| 2025 | ACSAC | Ransomware in Active Directory: A Dataset and Analysis of Early-Stage Behavior. | Prajna Bhandary, Charles Nicholas, Robert J. Joyce, Bojing Li |
| 2025 | CIKM | Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora. | Edward Raff, Ryan R. Curtin, Derek Everett, Robert J. Joyce, James Holt |
| 2025 | KDD | EMBER2024 - A Benchmark Dataset for Holistic Evaluation of Malware Classifiers. | Robert J. Joyce, Gideon Miller, Phil Roth, Richard Zak, Elliott Zaresky-Williams, Hyrum S. Anderson, Edward Raff, James Holt |
| 2025 | WWW | ClarAVy: A Tool for Scalable and Accurate Malware Family Labeling. | Robert J. Joyce, Derek Everett, Maya Fuchs, Edward Raff, James Holt |
| 2023 | CCS | AVScan2Vec: Feature Learning on Antivirus Scan Data for Production-Scale Malware Corpora. | Robert J. Joyce, Tirth Patel, Charles Nicholas, Edward Raff |
| 2021 | CCS | A Framework for Cluster and Classifier Evaluation in the Absence of Reference Labels. | Robert J. Joyce, Edward Raff, Charles Nicholas |
| 2021 | DocEng | Document engineering issues in malware analysis. | Charles Nicholas, Robert J. Joyce, Steve Simske |