Improving Intrusion Detection through Alert Verification. - Thomas Heyman; Bart De Win; Christophe Huygens; Wouter Joosen (WOSIS, 2006)

An Analysis of the Security Patterns Landscape. - Thomas Heyman; Koen Yskout; Riccardo Scandariato; Wouter Joosen (SESS@ICSE, 2007)

Using Security Patterns to Combine Security Metrics. - Thomas Heyman; Riccardo Scandariato; Christophe Huygens; Wouter Joosen (ARES, 2008)

Risk-Driven Architectural Decomposition. - Thomas Heyman; Riccardo Scandariato; Wouter Joosen (ARES, 2009)

Browser protection against cross-site request forgery. - Wim Maes; Thomas Heyman; Lieven Desmet; Wouter Joosen (SecuCode@CCS, 2009)

Security in Context: Analysis and Refinement of Software Architectures. - Thomas Heyman; Riccardo Scandariato; Wouter Joosen (COMPSAC, 2010)

CsFire: Transparent Client-Side Mitigation of Malicious Cross-Domain Requests. - Philippe De Ryck; Lieven Desmet; Thomas Heyman; Frank Piessens; Wouter Joosen (ESSoS, 2010)

The Security Twin Peaks. - Thomas Heyman; Koen Yskout; Riccardo Scandariato; Holger Schmidt 001; Yijun Yu (ESSoS, 2011)

Reusable Formal Models for Secure Software Architectures. - Thomas Heyman; Riccardo Scandariato; Wouter Joosen (WICSA/ECSA, 2012)

A Formal Analysis Technique for Secure Software Architectures (Een formele analysetechniek voor veilige softwarearchitecturen). - Thomas Heyman (2013)

Scalar: Systematic Scalability Analysis with the Universal Scalability Law. - Thomas Heyman; Davy Preuveneers; Wouter Joosen (FiCloud, 2014)

Scalability Analysis of the OpenAM Access Control System with the Universal Scalability Law. - Thomas Heyman; Davy Preuveneers; Wouter Joosen (FiCloud, 2014)

Scalar: A Distributed Scalability Analysis Framework. - Thomas Heyman; Davy Preuveneers; Wouter Joosen (QEST, 2014)

SoSPa: A system of Security design Patterns for systematically engineering secure systems. - Phu Hong Nguyen; Koen Yskout; Thomas Heyman; Jacques Klein; Riccardo Scandariato; Yves Le Traon (MoDELS, 2015)

Feature-Based Variability Management for Scalable Enterprise Applications: Experiences with an E-Payment Case. - Davy Preuveneers; Thomas Heyman; Yolande Berbers; Wouter Joosen (HICSS, 2016)

Systematic scalability assessment for feature oriented multi-tenant services. - Davy Preuveneers; Thomas Heyman; Yolande Berbers; Wouter Joosen (J. Syst. Softw., 2016)

K8-Scalar: a workbench to compare autoscalers for container-orchestrated services (Artifact). - Wito Delnat; Thomas Heyman; Wouter Joosen; Davy Preuveneers; Ansar Rafique; Eddy Truyen; Dimitri Van Landuyt (Dagstuhl Artifacts Ser., 2018)

Threat modeling: from infancy to maturity. - Koen Yskout; Thomas Heyman; Dimitri Van Landuyt; Laurens Sion; Kim Wuyts; Wouter Joosen (ICSE (NIER), 2020)