| 2002 | ACSAC | Thirty Years Later: Lessons from the Multics Security Evaluation. | Paul A. Karger, Roger R. Schell |
| 2001 | ACSAC | Information Security: Science, Pseudoscience, and Flying Pigs. | Roger R. Schell |
| 1990 | ACSAC | Architecture for an embedded secure data base management system. | Cynthia E. Irvine, Roger R. Schell, Linda L. Vetter |
| 1988 | SP | The SeaView security model. | Dorothy E. Denning, Teresa F. Lunt, Roger R. Schell, William R. Shockley, Mark R. Heckman |
| 1988 | SP | A near-term design for the SeaView multilevel database system. | Teresa F. Lunt, Roger R. Schell, William R. Shockley, Mark R. Heckman, Dan Warren |
| 1987 | SP | A Multilevel Relational Data Model. | Dorothy E. Denning, Teresa F. Lunt, Roger R. Schell, Mark R. Heckman, William R. Shockley |
| 1986 | SP | Views for Multilevel Database Security. | Dorothy E. Denning, Selim G. Akl, Matthew Morgenstern, Peter G. Neumann, Roger R. Schell, Mark R. Heckman |
| 1984 | SP | Toward an Understanding of Extensible Architectures for Evaluated Trusted Computer System Products. | M. Schaefer, Roger R. Schell |
| 1983 | SP | Evaluating Security Properties of Computer Systems. | Roger R. Schell |
| 1981 | SP | The Structure of a Security Kernel for the Z8000 Multiprocessor. | Lyle A. Cox Jr., Roger R. Schell |
| 1981 | SP | Mechanism Sufficiency Validation by Assignment. | Lawrence J. Shirley, Roger R. Schell |