| 2025 | AsiaCCS | Ruling the Unruly: Designing Effective, Low-Noise Network Intrusion Detection Rules for Security Operations Centers. | Koen T. W. Teuwen, Tom Mulders, Emmanuele Zambon, Luca Allodi |
| 2025 | AsiaCCS | POSTER: SuriCap - A Measurement Platform to Study and Evaluate Intrusion Detection Rule Engineering. | Koen T. W. Teuwen, Emmanuele Zambon, Luca Allodi |
| 2025 | ESORICS | A Comparative Study of ICS Honeypot Deployments. | Frederik Ondrikov, Denis Donadel, Francesco Lupia, Massimo Merro, Daniel dos Santos, Emmanuele Zambon, Nicola Zannone |
| 2024 | ACSAC | A Security Alert Investigation Tool Supporting Tier 1 Analysts in Contextualizing and Understanding Network Security Events. | Leon Kersten, Santiago Darr, Tom Mulders, Emmanuele Zambon, Marco Caselli, Chris Snijders, Luca Allodi |
| 2024 | PAM | From Power to Water: Dissecting SCADA Networks Across Different Critical Infrastructures. | Neil Ortiz Silva, Martin Rosso, Emmanuele Zambon, Jerry den Hartog, Alvaro A. Crdenas |
| 2024 | SP | A Tale of Two Industroyers: It was the Season of Darkness. | Luis E. Salazar, Sebastin R. Castro, Juan Lozano, Keerthi Koneru, Emmanuele Zambon, Bing Huang, Ross Baldick, Marina Krotofil, Alonso Rojas, Alvaro A. Crdenas |
| 2023 | SOUPS | 'Give Me Structure': Synthesis and Evaluation of a (Network) Threat Analysis Process Supporting Tier 1 Investigations in a Security Operation Center. | Leon Kersten, Tom Mulders, Emmanuele Zambon, Chris Snijders, Luca Allodi |
| 2022 | SP | You Can't Protect What You Don't Understand: Characterizing an Operational Gas SCADA Network. | Xi Qin, Martin Rosso, Alvaro A. Crdenas, Sandro Etalle, Jerry den Hartog, Emmanuele Zambon |
| 2017 | ACSAC | ECFI: Asynchronous Control Flow Integrity for Programmable Logic Controllers. | Ali Abbasi, Thorsten Holz, Emmanuele Zambon, Sandro Etalle |
| 2017 | NSS | \mu Shield - Configurable Code-Reuse Attacks Mitigation For Embedded Systems. | Ali Abbasi, Jos Wetzels, Wouter Bokslag, Emmanuele Zambon, Sandro Etalle |
| 2016 | CRITIS | Stealth Low-Level Manipulation of Programmable Logic Controllers I/O by Pin Control Exploitation. | Ali Abbasi, Majid Hashemi, Emmanuele Zambon, Sandro Etalle |
| 2015 | CCS | Sequence-aware Intrusion Detection in Industrial Control Systems. | Marco Caselli, Emmanuele Zambon, Frank Kargl |
| 2014 | ACSAC | Through the eye of the PLC: semantic security monitoring for industrial processes. | Dina Hadziosmanovic, Robin Sommer, Emmanuele Zambon, Pieter H. Hartel |
| 2014 | RAID | On Emulation-Based Network Intrusion Detection Systems. | Ali Abbasi, Jos Wetzels, Wouter Bokslag, Emmanuele Zambon, Sandro Etalle |
| 2013 | CRITIS | On the Feasibility of Device Fingerprinting in Industrial Control Systems. | Marco Caselli, Dina Hadziosmanovic, Emmanuele Zambon, Frank Kargl |
| 2012 | RAID | N-Gram against the Machine: On the Feasibility of the N-Gram Network Analysis for Binary Protocols. | Dina Hadziosmanovic, Lorenzo Simionato, Damiano Bolzoni, Emmanuele Zambon, Sandro Etalle |
| 2010 | CNSM | CRAC: Confidentiality risk assessment and IT-infrastructure comparison. | Ayse Morali, Emmanuele Zambon, Sandro Etalle, Roel J. Wieringa |
| 2009 | ICSE | Extended eTVRA vs. security checklist: Experiences in a value-web. | Ayse Morali, Emmanuele Zambon, Siv Hilde Houmb, Karin Sallhammar, Sandro Etalle |