| 2018 | SEKE | Pseudo-Exhaustive Verification of Rule Based Systems. | Rick Kuhn, Dylan Yaga, Raghu Kacker, Jeff Yu Lei, Vincent C. Hu |
| 2016 | IRI | General Methods for Access Control Policy Verification (Application Paper). | Vincent C. Hu, D. Richard Kuhn |
| 2016 | ICST | Pseudo-Exhaustive Testing of Attribute Based Access Control Rules. | D. Richard Kuhn, Vincent C. Hu, David F. Ferraiolo, Raghu N. Kacker, Yu Lei |
| 2015 | IRI | Implementing and Managing Policy Rules in Attribute Based Access Control. | Vincent C. Hu, David F. Ferraiolo, D. Richard Kuhn, Raghu N. Kacker, Yu Lei |
| 2010 | DBSEC | Mining Likely Properties of Access Control Policies via Association Rule Mining. | JeeHyun Hwang, Tao Xie, Vincent C. Hu, Mine Altunay |
| 2008 | ACSAC | Assessing Quality of Policy Properties in Verification of Access Control Policies. | Evan Martin, JeeHyun Hwang, Tao Xie, Vincent C. Hu |
| 2008 | EUC | Property Verification for Generic Access Control Models. | Vincent C. Hu, D. Richard Kuhn, Tao Xie |
| 2007 | CCGRID | Access Control Policy Combinations for the Grid Using the Policy Machine. | Vincent C. Hu, David F. Ferraiolo, Karen Scarfone |
| 2007 | COMPSAC | Conformance Checking of Access Control Policies Specified in XACML. | Vincent C. Hu, Evan Martin, JeeHyun Hwang, Tao Xie |
| 2005 | SACMAT | Composing and combining policies under the policy machine. | David F. Ferraiolo, Serban I. Gavrila, Vincent C. Hu, D. Richard Kuhn |
| 2001 | ICCS | The Policy Machine for Security Policy Management. | Vincent C. Hu, Deborah A. Frincke, David F. Ferraiolo |
| 2000 | ACSAC | Policy Mediation for Multi-Enterprise Environments. | Pablo Galiasso, Oliver Bremer, John Hale, Sujeet Shenoi, David F. Ferraiolo, Vincent C. Hu |