Threat Analysis in Practice - Systematically Deriving Security Requirements. - Markus Fockel; Sven Merschjohann; Masud Fazal-Baqaie (PROFES, 2018)

Designing and Integrating IEC 62443 Compliant Threat Analysis. - Markus Fockel; Sven Merschjohann; Masud Fazal-Baqaie; Torsten Förder; Stefan Hausmann; Boris Waldeck (EuroSPI, 2019)

Automated Suggestions of Security Enhancing Improvements for Software Architectures. - Sven Merschjohann (MoDELS (Companion), 2019)

Was fehlt (bisher) um Apps sicher zu entwickeln? - Prozesse, Werkzeuge und Schulungen für sichere Apps by Design. - Katharina Altemeier; Matthias Becker 001; Stefan Dziwok; Thorsten Koch; Sven Merschjohann (PVM, 2019)

AppSecure.nrw Software Security Study. - Stefan Dziwok; Thorsten Koch; Sven Merschjohann; Boris Budweg; Sebastian Leuer (CoRR, 2021)

How far are German companies in improving security through static program analysis tools? - Goran Piskachev; Stefan Dziwok; Thorsten Koch; Sven Merschjohann; Eric Bodden (SecDev, 2022)

Eliciting Security Requirements - An Experience Report. - Roman Trentinaglia; Sven Merschjohann; Markus Fockel; Hendrik Eikerling (REFSQ, 2023)

Security Belts: A Maturity Model for DevOps Teams to Increase the Software Security of their Product - An Experience Report. - Samira Taaibi; Stefan Dziwok; Lars Hermerschmidt; Thorsten Koch; Sven Merschjohann; Mark Vollmary (AMCIS, 2024)