| 2008 | Ranking Attack-Prone Components with a Predictive Model. | Michael Gegick, Laurie A. Williams |
| 2008 | Assessing the Effect of Software Failures on Trust Assumptions. | Qian Feng, Robyn R. Lutz |
| 2008 | Automated Fix Generator for SQL Injection Attacks. | Fred Dysart, Mark Sherriff |
| 2008 | Changing Java's Semantics for Handling Null Pointer Exceptions. | Kinga Dobolyi, Westley Weimer |
| 2008 | Trace Normalization. | Madeline Diep, Sebastian G. Elbaum, Matthew Dwyer |
| 2008 | Analysis of Computer Security Incident Data Using Time Series Models. | Edward Condon, Angela He, Michel Cukier |
| 2008 | Finding Faults: Manual Testing vs. Random+ Testing vs. User Reports. | Ilinca Ciupa, Bertrand Meyer, Manuel Oriol, Alexander Pretschner |
| 2008 | An experiment in memory leak analysis with a mission-critical middleware for air traffic control. | Gabriella Carrozza, Domenico Cotroneo, Roberto Natella, Antonio Pecchia, Stefano Russo |
| 2008 | RUGRAT: Runtime Test Case Generation Using Dynamic Compilers. | Ben Breech, Lori L. Pollock, John Cavazos |
| 2008 | Compositional fluid stochastic Petri net model for operational software system performance. | Andrea Bobbio, Sachin Garg, Marco Gribaudo, Andrs Horvth, Matteo Sereno, Mikls Telek |
| 2008 | Comparison of Empirical Data from Two Honeynets and a Distributed Honeypot Network. | Robin E. Bloomfield, Ilir Gashi, Andrey Povyakalo, Vladimir Stankovic |
| 2008 | Using Measures and Risk Indicators for Early Insight into Software Product Characteristics such as Software Safety. | Victor R. Basili |
| 2008 | Using UML Sequence Diagrams and State Machines for Test Input Generation. | Aritra Bandyopadhyay, Sudipto Ghosh |
| 2008 | Methods and opportunities for rejuvenation in aging distributed software systems. | Alberto Avritzer, Robert G. Cole, Elaine J. Weyuker |
| 2008 | Concurrent Contracts for Java in JML. | Wladimir Araujo, Lionel C. Briand, Yvan Labiche |
| 2008 | Detection and Prediction of Resource-Exhaustion Vulnerabilities. | Joo Antunes, Nuno Ferreira Neves, Paulo Verssimo |
| 2008 | Automated Generation of Pointcut Mutants for Testing Pointcuts in AspectJ Programs. | Prasanth Anbalagan, Tao Xie |
| 2008 | On Reliability Analysis of Open Source Software - FEDORA. | Prasanth Anbalagan, Mladen A. Vouk |
| 2008 | A Framework for Testing Peer-to-Peer Systems. | Eduardo Cunha de Almeida, Gerson Suny, Yves Le Traon, Patrick Valduriez |
| 2008 | An Analysis Framework for Inter-system Interaction Behavior. | Christopher Ackermann, Deane E. Sibol, William C. Stratton, Mikael Lindvall, Sally Godfrey |
| 2007 | Predicting Subsystem Failures using Dependency Graph Complexities. | Thomas Zimmermann, Nachiappan Nagappan |
| 2007 | Sensitivity of Website Reliability to Usage Profile Changes. | Kim Weyns, Martin Hst |
| 2007 | Integrated Software Vulnerability and Security Functionality Assessment. | Xiangrong Wang, Hang Shi, Tze-Yau William Huang, Frank C. Lin |
| 2007 | Requirement Error Abstraction and Classification: A Control Group Replicated Study. | Gursimran Singh Walia, Jeffrey C. Carver, Thomas Philip |
| 2007 | Testing Security Policies: Going Beyond Functional Testing. | Yves Le Traon, Tejeddine Mouelhi, Benoit Baudry |