Using Observations of Invariant Behaviour to Detect Malicious Agency in Distributed Environments. - Thomas Richard McEvoy; Stephen D. Wolthusen (IMF, 2008)

Trouble Brewing: Using Observations of Invariant Behavior to Detect Malicious Agency in Distributed Control Systems. - Thomas Richard McEvoy; Stephen D. Wolthusen (CRITIS, 2009)

A Formal Adversary Capability Model for SCADA Environments. - Thomas Richard McEvoy; Stephen D. Wolthusen (CRITIS, 2010)

Detecting Sensor Signal Manipulations in Non-Linear Chemical Processes. - Thomas Richard McEvoy; Stephen D. Wolthusen (Critical Infrastructure Protection, 2010)

Host-Based Security Sensor Integrity in Multiprocessing Environments. - Thomas Richard McEvoy; Stephen D. Wolthusen (ISPEC, 2010)

Defeating Node Based Attacks on SCADA Systems Using Probabilistic Packet Observation. - Thomas Richard McEvoy; Stephen D. Wolthusen (CRITIS, 2011)

A Plant-Wide Industrial Process Control Security Problem. - Thomas Richard McEvoy; Stephen D. Wolthusen (Critical Infrastructure Protection, 2011)

Algebraic Analysis of Attack Impacts and Countermeasures in Critical Infrastructures. - Thomas Richard McEvoy; Stephen D. Wolthusen (CRITIS, 2012)

Agent Interaction and State Determination in SCADA Systems. - Thomas Richard McEvoy; Stephen D. Wolthusen (Critical Infrastructure Protection, 2012)

Locating subverted processes using random packet comparison in SCADA systems. - Thomas Richard McEvoy; Stephen D. Wolthusen (Int. J. Crit. Infrastructures, 2013)

Context-based anomaly detection in critical infrastructures: a study in distributed systems. - Thomas Richard McEvoy (2013)

An Attack Analysis of Managed Pressure Drilling Systems on Oil Drilling Platforms. - Thomas Richard McEvoy; Stephen D. Wolthusen (CRITIS, 2014)

Assisted content-based labelling and classification of documents. - Konrad S. Wrona; Sander Oudkerk; Alessandro Armando; Silvio Ranise; Riccardo Traverso; Lisa Ferrari; Richard McEvoy (ICMCIS, 2016)

Beyond Training and Awareness: From Security Culture to Security Risk Management. - Richard McEvoy; Stewart Kowalski (STPIS@CAiSE, 2018)

Cassandra's Calling Card: Socio-technical Risk Analysis and Management in Cyber Security Systems. - Richard McEvoy; Stewart Kowalski (STPIS@ECIS, 2019)

Deriving Cyber Security Risks from Human and Organizational Factors - A Socio-technical Approach. - Thomas Richard McEvoy; Stewart James Kowalski (Complex Syst. Informatics Model. Q., 2019)

An Accimap Waiting to Happen: Using Multi-Coding Frameworks to Accelerate Risk Analysis and Management. - Thomas Richard McEvoy (STPIS, 2020)

Consulting the Oracle at Delphi - Combining Risk I and Risk in cyber security. - Richard McEvoy; Stewart Kowalski (STPIS, 2021)

"Paying the Rent" A Formal Methods Riposte to "Living Off the Land" Attacks. - Thomas Richard McEvoy; Stephen D. Wolthusen (CRITIS, 2024)