| 2026 | FDG | LAVA: Large-scale Archaeological Videogame Analysis. | John Aycock, Katie Biittner, Minori Olguin, Hira Asad |
| 2026 | FDG | No Prototypical Prototypes: Prototypes as the Stone Tools of Game Development. | Katie Biittner, Paul Allen Newell, John Aycock |
| 2023 | ITiCSE | Binary Reverse Engineering for All. | John Aycock |
| 2022 | FDG | The Sincerest Form of Flattery: Large-Scale Analysis of Code Re-Use in Atari 2600 Games. | John Aycock, Shankar Ganesh, Katie Biittner, Paul Allen Newell, Carl Therrien |
| 2021 | ITiCSE | Teaching Social Engineering Using Improv. | John Aycock |
| 2020 | FDG | LeGACy Code: Studying How (Amateur) Game Developers Used Graphic Adventure Creator. | John Aycock, Katie Biittner |
| 2020 | SIGCSE | 10 Binary Games for Computer Science Education. | Hannah Wright, John Aycock |
| 2019 | FDG | S | Eric Kaltman, Joseph C. Osborn, John Aycock |
| 2018 | ITiCSE | Stick to the script: lightweight recording and playback of live coding. | John Aycock |
| 2018 | ITiCSE | Exercises for teaching reverse engineering. | John Aycock, Andrew Groeneveldt, Hayden Kroepfl, Tara Copplestone |
| 2016 | SIGITE | An Industrial Partnership Game Development Capstone Course. | Ben Stephenson, Mark James, Nigel Brooke, John Aycock |
| 2015 | ITiCSE | Applied Computer History: Experience Teaching Systems Topics through Retrogames. | John Aycock |
| 2015 | ITiCSE | A Game Engine in Pure Python for CS1: Design, Experience, and Limits. | John Aycock, Etienne Pitout, Sarah Storteboom |
| 2013 | WISA | Assured Supraliminal Steganography in Computer Games. | Anton Mosunov, Vineet Sinha, Heather Crawford, John Aycock, Daniel Medeiros Nunes de Castro, Rashmi Kumari |
| 2012 | ACSAC | ThinAV: truly lightweight mobile cloud-based anti-malware. | Chris Jarabek, David Barrera, John Aycock |
| 2012 | CCS | Babel: a secure computer is a polyglot. | John Aycock, Daniel Medeiros Nunes de Castro, Michael E. Locasto, Chris Jarabek |
| 2012 | ITiCSE | μPython: non-majors programming from the very first lecture. | John Aycock |
| 2012 | WISA | Lightweight Client-Side Methods for Detecting Email Forgery. | Eric Lin, John Aycock, Mohammad Mannan |
| 2011 | CHI | Does domain highlighting help people identify phishing sites? | Eric Lin, Saul Greenberg, Eileah Trotter, David Ma, John Aycock |
| 2011 | FC | Human Subjects, Agents, or Bots: Current Issues in Ethics and Computer Security Research. | John Aycock, Elizabeth Buchanan, Scott D. Dexter, David Dittrich |
| 2010 | FC | Ethical Proactive Threat Research. | John Aycock, John P. Sullins |
| 2010 | ITiCSE | Enbug: when debuggers go bad. | David Williams-King, John Aycock, Daniel Medeiros Nunes de Castro |
| 2010 | IWQoS | SPoIM: A close look at pollution attacks in P2P live streaming. | Eric Lin, Daniel Medeiros Nunes de Castro, Mea Wang, John Aycock |
| 2008 | ITiCSE | Spamulator: the Internet on a laptop. | John Aycock, Heather Crawford, Rennie deGraaf |
| 2008 | SAC | The tale of the weather worm. | Joe Szabo, John Aycock, Randal Acton, Jrg Denzinger |
| 2007 | IPCCC | Inverse Geolocation: Worms with a Sense of Direction. | Randal Acton, Nathan Friess, John Aycock |
| 2007 | NDSS | Army of Botnets. | Ryan Vogt, John Aycock, Michael J. Jacobson Jr. |
| 2005 | ACSAC | Improved Port Knocking with Strong Authentication. | Rennie deGraaf, John Aycock, Michael J. Jacobson Jr. |
| 2005 | SIGCSE | Viruses 101. | John Aycock, Ken Barker |
| 2001 | CC | Directly-Executable Earley Parsing. | John Aycock, R. Nigel Horspool |
| 2000 | CC | Simple Generation of Static Single-Assignment Form. | John Aycock, R. Nigel Horspool |
| 1999 | CC | Faster Generalized LR Parsing. | John Aycock, R. Nigel Horspool |