Matching attack patterns to security vulnerabilities in software-intensive system designs. - Michael Gegick; Laurie A. Williams (ACM SIGSOFT Softw. Eng. Notes, 2005)

On the design of more secure software-intensive systems by use of attack patterns. - Michael Gegick; Laurie A. Williams (Inf. Softw. Technol., 2007)

Prioritizing software security fortification throughcode-level metrics. - Michael Gegick; Laurie A. Williams; Jason A. Osborne; Mladen A. Vouk (QoP, 2008)

Ranking Attack-Prone Components with a Predictive Model. - Michael Gegick; Laurie A. Williams (ISSRE, 2008)

Failure-prone components are also attack-prone components. - Michael Gegick (OOPSLA Companion, 2008)

Toward Non-security Failures as a Predictor of Security Faults and Failures. - Michael Gegick; Pete Rotella; Laurie A. Williams (ESSoS, 2009)

Protection Poker: Structuring Software Security Risk Assessment and Knowledge Transfer. - Laurie A. Williams; Michael Gegick; Andrew Meneely (ESSoS, 2009)

Predicting Attack-prone Components. - Michael Gegick; Pete Rotella; Laurie A. Williams (ICST, 2009)

Identifying security bug reports via text mining: An industrial case study. - Michael Gegick; Pete Rotella; Tao Xie (MSR, 2010)