Search Results - "Ekstedt, Mathias"

Security Countermeasures Selection Using the Meta Attack Language and Probabilistic Attack Graphs by Widel, Wojciech, Mukherjee, Preetam, Ekstedt, Mathias

“…Connecting critical infrastructure assets to the network is absolutely essential for modern industries. In contrast to the apparent advantages, network…”
Get full text

Digital Forensic Analysis of Industrial Control Systems Using Sandboxing: A Case of WAMPAC Applications in the Power Systems by Iqbal, Asif, Mahmood, Farhan, Ekstedt, Mathias

“…In today’s connected world, there is a tendency of connectivity even in the sectors which conventionally have been not so connected in the past, such as power…”
Get full text

powerLang: a probabilistic attack simulation language for the power domain by Hacks, Simon, Katsikeas, Sotirios, Ling, Engla, Lagerström, Robert, Ekstedt, Mathias

“…Cyber-attacks on power-related IT and OT infrastructures can have disastrous consequences for individuals, regions, as well as whole nations. In order to…”
Get full text

Empirical Analysis of System-Level Vulnerability Metrics through Actual Attacks by Holm, H., Ekstedt, M., Andersson, D.

“…The Common Vulnerability Scoring System (CVSS) is a widely used and well-established standard for classifying the severity of security vulnerabilities. For…”
Get full text

Load balancing of renewable energy: a cyber security analysis by Vernotte, Alexandre, Välja, Margus, Korman, Matus, Björkman, Gunnar, Ekstedt, Mathias, Lagerström, Robert

“…Background In the coming years, the increase of automation in electricity distribution grids, controlled by ICT, will bring major consequences to the cyber…”
Get full text

Investigating personal determinants of phishing and the effect of national culture by Rocha Flores, Waldo, Holm, Hannes, Nohlberg, Marcus, Ekstedt, Mathias

“…Purpose – The purpose of the study was twofold: to investigate the correlation between a sample of personal psychological and demographic factors and…”
Get full text

Success Rate of Remote Code Execution Attacks: Expert Assessments and Observations by Holm, Hannes, Sommestad, Teodor, Franke, Ulrik, Ekstedt, Mathias

“…This paper describes a study on how cyber security experts assess the importance of three variables related to the probability of successful remote code…”
Get full text

Modeling Enterprise Authorization: A Unified Metamodel and Initial Validation by Korman, Matus, Lagerström, Robert, Ekstedt, Mathias

“…Authorization and its enforcement, access control, have stood at the beginning of the art and science of information security, and remain being crucial pillar…”
Get full text

Overview of Enterprise Information Needs in Information Security Risk Assessment by Korman, Matus, Sommestad, Teodor, Hallberg, Jonas, Bengtsson, Johan, Ekstedt, Mathias

“…Methods for risk assessment in information security suggest users to collect and consider sets of input information, often notably different, both in type and…”
Get full text

Automated Probabilistic System Architecture Analysis in the Multi-Attribute Prediction Language (MAPL): Iteratively Developed using Multiple Case Studies by Lagerström, Robert, Johnson, Pontus, Ekstedt, Mathias, Franke, Ulrik, Shahzad, Khurram

“…The Multi-Attribute Prediction Language (MAPL), an analysis metamodel for non-functional qualities of system architectures, is introduced. MAPL features…”
Get full text

An Empirical Investigation of the Effect of Target-Related Information in Phishing Attacks by Flores, Waldo Rocha, Holm, Hannes, Nohlberg, Marcus, Ekstedt, Mathias

“…Analyzing the role of target-related information in a security attack is an understudied topic in the behavioral information security research field. This…”
Get full text

The Tarpit – A general theory of software engineering by Johnson, Pontus, Ekstedt, Mathias

“…Recent years have seen an increasing interest in general theories of software engineering. As in other academic fields, these theories aim to explain and…”
Get full text

The Cyber Security Modeling Language: A Tool for Assessing the Vulnerability of Enterprise System Architectures by Sommestad, Teodor, Ekstedt, Mathias, Holm, Hannes

“…The cyber security modeling language (CySeMoL) is a modeling language for enterprise-level system architectures coupled to a probabilistic inference engine. If…”
Get full text

Can the Common Vulnerability Scoring System be Trusted? A Bayesian Analysis by Johnson, Pontus, Lagerstrom, Robert, Ekstedt, Mathias, Franke, Ulrik

“…The Common Vulnerability Scoring System (CVSS) is the state-of-the art system for assessing software vulnerabilities. However, it has been criticized for lack…”
Get full text

Shaping intention to resist social engineering through transformational leadership, information security culture and awareness by Rocha Flores, Waldo, Ekstedt, Mathias

“…This paper empirically investigates how organizational and individual factors complement each other in shaping employees' intention to resist social…”
Get full text

Research communities in cyber security: A comprehensive literature review by Katsikeas, Sotirios, Johnson, Pontus, Ekstedt, Mathias, Lagerström, Robert

“…In order to provide a coherent overview of cyber security research, the Scopus academic abstract and citation database was mined to create a citation graph of…”
Get full text

Time between vulnerability disclosures: A measure of software product vulnerability by Johnson, Pontus, Gorton, Dan, Lagerström, Robert, Ekstedt, Mathias

“…Time between vulnerability disclosure (TBVD) for individual analysts is proposed as a meaningful measure of the likelihood of finding a zero-day vulnerability…”
Get full text

Development and validation of coreLang: A threat modeling language for the ICT domain by Katsikeas, Sotirios, Buhaiu, Andrei, Ekstedt, Mathias, Afzal, Zeeshan, Hacks, Simon, Mukherjee, Preetam

“…ICT infrastructures are getting increasingly complex, and defending them against cyber attacks is cumbersome. As cyber threats continue to increase and expert…”
Get full text

A probabilistic relational model for security risk analysis by Sommestad, Teodor, Ekstedt, Mathias, Johnson, Pontus

“…Information system security risk, defined as the product of the monetary losses associated with security incidents and the probability that they occur, is a…”
Get full text

Empirical evaluation of a threat modeling language as a cybersecurity assessment tool by Katsikeas, Sotirios, Rencelj Ling, Engla, Johnsson, Pontus, Ekstedt, Mathias

“…The complexity of ICT infrastructures is continuously increasing, presenting a formidable challenge in safeguarding them against cyber attacks. In light of…”
Get full text