Workshop: Assessing the Quality of a Business Process Implemented across Systems of Systems. - Robert J. Ellison; Carol Woody (ICCBSS, 2007)

Considering Operational Security Risk during System Development. - Carol Woody; Christopher J. Alberts (IEEE Secur. Priv., 2007)

Supply-Chain Risk Management: Incorporating Security into Software Development. - Robert J. Ellison; Carol Woody (HICSS, 2010)

A Systemic Approach for Assessing Software Supply-Chain Risk. - Christopher J. Alberts; Audrey J. Dorofee; Rita Creel; Robert J. Ellison; Carol Woody (HICSS, 2011)

Foundations for Software Assurance. - Carol Woody; Nancy R. Mead; Daniel Shoemaker 001 (HICSS, 2012)

Repertoires of Collaboration for Disaster Management: Negotiating Emergent and Dynamic Systems Success. - Deborah Bunker; Linda Levine; Carol Woody (TDIT, 2013)

Principles and Measurement Models for Software Assurance. - Nancy R. Mead; Daniel Shoemaker 001; Carol Woody (Int. J. Secur. Softw. Eng., 2013)

Software Assurance. - Nancy R. Mead; Daniel Shoemaker 001; Carol Woody (Computing Handbook, 3rd ed. (1), 2014)

Repertoires of collaboration for common operating pictures of disasters and extreme events. - Deborah Bunker; Linda Levine; Carol Woody (Inf. Syst. Frontiers, 2015)

Measuring Software Assurance. - Robert J. Ellison; William Nichols; Carol Woody (COMPSAC Workshops, 2016)

Security engineering risk analysis (SERA). - Carol Woody (SER&IP@ICSE, 2016)

Advances in Software Engineering and Software Assurance. - Daniel Shoemaker 001; Carol Woody; Nancy R. Mead (Adv. Comput., 2016)

Open Source Software (OSS) Transparency Tutorial. - Carol Woody; Scott A. Hissam (SecDev, 2024)

Open Source Software (OSS) Transparency for DoD Acquisition. - Nancy Mead; Carol Woody; Scott A. Hissam (CoRR, 2024)

Open Source Software: The Ultimate in Reuse or a Risk Not Worth Taking? - Nancy R. Mead; Carol Woody; Scott A. Hissam (Computer, 2025)