| 2016 | IRI | Anomaly Detection in Electrical Substation Circuits via Unsupervised Machine Learning. | Alfonso Valdes, Richard Macwan, Matthew Backes |
| 2010 | PST | Detection, correlation, and visualization of attacks against critical infrastructure systems. | Linda Briesemeister, Steven Cheung, Ulf Lindqvist, Alfonso Valdes |
| 2008 | MASS | An intrusion detection system for wireless process control systems. | Tanya G. Roosta, Dennis K. Nilsson, Ulf Lindqvist, Alfonso Valdes |
| 2004 | VizSec | Scalable visualization of propagating internet phenomena. | Alfonso Valdes, Martin W. Fong |
| 2003 | CCS | Self-regenerative software components. | Hassen Sadi, Bruno Dutertre, Joshua Levy, Alfonso Valdes |
| 2002 | RAID | A Mission-Impact-Based Approach to INFOSEC Alarm Correlation. | Phillip A. Porras, Martin W. Fong, Alfonso Valdes |
| 2001 | RAID | Probabilistic Alert Correlation. | Alfonso Valdes, Keith Skinner |
| 2000 | RAID | Adaptive, Model-Based Monitoring for Cyber Attack Detection. | Alfonso Valdes, Keith Skinner |
| 1998 | NDSS | Live Traffic Analysis of TCP/IP Gateways. | Phillip A. Porras, Alfonso Valdes |
| 1991 | SP | The SRI IDES Statistical Anomaly Detector. | Harold S. Javitz, Alfonso Valdes |