Consistent Enterprise Software System Architecture for the CIO - A Utility-Cost Based Approach. - Mathias Ekstedt; Pontus Johnson; Åsa Lindström; Magnus Gammelgård; Erik Johansson; Leonel Plazaola; Enrique Silva; Joakim Liliesköld (HICSS, 2004)

Enterprise architecture for IT management: a CIO decision making perspective on the electrical power industry. - Mathias Ekstedt (2004)

Assessment of Enterprise Information Security - The Importance of Information Search Cost. - Erik Johansson; Mathias Ekstedt; Pontus Johnson (HICSS, 2006)

A survey on CIO concerns-do enterprise architecture frameworks support them? - Åsa Lindström; Pontus Johnson; Erik Johansson; Mathias Ekstedt; Mårten Simonsson (Inf. Syst. Frontiers, 2006)

In Search of a Unified Theory of Software Engineering. - Pontus Johnson; Mathias Ekstedt (ICSEA, 2007)

The IT Organization Modeling and Assessment Tool for IT Governance Decision Support. - Mårten Simonsson; Pontus Johnson; Mathias Ekstedt (CAiSE, 2008)

Using Enterprise Architecture Models for System Quality Analysis. - Per Närman; Marten Schönherr; Pontus Johnson; Mathias Ekstedt; Moustafa Chenine (EDOC, 2008)

Combining Defense Graphs and Enterprise Architecture Models for Security Analysis. - Teodor Sommestad; Mathias Ekstedt; Pontus Johnson (EDOC, 2008)

A framework for interoperability analysis on the semantic web using architecture models. - Johan Ullberg; Robert Lagerström; Mathias Ekstedt (EDOCW, 2008)

Strategic Business and IT Alignment Assessment: A Case Study Applying an Enterprise Architecture-Based Metamodel. - Leonel Plazaola; Johnny Flores; Norman Vargas; Mathias Ekstedt (HICSS, 2008)

A Consolidated Strategic Business and IT Alignment Representation: A Framework Aggregated From Literature. - Norman Vargas; Leonel Plazaola; Mathias Ekstedt (HICSS, 2008)

Assessing System Availability Using an Enterprise Architecture Analysis Approach. - Jakob Raderius; Per Närman; Mathias Ekstedt (ICSOC Workshops, 2008)

Data Collection Prioritization for System Quality Analysis. - Per Närman; Pontus Johnson; Robert Lagerström; Ulrik Franke; Mathias Ekstedt (SQM@CSMR, 2008)

Enterprise Meta Modeling Methods - Combining a Stakeholder-Oriented and a Causality-Based Approach. - Robert Lagerström; Jan Saat; Ulrik Franke; Stephan Aier; Mathias Ekstedt (BMMDS/EMMSAD, 2009)

A Tool for Enterprise Architecture Analysis of Maintainability. - Mathias Ekstedt; Ulrik Franke; Pontus Johnson; Robert Lagerström; Teodor Sommestad; Johan Ullberg; Markus Buschle (CSMR, 2009)

A Method for Choosing Software Assessment Measures Using Bayesian Networks and Diagnosis. - Ulrik Franke; Pontus Johnson; Robert Lagerström; Johan Ullberg; David Höök; Mathias Ekstedt; Johan König (CSMR, 2009)

Enterprise Architecture Analysis for Data Accuracy Assessments. - Per Närman; Pontus Johnson; Mathias Ekstedt; Moustafa Chenine; Johan König (EDOC, 2009)

Cyber Security Risks Assessment with Bayesian Defense Graphs and Architectural Models. - Teodor Sommestad; Mathias Ekstedt; Pontus Johnson (HICSS, 2009)

A formal method for cost and accuracy trade-off analysis in software assessment measures. - Ulrik Franke; Pontus Johnson; Robert Lagerström; Johan Ullberg; David Höök; Mathias Ekstedt; Johan König (RCIS, 2009)

EAF2- A Framework for Categorizing Enterprise Architecture Frameworks. - Ulrik Franke; David Höök; Johan König; Robert Lagerström; Per Närman; Johan Ullberg; Pia Gustafsson; Mathias Ekstedt (SNPD, 2009)

Mapping the Substation Configuration Language of IEC 61850 to ArchiMate. - Johan König; Kun Zhu 002; Lars Nordström; Mathias Ekstedt; Robert Lagerström (EDOCW, 2010)

Enterprise Architecture Meta Models for IT/Business Alignment Situations. - Jan Saat; Ulrik Franke; Robert Lagerström; Mathias Ekstedt (EDOC, 2010)

Trends in Enterprise Architecture Practice - A Survey. - Ulrik Franke; Mathias Ekstedt; Robert Lagerström; Jan Saat; Robert Winter 001 (TEAR, 2010)

A probabilistic relational model for security risk analysis. - Teodor Sommestad; Mathias Ekstedt; Pontus Johnson (Comput. Secur., 2010)

A method for assessing the business value of information system scenarios with an estimated credibility of the result. - Magnus Gammelgård; Mathias Ekstedt; Per Närman (Int. J. Serv. Technol. Manag., 2010)

The Effect of IT Governance Maturity on IT Governance Performance. - Mårten Simonsson; Pontus Johnson; Mathias Ekstedt (Inf. Syst. Manag., 2010)

Architecture analysis of enterprise systems modifiability: a metamodel for software change cost estimation. - Robert Lagerström; Pontus Johnson; Mathias Ekstedt (Softw. Qual. J., 2010)

A Tool for Automatic Enterprise Architecture Modeling. - Markus Buschle; Hannes Holm; Teodor Sommestad; Mathias Ekstedt; Khurram Shahzad (CAiSE Forum, 2011)

Enterprise Architecture Management's Impact on Information Technology Success. - Robert Lagerström; Teodor Sommestad; Markus Buschle; Mathias Ekstedt (HICSS, 2011)

Analysis of IT/Business Alignment Situations as a Precondition for the Design and Engineering of Situated IT/Business Alignment Solutions. - Jan Saat; Robert Winter 001; Ulrik Franke; Robert Lagerström; Mathias Ekstedt (HICSS, 2011)

Information Security Governance Analysis Using Probabilistic Relational Models. - Waldo Rocha Flores; Mathias Ekstedt (WOSIS, 2011)

Expert Assessment on the Probability of Successful Remote Code Execution Attacks. - Hannes Holm; Teodor Sommestad; Ulrik Franke; Mathias Ekstedt (WOSIS, 2011)

Estimates of Success Rates of Denial-of-Service Attacks. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (TrustCom, 2011)

Data accuracy assessment using enterprise architecture. - Per Närman; Hannes Holm; Pontus Johnson; Johan König; Moustafa Chenine; Mathias Ekstedt (Enterp. Inf. Syst., 2011)

Security mistakes in information system deployment projects. - Teodor Sommestad; Mathias Ekstedt; Hannes Holm; Muhammad Afzal (Inf. Manag. Comput. Secur., 2011)

Automating Enterprise Architecture Documentation using an Enterprise Service Bus. - Markus Buschle; Mathias Ekstedt; Sebastian Grunow; Matheus Hauder; Florian Matthes; Sascha Roth (AMCIS, 2012)

Assessment of Social Impact Costs and Social Impact Magnitude from Breakdowns in Critical Infrastructures. - Mats B.-O. Larsson; Gunnar Björkman; Mathias Ekstedt (CRITIS, 2012)

Effort Estimates for Vulnerability Discovery Projects. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (HICSS, 2012)

A Metamodel for Web Application Injection Attacks and Countermeasures. - Hannes Holm; Mathias Ekstedt (TEAR/PRET, 2012)

Challenges in Power System Information Security. - György Dán; Henrik Sandberg; Mathias Ekstedt; Gunnar Björkman (IEEE Secur. Priv., 2012)

Estimates of success rates of remote arbitrary code execution attacks. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (Inf. Manag. Comput. Secur., 2012)

Success Rate of Remote Code Execution Attacks - Expert Assessments and Observations. - Hannes Holm; Teodor Sommestad; Ulrik Franke; Mathias Ekstedt (J. Univers. Comput. Sci., 2012)

Where's the Theory for Software Engineering? - Pontus Johnson; Mathias Ekstedt; Ivar Jacobson (IEEE Softw., 2012)

Empirical Analysis of System-Level Vulnerability Metrics through Actual Attacks. - Hannes Holm; Mathias Ekstedt; Dennis Andersson (IEEE Trans. Dependable Secur. Comput., 2012)

Countermeasures for Social Engineering-based Malware Installation Attacks. - Waldo Rocha Flores; Mathias Ekstedt (CONF-IRM, 2013)

Message from the TEAR 2013 Workshop Chairs. - João Paulo A. Almeida; Mathias Ekstedt; James Lapalme (EDOC Workshops, 2013)

Effort Estimates on Web Application Vulnerability Discovery. - Hannes Holm; Mathias Ekstedt; Teodor Sommestad (HICSS, 2013)

An empirical approach to a general theory of software (engineering). - Mathias Ekstedt (GTSE@ICSE, 2013)

Estimates on the effectiveness of web application firewalls against targeted attacks. - Hannes Holm; Mathias Ekstedt (Inf. Manag. Comput. Secur., 2013)

Using enterprise architecture analysis and interview data to estimate service response time. - Per Närman; Hannes Holm; Mathias Ekstedt; Nicholas Honeth (J. Strateg. Inf. Syst., 2013)

The Cyber Security Modeling Language: A Tool for Assessing the Vulnerability of Enterprise System Architectures. - Teodor Sommestad; Mathias Ekstedt; Hannes Holm (IEEE Syst. J., 2013)

An Empirical Investigation of the Effect of Target-Related Information in Phishing Attacks. - Hannes Holm; Waldo Rocha Flores; Marcus Nohlberg; Mathias Ekstedt (EDOC Workshops, 2014)

Overview of Enterprise Information Needs in Information Security Risk Assessment. - Matus Korman; Teodor Sommestad; Jonas Hallberg; Johan E. Bengtsson; Mathias Ekstedt (EDOC, 2014)

Extending a general theory of software to engineering. - Robert Lagerström; Mathias Ekstedt (GTSE, 2014)

Information security knowledge sharing in organizations: Investigating the effect of behavioral information security governance and national culture. - Waldo Rocha Flores; Egil Antonsen; Mathias Ekstedt (Comput. Secur., 2014)

Enterprise architecture availability analysis using fault trees and stakeholder interviews. - Per Närman; Ulrik Franke; Johan König; Markus Buschle; Mathias Ekstedt (Enterp. Inf. Syst., 2014)

Indicators of expert judgement and their significance: an empirical investigation in the area of cyber security. - Hannes Holm; Teodor Sommestad; Mathias Ekstedt; Nicholas Honeth (Expert Syst. J. Knowl. Eng., 2014)

Automatic data collection for enterprise architecture models. - Hannes Holm; Markus Buschle; Robert Lagerström; Mathias Ekstedt (Softw. Syst. Model., 2014)

An enterprise architecture framework for multi-attribute information systems analysis. - Per Närman; Markus Buschle; Mathias Ekstedt (Softw. Syst. Model., 2014)

Securi CAD by Foreseeti: A CAD Tool for Enterprise Cyber Security Management. - Mathias Ekstedt; Pontus Johnson; Robert Lagerström; Dan Gorton; Joakim Nydren; Khurram Shahzad (EDOC Workshops, 2015)

A Requirements Based Approach for Automating Enterprise IT Architecture Modeling Using Multiple Data Sources. - Margus Välja; Robert Lagerström; Mathias Ekstedt; Matus Korman (EDOC Workshops, 2015)

Exploring the Link Between Behavioural Information Security Governance and Employee Information Security Awareness. - Waldo Rocha Flores; Mathias Ekstedt (HAISA, 2015)

Investigating the Correlation between Intention and Action in the Context of Social Engineering in Two Different National Cultures. - Waldo Rocha Flores; Hannes Holm; Mathias Ekstedt; Marcus Nohlberg (HICSS, 2015)

Exploring Theory of Cognition for General Theory of Software Engineering. - Pontus Johnson; Mathias Ekstedt (GTSE@ICSE, 2015)

Search-Based Design of Large Software Systems-of-Systems. - Robert Lagerström; Pontus Johnson; Mathias Ekstedt (SESoS, 2015)

Modeling Authorization in Enterprise-wide Contexts. - Matus Korman; Robert Lagerström; Mathias Ekstedt (PoEM (Short Papers), 2015)

Investigating personal determinants of phishing and the effect of national culture. - Waldo Rocha Flores; Hannes Holm; Marcus Nohlberg; Mathias Ekstedt (Inf. Comput. Secur., 2015)

A Bayesian network model for likelihood estimations of acquirement of critical software vulnerabilities and exploits. - Hannes Holm; Matus Korman; Mathias Ekstedt (Inf. Softw. Technol., 2015)

Towards general theories of software engineering. - Pontus Johnson; Mathias Ekstedt; Michael Goedicke; Ivar Jacobson (Sci. Comput. Program., 2015)

P2CySeMoL: Predictive, Probabilistic Cyber Security Modeling Language. - Hannes Holm; Khurram Shahzad; Markus Buschle; Mathias Ekstedt (IEEE Trans. Dependable Secur. Comput., 2015)

pwnPr3d: An Attack-Graph-Driven Probabilistic Threat-Modeling Approach. - Pontus Johnson; Alexandre Vernotte; Mathias Ekstedt; Robert Lagerström (ARES, 2016)

Exploiting Bro for Intrusion Detection in a SCADA System. - Robert Udd; Mikael Asplund; Simin Nadjm-Tehrani; Mehrdad Kazemtabrizi; Mathias Ekstedt (CPSS@AsiaCCS, 2016)

Automatic Probabilistic Enterprise IT Architecture Modeling: A Dynamic Bayesian Networks Approach. - Pontus Johnson; Mathias Ekstedt; Robert Lagerström (EDOC Workshops, 2016)

Modeling and analyzing systems-of-systems in the multi-attribute prediction language (MAPL). - Pontus Johnson; Robert Lagerström; Mathias Ekstedt; Ulrik Franke (SESoS, 2016)

Quantitative Information Security Risk Estimation Using Probabilistic Attack Graphs. - Pontus Johnson; Alexandre Vernotte; Dan Gorton; Mathias Ekstedt; Robert Lagerström (RISK, 2016)

Shaping intention to resist social engineering through transformational leadership, information security culture and awareness. - Waldo Rocha Flores; Mathias Ekstedt (Comput. Secur., 2016)

Time between vulnerability disclosures: A measure of software product vulnerability. - Pontus Johnson; Dan Gorton; Robert Lagerström; Mathias Ekstedt (Comput. Secur., 2016)

Modeling Enterprise Authorization: A Unified Metamodel and Initial Validation. - Matus Korman; Robert Lagerström; Mathias Ekstedt (Complex Syst. Informatics Model. Q., 2016)

The Tarpit - A general theory of software engineering. - Pontus Johnson; Mathias Ekstedt (Inf. Softw. Technol., 2016)

Exploratory studies into forensic logs for criminal investigation using case studies in industrial control systems in the power sector. - Asif Iqbal 012; Mathias Ekstedt; Hanan Alobaidli (IEEE BigData, 2017)

Analyzing the Effectiveness of Attack Countermeasures in a SCADA System. - Matus Korman; Margus Välja; Gunnar Björkman; Mathias Ekstedt; Alexandre Vernotte; Robert Lagerström (SPSR-SG@CPSWeek, 2017)

Automatic Design of Secure Enterprise Architecture: Work in Progress Paper. - Robert Lagerström; Pontus Johnson; Mathias Ekstedt (EDOC Workshops, 2017)

In-Depth Modeling of the UNIX Operating System for Architectural Cyber Security Analysis. - Alexandre Vernotte; Pontus Johnson; Mathias Ekstedt; Robert Lagerström (EDOC Workshops, 2017)

Digital Forensic Readiness in Critical Infrastructures: A Case of Substation Automation in the Power Sector. - Asif Iqbal 012; Mathias Ekstedt; Hanan Alobaidli (ICDF2C, 2017)

Automated Probabilistic System Architecture Analysis in the Multi-Attribute Prediction Language (MAPL): Iteratively Developed using Multiple Case Studies. - Robert Lagerström; Pontus Johnson; Mathias Ekstedt; Ulrik Franke; Khurram Shahzad (Complex Syst. Informatics Model. Q., 2017)

A Meta Language for Threat Modeling and Attack Simulations. - Pontus Johnson; Robert Lagerström; Mathias Ekstedt (ARES, 2018)

Identification of Attack-based Digital Forensic Evidences for WAMPAC Systems. - Asif Iqbal 012; Farhan Mahmood; Andrii Shalaginov; Mathias Ekstedt (IEEE BigData, 2018)

RICS-el: Building a National Testbed for Research and Training on SCADA Security (Short Paper). - Magnus Almgren; Peter Andersson; Gunnar Björkman; Mathias Ekstedt; Jonas Hallberg; Simin Nadjm-Tehrani; Erik Westring (CRITIS, 2018)

Consensus in Software Engineering: A Cognitive Mapping Study. - Pontus Johnson; Paul Ralph; Mathias Ekstedt; Iaakov Exman; Michael Goedicke (CoRR, 2018)

Load balancing of renewable energy: a cyber security analysis. - Alexandre Vernotte; Margus Välja; Matus Korman; Gunnar Björkman; Mathias Ekstedt; Robert Lagerström (Energy Inform., 2018)

Can the Common Vulnerability Scoring System be Trusted? A Bayesian Analysis. - Pontus Johnson; Robert Lagerström; Mathias Ekstedt; Ulrik Franke (IEEE Trans. Dependable Secur. Comput., 2018)

Conceptual Abstraction of Attack Graphs - A Use Case of securiCAD. - Xinyue Mao; Mathias Ekstedt; Engla Ling; Erik Ringdahl; Robert Lagerström (GraMSec@CSF, 2019)

A Systematic Literature Review of Information Sources for Threat Modeling in the Power Systems Domain. - Engla Ling; Robert Lagerström; Mathias Ekstedt (CRITIS, 2020)

An Attack Simulation Language for the IT Domain. - Sotirios Katsikeas; Simon Hacks; Pontus Johnson; Mathias Ekstedt; Robert Lagerström; Joar Jacobsson; Max Wällstedt; Per Eliasson (GraMSec@CSF, 2020)

Threat Modeling and Attack Simulations of Smart Cities: A Literature Review and Explorative Study. - Robert Lagerström; Wenjun Xiong; Mathias Ekstedt (ICISSP, 2020)

powerLang: a probabilistic attack simulation language for the power domain. - Simon Hacks; Sotirios Katsikeas; Engla Ling; Robert Lagerström; Mathias Ekstedt (Energy Inform., 2020)

Generating Threat Models and Attack Graphs based on the IEC 61850 System Configuration description Language. - Engla Rencelj Ling; Mathias Ekstedt (SAT-CPS@CODASPY, 2021)

Mapping Cyber Threat Intelligence to Probabilistic Attack Graphs. - Andreas Gylling; Mathias Ekstedt; Zeeshan Afzal; Per Eliasson (CSR, 2021)

Threat Scenarios and Monitoring Requirements for Cyber-Physical Systems of Energy Flexibility Markets. - Nils Müller; Zeeshan Afzal; Per Eliasson; Mathias Ekstedt; Kai Heussen (CoRR, 2021)

Research communities in cyber security: A comprehensive literature review. - Sotirios Katsikeas; Pontus Johnson; Mathias Ekstedt; Robert Lagerström (Comput. Sci. Rev., 2021)

Containment Strategy Formalism in a Probabilistic Threat Modelling Framework. - Per Fahlander; Mathias Ekstedt; Preetam Mukherjee 001; Ashish Kumar Dwivedi (ICISSP, 2022)

Estimating the Time-To-Compromise of Exploiting Industrial Control System Vulnerabilities. - Engla Rencelj Ling; Mathias Ekstedt (ICISSP, 2022)

Development and Implementation of a Holistic Flexibility Market Architecture. - Oliver Kraft; Oliver Pohl; Ulf Häger; Kai Heussen; Nils Müller; Zeeshan Afzal; Mathias Ekstedt; Hossein Farahmand; Dmytro Ivanko; Ankit Singh; Sasiphong Leksawat; Andreas Kubis (ISGT, 2022)

Security Countermeasures Selection Using the Meta Attack Language and Probabilistic Attack Graphs. - Wojciech Widel; Preetam Mukherjee 001; Mathias Ekstedt (IEEE Access, 2022)

Mean Value Analysis of Critical Attack Paths with Multiple Parameters. - Rajendra Patil; Viktoria Fodor; Mathias Ekstedt (NordSec, 2023)

Software Bill of Materials in Java. - Musard Balliu; Benoit Baudry; Sofia Bobadilla; Mathias Ekstedt; Martin Monperrus; Javier Ron; Aman Sharma 001; Gabriel Skoglund; César Soto-Valero; Martin Wittlinger (SCORED@CCS, 2023)

The meta attack language - a formal description. - Wojciech Widel; Simon Hacks; Mathias Ekstedt; Pontus Johnson; Robert Lagerström (Comput. Secur., 2023)

Towards a Graph Neural Network-Based Approach for Estimating Hidden States in Cyber Attack Simulations. - Pontus Johnson; Mathias Ekstedt (CoRR, 2023)

Challenges of Producing Software Bill of Materials for Java. - Musard Balliu; Benoit Baudry; Sofia Bobadilla; Mathias Ekstedt; Martin Monperrus; Javier Ron Arteaga; Aman Sharma 001; Gabriel Skoglund; César Soto-Valero; Martin Wittlinger (IEEE Secur. Priv., 2023)

Estimating Time-To-Compromise for Industrial Control System Attack Techniques Through Vulnerability Data. - Engla Rencelj Ling; Mathias Ekstedt (SN Comput. Sci., 2023)

A threat modeling language for generating attack graphs of substation automation systems. - Engla Rencelj Ling; Mathias Ekstedt (Int. J. Crit. Infrastructure Prot., 2023)

Yet another cybersecurity risk assessment framework. - Mathias Ekstedt; Zeeshan Afzal; Preetam Mukherjee 001; Simon Hacks; Robert Lagerström (Int. J. Inf. Sec., 2023)

A Metalanguage for Dynamic Attack Graphs and Lazy Generation. - Viktor Engström; Giuseppe Nebbione; Mathias Ekstedt (ARES, 2024)

Development and validation of coreLang: A threat modeling language for the ICT domain. - Sotirios Katsikeas; Andrei Buhaiu; Mathias Ekstedt; Zeeshan Afzal; Simon Hacks; Preetam Mukherjee 001 (Comput. Secur., 2024)

Empirical evaluation of a threat modeling language as a cybersecurity assessment tool. - Sotirios Katsikeas; Engla Rencelj Ling; Pontus Johnsson; Mathias Ekstedt (Comput. Secur., 2024)

Application and Evaluation of a Substation Threat Modeling Language for Automatic Attack Graph Generation. - Engla Rencelj Ling; Mathias Ekstedt (CSR, 2025)

Informed Defense: How Attacker Profiles Transform Vulnerability Assessments. - Muhammad Zeshan Naseer; Viktoria Fodor; Mathias Ekstedt (CSR, 2025)

Vexed by VEX tools: Consistency evaluation of container vulnerability scanners. - Yekatierina Churakova; Mathias Ekstedt (CoRR, 2025)