SecureUML: A UML-Based Modeling Language for Model-Driven Security. - Torsten Lodderstedt; David A. Basin; Jürgen Doser (UML, 2002)

Model driven security for process-oriented systems. - David A. Basin; Jürgen Doser; Torsten Lodderstedt (SACMAT, 2003)

Model driven security from UML models to access control architectures. - Torsten Lodderstedt (2003)

Model driven security: From UML models to access control infrastructures. - David A. Basin; Jürgen Doser; Torsten Lodderstedt (ACM Trans. Softw. Eng. Methodol., 2006)

OAuth 2.0 Threat Model and Security Considerations. - Torsten Lodderstedt; Mark Mcgloin; Phil Hunt (RFC, 2013)

OAuth 2.0 Token Revocation. - Torsten Lodderstedt; Stefanie Dronia; Marius Scurtescu (RFC, 2013)

OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens. - Brian Campbell 005; John Bradley; Nat Sakimura; Torsten Lodderstedt (RFC, 2020)

OAuth 2.0 Pushed Authorization Requests. - Torsten Lodderstedt; Brian Campbell 005; Nat Sakimura; Dave Tonge; Filip Skokan (RFC, 2021)

OAuth 2.0 Rich Authorization Requests. - Torsten Lodderstedt; Justin Richer; Brian Campbell 005 (RFC, 2023)

OAuth 2.0 Demonstrating Proof of Possession (DPoP). - Daniel Fett; Brian Campbell 005; John Bradley; Torsten Lodderstedt; Michael B. Jones; David Waite (RFC, 2023)

Best Current Practice for OAuth 2.0 Security. - Torsten Lodderstedt; John Bradley; Andrey Labunets; Daniel Fett (RFC, 2025)

JSON Web Token (JWT) Response for OAuth Token Introspection. - Torsten Lodderstedt; Vladimir Dzhuvinov (RFC, 2025)