« An Integrated Path and Timing Analysis Method based on Cycle-Level SymbolicExecution », Real-Time Systems, Volume 17 Issue 2-3, Norwell, novembre 1999
You Ever Wanted to Know about Dynamic Taint Analysis and Forward SymbolicExecution (but Might Have Been Afraid to Ask) », 2010 IEEE Symposium on Security