| 2025 | SACI | Evaluating National Cyber Exercise Programs. | Timea Pahi, Andras Toth, Simon Tjoa |
| 2023 | IIWAS | DISA - A Blockchain-Based Distributed Information Security Audit. | Lukas Knig, Martin Pirker, Herfried Geyer, Michael Feldmann, Simon Tjoa, Peter Kieseberg |
| 2022 | AINA | A Design Thinking Approach on Information Security. | Lukas Knig, Simon Tjoa |
| 2022 | EDUCON | Business Continuity & Disaster Recovery A simulation game for holistic cyber security education. | Christoph Lang-Muhr, Simon Tjoa, Stefan Machhemdl, Daniel Haslinger |
| 2022 | ICISSP | Cyber Exercises in Computer Science Education. | Melisa Gafic, Simon Tjoa, Peter Kieseberg, Otto Hellwig, Gerald Quirchmayr |
| 2018 | ICISSP | APT RPG: Design of a Gamified Attacker/Defender Meta Model. | Robert Luh, Marlies Temper, Simon Tjoa, Sebastian Schrittwieser |
| 2015 | WETICE | Contrology - An Ontology-Based Cloud Assurance Approach. | Ulrich Koinig, Simon Tjoa, Jungwoo Ryoo |
| 2014 | CaiSE | Simulation-Based Cyber-Attack Assessment of Critical Infrastructures. | Marlies Rybnicek, Simon Tjoa, Rainer Poisel |
| 2014 | SECRYPT | Keeping an Eye on Your Security Through Assurance Indicators. | Moussa Ouedraogo, Chien-Ting Kuo, Simon Tjoa, David Preston, Eric Dubois, Paulo Simes, Tiago Cruz |
| 2013 | AINA | Game-based Simulation of Distributed Denial of Service (DDoS) Attack and Defense Mechanisms of Critical Infrastructures. | Rainer Poisel, Marlies Rybnicek, Simon Tjoa |
| 2013 | SMC | Facebook Watchdog: A Research Agenda for Detecting Online Grooming and Bullying Activities. | Marlies Rybnicek, Rainer Poisel, Simon Tjoa |
| 2009 | APSCC | A roadmap to risk-aware business process management. | Stefan Jakoubi, Thomas Neubauer, Simon Tjoa |
| 2009 | APSCC | A process model for RFID based Business Process Analysis. | Thomas Neubauer, Gernot Goluch, Stefan Jakoubi, Simon Tjoa, Martin Wisser |
| 2009 | CRiSIS | A reference model for risk-aware business process management. | Stefan Jakoubi, Simon Tjoa |
| 2008 | AINA | Extension of a Methodology for Risk-Aware Business Process Modeling and Simulation Enabling Process-Oriented Incident Handling Support. | Simon Tjoa, Stefan Jakoubi, Gernot Goluch, Gerald Quirchmayr |