A Formal Security Analysis of ERTMS Train to Trackside Protocols. - Joeri de Ruiter; Richard James Thomas; Tom Chothia (RSSRail, 2016)

TRAKS: A Universal Key Management Scheme for ERTMS. - Richard James Thomas; Mihai Ordean; Tom Chothia; Joeri de Ruiter (ACSAC, 2017)

An Attack Against Message Authentication in the ERTMS Train to Trackside Communication Protocols. - Tom Chothia; Mihai Ordean; Joeri de Ruiter; Richard James Thomas (AsiaCCS, 2017)

Jail, Hero or Drug Lord? Turning a Cyber Security Course Into an 11 Week Choose Your Own Adventure Story. - Tom Chothia; Sam Holdcroft; Andreea-Ina Radu; Richard James Thomas (ASE @ USENIX Security Symposium, 2017)

Choose Your Pwn Adventure: Adding Competition and Storytelling to an Introductory Cybersecurity Course. - Tom Chothia; Chris Novakovic; Andreea-Ina Radu; Richard James Thomas (Trans. Edutainment, 2019)

A systematic development of a secure architecture for the European Rail Traffic Management System. - Richard James Thomas (2019)

Catch Me If You Can: An In-Depth Study of CVE Discovery Time and Inconsistencies for Managing Risks in Critical Infrastructures. - Richard James Thomas; Joseph Gardiner; Tom Chothia; Emmanouil Samanis; Joshua Perrett; Awais Rashid (CPSIOTSEC@CCS, 2020)

Learning from Vulnerabilities - Categorising, Understanding and Detecting Weaknesses in Industrial Control Systems. - Richard James Thomas; Tom Chothia (CyberICPS/SECPRE/ADIoT@ESORICS, 2020)

A Video Game-Inspired Approach for a Pedestrian Guidance System Within a Railway Station. - Joseph D. Preece; Mohamed Samra; Richard James Thomas; John M. Easton (IEEE BigData, 2021)