| 2025 | RE | Demystifying Feature Requests: Leveraging LLMs to Refine Feature Requests in Open-Source Software. | Pragyan K. C, Rambod Ghandiparsi, Thomas Herron, John Heaps, Mitra Bokaei Hosseini |
| 2025 | RE | Towards Better Requirements from the Crowd: Developer Engagement with Feature Requests in Open Source Software. | Pragyan K. C, Rambod Ghandiparsi, Thomas Herron, John Heaps, Mitra Bokaei Hosseini |
| 2021 | DBSEC | Access Control Policy Generation from User Stories Using Machine Learning. | John Heaps, Ram Krishnan, Yufei Huang, Jianwei Niu, Ravi S. Sandhu |
| 2021 | RE | Ambiguity and Generality in Natural Language Privacy Policies. | Mitra Bokaei Hosseini, John Heaps, Rocky Slavin, Jianwei Niu, Travis D. Breaux |
| 2019 | SACMAT | Toward Detection of Access Control Models from Source Code via Word Embedding. | John Heaps, Xiaoyin Wang, Travis D. Breaux, Jianwei Niu |
| 2018 | SACMAT | Toward A Code Pattern Based Vulnerability Measurement Model. | John Heaps, Rocky Slavin, Xiaoyin Wang |
| 2017 | SACMAT | Verifiable Assume-Guarantee Privacy Specifications for Actor Component Architectures. | Claiborne Johnson, Thomas MacGahan, John Heaps, Kevin Baldor, Jeffery von Ronne, Jianwei Niu |