Publications
2006 — 2026 · 25 publications
Academic · Security Decision Science
2026
Modeling Local Exploit Hazard — A Bayesian Framework for Quantifying Exploit Risk and Operational Efficiency
FORTHCOMING
Which Controls Matter? Counterfactual Valuation in a Dynamic Cybersecurity Model
FORTHCOMING
Empirical Data for Cyber Risk Calibration
Industry & Standards
2026
Putting Numbers on Cyber Risk
Swiss IT Magazine 2026/09
2026
Validating LLM-Generated Control Mappings Beyond Aggregate Accuracy
Cloud Security Alliance
2025
Time-to-Patch Metrics: A Survival Analysis Approach Using Qualys and Elastic
Elastic Security Labs
2025
AI Controls Matrix
Cloud Security Alliance · Core Author
2025
Bringing Financial Discipline to Cyber-Risk Decisions — A Practitioner's Field Guide
FAIR Institute
2025
Das datenzentrische Unternehmen — Daten als Erfolgsgrundlage im KI-Zeitalter
De Gruyter · Book chapter
2025
AI Organizational Responsibilities: AI Tools and Applications
Cloud Security Alliance
2024
A FAIR Perspective on Generative AI Risks and Frameworks
Elastic
2024
Inventory to Insight: How Elastic's Asset Inventory Powers InfoSec Use Cases
Elastic
2024
Securing LLM Backed Systems: Essential Authorization Practices
Cloud Security Alliance · Lead author
2022
How to Build a Cybersecurity Asset Management Solution on the Elastic Stack
Elastic
2020
Case Study: How FAIR Risk Quantification Enables Information Security Decisions at Swisscom
ISACA Journal
2019
3 Lessons We Learned from Our Introduction of FAIR at Swisscom
FAIR Institute
Academic · Distributed Data Management
2010
Flexible Data Access in a Cloud based on Freshness Requirements
IEEE
2009
The Re:GRIDiT Approach — Replicated Data Management in the Cloud via Data Grid Protocol
CloudDB 2009
2009
Load-Aware Dynamic Replication Management in a Data Grid
Springer Berlin / Heidelberg
2009
Re:GRIDiT — Coordinating Distributed Update Transactions on Replicated Data in the Grid
IEEE
2009
Replicated Data Management in the Grid: The Re:GRIDiT Approach
DaGreS 2009 · ACM
2008
The Re:GRIDiT Protocol: Correctness of Distributed Concurrency Control in the Data Grid
University of Basel
2007
DILIGENT: Integrating Digital Library and Grid Technologies
International Journal on Digital Libraries
2006
On-Demand Service Deployment and Process Support in e-Science DLs
DLSci06 · ECDL Workshop