Towards Security Threats that Matter. - Katja Tuma; Riccardo Scandariato; Mathias Widman; Christian Sandberg (CyberICPS/SECPRE@ESORICS, 2017)

Two Architectural Threat Analysis Techniques Compared. - Katja Tuma; Riccardo Scandariato (ECSA, 2018)

Back to the Drawing Board - Bringing Security Constraints in an Architecture-centric Software Development Process. - Stefanie Jasser; Katja Tuma; Riccardo Scandariato; Matthias Riebisch (ICISSP, 2018)

Threat analysis of software systems: A systematic literature review. - Katja Tuma; Gül Çalikli; Riccardo Scandariato (J. Syst. Softw., 2018)

Inspection guidelines to identify security design flaws. - Katja Tuma; Danial Hosseini; Kyriakos Malamas; Riccardo Scandariato (ECSA (Companion), 2019)

Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis. - Katja Tuma; Riccardo Scandariato; Musard Balliu (ICSA, 2019)

Towards Automated Security Design Flaw Detection. - Laurens Sion; Katja Tuma; Riccardo Scandariato; Koen Yskout; Wouter Joosen (ASE Workshops, 2019)

Secure Data-Flow Compliance Checks between Models and Code Based on Automated Mappings. - Sven Peldszus; Katja Tuma; Daniel Strüber 001; Jan Jürjens; Riccardo Scandariato (MoDELS, 2019)

Finding Security Threats That Matter: An Industrial Case Study. - Katja Tuma; Christian Sandberg; Urban Thorsson; Mathias Widman; Riccardo Scandariato (CoRR, 2019)

Automating the early detection of security design flaws. - Katja Tuma; Laurens Sion; Riccardo Scandariato; Koen Yskout (MoDELS, 2020)

Seven Pain Points of Threat Analysis and Risk Assessment in the Automotive Domain. - Katja Tuma; Mathias Widman (IEEE Secur. Priv., 2021)

Finding security threats that matter: Two industrial case studies. - Katja Tuma; Christian Sandberg; Urban Thorsson; Mathias Widman; Thomas Herpel; Riccardo Scandariato (J. Syst. Softw., 2021)

Precise Analysis of Purpose Limitation in Data Flow Diagrams. - Hanaa Alshareef; Katja Tuma; Sandro Stucki; Gerardo Schneider; Riccardo Scandariato (ARES, 2022)

Towards a Security Stress-Test for Cloud Configurations. - Francesco Minna; Fabio Massacci; Katja Tuma (CLOUD, 2022)

The Role of Diversity in Cybersecurity Risk Analysis: An Experimental Plan. - Katja Tuma; Romy Van Der Lee (GE@ICSE, 2022)

Human Aspect of Threat Analysis: A Replication. - Katja Tuma; Winnie Mbaka (CoRR, 2022)

A replication of a controlled experiment with two STRIDE variants. - Winnie Mbaka; Katja Tuma (CoRR, 2022)

Impact of Gender on the Evaluation of Security Decisions. - Winnie Mbaka; Katja Tuma (CoRR, 2023)

A new, evidence-based, theory for knowledge reuse in security risk analysis. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Katja Tuma (Empir. Softw. Eng., 2023)

Delta Security Certification for Software Supply Chains. - Ákos Milánkovich; Katja Tuma (IEEE Secur. Priv., 2023)

Checking security compliance between models and code. - Katja Tuma; Sven Peldszus; Daniel Strüber 001; Riccardo Scandariato; Jan Jürjens (Softw. Syst. Model., 2023)

Does trainer gender make a difference when delivering phishing training? A new experimental design to capture bias. - André Palheiros Da Silva; Winnie Mbaka; Johann Mayer; Jan-Willem Bullee; Katja Tuma (EASE, 2024)

The Equality Maturity Model: An Actionable Tool to Advance Gender Balance in Leadership and Participation Roles. - Paloma Díaz 001; Paula Alexandra Silva; Katja Tuma (EDUCON, 2024)

Automated Security Repair for Helm Charts. - Francesco Minna; Agathe Blaise; Fabio Massacci; Katja Tuma (ICSE Companion, 2024)

On the Effects of Program Slicing for Vulnerability Detection during Code Inspection: Extended Abstract. - Aurora Papotti; Fabio Massacci; Katja Tuma (ICSE Companion, 2024)

Designing Secure AI-based Systems: a Multi-Vocal Literature Review. - Simon Schneider; Ananya Saha; Emanuele Mezzi; Katja Tuma; Riccardo Scandariato (SecDev, 2024)

Risks of uncertainty propagation in Al-augmented security pipelines. - Emanuele Mezzi; Aurora Papotti; Fabio Massacci; Katja Tuma (CoRR, 2024)

Usefulness of data flow diagrams and large language models for security threat validation: a registered report. - Winnie Bahati Mbaka; Katja Tuma (CoRR, 2024)

Role of Gender in the Evaluation of Security Decisions. - Winnie Mbaka; Katja Tuma (IEEE Secur. Priv., 2024)

On the Measures of Success in Replication of Controlled Experiments with STRIDE. - Winnie Mbaka; Katja Tuma (Int. J. Softw. Eng. Knowl. Eng., 2024)

Large Language Models Are Unreliable for Cyber Threat Intelligence. - Emanuele Mezzi; Fabio Massacci; Katja Tuma (ARES (2), 2025)

In Specs We Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks. - Simon Schneider; Komal Kashish; Katja Tuma; Riccardo Scandariato (ARES (1), 2025)

Assessing the usefulness of Data Flow Diagrams for validating security threats. - Winnie Bahati Mbaka; Xinran Zhang; Yunduo Wang; Tong Li 001; Fabio Massacci; Katja Tuma (Comput. Secur., 2025)

Challenges to Using Large Language Models in Code Generation and Repair. - Liliana Pasquale; Antonino Sabetta; Marcelo d'Amorim; Péter Hegedüs; Mehdi Tarrit Mirakhorli; Hamed Okhravi; Mathias Payer; Awais Rashid; Joanna C. S. Santos; Jonathan M. Spring; Lin Tan 001; Katja Tuma (IEEE Secur. Priv., 2025)

Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub. - Francesco Minna; Fabio Massacci; Katja Tuma (Zenodo, 2025)

On the effects of program slicing for vulnerability detection during code inspection. - Aurora Papotti; Katja Tuma; Fabio Massacci (Empir. Softw. Eng., 2025)

Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub. - Francesco Minna; Fabio Massacci; Katja Tuma (Empir. Softw. Eng., 2025)