A Study of Access Control Requirements for Healthcare Systems Based on Audit Trails from Access Logs. - Lillian Røstad; Ole Edsberg (ACSAC, 2006)

Establishing a Centre for Information Security: Experiences from the Trial Period and Recommendations to Similar Initiatives. - Maria B. Line; Lillian Røstad (IMF, 2006)

Access Control and Integration of Health Care Systems: An Experience Report and Future Challenges. - Lillian Røstad; Øystein Nytrø (ARES, 2007)

An Initial Model and a Discussion of Access Control in Patient Controlled Health Records. - Lillian Røstad (ARES, 2008)

Personalized access control for a personally controlled health record. - Lillian Røstad; Øystein Nytrø (CSAW, 2008)

Towards Dynamic Access Control for Healthcare Information Systems. - Lillian Røstad; Øystein Nytrø (MIE, 2008)

Learning by Failing (and Fixing). - Lillian Røstad; Inger Anne Tøndel; Per Håkon Meland; Gunnar René Øie (IEEE Secur. Priv., 2008)

hACMEgame: A Tool for Teaching Software Security. - Øyvind Nerbråten; Lillian Røstad (ARES, 2009)

Patient-Administered Access Control: A Usability Study. - Lillian Røstad; Ole Andreas Alsos (ARES, 2009)

Visualizing Patient Trajectories on Wall-Mounted Boards - Information Security Challenges. - Arild Faxvaag; Lillian Røstad; Inger Anne Tøndel; Andreas R. Seim; Pieter J. Toussaint (MIE, 2009)

Combining Misuse Cases with Attack Trees and Security Activity Models. - Inger Anne Tøndel; Jostein Jensen; Lillian Røstad (ARES, 2010)

Software Security Maturity in Public Organisations. - Martin Gilje Jaatun; Daniela S. Cruzes; Karin Bernsmed; Inger Anne Tøndel; Lillian Røstad (ISC, 2015)