Oops, I Did it Again: Mitigating Repeated Access Control Errors. Serge Egelman, Andrew Oates, Shriram Krishnamurthi. SIGCHI Conference on Human Factors in Computing Systems, 2011.

The Margrave Tool for Firewall Analysis. Timothy Nelson, Christopher Barratt, Daniel J. Dougherty, Kathi Fisler, Shriram Krishnamurthi. USENIX Large Installation System Administration Conference (LISA), 2010.

A Model of Triangulating Environments for Policy Authoring. Kathi Fisler, Shriram Krishnamurthi. ACM Symposium on Access-Control Models and Technologies (SACMAT), 2010.

Escape From the Matrix: Lessons from a Case-Study in Access-Control Requirements. Kathi Fisler, Shriram Krishnamurthi. Symposium on Usable Privacy and Security (SOUPS), 2009.

Declaring Victory in a Declarative Datacenter: Verification and Transferring Confidence. Shriram Krishnamurthi. Workshop on the Rise and Rise of the Declarative Datacentre (R2D2), 2008.

Obligations and their Interaction with Programs. Daniel J. Dougherty, Kathi Fisler, Shriram Krishnamurthi. European Symposium on Research in Computer Security (ESORICS), 2007.

Specifying and Reasoning about Dynamic Access Control Policies. Daniel J. Dougherty, Kathi Fisler, Shriram Krishnamurthi. International Joint Conference on Automated Reasoning (IJCAR), 2006.

Towards Reasonability Properties for Access-Control Policy Languages. Michael Carl Tschantz, Shriram Krishnamurthi. ACM Symposium on Access Control Models and Technologies (SACMAT), 2006.

Verification and Change Impact Analysis of Access-Control Policies. Kathi Fisler, Shriram Krishnamurthi, Leo Meyerovich, Michael Tschantz. International Conference on Software Engineering (ICSE), 2005.