Availability of a SCADA/OMS/DMS system - A case study. - Martin Jensen; Cumhur Sel; Ulrik Franke; Hannes Holm; Lars Nordström (ISGT Europe, 2010)

A Tool for Automatic Enterprise Architecture Modeling. - Markus Buschle; Hannes Holm; Teodor Sommestad; Mathias Ekstedt; Khurram Shahzad (CAiSE Forum, 2011)

Expert Assessment on the Probability of Successful Remote Code Execution Attacks. - Hannes Holm; Teodor Sommestad; Ulrik Franke; Mathias Ekstedt (WOSIS, 2011)

Estimates of Success Rates of Denial-of-Service Attacks. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (TrustCom, 2011)

Data accuracy assessment using enterprise architecture. - Per Närman; Hannes Holm; Pontus Johnson; Johan König; Moustafa Chenine; Mathias Ekstedt (Enterp. Inf. Syst., 2011)

A quantitative evaluation of vulnerability scanning. - Hannes Holm; Teodor Sommestad; Jonas Almroth; Mats Persson (Inf. Manag. Comput. Secur., 2011)

Security mistakes in information system deployment projects. - Teodor Sommestad; Mathias Ekstedt; Hannes Holm; Muhammad Afzal (Inf. Manag. Comput. Secur., 2011)

Effort Estimates for Vulnerability Discovery Projects. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (HICSS, 2012)

A Metamodel for Web Application Injection Attacks and Countermeasures. - Hannes Holm; Mathias Ekstedt (TEAR/PRET, 2012)

Performance of automated network vulnerability scanning at remediating security issues. - Hannes Holm (Comput. Secur., 2012)

Estimates of success rates of remote arbitrary code execution attacks. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (Inf. Manag. Comput. Secur., 2012)

Using enterprise architecture and technology adoption models to predict application usage. - Per Närman; Hannes Holm; David Höök; Nicholas Honeth; Pontus Johnson (J. Syst. Softw., 2012)

Success Rate of Remote Code Execution Attacks - Expert Assessments and Observations. - Hannes Holm; Teodor Sommestad; Ulrik Franke; Mathias Ekstedt (J. Univers. Comput. Sci., 2012)

Identifying factors affecting software development cost and productivity. - Robert Lagerström; Liv Marcks von Würtemberg; Hannes Holm; Oscar Luczak (Softw. Qual. J., 2012)

Empirical Analysis of System-Level Vulnerability Metrics through Actual Attacks. - Hannes Holm; Mathias Ekstedt; Dennis Andersson (IEEE Trans. Dependable Secur. Comput., 2012)

Effort Estimates on Web Application Vulnerability Discovery. - Hannes Holm; Mathias Ekstedt; Teodor Sommestad (HICSS, 2013)

Cyber security for a Smart Grid - What about phishing? - Hannes Holm; Waldo Rocha Flores; Göran Ericsson (ISGT Europe, 2013)

Estimates on the effectiveness of web application firewalls against targeted attacks. - Hannes Holm; Mathias Ekstedt (Inf. Manag. Comput. Secur., 2013)

Using enterprise architecture analysis and interview data to estimate service response time. - Per Närman; Hannes Holm; Mathias Ekstedt; Nicholas Honeth (J. Strateg. Inf. Syst., 2013)

The Cyber Security Modeling Language: A Tool for Assessing the Vulnerability of Enterprise System Architectures. - Teodor Sommestad; Mathias Ekstedt; Hannes Holm (IEEE Syst. J., 2013)

An Empirical Investigation of the Effect of Target-Related Information in Phishing Attacks. - Hannes Holm; Waldo Rocha Flores; Marcus Nohlberg; Mathias Ekstedt (EDOC Workshops, 2014)

Signature Based Intrusion Detection for Zero-Day Attacks: (Not) A Closed Chapter? - Hannes Holm (HICSS, 2014)

Indicators of expert judgement and their significance: an empirical investigation in the area of cyber security. - Hannes Holm; Teodor Sommestad; Mathias Ekstedt; Nicholas Honeth (Expert Syst. J. Knowl. Eng., 2014)

Using phishing experiments and scenario-based surveys to understand security behaviours in practice. - Waldo Rocha Flores; Hannes Holm; Gustav Svensson; Göran Ericsson (Inf. Manag. Comput. Secur., 2014)

Automatic data collection for enterprise architecture models. - Hannes Holm; Markus Buschle; Robert Lagerström; Mathias Ekstedt (Softw. Syst. Model., 2014)

A Large-Scale Study of the Time Required to Compromise a Computer System. - Hannes Holm (IEEE Trans. Dependable Secur. Comput., 2014)

The Distribution of Time to Recovery of Enterprise IT Services. - Ulrik Franke; Hannes Holm; Johan König (IEEE Trans. Reliab., 2014)

A Framework and Calculation Engine for Modeling and Predicting the Cyber Security of Enterprise Architectures. - Hannes Holm (2014)

Investigating the Correlation between Intention and Action in the Context of Social Engineering in Two Different National Cultures. - Waldo Rocha Flores; Hannes Holm; Mathias Ekstedt; Marcus Nohlberg (HICSS, 2015)

A Survey of Industrial Control System Testbeds. - Hannes Holm; Martin Karresand; Arne Vidström; Erik Westring (NordSec, 2015)

Requirements engineering: The quest for the dependent variable. - Hannes Holm; Teodor Sommestad; Johan E. Bengtsson (RE, 2015)

An expert-based investigation of the Common Vulnerability Scoring System. - Hannes Holm; Khalid Khan Afridi (Comput. Secur., 2015)

Investigating personal determinants of phishing and the effect of national culture. - Waldo Rocha Flores; Hannes Holm; Marcus Nohlberg; Mathias Ekstedt (Inf. Comput. Secur., 2015)

A Bayesian network model for likelihood estimations of acquirement of critical software vulnerabilities and exploits. - Hannes Holm; Matus Korman; Mathias Ekstedt (Inf. Softw. Technol., 2015)

P2CySeMoL: Predictive, Probabilistic Cyber Security Modeling Language. - Hannes Holm; Khurram Shahzad; Markus Buschle; Mathias Ekstedt (IEEE Trans. Dependable Secur. Comput., 2015)

SVED: Scanning, Vulnerabilities, Exploits and Detection. - Hannes Holm; Teodor Sommestad (MILCOM, 2016)

So long, and thanks for only using readily available scripts. - Hannes Holm; Teodor Sommestad (Inf. Comput. Secur., 2017)

Alert verification through alert correlation - An empirical test of SnIPS. - Teodor Sommestad; Hannes Holm (Inf. Secur. J. A Glob. Perspect., 2017)

A Model for Predicting the Likelihood of Successful Exploitation. - Hannes Holm; Ioana Rodhe (HICSS, 2020)

Variables influencing the effectiveness of signature-based network intrusion detection systems. - Teodor Sommestad; Hannes Holm; Daniel Steinvall (Inf. Secur. J. A Glob. Perspect., 2022)

Hide My Payload: An Empirical Study of Antimalware Evasion Tools. - Hannes Holm; Erik Hyllienmark (IEEE Big Data, 2023)

Evaluation of a Red Team Automation Tool in Live Cyber Defence Exercises. - Hannes Holm; Jenni Reuben (SEC, 2023)

Lore a Red Team Emulation Tool. - Hannes Holm (IEEE Trans. Dependable Secur. Comput., 2023)

Realistic and balanced automated threat emulation. - Hannes Holm; Teodor Sommestad (Comput. Secur., 2025)