2022

• Sandvik, Jens-Petter; Franke, Katrin; Abie, Habtamu; Årnes, Andrè. (2022) Quantifying data volatility for IoT forensics with examples from Contiki OS. Forensic Science International: Digital Investigation. volum 40.
  Academic article
• Årnes, Andrè. (2022) Cyber investigations. John Wiley & Sons. 2022. ISBN 9781119582311.
  Academic anthology/Conference proceedings

2021

• Sandvik, Jens-Petter; Franke, Katrin; Abie, Habtamu; Årnes, Andrè. (2021) Coffee forensics — Reconstructing data in IoT devices running Contiki OS. Forensic Science International: Digital Investigation. volum 37.
  Academic article
• Sandvik, Jens-Petter; Franke, Katrin; Årnes, Andrè. (2021) Towards a Generic Approach of Quantifying Evidence Volatility in Resource Constrained Devices. Digital Forensic Investigation of Internet of Things (IoT) Devices.
  Academic chapter/article/Conference paper

2018

• Sandvik, Jens-Petter; Årnes, Andrè. (2018) The reliability of clocks as digital evidence under low voltage conditions. Digital Investigation. The International Journal of Digital Forensics and Incident Response. volum 24.
  Academic article

2017

• Franke, Katrin; Årnes, Andrè. (2017) Challenges in Digital Forensics. Digital forensics.
  Chapter
• Jensen, Kristoffer; Nguyen, Hai Thanh; Do, van Thanh; Årnes, Andrè. (2017) A big data analytics approach to combat telecommunication vulnerabilities. Cluster Computing. volum 20 (3).
  Academic article
• Årnes, Andrè. (2017) Digital forensics. John Wiley & Sons. 2017. ISBN 9781119262381.
  Academic anthology/Conference proceedings

2016

• Jensen, Kristoffer; Do, van Thanh; Nguyen, Hai Thanh; Årnes, Andre. (2016) Better Protection of SS7 Networks With Machine Learning. 2016 6th International Conference on IT Convergence and Security (ICITCS).
  Academic chapter/article/Conference paper
• Steig, Simen; Nguyen, Hai Thanh; Årnes, Andre; Do, van Thanh. (2016) A network based IMSI Catcher detection. 2016 6th International Conference on IT Convergence and Security (ICITCS).
  Academic chapter/article/Conference paper

2014

• Bjelland, Petter Christian; Franke, Katrin; Årnes, Andre. (2014) Practical use of Approximate Hash Based Matching in digital investigations. Digital Investigation. The International Journal of Digital Forensics and Incident Response. volum 11 (May).
  Academic article

2011

• Flaglien, Anders Orsten; Franke, Katrin; Årnes, Andre. (2011) Identifying Malware Using Cross-Evidence Correlation. Advances in Digital Forensics VII; 7th IFIP WG 11.9 International Conference on Digital Forensics Orlando, FL, USA, January 31 – February 2, 2011; Revised Selected Papers.
  Academic chapter/article/Conference paper
• Flaglien, Anders Orsten; Mallasvik, Aleksander; Mustorp, Magnus; Årnes, Andre. (2011) Storage and exchange formats for digital evidence. Digital Investigation. The International Journal of Digital Forensics and Incident Response. volum 8 (2).
  Academic article

2010

• Flaglien, Anders Orsten; Mallasvik, Aleksander; Mustorp, Magnus; Årnes, Andre. (2010) Storage and exchange formats for digital evidence. Norwegian Information Security Conference = Norsk Informasjonssikkerhetskonferanse : NISK 2010 . Gjøvik University College, Gjøvik, 23-24 November 2010.
  Academic chapter/article/Conference paper

2009

• Maartmann-Moe, Carsten; Thorkildsen, Steffen E.; Årnes, Andre. (2009) The persistence of memory: Forensic identification and extraction of cryptographic keys. Digital Investigation. The International Journal of Digital Forensics and Incident Response. volum 6.
  Academic article

2006

• Brekne, Tønnes; Årnes, André; Øslebø, Arne. (2006) Anonymization of IP Traffic Monitoring Data -- Attacks on Two Prefix-preserving Anonymization Schemes and Some Proposed Remedies. Lecture Notes in Computer Science (LNCS). volum 3856.
  Academic article
• Haslum, Kjetil; Årnes, Andre. (2006) Multisensor Real-time Risk Assessment using Continuous-time Hidden Markov Models. Proceedings of the 2006 International Conference on Computational Intelligence and Security.
  Academic chapter/article/Conference paper
• Årnes, André; Haas, Paul; Vigna, Giovanni; Kemmerer, Richard A.. (2006) Digital Forensic Reconstruction and the Virtual Security Testbed ViSe. Lecture Notes in Computer Science (LNCS). volum 4064.
  Academic article
• Årnes, Andre; Haas, Paul; Vigna, Giovanni; Kemmerer, Richard A.. (2006) Using a Virtual Security Testbed for Digital Forensic Reconstruction. Journal in Computer Virology.
  Academic article
• Årnes, Andre; Knapskog, Svein Johan. (2006) Risk, Privacy, and Security in Computer Networks. 2006. ISBN 82-471-8235-1. Doktoravhandlinger ved NTNU (2006:227).
  Doctoral dissertation
• Årnes, André; Valeur, Fredrik; Vigna, Giovanni; Kemmerer, Richard A.. (2006) Using Hidden Markov Models to Evaluate the Risks of Intrusions -- System architecture and Model Validation. Lecture Notes in Computer Science (LNCS). volum 4219.
  Academic article

2005

• Øverlier, Lasse; Brekne, Tønnes; Årnes, André. (2005) Non-Expanding Transation Specific Pseudonymization for IP Traffic Monitoring. Lecture Notes in Computer Science (LNCS).
  Academic article
• Årnes, André; Sallhammar, Karin; Haslum, Kjetil; Brekne, Tønnes; Moe, Marie Elisabeth Gaup; Knapskog, Svein Johan. (2005) Real-time Risk Assessment with Network Sensors and Intrusion Detection Systems. Lecture Notes in Computer Science (LNCS).
  Academic article