"There are rabbit holes I want to go down that I'm not allowed to go down": An Investigation of Security Expert Threat Modeling Practices for Medical Devices. - Ronald E. Thompson III; Madeline McLaughlin; Carson Powers; Daniel Votipka (USENIX Security Symposium, 2024)

"Threat modeling is very formal, it's very technical, and also very hard to do correctly": Investigating Threat Modeling Practices in Open-Source Software Projects. - Harjot Kaur; Carson Powers; Ronald E. Thompson III; Sascha Fahl; Daniel Votipka (USENIX Security Symposium, 2025)