activity
20192025
most citedChecking Security Compliance between Models and Code

13 citations · 16 across the 8 of their papers we have counts for

collaborators
Showing cs.SEShow all

6 papers · 1 filter

cs.SE2024

Designing Secure AI-based Systems: a Multi-Vocal Literature Review

Simon Schneider, Ananya Saha, Emanuele Mezzi +2

AI-based systems leverage recent advances in the field of AI/ML by combining traditional software systems with AI components. Applications are increasingly being developed in this…

cs.SE2022★ 1 cited

The Role of Diversity in Cybersecurity Risk Analysis: An Experimental Plan

Katja Tuma, Romy Van Der Lee

Cybersecurity threat and risk analysis (RA) approaches are used to identify and mitigate security risks early-on in the software development life-cycle. Existing approaches automat…

cs.SE2022

Human Aspect of Threat Analysis: A Replication

Katja Tuma, Winnie Mbaka

Background: Organizations are experiencing an increasing demand for security-by-design activities (e.g., STRIDE analyses) which require a high manual effort. This situation is wors…

cs.SE2021★ 13 cited

Checking Security Compliance between Models and Code

Katja Tuma, Sven Peldszus, Daniel Strüber +2

It is challenging to verify that the planned security mechanisms are actually implemented in the software. In the context of model-based development, the implemented security mecha…

cs.SE2019★ 1 cited

Finding Security Threats That Matter: An Industrial Case Study

Katja Tuma, Christian Sandberg, Urban Thorsson +2

Recent trends in the software engineering (i.e., Agile, DevOps) have shortened the development life-cycle limiting resources spent on security analysis of software designs. In this…

cs.SE2019

Inspection Guidelines to Identify Security Design Flaws

Katja Tuma, Danial Hosseini, Kyriakos Malamas +1

Recent trends in the software development practices (Agile, DevOps, CI) have shortened the development life-cycle causing the need for efficient security-by-design approaches. In t…