A Tool for Enterprise Architecture Analysis. - Pontus Johnson; Erik Johansson; Teodor Sommestad; Johan Ullberg (EDOC, 2007)

Combining Defense Graphs and Enterprise Architecture Models for Security Analysis. - Teodor Sommestad; Mathias Ekstedt; Pontus Johnson (EDOC, 2008)

Emergency Response Framework for Aviation XML Services on MANET. - Xiaofeng Yu; Teodor Sommestad; Casey K. Fung; Patrick C. K. Hung (ICWS, 2008)

Web Service-Based Business Process Development, Threat Modeling and Security Assessment Tool. - Jianxin Li 002; Teodor Sommestad; Patrick C. K. Hung; Xiang Li (SERVICES II, 2008)

A Pattern-based Approach to Quantitative Enterprise Architecture Analysis. - Sabine Buckl; Ulrik Franke; Oliver Holschke; Florian Matthes; Christian M. Schweda; Teodor Sommestad; Johan Ullberg (AMCIS, 2009)

A Tool for Enterprise Architecture Analysis of Maintainability. - Mathias Ekstedt; Ulrik Franke; Pontus Johnson; Robert Lagerström; Teodor Sommestad; Johan Ullberg; Markus Buschle (CSMR, 2009)

Decision support oriented Enterprise Architecture metamodel management using classification trees. - Ulrik Franke; Johan Ullberg; Teodor Sommestad; Robert Lagerström; Pontus Johnson (EDOCW, 2009)

Cyber Security Risks Assessment with Bayesian Defense Graphs and Architectural Models. - Teodor Sommestad; Mathias Ekstedt; Pontus Johnson (HICSS, 2009)

A Tool for Enterprise Architecture Analysis Using the PRM Formalism. - Markus Buschle; Johan Ullberg; Ulrik Franke; Robert Lagerström; Teodor Sommestad (CAiSE Forum (Selected Papers), 2010)

A probabilistic relational model for security risk analysis. - Teodor Sommestad; Mathias Ekstedt; Pontus Johnson (Comput. Secur., 2010)

Development of an effort estimation model - a case study on delivery projects at a leading IT provider within the electric utility industry. - Teodor Sommestad; Joakim Lilliesköld (Int. J. Serv. Technol. Manag., 2010)

A Tool for Automatic Enterprise Architecture Modeling. - Markus Buschle; Hannes Holm; Teodor Sommestad; Mathias Ekstedt; Khurram Shahzad (CAiSE Forum, 2011)

Enterprise Architecture Management's Impact on Information Technology Success. - Robert Lagerström; Teodor Sommestad; Markus Buschle; Mathias Ekstedt (HICSS, 2011)

Expert Assessment on the Probability of Successful Remote Code Execution Attacks. - Hannes Holm; Teodor Sommestad; Ulrik Franke; Mathias Ekstedt (WOSIS, 2011)

Estimates of Success Rates of Denial-of-Service Attacks. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (TrustCom, 2011)

A quantitative evaluation of vulnerability scanning. - Hannes Holm; Teodor Sommestad; Jonas Almroth; Mats Persson (Inf. Manag. Comput. Secur., 2011)

Security mistakes in information system deployment projects. - Teodor Sommestad; Mathias Ekstedt; Hannes Holm; Muhammad Afzal (Inf. Manag. Comput. Secur., 2011)

Effort Estimates for Vulnerability Discovery Projects. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (HICSS, 2012)

Cyber Security Exercises and Competitions as a Platform for Cyber Security Experiments. - Teodor Sommestad; Jonas Hallberg (NordSec, 2012)

Estimates of success rates of remote arbitrary code execution attacks. - Teodor Sommestad; Hannes Holm; Mathias Ekstedt (Inf. Manag. Comput. Secur., 2012)

Success Rate of Remote Code Execution Attacks - Expert Assessments and Observations. - Hannes Holm; Teodor Sommestad; Ulrik Franke; Mathias Ekstedt (J. Univers. Comput. Sci., 2012)

A framework and theory for cyber security assessments. - Teodor Sommestad (2012)

Effort Estimates on Web Application Vulnerability Discovery. - Hannes Holm; Mathias Ekstedt; Teodor Sommestad (HICSS, 2013)

A Review of the Theory of Planned Behaviour in the Context of Information Security Policy Compliance. - Teodor Sommestad; Jonas Hallberg (SEC, 2013)

Intrusion detection and the role of the system administrator. - Teodor Sommestad; Amund Hunstad (Inf. Manag. Comput. Secur., 2013)

The Cyber Security Modeling Language: A Tool for Assessing the Vulnerability of Enterprise System Architectures. - Teodor Sommestad; Mathias Ekstedt; Hannes Holm (IEEE Syst. J., 2013)

Overview of Enterprise Information Needs in Information Security Risk Assessment. - Matus Korman; Teodor Sommestad; Jonas Hallberg; Johan E. Bengtsson; Mathias Ekstedt (EDOC, 2014)

Indicators of expert judgement and their significance: an empirical investigation in the area of cyber security. - Hannes Holm; Teodor Sommestad; Mathias Ekstedt; Nicholas Honeth (Expert Syst. J. Knowl. Eng., 2014)

Variables influencing information security policy compliance: A systematic review of quantitative studies. - Teodor Sommestad; Jonas Hallberg; Kristoffer Lundholm; Johan E. Bengtsson (Inf. Manag. Comput. Secur., 2014)

Human factors related to the performance of intrusion detection operators. - Patrik Lif; Teodor Sommestad (HAISA, 2015)

Perceived Information Security Risk as a Function of Probability and Severity. - Teodor Sommestad; Henrik Karlzén; Peter Nilsson; Jonas Hallberg (HAISA, 2015)

Requirements engineering: The quest for the dependent variable. - Hannes Holm; Teodor Sommestad; Johan E. Bengtsson (RE, 2015)

Social Groupings and Information Security Obedience Within Organizations. - Teodor Sommestad (SEC, 2015)

A Meta-Analysis of Studies on Protection Motivation Theory and Information Security Behaviour. - Teodor Sommestad; Henrik Karlzén; Jonas Hallberg (Int. J. Inf. Secur. Priv., 2015)

The sufficiency of the theory of planned behavior for explaining information security policy compliance. - Teodor Sommestad; Henrik Karlzén; Jonas Hallberg (Inf. Comput. Secur., 2015)

An empirical test of the accuracy of an attack graph analysis tool. - Teodor Sommestad; Fredrik Sandström (Inf. Comput. Secur., 2015)

A test of intrusion alert filtering based on network information. - Teodor Sommestad; Ulrik Franke (Secur. Commun. Networks, 2015)

SVED: Scanning, Vulnerabilities, Exploits and Detection. - Hannes Holm; Teodor Sommestad (MILCOM, 2016)

An empirical test of the perceived relationship between risk and the constituents severity and probability. - Teodor Sommestad; Henrik Karlzén; Peter Nilsson; Jonas Hallberg (Inf. Comput. Secur., 2016)

Development and validation of technique to measure cyber situation awareness. - Patrik Lif; Magdalena Granåsen; Teodor Sommestad (CyberSA, 2017)

So long, and thanks for only using readily available scripts. - Hannes Holm; Teodor Sommestad (Inf. Comput. Secur., 2017)

Alert verification through alert correlation - An empirical test of SnIPS. - Teodor Sommestad; Hannes Holm (Inf. Secur. J. A Glob. Perspect., 2017)

Development and evaluation of information elements for simplified cyber-incident reports. - Patrik Lif; Teodor Sommestad; Dennis Granåsen (CyberSA, 2018)

Work-related groups and information security policy compliance. - Teodor Sommestad (Inf. Comput. Secur., 2018)

A meta-analysis of field experiments on phishing susceptibility. - Teodor Sommestad; Henrik Karlzén (eCrime, 2019)

The Theory of Planned Behavior and Information Security Policy Compliance. - Teodor Sommestad; Henrik Karlzén; Jonas Hallberg (J. Comput. Inf. Syst., 2019)

International Workshop on Cyber Range Technologies and Applications (CACOE 2020). - Maria Leitner; Teodor Sommestad (EuroS&P Workshops, 2020)

Variables influencing the effectiveness of signature-based network intrusion detection systems. - Teodor Sommestad; Hannes Holm; Daniel Steinvall (Inf. Secur. J. A Glob. Perspect., 2022)

Automation of Cybersecurity Work. - Stefan Varga; Teodor Sommestad; Joel Brynielsson (Artificial Intelligence and Cybersecurity, 2023)

Automatic incident response solutions: a review of proposed solutions' input and output. - Henrik Karlzén; Teodor Sommestad (ARES, 2023)

Skade - A Challenge Management System for Cyber Threat Hunting. - Teodor Sommestad; Henrik Karlzén; Hanna Kvist; Hanna Gustafsson (ESORICS Workshops (1), 2023)

The unpredictability of phishing susceptibility: results from a repeated measures experiment. - Teodor Sommestad; Henrik Karlzén (J. Cybersecur., 2024)

Benign User Activities that Trigger False Positives in Intrusion Detection Systems: An Expert Survey. - Max Landauer; Florian Skopik; Markus Wurzenberger; Teodor Sommestad; Henrik Karlzén (ARES (Workshops 2), 2025)

Realistic and balanced automated threat emulation. - Hannes Holm; Teodor Sommestad (Comput. Secur., 2025)