| 2025 | PRIMA | A Formal Methodology for Risk Estimation in Business Process Management. | Matteo Cristani, Tewabe Chekole Workneh, Claudio Tomazzoli, Federica Paci |
| 2023 | SAC | Towards A High-interaction Physics-aware Honeynet for Industrial Control Systems. | Marco Lucchese, Massimo Merro, Federica Paci, Nicola Zannone |
| 2021 | DBSEC | Verifiable Hierarchical Key Assignment Schemes. | Anna Lisa Ferrara, Federica Paci, Chiara Ricciardi |
| 2021 | MODELS | Connecting Regulatory Requirements to Audit Outcomes: A Model-driven Approach to Auditable Compliance. | Robert Thorburn, Federica Paci, Vladimiro Sassone, Sophie Stalla-Bourdillon |
| 2020 | ESORICS | IFTTT Privacy Checker. | Federica Paci, Davide Bianchin, Elisa Quintarelli, Nicola Zannone |
| 2018 | DBSEC | Towards Adaptive Access Control. | Luciano Argento, Andrea Margheri, Federica Paci, Vladimiro Sassone, Nicola Zannone |
| 2018 | ICSE | Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. | Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flvio Moreira de Oliveira |
| 2017 | ICDCS | A Distributed Access Control System for Cloud Federations. | Shorouq Alansari, Federica Paci, Vladimiro Sassone |
| 2017 | ICDCS | Decentralised Runtime Monitoring for Access Control Systems in Cloud Federations. | Md Sadek Ferdous, Andrea Margheri, Federica Paci, Mu Yang, Vladimiro Sassone |
| 2017 | REFSQ | On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. | Katsiaryna Labunets, Fabio Massacci, Federica Paci |
| 2016 | CRiSIS | Towards Empirical Evaluation of Automated Risk Assessment Methods. | Olga Gadyatskaya, Katsiaryna Labunets, Federica Paci |
| 2015 | RE | Which security catalogue is better for novices? | Katsiaryna Labunets, Federica Paci, Fabio Massacci |
| 2015 | REFSQ | The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals. | Martina de Gramatica, Katsiaryna Labunets, Fabio Massacci, Federica Paci, Alessandra Tedeschi |
| 2015 | SACMAT | Preventing Information Inference in Access Control. | Federica Paci, Nicola Zannone |
| 2014 | ESEM | Security triage: an industrial case study on the effectiveness of a lean methodology to identify security requirements. | Matteo Giacalone, Federica Paci, Rocco Mammoliti, Rodolfo Perugino, Fabio Massacci, Claudio Selli |
| 2014 | RE | Security triage: A report of a lean security requirements methodology for cost-effective security analysis. | Matteo Giacalone, Rocco Mammoliti, Fabio Massacci, Federica Paci, Rodolfo Perugino, Claudio Selli |
| 2014 | RE | An experiment on comparing textual vs. visual industrial methods for security risk assessment. | Katsiaryna Labunets, Federica Paci, Fabio Massacci, Raminder S. Ruprai |
| 2013 | ESEM | An Experimental Comparison of Two Risk-Based Security Methods. | Katsiaryna Labunets, Fabio Massacci, Federica Paci, Le Minh Sang Tran |
| 2013 | ICWS | Privacy-Aware Web Service Composition and Ranking. | Elisa Costante, Federica Paci, Nicola Zannone |
| 2012 | ICST | Managing Evolution by Orchestrating Requirements and Testing Engineering Processes. | Federica Paci, Fabio Massacci, Fabrice Bouquet, Stephane Debricon |
| 2012 | RE | Assessing a requirements evolution approach: Empirical studies in the Air Traffic Management domain. | Fabio Massacci, Deepa Nagaraj, Federica Paci, Le Minh Sang Tran, Alessandra Tedeschi |
| 2011 | CaiSE | A Tool for Managing Evolving Security Requirements. | Gbor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dniel Varr, Yijun Yu |
| 2011 | CaiSE | A Tool for Managing Evolving Security Requirements. | Gbor Bergmann, Fabio Massacci, Federica Paci, Thein Than Tun, Dniel Varr, Yijun Yu |
| 2011 | CaiSE | An Extended Ontology for Security Requirements. | Fabio Massacci, John Mylopoulos, Federica Paci, Thein Than Tun, Yijun Yu |
| 2011 | ISI | Managing changes with legacy security engineering processes. | Edith Felix, Olivier Delande, Fabio Massacci, Federica Paci |
| 2010 | CCS | PriMa: an effective privacy protection mechanism for social networks. | Anna Cinzia Squicciarini, Federica Paci, Smitha Sundareswaran |
| 2010 | ICDE | A privacy-preserving approach to policy-based content dissemination. | Ning Shang, Mohamed Nabeel, Federica Paci, Elisa Bertino |
| 2009 | ICWS | Identity Attribute-Based Role Provisioning for Human WS-BPEL Processes. | Federica Paci, Rodolfo Ferrini, Elisa Bertino |
| 2009 | MDM | VeryIDX - A Privacy Preserving Digital Identity Management System for Mobile Devices. | Federica Paci, Ning Shang, Kevin Steuer Jr., Ruchith Fernando, Elisa Bertino |
| 2009 | WWW | Collective privacy management in social networks. | Anna Cinzia Squicciarini, Mohamed Shehab, Federica Paci |
| 2008 | ICDE | Trust establishment in the formation of Virtual Organizations. | Anna Cinzia Squicciarini, Federica Paci, Elisa Bertino |
| 2008 | ICSOC | Authorization and User Failure Resiliency for WS-BPEL Business Processes. | Federica Paci, Rodolfo Ferrini, Yuqing Sun, Elisa Bertino |
| 2007 | ICWS | User Tasks and Access Control overWeb Services. | Jacques Thomas, Federica Paci, Elisa Bertino, Patrick Eugster |
| 2006 | ICWS | Access Control and Authorization Constraints for WS-BPEL. | Elisa Bertino, Jason Crampton, Federica Paci |
| 2006 | WWW | Access control enforcement for conversation-based web services. | Massimo Mecella, Mourad Ouzzani, Federica Paci, Elisa Bertino |