Security SLAs for Federated Cloud Services. - Karin Bernsmed; Martin Gilje Jaatun; Per Håkon Meland; Astrid Undheim (ARES, 2011)

A Server-side Approach to Privacy Policy Matching. - Åsmund Ahlmann Nyre; Karin Bernsmed; Solvar Bo; Stian Pedersen (ARES, 2011)

Learning Privacy Preferences. - Inger Anne Tøndel; Åsmund Ahlmann Nyre; Karin Bernsmed (ARES, 2011)

Security in Service Level Agreements for Cloud Computing. - Karin Bernsmed; Martin Gilje Jaatun; Astrid Undheim (CLOSER, 2011)

Design and Implementation of a CBR-based Privacy Agent. - Karin Bernsmed; Inger Anne Tøndel; Åsmund Ahlmann Nyre (ARES, 2012)

Security SLAs - An Idea Whose Time Has Come? - Martin Gilje Jaatun; Karin Bernsmed; Astrid Undheim (CD-ARES, 2012)

Expressing Cloud Security Requirements in Deontic Contract Languages. - Per Håkon Meland; Karin Bernsmed; Martin Gilje Jaatun; Astrid Undheim; Humberto Nicolás Castejón Martínez (CLOSER, 2012)

Thunder in the Clouds: Security challenges and solutions for federated Clouds. - Karin Bernsmed; Martin Gilje Jaatun; Per Håkon Meland; Astrid Undheim (CloudCom, 2012)

Towards an Ontology for Cloud Security Obligations. - Karin Bernsmed; Astrid Undheim; Per Håkon Meland; Martin Gilje Jaatun (ARES, 2013)

CloudSurfer - A Cloud Broker Application for Security Concerns. - Milena Frtunic; Filip Jovanovic; Mladen Gligorijvic; Lazar Dordevic; Srecko Janicijevic; Per Håkon Meland; Karin Bernsmed; Humberto Nicolás Castejón Martínez (CLOSER, 2013)

Forewarned is Forearmed: Indicators for Evaluating Information Security Incident Management. - Karin Bernsmed; Inger Anne Tøndel (IMF, 2013)

Healthcare Services in the Cloud - Obstacles to Adoption, and a Way Forward. - Karin Bernsmed; Daniela S. Cruzes; Martin Gilje Jaatun; Børge Haugset; Erlend Andreas Gjære (ARES, 2014)

Deploying Medical Sensor Networks in the Cloud - Accountability Obligations from a European Perspective. - Karin Bernsmed; W. Kuan Hon; Christopher Millard (IEEE CLOUD, 2014)

From Regulatory Obligations to Enforceable Accountability Policies in the Cloud. - Walid Benghabrit; Hervé Grall; Jean-Claude Royer; Mohamed Sellami; Monir Azraoui; Kaoutar Elkhiyaoui; Melek Önen; Anderson Santana de Oliveira; Karin Bernsmed (CLOSER (Selected Papers), 2014)

A Cloud Accountability Policy Representation Framework. - Walid Benghabrit; Hervé Grall; Jean-Claude Royer; Mohamed Sellami; Monir Azraoui; Kaoutar Elkhiyaoui; Melek Önen; Anderson Santana de Oliveira; Karin Bernsmed (CLOSER, 2014)

A-PPL: An Accountability Policy Language. - Monir Azraoui; Kaoutar Elkhiyaoui; Melek Önen; Karin Bernsmed; Anderson Santana de Oliveira; Jakub Sendor (DPM/SETOP/QASA, 2014)

Abstract Accountability Language. - Walid Benghabrit; Hervé Grall; Jean-Claude Royer; Mohamed Sellami; Karin Bernsmed; Anderson Santana de Oliveira (IFIPTM, 2014)

Information Security Incident Management: Identified Practice in Large Organizations. - Cathrine Hove; Marte Tarnes; Maria B. Line; Karin Bernsmed (IMF, 2014)

Accountable Health Care Service Provisioning in the Cloud. - Karin Bernsmed (UCC, 2014)

Expressing cloud security requirements for SLAs in deontic contract languages for cloud brokers. - Per Håkon Meland; Karin Bernsmed; Martin Gilje Jaatun; Humberto Nicolás Castejón Martínez; Astrid Undheim (Int. J. Cloud Comput., 2014)

Assurance requirements for networked medical sensor applications. - Odd Nordland; Mark-Alexander Sujan; Floor Koornneef; Karin Bernsmed (ICIT, 2015)

Software Security Maturity in Public Organisations. - Martin Gilje Jaatun; Daniela S. Cruzes; Karin Bernsmed; Inger Anne Tøndel; Lillian Røstad (ISC, 2015)

Protecting Future Maritime Communication. - Christian Frøystad; Karin Bernsmed; Per Håkon Meland (ARES, 2017)

Accountability Requirements for the Cloud. - Martin Gilje Jaatun; Inger Anne Tøndel; Nils Brede Moe; Daniela Soares Cruzes; Karin Bernsmed; Børge Haugset (CloudCom, 2017)

Visualizing Cyber Security Risks with Bow-Tie Diagrams. - Karin Bernsmed; Christian Frøystad; Per Håkon Meland; Dag Atle Nesheim; Ørnulf Jan Rødseth (GraMSec@CSF, 2017)

Challenges and Experiences with Applying Microsoft Threat Modeling in Agile Development Projects. - Daniela Soares Cruzes; Martin Gilje Jaatun; Karin Bernsmed; Inger Anne Tøndel (ASWEC, 2018)

An Experimental Evaluation of Bow-Tie Analysis for Cybersecurity Requirements. - Per Håkon Meland; Karin Bernsmed; Christian Frøystad; Jingyue Li; Guttorm Sindre (CyberICPS/SECPRE@ESORICS, 2018)

Accountability Requirements in the Cloud Provider Chain. - Martin Gilje Jaatun; Inger Anne Tøndel; Nils Brede Moe; Daniela Soares Cruzes; Karin Bernsmed; Børge Haugset (Symmetry, 2018)

Managing Security in Software: Or: How I Learned to Stop Worrying and Manage the Security Technical Debt. - Kalle Rindell; Karin Bernsmed; Martin Gilje Jaatun (ARES, 2019)

Threat modelling and agile software development: Identified practice in four Norwegian organisations. - Karin Bernsmed; Martin Gilje Jaatun (Cyber Security, 2019)

Is a Smarter Grid Also Riskier? - Karin Bernsmed; Martin Gilje Jaatun; Christian Frøystad (STM, 2019)

An experimental evaluation of bow-tie analysis for security. - Per Håkon Meland; Karin Bernsmed; Christian Frøystad; Jingyue Li; Guttorm Sindre (Inf. Comput. Secur., 2019)

On the Certificate Revocation Problem in the Maritime Sector. - Guillaume Bour; Karin Bernsmed; Ravishankar Borgaonkar; Per Håkon Meland (NordSec, 2020)

Integrating and Validating Maritime Transport Security Services: Initial results from the CS4EU demonstrator. - Christos Grigoriadis; Spyridon Papastergiou; Panayiotis Kotzanikolaou; Christos Douligeris; Antreas Dionysiou; Elias Athanasopoulos; Karin Bernsmed; Per Håkon Meland; Liina Kamm (IC3, 2021)

Assessing cyber threats for storyless systems. - Per Håkon Meland; Dag Atle Nesheim; Karin Bernsmed; Guttorm Sindre (J. Inf. Secur. Appl., 2022)

Adopting threat modelling in agile software development projects. - Karin Bernsmed; Daniela Soares Cruzes; Martin Gilje Jaatun; Monica Iovan (J. Syst. Softw., 2022)

"Check, Check, Check, We Got Those" - Catalogue Use in Information Security Risk Management. - Erik Bergström; Martin Lundgren; Karin Bernsmed; Guillaume Bour (HAISA, 2023)

Security-by-design challenges for medical device manufacturers. - Karin Bernsmed; Martin Gilje Jaatun (EICC, 2024)

A Way Forward for the MDCG 2019-16 Medical Device Security Guidance. - Steve Taylor 002; Martin Gilje Jaatun; Karin Bernsmed; Christos Androutsos; Dietmar Frey; Simone Favrin; João Rodrigues; Dusko Milojevic; Dimitrios A. Karras; Ioannis Siachos; Gregory Epiphaniou; Nabil Moukafih; et al. (PETRA, 2024)

MDCG 2019-16 Guidelines: Case Study-Based Assessment and Path Forward. - Christos Androutsos; Steve Taylor 002; Karin Bernsmed; Andrea Neverdal Skytterholm; Gregory Epiphaniou; Nabil Moukafih; Theodoros N. Arvanitis; Sotiris Messinis; Nikolaos Papadakis; Marco Fruscione; Andrés Castillo; Dusko Milojevic; et al. (EICC, 2025)