13 citations · 16 across the 8 of their papers we have counts for
9 papers
In Specs we Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks
Simon Schneider, Komal Kashish, Katja Tuma +1
Low-code development frameworks for IoT platforms offer a simple drag-and-drop mechanism to create applications for the billions of existing IoT devices without the need for extens…
Designing Secure AI-based Systems: a Multi-Vocal Literature Review
Simon Schneider, Ananya Saha, Emanuele Mezzi +2
AI-based systems leverage recent advances in the field of AI/ML by combining traditional software systems with AI components. Applications are increasingly being developed in this…
The Role of Diversity in Cybersecurity Risk Analysis: An Experimental Plan
Katja Tuma, Romy Van Der Lee
Cybersecurity threat and risk analysis (RA) approaches are used to identify and mitigate security risks early-on in the software development life-cycle. Existing approaches automat…
A replication of a controlled experiment with two STRIDE variants
Winnie Mbaka, Katja Tuma
To avoid costly security patching after software deployment, security-by-design techniques (e.g., STRIDE threat analysis) are adopted in organizations to root out security issues b…
Human Aspect of Threat Analysis: A Replication
Katja Tuma, Winnie Mbaka
Background: Organizations are experiencing an increasing demand for security-by-design activities (e.g., STRIDE analyses) which require a high manual effort. This situation is wors…
Towards a Security Stress-Test for Cloud Configurations
Francesco Minna, Fabio Massacci, Katja Tuma
Securing cloud configurations is an elusive task, which is left up to system administrators who have to base their decisions on ``trial and error'' experimentations or by observing…
Checking Security Compliance between Models and Code
Katja Tuma, Sven Peldszus, Daniel Strüber +2
It is challenging to verify that the planned security mechanisms are actually implemented in the software. In the context of model-based development, the implemented security mecha…
Finding Security Threats That Matter: An Industrial Case Study
Katja Tuma, Christian Sandberg, Urban Thorsson +2
Recent trends in the software engineering (i.e., Agile, DevOps) have shortened the development life-cycle limiting resources spent on security analysis of software designs. In this…
Inspection Guidelines to Identify Security Design Flaws
Katja Tuma, Danial Hosseini, Kyriakos Malamas +1
Recent trends in the software development practices (Agile, DevOps, CI) have shortened the development life-cycle causing the need for efficient security-by-design approaches. In t…