Operational Security Patterns. - Sasha Romanosky (EuroPLoP, 2003)

Human selection of mnemonic phrase-based passwords. - Cynthia Kuo; Sasha Romanosky; Lorrie Faith Cranor (SOUPS, 2006)

Common Vulnerability Scoring System. - Peter Mell; Karen Scarfone; Sasha Romanosky (IEEE Secur. Priv., 2006)

Do Data Breaches Disclosure Laws Reduce Identity Theft? - Sasha Romanosky; Rahul Telang; Alessandro Acquisti (WEIS, 2008)

Data Breaches and Identity Theft: When is Mandatory Disclosure Optimal? - Sasha Romanosky; Richard Sharp; Alessandro Acquisti (WEIS, 2010)

Empirical Analysis of Data Breach Litigation. - Sasha Romanosky; David Hoffman; Alessandro Acquisti (ICIS, 2011)

Examining the costs and causes of cyber incidents. - Sasha Romanosky (J. Cybersecur., 2016)

Embracing and controlling risk dependency in cyber-insurance policy underwriting. - Mohammad Mahdi Khalili; Mingyan Liu; Sasha Romanosky (J. Cybersecur., 2019)

Content analysis of cyber insurance policies: how do carriers price cyber risk? - Sasha Romanosky; Lillian Ablon; Andreas Kuehn; Therese Jones (J. Cybersecur., 2019)

Improving vulnerability remediation through better exploit prediction. - Jay Jacobs; Sasha Romanosky; Idris Adjerid; Wade Baker (J. Cybersecur., 2020)

Exploit Prediction Scoring System (EPSS). - Jay Jacobs; Sasha Romanosky; Benjamin Edwards; Idris Adjerid; Michael Roytman (DTRAP, 2021)

Enhancing Vulnerability Prioritization: Data-Driven Exploit Predictions with Community-Driven Insights. - Jay Jacobs; Sasha Romanosky; Octavian Suciuo; Benjamin Edwards; Armin Sarabi (EuroS&P Workshops, 2023)

Mapping the Cyberstalking Landscape: An Empirical Analysis of Federal U.S Crimes. - Sasha Romanosky; Peter Schirmer (EuroS&P Workshops, 2023)

Realigning Incentives to Build Better Software: a Holistic Approach to Vendor Accountability. - Gergely Biczók; Sasha Romanosky; Mingyan Liu (CoRR, 2025)