Learning Security QA from the Vulnerability Researchers. - Chris Wysopal (login Usenix Mag., 2003)

Putting Trust in Software Code. - Chris Wysopal (login Usenix Mag., 2004)

Static detection of application backdoors - Detecting both malicious software behavior and malicious indicators from the static analysis of executable code. - Chris Wysopal; Chris Eng; Tyler Shields (Datenschutz und Datensicherheit, 2010)

Software security varies greatly. - Chris Wysopal (Datenschutz und Datensicherheit, 2012)

Guest editors' introduction: Software Assurance for the Masses. - Brian Chess; Chris Wysopal (IEEE Secur. Priv., 2012)

For Good Measure: Security Debt. - Dan Geer; Chris Wysopal (login Usenix Mag., 2013)

Panel: Building a Business around Secure Development. - Nadia Carlsten; Reed Sturtevant; Chris Wysopal; Andreas Kuehlmann; Robert K. Cunningham (SecDev, 2017)