Cyber-Risk Management

Bjørnar Solhaug Atle Refsdal Bjørnar Solhaug Ketil Stølen Cyber-Risk Management Springer 2015 1-131 Springer Briefs in Computer Science 978-3-319-23569-1 978-3-319-23570-7 https://doi.org/10.1007/978-3-319-23570-7

Per Håkon Meland Inger Anne Tøndel Bjørnar Solhaug Mitigating Risk with Cyberinsurance. 38-43 2015 13 IEEE Secur. Priv. 6 https://doi.org/10.1109/MSP.2015.137 http://doi.ieeecomputersociety.org/10.1109/MSP.2015.137 db/journals/ieeesp/ieeesp13.html#MelandTS15

Atle Refsdal Bjørnar Solhaug Ketil Stølen Security risk analysis of system changes exemplified within the oil and gas domain. 251-266 2015 17 Int. J. Softw. Tools Technol. Transf. 3 https://doi.org/10.1007/s10009-014-0351-0 https://www.wikidata.org/entity/Q115148424 db/journals/sttt/sttt17.html#RefsdalSS15

Michael Felderer Basel Katt Philipp Kalb Jan Jürjens Martín Ochoa Federica Paci Le Minh Sang Tran Thein Than Tun Koen Yskout Riccardo Scandariato Frank Piessens Dries Vanoverberghe Elizabeta Fourneret Matthias Gander Bjørnar Solhaug Ruth Breu Evolution of Security Engineering Artifacts: A State of the Art Survey. 48-98 2014 5 Int. J. Secur. Softw. Eng. 4 https://doi.org/10.4018/ijsse.2014100103 https://www.wikidata.org/entity/Q114928159 db/journals/ijsse/ijsse5.html#FeldererKKJOPTT14

Bjørnar Solhaug Fredrik Seehusen Model-driven risk analysis of evolving critical infrastructures. 187-204 2014 5 J. Ambient Intell. Humaniz. Comput. 2 https://doi.org/10.1007/s12652-013-0179-6 db/journals/jaihc/jaihc5.html#SolhaugS14

Fabio Massacci Federica Paci Bjørnar Solhaug Alessandra Tedeschi EMFASE - An Empirical Framework for Security Design and Economic Trade-off. 537-543 2014 ARES https://doi.org/10.1109/ARES.2014.79 https://doi.ieeecomputersociety.org/10.1109/ARES.2014.79 conf/IEEEares/2014 db/conf/IEEEares/ares2014.html#MassacciPST14 Kristian Beckers Maritta Heisel Bjørnar Solhaug Ketil Stølen ISMS-CORAS: A Structured Method for Establishing an ISO 27001 Compliant Information Security Management System. 315-344 2014 Engineering Secure Future Internet Services and Systems https://doi.org/10.1007/978-3-319-07452-8_13 series/lncs/8431 db/series/lncs/lncs8431.html#BeckersHSS14 Atle Refsdal Øyvind Rideng Bjørnar Solhaug Ketil Stølen Divide and Conquer - Towards a Notion of Risk Model Encapsulation. 345-365 2014 Engineering Secure Future Internet Services and Systems https://doi.org/10.1007/978-3-319-07452-8_14 series/lncs/8431 db/series/lncs/lncs8431.html#RefsdalRSS14 Franco Bergomi Stéphane Paul Bjørnar Solhaug Raphaël Vignon-Davillier Beyond Traceability: Compared Approaches to Consistent Security Risk Assessments. 814-820 2013 ARES https://doi.org/10.1109/ARES.2013.109 https://doi.ieeecomputersociety.org/10.1109/ARES.2013.109 conf/IEEEares/2013 db/conf/IEEEares/ares2013.html#BergomiPSV13 Le Minh Sang Tran Bjørnar Solhaug Ketil Stølen An Approach to Select Cost-Effective Risk Countermeasures. 266-273 2013 DBSec https://doi.org/10.1007/978-3-642-39256-6_18 conf/dbsec/2013 db/conf/dbsec/dbsec2013.html#TranSS13 Aida Omerovic Anders Kofod-Petersen Bjørnar Solhaug Ingrid Svagård Elicitation of Quality Characteristics for AAL Systems and Services. 95-104 2013 ISAmI https://doi.org/10.1007/978-3-319-00566-9_13 conf/isami/2013 db/conf/isami/isami2013.html#OmerovicKSS13

Le Minh Sang Tran Bjørnar Solhaug Ketil Stølen An Approach to Select Cost-Effective Risk Countermeasures Exemplified in CORAS http://arxiv.org/abs/1302.4689 2013 CoRR abs/1302.4689 db/journals/corr/corr1302.html#abs-1302-4689

Aida Omerovic Bjørnar Solhaug Ketil Stølen Assessing practical usefulness and performance of the PREDIQT method: An industrial case study. 1377-1395 2012 54 Inf. Softw. Technol. 12 https://doi.org/10.1016/j.infsof.2012.07.006 db/journals/infsof/infsof54.html#OmerovicSS12

Fredrik Seehusen Bjørnar Solhaug Tool-Supported Risk Modeling and Analysis of Evolving Critical Infrastructures. 562-577 2012 CD-ARES https://doi.org/10.1007/978-3-642-32498-7_43 conf/IEEEares/2012cd db/conf/IEEEares/cd-ares2012.html#SeehusenS12 Mass Soldal Lund Bjørnar Solhaug Ketil Stølen Model-Driven Risk Analysis - The CORAS Approach. I-XVI, 1-460 Springer 2011 978-3-642-12322-1 https://doi.org/10.1007/978-3-642-12323-8

Bjørnar Solhaug Ketil Stølen Preservation of Policy Adherence under Refinement. 139-157 2011 5 Int. J. Softw. Informatics 1-2 http://www.ijsi.org/ch/reader/view_abstract.aspx?file_no=i79 db/journals/ijsi/ijsi5.html#SolhaugS11

Mass Soldal Lund Bjørnar Solhaug Ketil Stølen Risk Analysis of Changing and Evolving Systems Using CORAS. 231-274 2011 FOSAD https://doi.org/10.1007/978-3-642-23082-0_9 conf/fosad/2010 db/conf/fosad/fosad2010.html#LundSS10 Massimo Felici Valentino Meduri Bjørnar Solhaug Alessandra Tedeschi Evolutionary Risk Analysis: Expert Judgement. 99-112 2011 SAFECOMP https://doi.org/10.1007/978-3-642-24270-0_8 conf/safecomp/2011 db/conf/safecomp/safecomp2011.html#FeliciMST11 Fabio Massacci Fabrice Bouquet Elizabeta Fourneret Jan Jürjens Mass Soldal Lund Sébastien Madelénat Jan Tobias Mühlberg Federica Paci Stéphane Paul Frank Piessens Bjørnar Solhaug Sven Wenzel Orchestrating Security and System Engineering for Evolving Systems - (Invited Paper). 134-143 2011 ServiceWave https://doi.org/10.1007/978-3-642-24755-2_12 conf/servicewave/2011 db/conf/servicewave/servicewave2011.html#MassacciBFJLMMPPPSW11 Aida Omerovic Bjørnar Solhaug Ketil Stølen Evaluation of Experiences from Applying the PREDIQT Method in an Industrial Case Study. 137-146 2011 SSIRI https://doi.org/10.1109/SSIRI.2011.20 https://doi.ieeecomputersociety.org/10.1109/SSIRI.2011.20 conf/ssiri/2011 db/conf/ssiri/ssiri2011.html#OmerovicSS11 Bjørnar Solhaug Ketil Stølen Uncertainty, Subjectivity, Trust and Risk: How It All Fits together. 1-5 2011 STM https://doi.org/10.1007/978-3-642-29963-6_1 conf/stm/2011 db/conf/stm/stm2011.html#SolhaugS11

Mass Soldal Lund Bjørnar Solhaug Ketil Stølen Evolution in Relation to Risk and Trust Management. 49-55 2010 43 Computer 5 https://doi.org/10.1109/MC.2010.134 http://doi.ieeecomputersociety.org/10.1109/MC.2010.134 db/journals/computer/computer43.html#LundSS10

Fredrik Seehusen Bjørnar Solhaug Ketil Stølen Adherence preserving refinement of trace-set properties in STAIRS: exemplified for information flow properties and policies. 45-65 2009 8 Softw. Syst. Model. 1 https://doi.org/10.1007/s10270-008-0102-3 https://www.wikidata.org/entity/Q113444999 db/journals/sosym/sosym8.html#SeehusenSS09

Bjørnar Solhaug Ketil Stølen Compositional Refinement of Policies in UML - Exemplified for Access Control. 300-316 2008 ESORICS https://doi.org/10.1007/978-3-540-88313-5_20 conf/esorics/2008 db/conf/esorics/esorics2008.html#SolhaugS08 Atle Refsdal Bjørnar Solhaug Ketil Stølen A UML-based Method for the Development of Policies to Support Trust Management. 33-49 2008 IFIPTM https://doi.org/10.1007/978-0-387-09428-1_3 conf/ifiptm/2008 db/conf/ifiptm/ifiptm2008.html#RefsdalSS08 Bjørnar Solhaug Dag Elgesem Ketil Stølen Specifying Policies Using UML Sequence Diagrams - An Evaluation Based on a Case Study. 19-28 2007 conf/policy/2007 POLICY https://doi.org/10.1109/POLICY.2007.42 https://doi.ieeecomputersociety.org/10.1109/POLICY.2007.42 db/conf/policy/policy2007.html#SolhaugES07 Bjørnar Solhaug Arild Waaler Logical Spaces in Multi-agent Only Knowing Systems. 77-95 2005 conf/clima/2005 CLIMA https://doi.org/10.1007/11750734_5 db/conf/clima/climaVI2005.html#SolhaugW05 Arild Waaler Bjørnar Solhaug Semantics for multi-agent only knowing: extended abstract. 109-125 2005 conf/tark/2005 TARK https://dl.acm.org/citation.cfm?id=1089947 db/conf/tark/tark2005.html#WaalerS05 Kristian Beckers Franco Bergomi Fabrice Bouquet Ruth Breu Dag Elgesem Michael Felderer Massimo Felici Elizabeta Fourneret Matthias Gander Maritta Heisel Jan Jürjens Philipp Kalb Basel Katt Anders Kofod-Petersen Mass Soldal Lund Sébastien Madelénat Fabio Massacci Valentino Meduri Per Håkon Meland Jan Tobias Mühlberg Martín Ochoa Aida Omerovic Federica Paci Stéphane Paul Frank Piessens Atle Refsdal Øyvind Rideng Riccardo Scandariato Fredrik Seehusen Ketil Stølen Ingrid Svagård Alessandra Tedeschi Inger Anne Tøndel Le Minh Sang Tran Thein Than Tun Dries Vanoverberghe Raphaël Vignon-Davillier Arild Waaler Sven Wenzel Koen Yskout