| 2015 | CHI | Interrupt Now or Inform Later?: Comparing Immediate and Delayed Privacy Feedback. | Sameer Patil, Roberto Hoyle, Roman Schlegel, Apu Kapadia, Adam J. Lee |
| 2015 | INDIN | Structured system threat modeling and mitigation analysis for industrial automation systems. | Roman Schlegel, Sebastian Obermeier, Johannes Schneider |
| 2015 | SECRYPT | A Framework for Incident Response in Industrial Control Systems. | Roman Schlegel, Ana Hristova, Sebastian Obermeier |
| 2014 | CHI | Reflection or action?: how feedback and control affect location sharing decisions. | Sameer Patil, Roman Schlegel, Apu Kapadia, Adam J. Lee |
| 2013 | INDIN | Secure design of engineering software tools in Industrial Automation and Control Systems. | Ana Hristova, Sebastian Obermeier, Roman Schlegel |
| 2013 | ISPEC | A Conditional Proxy Broadcast Re-Encryption Scheme Supporting Timed-Release. | Kaitai Liang, Qiong Huang, Roman Schlegel, Duncan S. Wong, Chunming Tang |
| 2012 | NSS | Private Friends on a Social Networking Site Operated by an Overly Curious SNP. | Roman Schlegel, Duncan S. Wong |
| 2011 | NDSS | Soundcomber: A Stealthy and Context-Aware Sound Trojan for Smartphones. | Roman Schlegel, Kehuan Zhang, Xiao-yong Zhou, Mehool Intwala, Apu Kapadia, XiaoFeng Wang |
| 2011 | SOUPS | Eyeing your exposure: quantifying and controlling information sharing for improved privacy. | Roman Schlegel, Apu Kapadia, Adam J. Lee |
| 2006 | GLOBECOM | SPam over Internet Telephony (SPIT) Prevention Framework. | Roman Schlegel, Saverio Niccolini, Sandra Tartarelli, Marcus Brunner |