A notation for describing the steps in indicator expansion. - Jonathan M. Spring (eCrime, 2013)

Modeling malicious domain name take-down dynamics: Why eCrime pays. - Jonathan M. Spring (eCrime, 2013)

SiLK: A Tool Suite for Unsampled Network Flow Analysis at Scale. - Mark Thomas; Leigh Metcalf; Jonathan M. Spring; Paul Krystosek; Katherine Prevost (BigData Congress, 2014)

Cyber Security via Signaling Games: Toward a Science of Cyber Security. - William Casey; Jose Andre Morales; Thomson Nguyen; Jonathan M. Spring; Rhiannon Weaver; Evan Wright; Leigh Metcalf; Bud Mishra (ICDCIT, 2014)

The Long "Taile" of Typosquatting Domain Names. - Janos Szurdi; Balazs Kocso; Gabor Cseh; Jonathan M. Spring; Márk Félegyházi; Chris Kanich (USENIX Security Symposium, 2014)

Blacklist Ecosystem Analysis: Spanning Jan 2012 to Jun 2014. - Leigh Metcalf; Jonathan M. Spring (WISCS@CCS, 2015)

Global adversarial capability modeling. - Jonathan M. Spring; Sarah Kern; Alec Summers (eCrime, 2015)

Practicing a Science of Security: A Philosophy of Science Perspective. - Jonathan M. Spring; Tyler Moore 001; David J. Pym (NSPW, 2017)

Thinking about intrusion kill chains as mechanisms. - Jonathan M. Spring; Eric Hatleback (J. Cybersecur., 2017)

Towards Scientific Incident Response. - Jonathan M. Spring; David J. Pym (GameSec, 2018)

Why Jenny can't figure out which of these messages is a covert information operation. - Tristan Caulfield; Jonathan M. Spring; M. Angela Sasse (NSPW, 2019)

Human decision-making in computer security incident response. - Jonathan M. Spring (2019)

Learning the Associations of MITRE ATT & CK Adversarial Techniques. - Rawan Al-Shaer; Jonathan M. Spring; Eliana Christou (CNS, 2020)

On managing vulnerabilities in AI/ML systems. - Jonathan M. Spring; April Galyardt; Allen D. Householder; Nathan M. VanHoudnos (NSPW, 2020)

Historical Analysis of Exploit Availability Timelines. - Allen D. Householder; Jeff Chrabaszcz; Trent Novelly; David Warren; Jonathan M. Spring (CSET @ USENIX Security Symposium, 2020)

Using Science in Cybersecurity - Leigh Metcalf; Jonathan M. Spring (WorldScientific, 2021)

Accurately Measuring Global Risk of Amplification Attacks using AmpMap. - Soo-Jin Moon; Yucheng Yin; Rahul Anand Sharma; Yifei Yuan; Jonathan M. Spring; Vyas Sekar (USENIX Security Symposium, 2021)

The Ecosystem of Detection and Blocklisting of Domain Generation. - Leigh Metcalf; Jonathan M. Spring (DTRAP, 2021)

Review of Human Decision-making during Computer Security Incident Analysis. - Jonathan M. Spring; Phyllis Illari (DTRAP, 2021)

Time to Change the CVSS? - Jonathan M. Spring; Eric Hatleback; Allen D. Householder; Art Manion; Deana Shick (IEEE Secur. Priv., 2021)

Are We Skillful or Just Lucky? Interpreting the Possible Histories of Vulnerability Disclosures. - Allen D. Householder; Jonathan M. Spring (DTRAP, 2022)

An analysis of how many undiscovered vulnerabilities remain in information systems. - Jonathan M. Spring (Comput. Secur., 2023)

Adversarial Machine Learning and Cybersecurity: Risks, Challenges, and Legal Implications. - Micah Musser; Andrew Lohn; James X. Dempsey; Jonathan M. Spring; Ram Shankar Siva Kumar; Brenda Leong; Christina Liaghati; Cindy Martinez; Crystal D. Grant; Daniel Rohrer; Heather Frase; Jonathan Elliott; et al. (CoRR, 2023)

Challenges to Using Large Language Models in Code Generation and Repair. - Liliana Pasquale; Antonino Sabetta; Marcelo d'Amorim; Péter Hegedüs; Mehdi Tarrit Mirakhorli; Hamed Okhravi; Mathias Payer; Awais Rashid; Joanna C. S. Santos; Jonathan M. Spring; Lin Tan 001; Katja Tuma (IEEE Secur. Priv., 2025)

Secure by Design for Everyone. - Jonathan M. Spring (IEEE Secur. Priv., 2025)