Joint Optimization of People and Technology-An Example from the Car Industry. - Johan Stahre; A. Johansson; Stefan Axelsson (HCI (1), 1997)

The Base-Rate Fallacy and Its Implications for the Difficulty of Intrusion Detection. - Stefan Axelsson (CCS, 1999)

On a Difficulty of Intrusion Detection. - Stefan Axelsson (Recent Advances in Intrusion Detection, 1999)

The base-rate fallacy and the difficulty of intrusion detection. - Stefan Axelsson (ACM Trans. Inf. Syst. Secur., 2000)

Visualisation for Intrusion Detection. - Stefan Axelsson (ESORICS, 2003)

Visualising Intrusions: Watching the Webserver. - Stefan Axelsson (SEC, 2004)

Combining a bayesian classifier with visualisation: understanding the IDS. - Stefan Axelsson (VizSEC, 2004)

Understanding Intrusion Detection Through Visualization - Stefan Axelsson; David Sands (Springer, 2006)

Detecting Defects with an Interactive Code Review Tool Based on Visualisation and Machine Learning. - Stefan Axelsson; Dejan Baca; Robert Feldt; Darius Sidlauskas; Denis Kacan (SEKE, 2009)

Using Normalized Compression Distance for Classifying File Fragments. - Stefan Axelsson (ARES, 2010)

The Normalised Compression Distance as a file fragment classifier. - Stefan Axelsson (Digit. Investig., 2010)

Using Data Mining for Static Code Analysis of C. - Hannes Tribus; Irene Morrigl; Stefan Axelsson (ADMA, 2012)

Money Laundering Detection using Synthetic Data. - Edgar Alonso Lopez-Rojas; Stefan Axelsson (SAIS, 2012)

Similarity assessment for removal of noisy end user license agreements. - Niklas Lavesson; Stefan Axelsson (Knowl. Inf. Syst., 2012)

File Fragment Analysis Using Normalized Compression Distance. - Stefan Axelsson; Kamran Ali Bajwa; Mandhapati Venkata Srikanth (IFIP Int. Conf. Digital Forensics, 2013)

Key-hiding on the ARM platform. - Alexander Nilsson; Marcus Andersson; Stefan Axelsson (Digit. Investig., 2014)

VMI-PL: A monitoring language for virtual platforms using virtual machine introspection. - Florian Westphal; Stefan Axelsson; Christian Neuhaus; Andreas Polze (Digit. Investig., 2014)

Do Data Loss Prevention Systems Really Work? - Sara Ghorbanian; Glenn Fryklund; Stefan Axelsson (IFIP Int. Conf. Digital Forensics, 2015)

Using the RetSim Fraud Simulation Tool to Set Thresholds for Triage of Retail Fraud. - Edgar Alonso Lopez-Rojas; Stefan Axelsson (NordSec, 2015)

Using the RetSim simulator for fraud detection research. - Edgar A. Lopez-Rojas; Dan Gorton; Stefan Axelsson (Int. J. Simul. Process. Model., 2015)

Digital Forensic Implications of Collusion Attacks on the Lightning Network. - Dmytro Piatkivskyi; Stefan Axelsson; Mariusz Nowostawski (IFIP Int. Conf. Digital Forensics, 2017)

Forensics acquisition - Analysis and circumvention of samsung secure boot enforced common criteria mode. - Gunnar Alendal; Geir Olav Dyrkolbotn; Stefan Axelsson (Digit. Investig., 2018)

Analysis of fraud controls using the PaySim financial simulator. - Edgar Alonso Lopez-Rojas; Stefan Axelsson; Dejan Baca (Int. J. Simul. Process. Model., 2018)

Exploiting Vendor-Defined Messages in the USB Power Delivery Protocol. - Gunnar Alendal; Stefan Axelsson; Geir Olav Dyrkolbotn (IFIP Int. Conf. Digital Forensics, 2019)

Digital Forensic Atomic Force Microscopy of Semiconductor Memory Arrays. - Struan Gray; Stefan Axelsson (IFIP Int. Conf. Digital Forensics, 2019)

Creating a Map of User Data in NTFS to Improve File Carving. - Martin Karresand; Asalena Warnqvist; David Lindahl; Stefan Axelsson; Geir Olav Dyrkolbotn (IFIP Int. Conf. Digital Forensics, 2019)

Using NTFS Cluster Allocation Behavior to Find the Location of User Data. - Martin Karresand; Stefan Axelsson; Geir Olav Dyrkolbotn (Digit. Investig., 2019)

Reverse engineering of ReFS. - Rune Nordvik; Henry Georges; Fergus Toolan; Stefan Axelsson (Digit. Investig., 2019)

Using the object ID index as an investigative approach for NTFS file systems. - Rune Nordvik; Fergus Toolan; Stefan Axelsson (Digit. Investig., 2019)

An Empirical Study of the NTFS Cluster Allocation Behavior Over Time. - Martin Karresand; Geir Olav Dyrkolbotn; Stefan Axelsson (Digit. Investig., 2020)

Generic Metadata Time Carving. - Rune Nordvik; Kyle Porter; Fergus Toolan; Stefan Axelsson; Katrin Franke (Digit. Investig., 2020)

Disk Cluster Allocation Behavior in Windows and NTFS. - Martin Karresand; Stefan Axelsson; Geir Olav Dyrkolbotn (Mob. Networks Appl., 2020)

Leveraging USB Power Delivery Implementations for Digital Forensic Acquisition. - Gunnar Alendal; Stefan Axelsson; Geir Olav Dyrkolbotn (IFIP Int. Conf. Digital Forensics, 2021)

Digital Forensic Acquisition Kill Chain - Analysis and Demonstration. - Gunnar Alendal; Geir Olav Dyrkolbotn; Stefan Axelsson (IFIP Int. Conf. Digital Forensics, 2021)

Chip chop - smashing the mobile phone secure chip for fun and digital forensics. - Gunnar Alendal; Stefan Axelsson; Geir Olav Dyrkolbotn (Digit. Investig., 2021)

Reliability validation for file system interpretation. - Rune Nordvik; Radina Stoykova; Katrin Franke; Stefan Axelsson; Fergus Toolan (Digit. Investig., 2021)

Timestamp prefix carving for filesystem metadata extraction. - Kyle Porter; Rune Nordvik; Fergus Toolan; Stefan Axelsson (Digit. Investig., 2021)

Safe Collaborative Assembly on a Continuously Moving Line with Large Industrial Robots. - Varun Gopinath; Kerstin Johansen; Micael Derelöv; Åke Gustafsson; Stefan Axelsson (Robotics Comput. Integr. Manuf., 2021)

Legal and technical questions of file system reverse engineering. - Radina Stoykova; Rune Nordvik; Munnazzar Ahmed; Katrin Franke; Stefan Axelsson; Fergus Toolan (Comput. Law Secur. Rev., 2022)

It is about time-Do exFAT implementations handle timestamps correctly? - Rune Nordvik; Stefan Axelsson (Digit. Investig., 2022)

Reliability assessment of digital forensic investigations in the Norwegian police. - Radina Stoykova; Stig Andersen; Katrin Franke; Stefan Axelsson (Digit. Investig., 2022)

Corrigendum to "It is about time-do exFAT implementations handle timestamps correctly?" [Forensic Science International: Digital Investigation 42-43 (2022) 301476]. - Rune Nordvik; Stefan Axelsson (Forensic Sci. Int. Digit. Investig., 2023)

Digital Forensic Acquisition Using Private Internet of Things Cloud Application Programming Interfaces. - Johannes Olegård; Stefan Axelsson (IFIP Int. Conf. Digital Forensics, 2024)

When is logging sufficient? - Tracking event causality for improved forensic analysis and correlation. - Johannes Olegård; Stefan Axelsson; Yuhong Li (Digit. Investig., 2025)