An Analysis of the Security Patterns Landscape. - Thomas Heyman; Koen Yskout; Riccardo Scandariato; Wouter Joosen (SESS@ICSE, 2007)

Transforming Security Requirements into Architecture. - Koen Yskout; Riccardo Scandariato; Bart De Win; Wouter Joosen (ARES, 2008)

Transforming Security Audit Requirements into a Software Architecture. - Koen Yskout; Bart De Win; Wouter Joosen (MODSEC@MoDELS, 2008)

The Security Twin Peaks. - Thomas Heyman; Koen Yskout; Riccardo Scandariato; Holger Schmidt 001; Yijun Yu (ESSoS, 2011)

Requirements-Driven Runtime Reconfiguration for Security. - Koen Yskout; Olivier-Nathanael Ben David; Riccardo Scandariato; Benoit Baudry (EternalS@FET, 2011)

Does organizing security patterns focus architectural choices? - Koen Yskout; Riccardo Scandariato; Wouter Joosen (ICSE, 2012)

Connecting Security Requirements and Software Architecture with Patterns (Beveiligingsvereisten en softwarearchitectuur verbinden met patronen). - Koen Yskout (2013)

Evolution of Security Engineering Artifacts: A State of the Art Survey. - Michael Felderer; Basel Katt; Philipp Kalb; Jan Jürjens; Martín Ochoa; Federica Paci; Le Minh Sang Tran; Thein Than Tun; Koen Yskout; Riccardo Scandariato; Frank Piessens; Dries Vanoverberghe; et al. (Int. J. Secur. Softw. Eng., 2014)

Change patterns - Co-evolving requirements and architecture. - Koen Yskout; Riccardo Scandariato; Wouter Joosen (Softw. Syst. Model., 2014)

Empirical Assessment of Security Requirements and Architecture: Lessons Learned. - Riccardo Scandariato; Federica Paci; Le Minh Sang Tran; Katsiaryna Labunets; Koen Yskout; Fabio Massacci; Wouter Joosen (Engineering Secure Future Internet Services and Systems, 2014)

MASC: Modelling Architectural Security Concerns. - Laurens Sion; Koen Yskout; Alexander van Den Berghe; Riccardo Scandariato; Wouter Joosen (MiSE@ICSE, 2015)

Do Security Patterns Really Help Designers? - Koen Yskout; Riccardo Scandariato; Wouter Joosen (ICSE (1), 2015)

SoSPa: A system of Security design Patterns for systematically engineering secure systems. - Phu Hong Nguyen; Koen Yskout; Thomas Heyman; Jacques Klein; Riccardo Scandariato; Yves Le Traon (MoDELS, 2015)

Towards systematically addressing security variability in software product lines. - Laurens Sion; Dimitri Van Landuyt; Koen Yskout; Wouter Joosen (SPLC, 2016)

A Model for Provably Secure Software Design. - Alexander van Den Berghe; Koen Yskout; Riccardo Scandariato; Wouter Joosen (FormaliSE@ICSE, 2017)

Towards a Platform for Empirical Software Design Studies. - Koen Yskout; Dimitri Van Landuyt; Wouter Joosen (ECASE@ICSE, 2017)

A Modular Meta-model for Security Solutions. - Laurens Sion; Koen Yskout; Riccardo Scandariato; Wouter Joosen (Programming, 2017)

Design notations for secure software: a systematic literature review. - Alexander van Den Berghe; Riccardo Scandariato; Koen Yskout; Wouter Joosen (Softw. Syst. Model., 2017)

Interaction-Based Privacy Threat Elicitation. - Laurens Sion; Kim Wuyts; Koen Yskout; Dimitri Van Landuyt; Wouter Joosen (EuroS&P Workshops, 2018)

SPARTA: Security & Privacy Architecture Through Risk-Driven Threat Assessment. - Laurens Sion; Dimitri Van Landuyt; Koen Yskout; Wouter Joosen (ICSA Companion, 2018)

Security patterns 2.0: towards security patterns based on security building blocks. - Alexander van Den Berghe; Koen Yskout; Wouter Joosen (SEAD@ICSE, 2018)

Knowledge-enriched security and privacy threat modeling. - Laurens Sion; Koen Yskout; Dimitri Van Landuyt; Wouter Joosen (ICSE (Companion Volume), 2018)

Risk-based design security analysis. - Laurens Sion; Koen Yskout; Dimitri Van Landuyt; Wouter Joosen (SEAD@ICSE, 2018)

Solution-aware data flow diagrams for security threat modeling. - Laurens Sion; Koen Yskout; Dimitri Van Landuyt; Wouter Joosen (SAC, 2018)

A Lingua Franca for Security by Design. - Alexander van Den Berghe; Koen Yskout; Riccardo Scandariato; Wouter Joosen (SecDev, 2018)

Towards Automated Security Design Flaw Detection. - Laurens Sion; Katja Tuma; Riccardo Scandariato; Koen Yskout; Wouter Joosen (ASE Workshops, 2019)

Security Threat Modeling: Are Data Flow Diagrams Enough? - Laurens Sion; Koen Yskout; Dimitri Van Landuyt; Alexander van Den Berghe; Wouter Joosen (ICSE (Workshops), 2020)

Threat modeling: from infancy to maturity. - Koen Yskout; Thomas Heyman; Dimitri Van Landuyt; Laurens Sion; Kim Wuyts; Wouter Joosen (ICSE (NIER), 2020)

Automating the early detection of security design flaws. - Katja Tuma; Laurens Sion; Riccardo Scandariato; Koen Yskout (MoDELS, 2020)

Automated Threat Analysis and Management in a Continuous Integration Pipeline. - Laurens Sion; Dimitri Van Landuyt; Koen Yskout; Stef Verreydt; Wouter Joosen (SecDev, 2021)

Security and Privacy Requirements for Electronic Consent: A Systematic Literature Review. - Stef Verreydt; Koen Yskout; Wouter Joosen (ACM Trans. Comput. Heal., 2021)

A reimagined catalogue of software security patterns. - Alexander van Den Berghe; Koen Yskout; Wouter Joosen (EnCyCriS@ICSE, 2022)

Relationship-based threat modeling. - Stef Verreydt; Laurens Sion; Koen Yskout; Wouter Joosen (EnCyCriS@ICSE, 2022)

Using provocative design to foster electronic informed consent innovation. - Evelien De Sutter; Stef Verreydt; Koen Yskout; David Geerts; Pascal Borry; An Outtier; Marc Ferrante; Corinne Vandermeulen; Nele Vanmechelen; Bart Van der Schueren; Isabelle Huys (BMC Medical Informatics Decis. Mak., 2022)

Relationship-Based Threat Modeling: Evaluation Data. - Stef Verreydt; Laurens Sion; Koen Yskout; Wouter Joosen (Zenodo, 2022)

Threat Modeling: A Rough Diamond or Fool's Gold? - Anh-Duy Tran; Koen Yskout; Wouter Joosen (ECSA (Tracks, Workshops and Doctoral Symposium), 2023)

AndrAS: Automated Attack Surface Extraction for Android Applications. - Anh-Duy Tran; Koen Yskout; Wouter Joosen (QRS, 2023)

An Ontological Approach to Address Socio-Technical Gaps in Co-Engineering of Safety and Security. - Sanketh Ramachandra; Jens Vankeirsbilck; Laurens Sion; Koen Yskout; Jeroen Boydens (ICSRS, 2024)

Threat modeling state of practice in Dutch organizations. - Stef Verreydt; Koen Yskout; Laurens Sion; Wouter Joosen (SOUPS @ USENIX Security Symposium, 2024)

TerrARA: Automated Security Threat Modeling for Infrastructure as Code. - Anh-Duy Tran; Laurens Sion; Koen Yskout; Wouter Joosen (CODASPY, 2025)

SAPlugin: Management and Extraction of Software Architecture Descriptions in Visual Paradigm. - Laurens Sion; Dimitri Van Landuyt; Koen Yskout; Wouter Joosen (ICSA Companion, 2025)

SAPlugin: Management and Extraction of Software Architecture Descriptions in Visual Paradigm. - Laurens Sion; Dimitri Van Landuyt; Koen Yskout; Wouter Joosen (Zenodo, 2025)