Using Attack and Failure Propagation Analysis for Context-Aware Security Control Suggestions
R. Trentinaglia, T. Koch, E. Bodden, in: Proceedings of the 14th International Conference on Model-Based Software and Systems Engineering, SCITEPRESS - Science and Technology Publications, 2026.

Security Belts: A Maturity Model for DevOps Teams to Increase the Software Security of their Product - An Experience Report
S. Taaibi, S. Dziwok, L. Hermerschmidt, T. Koch, S. Merschjohann, M. Vollmary, in: n.d.

Integrating Security Protocols in Scenario-based Requirements Specifications
T. Koch, S. Trippel, S. Dziwok, E. Bodden, in: Proceedings of the 10th International Conference on Model-Driven Engineering and Software Development, SCITEPRESS - Science and Technology Publications, 2022.

How far are German companies in improving security through static program analysis tools?
G. Piskachev, S. Dziwok, T. Koch, S. Merschjohann, E. Bodden, (2022).

AppSecure.nrw Software Security Study
S. Dziwok, T. Koch, S. Merschjohann, B. Budweg, S. Leuer, ArXiv:2108.11752 (2021).

Scenario-based Specification of Security Protocols and Transformation to Security Model Checkers
T. Koch, S. Dziwok, J. Holtmann, E. Bodden, in: ACM/IEEE 23rd International Conference on Model Driven Engineering Languages and Systems (MODELS ’20), ACM, 2020.

Softwareentwicklung wie am Fliessband
T. Koch, M. Meyer, M. Fazal-Baqaie, H. Runschke, in: M. Felderer, W. Hasselbring, R. Rabiser, R. Jung (Eds.), Software Engineering 2020 (SE 2020), Gesellschaft für Informatik e.V., 2020.

Was fehlt (bisher) um Apps sicher zu entwickeln? - Prozesse, Werkzeuge und Schulungen für sichere Apps by Design
K. Altemeier, M. Becker, S. Dziwok, T. Koch, S. Merschjohann, in: M. Mikusz (Ed.), Projektmanagement Und Vorgehensmodelle 2019 (PVM 2019), Gesellschaft für Informatik e.V., 2019.

Model-Driven STEP Application Protocol Extensions Combined with Feature Modeling Considering Geometrical Information
T. Koch, J. Holtmann, T. Lindemann, in: L.F. Pires, S. Hammoudi, B. Selic (Eds.), Revised Selected Papers of the 5th International Conference on Model-Driven Engineering and Software Development, Springer International Publishing, 2018, pp. 173–197.

Towards Scenario-based Security Requirements Engineering for Cyber-Physical Systems
T. Koch, in: International Workshop on Security for and by Model-Driven Engineering (SecureMDE 2018), 2018.

Formal, Model- and Scenario-based Requirement Patterns
M. Fockel, J. Holtmann, T. Koch, D. Schmelter, in: 6th International Conference on Model-Driven Engineering and Software Development (MODELSWARD 2018), 2018.

Model-based Requirement Pattern Catalog
M. Fockel, J. Holtmann, T. Koch, D. Schmelter, Model-Based Requirement Pattern Catalog, Paderborn, Germany, 2017.

Flexible Specification of STEP Application Protocol Extensions and Automatic Derivation of Tool Capabilities
T. Koch, J. Holtmann, T. Lindemann, in: Proceedings of the 5th International Conference on Model-Driven Engineering and Software Development, 2017.

The MechatronicUML Requirements Engineering Method: Process and Language
J. Holtmann, M. Fockel, T. Koch, D. Schmelter, C. Brenner, R. Bernijazov, M. Sander, The MechatronicUML Requirements Engineering Method: Process and Language, 2016.

Towards Feature-based Product Line Engineering of Technical Systems
T. Koch, J. Holtmann, D. Schubert, T. Lindemann, in: A. Trächtler, B. Denkena, K.-D. Thoben (Eds.), 3rd International Conference on System-Integrated Intelligence: New Challenges for Product and Production Engineering (SysInt 2016), Elsevier, 2016, pp. 447–454.

Requirements Engineering - Zusatzaufgabe oder Kernkompetenz?
J. Holtmann, M. Fockel, T. Koch, D. Schmelter, OBJEKTspektrum (2016).

Generierung von AUTOSAR-Modellen aus UML-Spezifikationen
J. Meyer, J. Holtmann, T. Koch, M. Meyer, in: J. Gausemeier, R. Dumitrescu, F.-J. Rammig, W. Schäfer, A. Trächtler (Eds.), 10. Paderborner Workshop Entwurf Mechatronischer Systeme, Heinz Nixdorf Institut, 2015, pp. 159–172.

Generating EAST-ADL Event Chains from Scenario-Based Requirements Specifications
T. Koch, J. Holtmann, J. DeAntoni, in: Software Architecture, Cham, 2014.

Combining Scenario-based and Architecture-based Timing Requirements
T. Koch, Combining Scenario-Based and Architecture-Based Timing Requirements, University of Paderborn, 2013.