Obligations and their Interaction with Programs. Daniel J. Dougherty, Kathi Fisler, and Shriram Krishnamurthi. European Symposium on Research in Computer Security (ESORICS), September 2007.

Specifying and Reasoning about Dynamic Access Control Policies. Daniel J. Dougherty, Kathi Fisler, and Shriram Krishnamurthi. International Joint Conference on Automated Reasoning (IJCAR), August 2006

Towards Reasonability Properties for Access-Control Policy Languages. Michael Carl Tschantz and Shriram Krishnamurthi. ACM Symposium on Access Control Models and Technologies (SACMAT), June 2006

Verification and Change Impact Analysis of Access-Control Policies. Kathi Fisler, Shriram Krishnamurthi, Leo Meyerovich, and Michael Tschantz. International Conference on Software Engineering (ICSE), May 2005