| 2022 | ISSRE | Programming Language Evaluation Criteria for Safety-Critical Software in the Air Domain. | Rob Ashmore, Andrew Howe, Rhiannon Chilton, Shamal Faily |
| 2021 | CRITIS | Use-Case Informed Task Analysis for Secure and Usable Design Solutions in Rail. | Amna Altaf, Shamal Faily, Huseyin Dogan, Alexios Mylonas, Eylem Thron |
| 2021 | ESORICS | Integrated Design Framework for Facilitating Systems-Theoretic Process Analysis. | Amna Altaf, Shamal Faily, Huseyin Dogan, Eylem Thron, Alexios Mylonas |
| 2020 | ESORICS | Identifying Implicit Vulnerabilities Through Personas as Goal Models. | Shamal Faily, Claudia Iacob, Raian Ali, Duncan Ki-Aries |
| 2020 | SIGCSE | The Impact of Undergraduate Mentorship on Student Satisfaction and Engagement, Teamwork Performance, and Team Dysfunction in a Software Engineering Group Project. | Claudia Iacob, Shamal Faily |
| 2019 | ESORICS | Identifying Safety and Human Factors Issues in Rail Using IRIS and CAIRIS. | Amna Altaf, Shamal Faily, Huseyin Dogan, Alexios Mylonas, Eylem Thron |
| 2019 | RE | Usable and Secure Requirements Engineering with CAIRIS. | Shamal Faily, Duncan Ki-Aries |
| 2018 | ICSE | Redesigning an undergraduate software engineering course for a large cohort. | Claudia Iacob, Shamal Faily |
| 2018 | RE | Tool-Supporting Data Protection Impact Assessments with CAIRIS. | Joshua Coles, Shamal Faily, Duncan Ki-Aries |
| 2018 | RE | Assessing System of Systems Security Risk and Requirements with OASoSIS. | Duncan Ki-Aries, Shamal Faily, Huseyin Dogan, Christopher Williams |
| 2017 | RCIS | Re-framing "the AMN": A case study eliciting and modelling a System of Systems using the Afghan Mission Network. | Duncan Ki-Aries, Shamal Faily, Huseyin Dogan, Christopher Williams |
| 2017 | RCIS | System design considerations for risk perception. | Andrew M'manga, Shamal Faily, John McAlaney, Christopher Williams |
| 2017 | RE | Design as Code: Facilitating Collaboration Between Usability and Security Engineers Using CAIRIS. | Shamal Faily, Claudia Iacob |
| 2017 | RE | From Requirements to Operation: Components for Risk Assessment in a Pervasive System of Systems. | Duncan Ki-Aries, Huseyin Dogan, Shamal Faily, Paul Whittington, Christopher Williams |
| 2017 | SOUPS | Folk Risk Analysis: Factors Influencing Security Analysts' Interpretation of Risk. | Andrew M'manga, Shamal Faily, John McAlaney, Christopher Williams |
| 2016 | RE | Welcome to the Third Workshop on Evolving Security and Privacy Requirements Engineering (ESPRE). | Kristian Beckers, Shamal Faily, Seok-Won Lee, Nancy R. Mead |
| 2015 | CRITIS | "Water, Water, Every Where": Nuances for a Water Industry Critical Infrastructure Specification Exemplar. | Shamal Faily, George Stergiopoulos, Vasilios Katos, Dimitris Gritzalis |
| 2013 | CHI | Designing interactive secure system: chi 2013 special interest group. | Shamal Faily, Lizzie Coles-Kemp, Paul Dunphy, Mike Just, Yoko Akama, Alexander De Luca |
| 2013 | EICS | Guidelines for integrating personas into software engineering tools. | Shamal Faily, John Lyle |
| 2013 | SAC | Extending the web to support personal network services. | John Lyle, Claes Nilsson, Anders Isberg, Shamal Faily |
| 2012 | DAIS | On the Design and Development of webinos: A Distributed Mobile Application Middleware. | John Lyle, Shamal Faily, Ivan Flechais, Andr Paul, Ayse Gker, Hans I. Myrhaug, Heiko Desruelle, Andrew P. Martin |
| 2012 | MODELS | Model-driven architectural risk analysis using architectural and contextualised attack patterns. | Shamal Faily, John Lyle, Cornelius Namiluko, Andrea S. Atzeni, Cesare Cameroni |
| 2012 | WWW | The webinos project. | Christian Fuhrhop, John Lyle, Shamal Faily |
| 2011 | CHI | Persona cases: a technique for grounding personas. | Shamal Faily, Ivan Flechais |
| 2011 | RE | Eliciting usable security requirements with misusability cases. | Shamal Faily, Ivan Flechais |
| 2010 | ICSE | A meta-model for usable secure requirements engineering. | Shamal Faily, Ivan Flechais |
| 2010 | NSPW | To boldly go where invention isn't secure: applying security entrepreneurship to secure systems design. | Shamal Faily, Ivan Flechais |
| 2009 | RE | Context-Sensitive Requirements and Risk Management with IRIS. | Shamal Faily, Ivan Flechais |
| 2008 | RE | Towards Requirements Engineering Practice for Professional End User Developers: A Case Study. | Shamal Faily |