13 citations · 16 across the 8 of their papers we have counts for
4 papers · 1 filter
The Role of Diversity in Cybersecurity Risk Analysis: An Experimental Plan
Katja Tuma, Romy Van Der Lee
Cybersecurity threat and risk analysis (RA) approaches are used to identify and mitigate security risks early-on in the software development life-cycle. Existing approaches automat…
A replication of a controlled experiment with two STRIDE variants
Winnie Mbaka, Katja Tuma
To avoid costly security patching after software deployment, security-by-design techniques (e.g., STRIDE threat analysis) are adopted in organizations to root out security issues b…
Human Aspect of Threat Analysis: A Replication
Katja Tuma, Winnie Mbaka
Background: Organizations are experiencing an increasing demand for security-by-design activities (e.g., STRIDE analyses) which require a high manual effort. This situation is wors…
Towards a Security Stress-Test for Cloud Configurations
Francesco Minna, Fabio Massacci, Katja Tuma
Securing cloud configurations is an elusive task, which is left up to system administrators who have to base their decisions on ``trial and error'' experimentations or by observing…