• A Transformational Approach to Facilitate Monitoring of High Level Policies 

      Seehusen, Fredrik; Lund, Mass Soldal; Stølen, Ketil (Research report, 2009)
      We present a method for specifying high level security policies that can be enforced by runtime monitoring mechanisms. The method has three main steps: (1) the user of our method formalizes a set of policy rules using UML ...
    • Evaluation of the 1st DIGIT field trial 

      Lund, Mass Soldal; Bogya, Emese Lujza (Research report, 2008)
      This report evaluates the 1st DIGIT field trial, a security risk analysis conducted for Santander in the autumn of 2007. The evaluation includes lessons learned from the analysis and an empirical investigation into the use ...
    • Quality Evaluation of the CORAS UmL Profile 

      Hogganvik, Ida; Lund, Mass Soldal; Stølen, Ketil (Research report, 2007)
      This report contains an evaluation of the CORAS UML profile and consists og two parts:Modeling a benchmarking test called ""the core security risk scenarios"" using the CORAS UML profileAssessing the quality og the CORAS ...