| 2024 | ACSAC | A Security Alert Investigation Tool Supporting Tier 1 Analysts in Contextualizing and Understanding Network Security Events. | Leon Kersten, Santiago Darr, Tom Mulders, Emmanuele Zambon, Marco Caselli, Chris Snijders, Luca Allodi |
| 2024 | DIMVA | Inferring Recovery Steps from Cyber Threat Intelligence Reports. | Zsolt Levente Kucsvn, Marco Caselli, Andreas Peter, Andrea Continella |
| 2024 | NDSS | REPLICAWATCHER: Training-less Anomaly Detection in Containerized Microservices. | Asbat El Khairi, Marco Caselli, Andreas Peter, Andrea Continella |
| 2024 | SP | Do You Play It by the Books? A Study on Incident Response Playbooks and Influencing Factors. | Daniel Schlette, Philip Empl, Marco Caselli, Thomas Schreck, Gnther Pernul |
| 2022 | ACNS | Identifying Near-Optimal Single-Shot Attacks on ICSs with Limited Process Knowledge. | Herson Esquivel-Vargas, John Henry Castellanos, Marco Caselli, Nils Ole Tippenhauer, Andreas Peter |
| 2021 | DSN | BACGraph: Automatic Extraction of Object Relationships in the BACnet Protocol. | Herson Esquivel-Vargas, Marco Caselli, Andreas Peter |
| 2020 | DIMVA | Putting Attacks in Context: A Building Automation Testbed for Impact Assessment from the Victim's Perspective. | Herson Esquivel-Vargas, Marco Caselli, Geert Jan Laanstra, Andreas Peter |
| 2019 | SAFECOMP | BACRank: Ranking Building Automation and Control System Components by Business Continuity Impact. | Herson Esquivel-Vargas, Marco Caselli, Erik Tews, Doina Bucur, Andreas Peter |
| 2017 | ACSAC | DECANTeR: DEteCtion of Anomalous outbouNd HTTP TRaffic by Passive Application Fingerprinting. | Riccardo Bortolameotti, Thijs van Ede, Marco Caselli, Maarten H. Everts, Pieter H. Hartel, Rick Hofstede, Willem Jonker, Andreas Peter |
| 2017 | CCS | Automatic Deployment of Specification-based Intrusion Detection in the BACnet Protocol. | Herson Esquivel-Vargas, Marco Caselli, Andreas Peter |
| 2015 | CCS | Sequence-aware Intrusion Detection in Industrial Control Systems. | Marco Caselli, Emmanuele Zambon, Frank Kargl |
| 2014 | CRITIS | A Security Assessment Methodology for Critical Infrastructures. | Marco Caselli, Frank Kargl |
| 2013 | CRITIS | On the Feasibility of Device Fingerprinting in Industrial Control Systems. | Marco Caselli, Dina Hadziosmanovic, Emmanuele Zambon, Frank Kargl |