| 2024 | PST | Towards a Portability Scheme for Decentralized Identifiers in Self-Sovereign Identities. | Joo Pedro Alonso Almeida, Gowri Sankar Ramachandran, Paul Ashley, Raja Jurdak, Steven McCown, J Ueyama |
| 2002 | NSPW | From privacy promises to privacy management: a new approach for enforcing privacy throughout an enterprise. | Paul Ashley, Calvin Powers, Matthias Schunter |
| 2001 | ACSAC | Wired versus Wireless Security: The Internet, WAP and iMode for E-Commerce. | Paul Ashley, Heather M. Hinton, Mark Vandenwauver |
| 2001 | ICISC | Secure Authorisation Agent for Cross-Domain Access Control in a Mobile Computing Environment. | Richard Au, Mark Looi, Paul Ashley, Loo Tang Seet |
| 2000 | ACISP | Towards a New Authorisation Paradigm for Extranets. | Richard Au, Mark Looi, Paul Ashley |
| 2000 | ACISP | A Three-Party HTTP Proxy to Support Internet Content Regulation. | Agung Budi Prasetijo, Paul Ashley, Mark Looi, Andrew J. Clark, Gary Gaskell |
| 2000 | CCS | Cross-domain one-shot authorization using smart cards. | Richard Au, Mark Looi, Paul Ashley |
| 1999 | ACISP | An Implementation of a Secure Version of NFS Including RBAC. | Paul Ashley, Bradley Broom, Mark Vandenwauver |
| 1999 | WETICE | Using SESAME to Implement Role-Based Access Control in Unix File Systems. | Paul Ashley, Mark Vandenwauver |
| 1998 | ACISP | A Uniform Approach to Securing Unix Applications Using SESAME. | Paul Ashley, Mark Vandenwauver, Bradley Broom |
| 1998 | CARDIS | Enhancing SESAMEV4 with Smart Cards. | Mark Looi, Paul Ashley, Loo Tang Seet, Richard Au, Gary Gaskell, Mark Vandenwauver |
| 1998 | WETICE | Using SESAME's GSS-API to add Security to Unix Applications. | Paul Ashley, Mark Vandenwauver, Mark Rutherford, Sebastien Boving |