| 2025 | CRiSIS | Privacy in ERP Systems: Behavioral Models of Developers and Consultants. | Alicia Pang, Katsiaryna Labunets, Olga Gadyatskaya |
| 2024 | ESORICS | Canary in the Coal Mine: Identifying Cyber Threat Trends Through Topic Mining - Stack Overflow Case Study. | Matthijs Koier, Hugo Kuipers, Marre Slikker, Slinger Jansen, Katsiaryna Labunets |
| 2024 | SOUPS | Who is the IT Department Anyway: An Evaluative Case Study of Shadow IT Mindsets Among Corporate Employees. | Jan-Philip van Acken, Floris Jansen, Slinger Jansen, Katsiaryna Labunets |
| 2023 | CCS | Poster: The Unknown Unknown: Cybersecurity Threats of Shadow IT in Higher Education. | Jan-Philip van Acken, Joost F. Gadellaa, Slinger Jansen, Katsiaryna Labunets |
| 2019 | REFSQ | Assessing the effect of learning styles on risk model comprehensibility: A controlled experiment (short paper). | Katsiaryna Labunets, Nelly Condori-Fernndez |
| 2018 | ESEM | No search allowed: what risk modeling notation to choose? | Katsiaryna Labunets |
| 2018 | ICSE | Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. | Katsiaryna Labunets, Fabio Massacci, Federica Paci, Sabrina Marczak, Flvio Moreira de Oliveira |
| 2017 | ESEM | Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels and Complexity. | Katsiaryna Labunets, Fabio Massacci, Alessandra Tedeschi |
| 2017 | ICSE | Teaching predictive modeling to junior software engineers - seminar format and its evaluation: poster. | Katsiaryna Labunets, Andrea Janes, Michael Felderer, Fabio Massacci |
| 2017 | REFSQ | On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. | Katsiaryna Labunets, Fabio Massacci, Federica Paci |
| 2016 | CRiSIS | Towards Empirical Evaluation of Automated Risk Assessment Methods. | Olga Gadyatskaya, Katsiaryna Labunets, Federica Paci |
| 2016 | ER | Modeling Structured and Unstructured Processes: An Empirical Evaluation. | Evellin Cardoso, Katsiaryna Labunets, Fabiano Dalpiaz, John Mylopoulos, Paolo Giorgini |
| 2015 | RE | Which security catalogue is better for novices? | Katsiaryna Labunets, Federica Paci, Fabio Massacci |
| 2015 | REFSQ | The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals. | Martina de Gramatica, Katsiaryna Labunets, Fabio Massacci, Federica Paci, Alessandra Tedeschi |
| 2014 | RE | An experiment on comparing textual vs. visual industrial methods for security risk assessment. | Katsiaryna Labunets, Federica Paci, Fabio Massacci, Raminder S. Ruprai |
| 2013 | ESEM | An Experimental Comparison of Two Risk-Based Security Methods. | Katsiaryna Labunets, Fabio Massacci, Federica Paci, Le Minh Sang Tran |