An Experimental Comparison of Two Risk-Based Security Methods. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Le Minh Sang Tran (ESEM, 2013)

An experiment on comparing textual vs. visual industrial methods for security risk assessment. - Katsiaryna Labunets; Federica Paci; Fabio Massacci; Raminder S. Ruprai (EmpiRE, 2014)

Empirical Assessment of Security Requirements and Architecture: Lessons Learned. - Riccardo Scandariato; Federica Paci; Le Minh Sang Tran; Katsiaryna Labunets; Koen Yskout; Fabio Massacci; Wouter Joosen (Engineering Secure Future Internet Services and Systems, 2014)

Which security catalogue is better for novices? - Katsiaryna Labunets; Federica Paci; Fabio Massacci (EmpiRE, 2015)

The Role of Catalogues of Threats and Security Controls in Security Risk Assessment: An Empirical Study with ATM Professionals. - Martina de Gramatica; Katsiaryna Labunets; Fabio Massacci; Federica Paci; Alessandra Tedeschi (REFSQ, 2015)

Towards Empirical Evaluation of Automated Risk Assessment Methods. - Olga Gadyatskaya; Katsiaryna Labunets; Federica Paci (CRiSIS, 2016)

Modeling Structured and Unstructured Processes: An Empirical Evaluation. - Evellin Cardoso; Katsiaryna Labunets; Fabiano Dalpiaz; John Mylopoulos; Paolo Giorgini (ER, 2016)

Security Risk Assessment Methods: An Evaluation Framework and Theoretical Model of the Criteria Behind Methods Success. - Katsiaryna Labunets (2016)

Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels and Complexity. - Katsiaryna Labunets; Fabio Massacci; Alessandra Tedeschi (ESEM, 2017)

Estimating the Assessment Difficulty of CVSS Environmental Metrics: An Experiment. - Luca Allodi; Silvio Biagioni; Bruno Crispo; Katsiaryna Labunets; Fabio Massacci; Wagner Santos (FDSE, 2017)

Teaching predictive modeling to junior software engineers - seminar format and its evaluation: poster. - Katsiaryna Labunets; Andrea Janes; Michael Felderer; Fabio Massacci (ICSE (Companion Volume), 2017)

On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment. - Katsiaryna Labunets; Fabio Massacci; Federica Paci (REFSQ, 2017)

Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Sabrina Marczak; Flávio Moreira de Oliveira (Empir. Softw. Eng., 2017)

No search allowed: what risk modeling notation to choose? - Katsiaryna Labunets (ESEM, 2018)

Assessing the effect of learning styles on risk model comprehensibility: A controlled experiment (short paper). - Katsiaryna Labunets; Nelly Condori-Fernández (REFSQ Workshops, 2019)

An Adversarial Risk Analysis Framework for Cybersecurity. - David Ríos Insua; Aitor Couce Vieira; José Antonio Rubio; Wolter Pieters; Katsiaryna Labunets; Daniel Garcia Rasines (CoRR, 2019)

Security at the End of the Tunnel: The Anatomy of VPN Mental Models Among Experts and Non-Experts in a Corporate Context. - Veroniek Binkhorst; Tobias Fiebig; Katharina Krombholz; Wolter Pieters; Katsiaryna Labunets (USENIX Security Symposium, 2022)

How Different Elements of Audio Affect the Word Error Rate of Transcripts in Automated Medical Reporting. - Emma Kwint; Anna Zoet; Katsiaryna Labunets; Sjaak Brinkkemper (HEALTHINF, 2023)

Poster: The Unknown Unknown: Cybersecurity Threats of Shadow IT in Higher Education. - Jan-Philip van Acken; Joost F. Gadellaa; Slinger Jansen; Katsiaryna Labunets (CCS, 2023)

An Evaluation of the Product Security Maturity Model Through Case Studies at 15 Software Producing Organizations. - Elena Baninemeh; Harold Toomey; Katsiaryna Labunets; Gerard Wagenaar; Slinger Jansen (ICSOB, 2023)

A new, evidence-based, theory for knowledge reuse in security risk analysis. - Katsiaryna Labunets; Fabio Massacci; Federica Paci; Katja Tuma (Empir. Softw. Eng., 2023)

Canary in the Coal Mine: Identifying Cyber Threat Trends Through Topic Mining - Stack Overflow Case Study. - Matthijs Koier; Hugo Kuipers; Marre Slikker; Slinger Jansen; Katsiaryna Labunets (ESORICS Workshops (2), 2024)

The Dual-Edged Sword of Large Language Models in Phishing. - Alec Siemerink; Slinger Jansen; Katsiaryna Labunets (NordSec, 2024)

Who is the IT Department Anyway: An Evaluative Case Study of Shadow IT Mindsets Among Corporate Employees. - Jan-Philip van Acken; Floris Jansen; Slinger Jansen; Katsiaryna Labunets (SOUPS @ USENIX Security Symposium, 2024)

A Security Risk Assessment Method for Distributed Ledger Technology (DLT) based Applications: Three Industry Case Studies. - Elena Baninemeh; Slinger Jansen; Katsiaryna Labunets (CoRR, 2024)