Security Requirements Engineering for Secure Business Processes. - Elda Paja; Paolo Giorgini; Stéphane Paul; Per Håkon Meland (BIR Workshops, 2011)

Orchestrating Security and System Engineering for Evolving Systems - (Invited Paper). - Fabio Massacci; Fabrice Bouquet; Elizabeta Fourneret; Jan Jürjens; Mass Soldal Lund; Sébastien Madelénat; Jan Tobias Mühlberg; Federica Paci; Stéphane Paul; Frank Piessens; Bjørnar Solhaug; Sven Wenzel (ServiceWave, 2011)

Beyond Traceability: Compared Approaches to Consistent Security Risk Assessments. - Franco Bergomi; Stéphane Paul; Bjørnar Solhaug; Raphaël Vignon-Davillier (ARES, 2013)

The Use and Usefulness of Threats in Goal-Oriented Modelling. - Per Håkon Meland; Erlend Andreas Gjære; Stéphane Paul (ARES, 2013)

Formal Safety and Security Assessment of an Avionic Architecture with Alloy. - Julien Brunel; Laurent Rioux; Stéphane Paul; Anthony Faucogney; Frédérique Vallée (ESSS, 2014)

Towards Automating the Construction & Maintenance of Attack Trees: a Feasibility Study. - Stéphane Paul (GraMSec, 2014)

Threat Analysis in Goal-Oriented Security Requirements Modelling. - Per Håkon Meland; Elda Paja; Erlend Andreas Gjære; Stéphane Paul; Fabiano Dalpiaz; Paolo Giorgini (Int. J. Secur. Softw. Eng., 2014)

Unifying traditional risk assessment approaches with attack trees. - Stéphane Paul; Raphaël Vignon-Davillier (J. Inf. Secur. Appl., 2014)

The Aniketos Design-Time Framework Applied - A Case in Air Traffic Management. - Stéphane Paul; Alessandra Tedeschi; Erlend Andreas Gjære; Ivonne A. Herrera (Secure and Trustworthy Service Composition, 2014)

Poster Support for an Obeya-Like Risk Management Approach. - Stéphane Paul; Paul Varela (GraMSec@CSF, 2019)

Obérisk: Cybersecurity Requirements Elicitation through Agile Remote or Face-to-Face Risk Management Brainstorming Sessions. - Stéphane Paul; Douraïd Naouar; Emmanuel Gureghian (Inf., 2021)

PRAETORIAN: A Framework for the Protection of Critical Infrastructures from advanced Combined Cyber and Physical Threats. - Lazaros Papadopoulos; Antonios Karteris; Dimitrios Soudris; Eva María Muñoz Navarro; Juan Jose Hernandez-Montesinos; Stéphane Paul; Nicolas Museux; Sandra König; Manuel Egger; Stefan Schauer; Javier Hingant Gómez; Tamara Hadjina (ARES, 2023)

Protection of critical infrastructures from advanced combined cyber and physical threats: The PRAETORIAN approach. - Lazaros Papadopoulos; Konstantinos P. Demestichas; Eva María Muñoz Navarro; Juan Jose Hernandez-Montesinos; Stéphane Paul; Nicolas Museux; Sandra König; Stefan Schauer; Alfonso Climente Alarcón; Israel Pérez-Llopis; Tim H. Stelkens-Kobsch; Tamara Hadjina; et al. (Int. J. Crit. Infrastructure Prot., 2024)

Challenges in Adapting an Industrial Training Course for Academia a Cybersecurity Risk Management Course Case Study. - Stéphane Paul; Jamal El Hachem; Guy Gogniat (ARES (EU Projects Symposium Workshops 2), 2025)