Katja Tuma

48 papers A 4B 3C 2Journal 29Unranked 10
YearRankTypeTitle / Venue / Authors
2026 J jnl
Automated Analysis of Security Policy Violations in Helm Charts.
IEEE Trans. Dependable Secur. Comput.
Francesco Minna, Agathe Blaise, Katja Tuma, Fabio Massacci
2026 J jnl
Less is more: usefulness of data flow diagrams and large language models for security threat validation.
Empir. Softw. Eng.
Winnie Bahati Mbaka, Katja Tuma
2025 J jnl
Analyzing and mitigating (with LLMs) the security misconfigurations of Helm charts from Artifact Hub.
Empir. Softw. Eng.
Francesco Minna, Fabio Massacci, Katja Tuma
2025 J jnl
Assessing the usefulness of Data Flow Diagrams for validating security threats.
Comput. Secur.
Winnie Bahati Mbaka, Xinran Zhang, Yunduo Wang, Tong Li, Fabio Massacci, Katja Tuma
2025 J jnl
Challenges to Using Large Language Models in Code Generation and Repair.
IEEE Secur. Priv.
Liliana Pasquale, Antonino Sabetta, Marcelo d'Amorim, Péter Hegedüs, Mehdi Tarrit Mirakhorli, Hamed Okhravi, Mathias Payer, Awais Rashid, Joanna C. S. Santos, Jonathan M. Spring, Lin Tan, Katja Tuma
2025 — conf
In Specs We Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks.
ARES (1)
Simon Schneider, Komal Kashish, Katja Tuma, Riccardo Scandariato
2025 J jnl
In Specs we Trust? Conformance-Analysis of Implementation to Specifications in Node-RED and Associated Security Risks.
CoRR
Simon Schneider, Komal Kashish, Katja Tuma, Riccardo Scandariato
2025 — conf
Large Language Models Are Unreliable for Cyber Threat Intelligence.
ARES (2)
Emanuele Mezzi, Fabio Massacci, Katja Tuma
2025 J jnl
Large Language Models are Unreliable for Cyber Threat Intelligence.
CoRR
Emanuele Mezzi, Fabio Massacci, Katja Tuma
2025 J jnl
On the effects of program slicing for vulnerability detection during code inspection.
Empir. Softw. Eng.
Aurora Papotti, Katja Tuma, Fabio Massacci
2024 J jnl
Analyzing and Mitigating (with LLMs) the Security Misconfigurations of Helm Charts from Artifact Hub.
CoRR
Francesco Minna, Fabio Massacci, Katja Tuma
2024 — conf
Automated Security Repair for Helm Charts.
ICSE Companion
Francesco Minna, Agathe Blaise, Fabio Massacci, Katja Tuma
2024 — conf
Designing Secure AI-based Systems: a Multi-Vocal Literature Review.
SecDev
Simon Schneider, Ananya Saha, Emanuele Mezzi, Katja Tuma, Riccardo Scandariato
2024 J jnl
Designing Secure AI-based Systems: a Multi-Vocal Literature Review.
CoRR
Simon Schneider, Ananya Saha, Emanuele Mezzi, Katja Tuma, Riccardo Scandariato
2024 A conf
Does trainer gender make a difference when delivering phishing training? A new experimental design to capture bias.
EASE
André Palheiros Da Silva, Winnie Mbaka, Johann Mayer, Jan-Willem Bullee, Katja Tuma
2024 — conf
On the Effects of Program Slicing for Vulnerability Detection during Code Inspection: Extended Abstract.
ICSE Companion
Aurora Papotti, Fabio Massacci, Katja Tuma
2024 J jnl
On the Measures of Success in Replication of Controlled Experiments with STRIDE.
Int. J. Softw. Eng. Knowl. Eng.
Winnie Mbaka, Katja Tuma
2024 J jnl
Risks of uncertainty propagation in Al-augmented security pipelines.
CoRR
Emanuele Mezzi, Aurora Papotti, Fabio Massacci, Katja Tuma
2024 J jnl
Role of Gender in the Evaluation of Security Decisions.
IEEE Secur. Priv.
Winnie Mbaka, Katja Tuma
2024 C conf
The Equality Maturity Model: An Actionable Tool to Advance Gender Balance in Leadership and Participation Roles.
EDUCON
Paloma Díaz, Paula Alexandra Silva, Katja Tuma
2024 J jnl
The Equality Maturity Model: an actionable tool to advance gender balance in leadership and participation roles.
CoRR
Paloma Díaz, Paula Alexandra Silva, Katja Tuma
2024 J jnl
Usefulness of data flow diagrams and large language models for security threat validation: a registered report.
CoRR
Winnie Bahati Mbaka, Katja Tuma
2023 J jnl
A new, evidence-based, theory for knowledge reuse in security risk analysis.
Empir. Softw. Eng.
Katsiaryna Labunets, Fabio Massacci, Federica Paci, Katja Tuma
2023 J jnl
Checking security compliance between models and code.
Softw. Syst. Model.
Katja Tuma, Sven Peldszus, Daniel Strüber, Riccardo Scandariato, Jan Jürjens
2023 J jnl
Delta Security Certification for Software Supply Chains.
IEEE Secur. Priv.
Ákos Milánkovich, Katja Tuma
2023 J jnl
Impact of Gender on the Evaluation of Security Decisions.
CoRR
Winnie Mbaka, Katja Tuma
2022 J jnl
A replication of a controlled experiment with two STRIDE variants.
CoRR
Winnie Mbaka, Katja Tuma
2022 J jnl
Human Aspect of Threat Analysis: A Replication.
CoRR
Katja Tuma, Winnie Mbaka
2022 B conf
Precise Analysis of Purpose Limitation in Data Flow Diagrams.
ARES
Hanaa Alshareef, Katja Tuma, Sandro Stucki, Gerardo Schneider, Riccardo Scandariato
2022 — conf
The Role of Diversity in Cybersecurity Risk Analysis: An Experimental Plan.
GE@ICSE
Katja Tuma, Romy Van Der Lee
2022 J jnl
The Role of Diversity in Cybersecurity Risk Analysis: An Experimental Plan.
CoRR
Katja Tuma, Romy Van Der Lee
2022 B conf
Towards a Security Stress-Test for Cloud Configurations.
CLOUD
Francesco Minna, Fabio Massacci, Katja Tuma
2022 J jnl
Towards a Security Stress-Test for Cloud Configurations.
CoRR
Francesco Minna, Fabio Massacci, Katja Tuma
2021 J jnl
Checking Security Compliance between Models and Code.
CoRR
Katja Tuma, Sven Peldszus, Daniel Strüber, Riccardo Scandariato, Jan Jürjens
2021 J jnl
Finding security threats that matter: Two industrial case studies.
J. Syst. Softw.
Katja Tuma, Christian Sandberg, Urban Thorsson, Mathias Widman, Thomas Herpel, Riccardo Scandariato
2021 J jnl
Seven Pain Points of Threat Analysis and Risk Assessment in the Automotive Domain.
IEEE Secur. Priv.
Katja Tuma, Mathias Widman
2020 A conf
Automating the early detection of security design flaws.
MoDELS
Katja Tuma, Laurens Sion, Riccardo Scandariato, Koen Yskout
2020 — conf
Secure Data-Flow Compliance Checks between Models and Code based on Automated Mappings.
SE
Sven Peldszus, Katja Tuma, Daniel Strüber, Jan Jürjens, Riccardo Scandariato
2019 J jnl
Finding Security Threats That Matter: An Industrial Case Study.
CoRR
Katja Tuma, Christian Sandberg, Urban Thorsson, Mathias Widman, Riccardo Scandariato
2019 A conf
Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis.
ICSA
Katja Tuma, Riccardo Scandariato, Musard Balliu
2019 J jnl
Inspection Guidelines to Identify Security Design Flaws.
CoRR
Katja Tuma, Danial Hosseini, Kyriakos Malamas, Riccardo Scandariato
2019 — conf
Inspection guidelines to identify security design flaws.
ECSA (Companion)
Katja Tuma, Danial Hosseini, Kyriakos Malamas, Riccardo Scandariato
2019 A conf
Secure Data-Flow Compliance Checks between Models and Code Based on Automated Mappings.
MoDELS
Sven Peldszus, Katja Tuma, Daniel Strüber, Jan Jürjens, Riccardo Scandariato
2019 — conf
Towards Automated Security Design Flaw Detection.
ASE Workshops
Laurens Sion, Katja Tuma, Riccardo Scandariato, Koen Yskout, Wouter Joosen
2018 C conf
Back to the Drawing Board - Bringing Security Constraints in an Architecture-centric Software Development Process.
ICISSP
Stefanie Jasser, Katja Tuma, Riccardo Scandariato, Matthias Riebisch
2018 J jnl
Threat analysis of software systems: A systematic literature review.
J. Syst. Softw.
Katja Tuma, Gül Çalikli, Riccardo Scandariato
2018 B conf
Two Architectural Threat Analysis Techniques Compared.
ECSA
Katja Tuma, Riccardo Scandariato
2017 — conf
Towards Security Threats that Matter.
CyberICPS/SECPRE@ESORICS
Katja Tuma, Riccardo Scandariato, Mathias Widman, Christian Sandberg