Journals:

• Systematic Structural Testing of Firewall Policies. [PDF][BibTeX]
  Jeehyun Hwang, Tao Xie, Fei Chen, and Alex X. Liu.
  To Appear In IEEE Transactions on Network and Service Management (TNSM). Accepted for publication.

• First Step Towards Automatic Correction of Firewall Policy Faults. [PDF][BibTeX]
  Fei Chen, Alex X. Liu, JeeHyun Hwang, and Tao Xie.
  To Appear In ACM Transactions on Autonomous and Adaptive Systems (TAAS). Accepted for publication.

• Designing Fast and Scalable XACML Policy Evaluation Engines. [PDF][BibTeX]
  Alex X. Liu, Fei Chen, JeeHyun Hwang, and Tao Xie.
  IEEE Transactions on Computers (TC). Volume 60, Issue 12, Pages 1802-1817, 2011.

• Model Checking for Verification of Mandatory Access Control Models and Properties. [PDF][BibTeX]
  Vincent Hu, Richard Kuhn, Tao Xie, and JeeHyun Hwang.
  International Journal of Software Engineering and Knowledge Engineering (IJSEKE). Volume 21, Issue 1, Pages 103-127, 2011.

Articles:

• Policy-Based Testing. [PDF]
   JeeHyun Hwang, Evan Martin, Tao Xie, and Vincent C. Hu.
   Entry in Encyclopedia of Software Engineering, Pages 673-683, 2010

Conferences:

• Refactoring Access Control Policies for Performance Improvement. [PDF][BibTeX]
  Donia Elkateb, Tejeddine Mouelhi, Yves Le Traon, Jeehyun Hwang, and Tao Xie.
  To Appear In Proceedings of the 3rd ACM/SPEC International Conference on Performance Engineering (ICPE 2012), Boston, MA, April 2012.

• First Step Towards Automatic Correction of Firewall Policy Faults. [PDF][BibTeX]
  Fei Chen, Alex X. Liu, JeeHyun Hwang, and Tao Xie.
  In Proceedings of the 24th USENIX Large Installation System Administration Conference Security (USENIX LISA 2010), San Jose, CA, November 2010.
  Acceptance rate: 

• Mining Likely Properties of Access Control Policies via Association Rule Mining. [PDF][BibTeX]
  JeeHyun Hwang, Tao Xie, Vincent Hu, and Mine Altunay.
  In Proceedings of the 24th Annual IFIP WG 11.3 Working Conference on Data and Applications Security (DBSec 2010), Rome, Italy, June 2010.
  Acceptance rate: 18/61 = 30%

• Fault Localization for Firewall Policies. [PDF][BibTeX]
  JeeHyun Hwang, Tao Xie, Fei Chen, and Alex X. Liu.
  In Proceedings of the 28th IEEE International Symposium on Reliable Distributed Systems
  (SRDS 2009), Short Paper, Niagara Falls, New York, September 2009.
  Acceptance rate: (23+7)/104 = 29%

• Detection of Multiple-Duty-Related Security Leakage in Access Control Policies. [PDF][BibTex]
  JeeHyun Hwang, Tao Xie, and Vincent C. Hu.
  In Proceedings of the 3rd IEEE International Conference on Secure Software Integration and Reliability Improvement (SSIRI 2009), Shanghai, China, July 2009.
  Acceptance rate: 30/119 = 25%

• Assessing Quality of Policy Properties in Verification of Access Control Policies. [PDF][BibTeX]
  Evan Martin, JeeHyun Hwang, Tao Xie, and Vincent C. Hu.
  In Proceedings of the 24th Annual Computer Security Applications Conference
  (ACSAC 2008), Anaheim, California, December 2008.
  Acceptance rate: 42/173 = 24%

• Systematic Structural Testing of Firewall Policies. [PDF][BibTeX]
  JeeHyun Hwang, Tao Xie, Fei Chen, and Alex X. Liu.
  In Proceedings of the 27th IEEE International Symposium on Reliable Distributed Systems
  (SRDS 2008), Napoli, Italy, October 2008.
  Acceptance rate: 28/112 = 25%

• XEngine: A Fast and Scalable XACML Policy Evaluation Engine. [PDF][BibTeX]
  Alex X. Liu, Fei Chen, JeeHyun Hwang, and Tao Xie.
  In Proceedings of the International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS 2008), Annapolis, Maryland, June 2008.
  Acceptance rate: 36/201 = 18%
  

Other Publications:

• Construction and Validation of Access Control Policies via Natural Language Processing and Policy Verification. [PDF][BibTeX]
   JeeHyun Hwang, Xusheng Xiao, and Tao Xie.
   In Proceedings of the 2011 National Security Innovation Competition
   (NSIC 2011), pages 42-48, Colorado Springsy, USA, April 2011.

• ACPT: A Tool for Modeling and Verifying Access Control Policies. [PDF][BibTeX]
   JeeHyun Hwang, Tao Xie, Vincent Hu, and Mine Altunay.
   In Proceedings of the IEEE International Symposium on Policies for Distributed Systems and Networks
   (POLICY 2010), System Demo, George Mason University, USA, July 2010.

• Multiple-Implementation Testing for XACML Implementations. [PDF][BibTeX]
   Nuo Li, JeeHyun Hwang, and Tao Xie.
   In Proceedings of the Workshop on Testing, Analysis and Verification of Web Software
    (TAV-WEB 2008), Seattle, WA, July 2008.

• Conformance Checking of Access Control Policies Specified in XACML. [PDF][Slides][BibTeX]
   Vincent C. Hu, Evan Martin, JeeHyun Hwang, and Tao Xie.
   in Proceedings of the 1st IEEE International Workshop on Security in Software Engineering
   (IWSSE 2007), Beijing, China, July 2007.