| 2004 | ACSAC | Worm Detection, Early Warning and Response Based on Local Victim Information. | Guofei Gu, Monirul Islam Sharif, Xinzhou Qin, David Dagon, Wenke Lee, George F. Riley |
| 2004 | ACSAC | Attack Plan Recognition and Prediction Using Causal Networks. | Xinzhou Qin, Wenke Lee |
| 2004 | ESORICS | Discovering Novel Attack Strategies from INFOSEC Alerts. | Xinzhou Qin, Wenke Lee |
| 2004 | RAID | HoneyStat: Local Worm Detection Using Honeypots. | David Dagon, Xinzhou Qin, Guofei Gu, Wenke Lee, Julian B. Grizzard, John G. Levine, Henry L. Owen |
| 2003 | IM | Proactive Intrusion Detection and SNMP-based Security Management: New Experiments and Validation. | Joo B. D. Cabrera, Lundy M. Lewis, Xinzhou Qin, Carlos Gutirrez, Wenke Lee, Raman K. Mehra |
| 2003 | RAID | Statistical Causality Analysis of INFOSEC Alert Data. | Xinzhou Qin, Wenke Lee |
| 2002 | NOMS | Integrating intrusion detection and network management. | Xinzhou Qin, Wenke Lee, Lundy M. Lewis, Joo B. D. Cabrera |
| 2001 | IM | Proactive Detection of Distributed Denial of Service Attacks using MIB Traffic Variables - A Feasibility Study. | Joo B. D. Cabrera, Lundy M. Lewis, Xinzhou Qin, Wenke Lee, Ravi K. Prasanth, Ravi Ravichandran, Raman K. Mehra |