Secure Fast Handover in an Open Broadband Access Network using Kerberos-style Tickets. - Martin Gilje Jaatun; Inger Anne Tøndel; Frédéric Paint; Tor Hjalmar Johannessen; John Charles Francis; Claire Duranton (SEC, 2006)

Improving Availability of Emergency Health Information without Sacrificing Patient Privacy. - Inger Anne Tøndel (SEC, 2006)

How can the developer benefit from security modeling? - Shanai Ardi; David Byers; Per Håkon Meland; Inger Anne Tøndel; Nahid Shahmehri (ARES, 2007)

Handling Consent to Patient Data Access in a Hospital Setting. - Gunnar René Øie; Herbjørn Andresen; Inger Anne Tøndel (MedInfo, 2007)

Covering Your Assets in Software Engineering. - Martin Gilje Jaatun; Inger Anne Tøndel (ARES, 2008)

A Study of Information Security Practice in a Critical Infrastructure Application. - Martin Gilje Jaatun; Eirik Albrechtsen; Maria B. Line; Stig Ole Johnsen; Irene Wærø; Odd Helge Longva; Inger Anne Tøndel (ATC, 2008)

A Structured Approach to Incident Response Management in the Oil and Gas Industry. - Maria B. Line; Eirik Albrechtsen; Martin Gilje Jaatun; Inger Anne Tøndel; Stig Ole Johnsen; Odd Helge Longva; Irene Wærø (CRITIS, 2008)

Learning from Software Security Testing. - Inger Anne Tøndel; Martin Gilje Jaatun; Jostein Jensen (ICST Workshops, 2008)

Learning by Failing (and Fixing). - Lillian Røstad; Inger Anne Tøndel; Per Håkon Meland; Gunnar René Øie (IEEE Secur. Priv., 2008)

Security Requirements for the Rest of Us: A Survey. - Inger Anne Tøndel; Martin Gilje Jaatun; Per Håkon Meland (IEEE Softw., 2008)

Reusable Security Requirements for Healthcare Applications. - Jostein Jensen; Inger Anne Tøndel; Martin Gilje Jaatun; Per Håkon Meland; Herbjørn Andresen (ARES, 2009)

An Architectural Foundation for Security Model Sharing and Reuse. - Per Håkon Meland; Shanai Ardi; Jostein Jensen; Erkuden Rios; Txus Sanchez; Nahid Shahmehri; Inger Anne Tøndel (ARES, 2009)

Trusting User Defined Context in MANETs: Experience from the MIDAS Approach. - Vegar Westerlund; Thomas Pronstad; Inger Anne Tøndel; Leendert W. M. Wienhofen (ARES, 2009)

Visualizing Patient Trajectories on Wall-Mounted Boards - Information Security Challenges. - Arild Faxvaag; Lillian Røstad; Inger Anne Tøndel; Andreas R. Seim; Pieter J. Toussaint (MIE, 2009)

A framework for incident response management in the petroleum industry. - Martin Gilje Jaatun; Eirik Albrechtsen; Maria B. Line; Inger Anne Tøndel; Odd Helge Longva (Int. J. Crit. Infrastructure Prot., 2009)

Combining Misuse Cases with Attack Trees and Security Activity Models. - Inger Anne Tøndel; Jostein Jensen; Lillian Røstad (ARES, 2010)

Idea: Reusability of Threat Models - Two Approaches with an Experimental Evaluation. - Per Håkon Meland; Inger Anne Tøndel; Jostein Jensen (ESSoS, 2010)

Experimental Threat Model Reuse with Misuse Case Diagrams. - Jostein Jensen; Inger Anne Tøndel; Per Håkon Meland (ICICS, 2010)

A Risk-Based Evaluation of Group Access Control Approaches in a Healthcare Setting. - Maria B. Line; Inger Anne Tøndel; Erlend Andreas Gjære (ARES, 2011)

Learning Privacy Preferences. - Inger Anne Tøndel; Åsmund Ahlmann Nyre; Karin Bernsmed (ARES, 2011)

Towards a Similarity Metric for Comparing Machine-Readable Privacy Policies. - Inger Anne Tøndel; Åsmund Ahlmann Nyre (iNetSeC, 2011)

Cyber security challenges in Smart Grids. - Maria B. Line; Inger Anne Tøndel; Martin Gilje Jaatun (ISGT Europe, 2011)

Personal Health Information on Display: Balancing Needs, Usability and Legislative Requirements. - Erlend Andreas Gjære; Inger Anne Tøndel; Maria B. Line; Herbjørn Andresen; Pieter J. Toussaint (MIE, 2011)

Visualization Control for Event-Based Public Display Systems Used in a Hospital Setting. - Inger Anne Tøndel (NordSec, 2011)

Design and Implementation of a CBR-based Privacy Agent. - Karin Bernsmed; Inger Anne Tøndel; Åsmund Ahlmann Nyre (ARES, 2012)

Threat Modeling of AMI. - Inger Anne Tøndel; Martin Gilje Jaatun; Maria Bartnes Line (CRITIS, 2012)

GPRS Security for Smart Meters. - Martin Gilje Jaatun; Inger Anne Tøndel; Geir M. Køien (CD-ARES, 2013)

Towards Improved Understanding and Holistic Management of the Cyber Security Challenges in Power Transmission Systems. - Inger Anne Tøndel; Bodil Aamnes Mostue; Martin Gilje Jaatun; Gerd H. Kjølle (CD-ARES, 2013)

Forewarned is Forearmed: Indicators for Evaluating Information Security Incident Management. - Karin Bernsmed; Inger Anne Tøndel (IMF, 2013)

Information Security Incident Management: Planning for Failure. - Maria B. Line; Inger Anne Tøndel; Martin Gilje Jaatun (IMF, 2014)

Information security incident management: Current practice as reported in the literature. - Inger Anne Tøndel; Maria B. Line; Martin Gilje Jaatun (Comput. Secur., 2014)

How Much Cloud Can You Handle? - Martin Gilje Jaatun; Inger Anne Tøndel (ARES, 2015)

Assessing Information Security Risks of AMI - What Makes it so Difficult?. - Inger Anne Tøndel; Maria B. Line; Gorm Johansen (ICISSP, 2015)

Software Security Maturity in Public Organisations. - Martin Gilje Jaatun; Daniela S. Cruzes; Karin Bernsmed; Inger Anne Tøndel; Lillian Røstad (ISC, 2015)

Mitigating Risk with Cyberinsurance. - Per Håkon Meland; Inger Anne Tøndel; Bjørnar Solhaug (IEEE Secur. Priv., 2015)

Differentiating Cyber Risk of Insurance Customers: The Insurance Company Perspective. - Inger Anne Tøndel; Fredrik Seehusen; Erlend Andreas Gjære; Marie Elisabeth Gaup Moe (CD-ARES, 2016)

Zebras and Lions: Better Incident Handling Through Improved Cooperation. - Martin Gilje Jaatun; Maria Bartnes; Inger Anne Tøndel (I4CS, 2016)

Security Incident Information Exchange for Cloud Services. - Christian Frøystad; Erlend Andreas Gjære; Inger Anne Tøndel; Martin Gilje Jaatun (IoTBD, 2016)

Playing Protection Poker for Practical Software Security. - Martin Gilje Jaatun; Inger Anne Tøndel (PROFES, 2016)

Current practices and challenges in industrial control organizations regarding information security incident management - Does size matter? Information security incident management in large and small industrial control organizations. - Maria Bartnes Line; Inger Anne Tøndel; Martin Gilje Jaatun (Int. J. Crit. Infrastructure Prot., 2016)

Accountability Requirements for the Cloud. - Martin Gilje Jaatun; Inger Anne Tøndel; Nils Brede Moe; Daniela Soares Cruzes; Karin Bernsmed; Børge Haugset (CloudCom, 2017)

Facing Uncertainty in Cyber Insurance Policies. - Per Håkon Meland; Inger Anne Tøndel; Marie Elisabeth Gaup Moe; Fredrik Seehusen (STM, 2017)

Risk Centric Activities in Secure Software Development in Public Organisations. - Inger Anne Tøndel; Martin Gilje Jaatun; Daniela Soares Cruzes; Nils Brede Moe (Int. J. Secur. Softw. Eng., 2017)

Challenges and Experiences with Applying Microsoft Threat Modeling in Agile Development Projects. - Daniela Soares Cruzes; Martin Gilje Jaatun; Karin Bernsmed; Inger Anne Tøndel (ASWEC, 2018)

Understanding Challenges to Adoption of the Protection Poker Software Security Game. - Inger Anne Tøndel; Martin Gilje Jaatun; Daniela S. Cruzes; Tosin Daniel Oyetoyan (CyberICPS/SECPRE@ESORICS, 2018)

Understanding challenges to adoption of the Microsoft elevation of privilege game. - Inger Anne Tøndel; Tosin Daniel Oyetoyan; Martin Gilje Jaatun; Daniela S. Cruzes (HotSoS, 2018)

Security Incident Information Exchange for Cloud Service Provisioning Chains. - Christian Frøystad; Inger Anne Tøndel; Martin Gilje Jaatun (Cryptogr., 2018)

A Secure MANET Routing Protocol for Crisis Situations. - Martin Gilje Jaatun; Åsmund Ahlmann Nyre; Inger Anne Tøndel (Int. J. Syst. Softw. Secur. Prot., 2018)

Accountability Requirements in the Cloud Provider Chain. - Martin Gilje Jaatun; Inger Anne Tøndel; Nils Brede Moe; Daniela Soares Cruzes; Karin Bernsmed; Børge Haugset (Symmetry, 2018)

The Security Intention Meeting Series as a way to increase visibility of software security decisions in agile development projects. - Inger Anne Tøndel; Daniela Soares Cruzes; Martin Gilje Jaatun; Kalle Rindell (ARES, 2019)

Collaborative security risk estimation in agile software development. - Inger Anne Tøndel; Martin Gilje Jaatun; Daniela Soares Cruzes; Laurie A. Williams (Inf. Comput. Secur., 2019)

What Could Possibly Go Wrong? Smart Grid Misuse Case Scenarios. - Inger Anne Tøndel; Ravishankar Borgaonkar; Martin Gilje Jaatun; Christian Frøystad (Cyber Security, 2020)

Achieving "Good Enough" Software Security: The Role of Objectivity. - Inger Anne Tøndel; Daniela Soares Cruzes; Martin Gilje Jaatun (EASE, 2020)

Using Situational and Narrative Analysis for Investigating the Messiness of Software Security. - Inger Anne Tøndel; Daniela Soares Cruzes; Martin Gilje Jaatun (ESEM, 2020)

IT Security Is From Mars, Software Security Is From Venus. - Inger Anne Tøndel; Martin Gilje Jaatun; Daniela Soares Cruzes (IEEE Secur. Priv., 2020)

Towards a Conceptual Framework for Security Requirements Work in Agile Software Development. - Inger Anne Tøndel; Martin Gilje Jaatun (Int. J. Syst. Softw. Secur. Prot., 2020)

Tool-assisted Threat Modeling for Smart Grid Cyber Security. - Lars Halvdan Flå; Ravishankar Borgaonkar; Inger Anne Tøndel; Martin Gilje Jaatun (CyberSA, 2021)

The Quality Triage Method: Quickly Identifying User Stories with Quality Risks. - Gunnar Brataas; Inger Anne Tøndel; Eivind Okstad; Ola Løkberg; Martin Gilje Jaatun; Geir Kjetil Hanssen; Thor Myklebust (SA, 2021)

Hunting Dependencies: Using Bow-Tie for Combined Analysis of Power and Cyber Security. - Inger Anne Tøndel; Hanne Vefsnmo; Oddbjørn Gjerde; Frode Johannessen; Christian Frøystad (SA, 2021)

Improving smart grid security through 5G enabled IoT and edge computing. - Ravishankar Borgaonkar; Inger Anne Tøndel; Merkebu Zenebe Degefa; Martin Gilje Jaatun (Concurr. Comput. Pract. Exp., 2021)

SecureScale: Exploring Synergies between Security and Scalability in Software Development and Operation. - Inger Anne Tøndel; Gunnar Brataas (EICC, 2022)

Adapting Cyber-Risk Assessment for the Planning of Cyber-Physical Smart Grids Based on Industrial Needs. - Gencer Erdogan; Iver Bakken Sperstad; Michele Garau; Oddbjørn Gjerde; Inger Anne Tøndel; Shukun Tokas; Martin Gilje Jaatun (ICSOFT (Selected Papers), 2022)

Needs and Challenges Concerning Cyber-risk Assessment in the Cyber-physical Smart Grid. - Gencer Erdogan; Inger Anne Tøndel; Shukun Tokas; Michele Garau; Martin Gilje Jaatun (ICSOFT, 2022)

Influencing the security prioritisation of an agile software development project. - Inger Anne Tøndel; Daniela Soares Cruzes; Martin Gilje Jaatun; Guttorm Sindre (Comput. Secur., 2022)

Continuous software security through security prioritisation meetings. - Inger Anne Tøndel; Daniela Soares Cruzes (J. Syst. Softw., 2022)

Organizational factors of software performance testing for systems of systems: A case study using high-reliability organization theory to understand an outage. - Gunnar Brataas; Petter Braskerud; Inger Anne Tøndel; Steinar Kjærnsrød (J. Syst. Softw., 2025)