |
| 2001 | SEKE | Design for Post-Transaction Input Error Handling. | Hee Beng Kuan Tan, Ni Lar Thein, Ye Li |
| 1999 | APSEC | Extracting Code Fragment that Implements Functionality. | Hee Beng Kuan Tan, Juan Tiang Kow |
| 1999 | COMPSAC | Software Reuse through a Novel Representation that Supports Factorization. | Hee Beng Kuan Tan, Hua Koon Tan |
| 1996 | COMPSAC | Slicing Functional Components from Data-Intensive Business Programs. | Hee Beng Kuan Tan, Tok Wang Ling |
| 1993 | ICCI | Improving the Reusability of Program Specification Through Data Flow Modeling. | Hee Beng Kuan Tan, Tok Wang Ling, Yin Seong Ho |
| 1993 | SAC | The Data Derivation Model: A Program Specification Technique That Improves Reusability. | Hee Beng Kuan Tan, Tok Wang Ling, Stan Jarzabek, Yin Seong Ho |