The cyber security modeling language (CySeMoL) is a modeling language for enterprise-
level system architectures coupled to a probabilistic inference engine. If the computer …

When developing systems where safety and security are important aspects, these aspects
have to be given special attention throughout the development, in particular in the …

Providing meaningful estimations for the quantitative annotations on the steps of complex
multi-step attacks is hard, as they are jointly influenced by the infrastructure and attacker …

The risk exposure of a given threat to an information system is a function of the likelihood of
the threat and the severity of its impacts. Existing methods for estimating threat likelihood …

The first chapter provides the reader an introduction into the content of this thesis. We
motivate our research and define the research questions addressed within the thesis. We …

During software development, it is of essential importance to consider security threats. The
number of reported incidents and the harm for organizations due to such incidents highly …

The Internet is a dangerous place for any critical application and is particularly risky for
binding government elections where every vote must count. The complex interplay of …

Medical devices are vulnerable to cybersecurity exploitation and, while they can provide
improvements to clinical care, they can put healthcare organizations and their patients at risk …

We describe the first systematic, quantitative threat evaluation in a local election jurisdiction
in the US, Marin County, California, in the November 2010 general election. We made use of …

This paper begins a process of organizing knowledge of health information security threats
into a comprehensive catalog. We begin by describing our risk management perspective of …